./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1151327899 <...> [pid 8306] <... open resumed>) = 4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8308] <... open resumed>) = 4 [pid 8306] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./325/file0", [pid 8308] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] umount2("./319/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8308] <... open resumed>) = 5 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8308] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8306] <... open resumed>) = 5 [pid 5065] newfstatat(AT_FDCWD, "./319/file0", [pid 8308] <... mmap resumed>) = 0x20000000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8308] ftruncate(4, 33587195 [pid 5065] umount2("./319/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8308] <... ftruncate resumed>) = 0 [pid 8306] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8312] <... write resumed>) = 2097152 [pid 5065] openat(AT_FDCWD, "./319/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "./325/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8308] unlink("./bus" [pid 5065] <... openat resumed>) = 4 [pid 5064] <... openat resumed>) = 4 [pid 8312] munmap(0x7f41e0600000, 138412032 [pid 5065] newfstatat(4, "", [pid 5064] newfstatat(4, "", [pid 8308] <... unlink resumed>) = 0 [pid 8306] <... mmap resumed>) = 0x20000000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8308] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] getdents64(4, [pid 8308] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] getdents64(4, [pid 8312] <... munmap resumed>) = 0 [pid 8308] exit_group(0 [pid 8306] ftruncate(4, 33587195 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8312] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8308] <... exit_group resumed>) = ? [pid 5064] getdents64(4, [pid 8312] <... openat resumed>) = 4 [pid 5065] getdents64(4, [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8312] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 8306] <... ftruncate resumed>) = 0 [pid 8306] unlink("./bus" [pid 8308] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8308, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5065] close(4 [pid 8312] <... ioctl resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 8312] close(3 [pid 8306] <... unlink resumed>) = 0 [pid 5065] rmdir("./319/file0" [pid 5064] rmdir("./325/file0" [pid 8312] <... close resumed>) = 0 [pid 8306] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... rmdir resumed>) = 0 [pid 8312] close(4 [pid 8306] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] getdents64(3, [pid 8306] exit_group(0 [pid 8312] <... close resumed>) = 0 [pid 8312] mkdir("./file0", 0777 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] umount2("./321", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8312] <... mkdir resumed>) = 0 [pid 8306] <... exit_group resumed>) = ? [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8312] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5064] <... close resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5065] close(3 [pid 5064] rmdir("./325" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5065] rmdir("./319") = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./321/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] mkdir("./320", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./321/binderfs", [pid 5065] <... mkdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] mkdir("./326", 0777 [pid 5063] unlink("./321/binderfs" [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8306] +++ exited with 0 +++ [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8306, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5062] umount2("./320", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 300.116266][ T8312] loop0: detected capacity change from 0 to 4096 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8312] <... mount resumed>) = 0 [pid 8312] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8312] chdir("./file0") = 0 [pid 8312] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] umount2("./320/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8312] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8312] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] newfstatat(AT_FDCWD, "./320/binderfs", [pid 5063] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] unlink("./320/binderfs" [pid 5063] newfstatat(AT_FDCWD, "./321/file0", [pid 8312] <... open resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./321/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 8312] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8312] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] close(4) = 0 [pid 5063] rmdir("./321/file0") = 0 [pid 8312] <... mmap resumed>) = 0x20000000 [pid 5063] getdents64(3, [pid 5062] <... unlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 8312] ftruncate(4, 33587195 [pid 5063] rmdir("./321" [pid 5062] umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./322", 0777) = 0 [pid 8312] <... ftruncate resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [ 300.178955][ T8315] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8312] unlink("./bus" [pid 5062] <... umount2 resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 8316 attached [pid 8312] <... unlink resumed>) = 0 [pid 5062] umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8316 [pid 8312] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8316] set_robust_list(0x55555745a660, 24) = 0 [pid 8312] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] close(3 [pid 5062] newfstatat(AT_FDCWD, "./320/file0", [pid 8316] chdir("./326" [pid 8312] exit_group(0 [pid 5065] <... close resumed>) = 0 [pid 8312] <... exit_group resumed>) = ? [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 8317 attached [pid 8316] <... chdir resumed>) = 0 [pid 8312] +++ exited with 0 +++ [pid 5062] umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8317] set_robust_list(0x55555745a660, 24 [pid 8316] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8317 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8312, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8317] <... set_robust_list resumed>) = 0 [pid 8316] <... prctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8317] chdir("./320" [pid 8316] setpgid(0, 0 [pid 5062] openat(AT_FDCWD, "./320/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8317] <... chdir resumed>) = 0 [pid 8316] <... setpgid resumed>) = 0 [pid 8317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... openat resumed>) = 4 [pid 8317] setpgid(0, 0) = 0 [pid 8316] <... openat resumed>) = 3 [pid 5062] newfstatat(4, "", [pid 5061] umount2("./326", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(4, [pid 5061] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8316] write(3, "1000", 4 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8316] <... write resumed>) = 4 [pid 8316] close(3 [pid 5062] getdents64(4, [pid 5061] <... openat resumed>) = 3 [pid 8316] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] newfstatat(3, "", [pid 8317] <... openat resumed>) = 3 [pid 8316] symlink("/dev/binderfs", "./binderfs" [pid 5062] close(4 [pid 8317] write(3, "1000", 4 [pid 5062] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8317] <... write resumed>) = 4 [pid 8316] <... symlink resumed>) = 0 [pid 5062] rmdir("./320/file0" [pid 5061] getdents64(3, [pid 8317] close(3 [pid 8316] memfd_create("syzkaller", 0 [pid 8317] <... close resumed>) = 0 [pid 8316] <... memfd_create resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8317] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... rmdir resumed>) = 0 [pid 5061] umount2("./326/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8317] <... symlink resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8317] memfd_create("syzkaller", 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] newfstatat(AT_FDCWD, "./326/binderfs", [pid 8317] <... memfd_create resumed>) = 3 [pid 5062] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... close resumed>) = 0 [pid 5061] unlink("./326/binderfs" [pid 8317] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] rmdir("./320" [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./321", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... umount2 resumed>) = 0 [pid 8316] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 5061] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] newfstatat(AT_FDCWD, "./326/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8318 [pid 5061] openat(AT_FDCWD, "./326/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 8318 attached [pid 5061] getdents64(4, [pid 8318] set_robust_list(0x55555745a660, 24 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8318] <... set_robust_list resumed>) = 0 [pid 5061] getdents64(4, [pid 8318] chdir("./322" [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8318] <... chdir resumed>) = 0 [pid 5061] close(4 [pid 8318] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... close resumed>) = 0 [pid 8318] <... prctl resumed>) = 0 [pid 8317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] rmdir("./326/file0") = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8318] setpgid(0, 0 [pid 5061] close(3 [pid 8318] <... setpgid resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] rmdir("./326") = 0 [pid 5061] mkdir("./327", 0777) = 0 [pid 8318] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8318] write(3, "1000", 4 [pid 5061] <... openat resumed>) = 3 [pid 8318] <... write resumed>) = 4 [pid 8318] close(3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8318] <... close resumed>) = 0 [pid 8318] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8318] memfd_create("syzkaller", 0 [pid 8316] <... write resumed>) = 2097152 [pid 8318] <... memfd_create resumed>) = 3 [pid 8318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8316] munmap(0x7f41e0600000, 138412032) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8316] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8319 [pid 8316] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8319 attached [pid 8319] set_robust_list(0x55555745a660, 24) = 0 [pid 8319] chdir("./321") = 0 [pid 8319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8319] setpgid(0, 0) = 0 [pid 8319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8316] <... ioctl resumed>) = 0 [pid 8316] close(3 [pid 8319] <... openat resumed>) = 3 [pid 8319] write(3, "1000", 4) = 4 [pid 8319] close(3) = 0 [pid 8316] <... close resumed>) = 0 [pid 8319] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8316] close(4) = 0 [pid 8316] mkdir("./file0", 0777 [pid 8319] memfd_create("syzkaller", 0) = 3 [pid 8316] <... mkdir resumed>) = 0 [pid 8319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8318] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8317] <... write resumed>) = 2097152 [pid 8316] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8319] <... mmap resumed>) = 0x7f41e0600000 [ 300.398133][ T8316] loop3: detected capacity change from 0 to 4096 [pid 8317] munmap(0x7f41e0600000, 138412032) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8317] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8317] <... openat resumed>) = 4 [pid 8317] ioctl(4, LOOP_SET_FD, 3 [pid 5061] close(3 [pid 8317] <... ioctl resumed>) = 0 [pid 8316] <... mount resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8316] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8317] close(3./strace-static-x86_64: Process 8321 attached [pid 8318] <... write resumed>) = 2097152 [pid 8317] <... close resumed>) = 0 [pid 8316] <... openat resumed>) = 3 [pid 8321] set_robust_list(0x55555745a660, 24 [pid 8316] chdir("./file0" [pid 8317] close(4 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8321 [pid 8321] <... set_robust_list resumed>) = 0 [pid 8317] <... close resumed>) = 0 [pid 8317] mkdir("./file0", 0777 [pid 8321] chdir("./327") = 0 [pid 8317] <... mkdir resumed>) = 0 [pid 8316] <... chdir resumed>) = 0 [pid 8321] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8317] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8316] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8321] <... prctl resumed>) = 0 [pid 8321] setpgid(0, 0 [pid 8316] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8321] <... setpgid resumed>) = 0 [pid 8318] munmap(0x7f41e0600000, 138412032 [pid 8316] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8318] <... munmap resumed>) = 0 [pid 8321] <... openat resumed>) = 3 [pid 8321] write(3, "1000", 4) = 4 [pid 8321] close(3) = 0 [pid 8321] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8318] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8316] <... open resumed>) = 4 [ 300.479041][ T8317] loop4: detected capacity change from 0 to 4096 [ 300.499088][ T8320] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8318] ioctl(4, LOOP_SET_FD, 3 [pid 8316] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8321] memfd_create("syzkaller", 0 [pid 8319] <... write resumed>) = 2097152 [pid 8321] <... memfd_create resumed>) = 3 [pid 8321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8319] munmap(0x7f41e0600000, 138412032 [pid 8316] <... open resumed>) = 5 [pid 8321] <... mmap resumed>) = 0x7f41e0600000 [pid 8316] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8319] <... munmap resumed>) = 0 [pid 8318] <... ioctl resumed>) = 0 [pid 8317] <... mount resumed>) = 0 [pid 8317] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8317] chdir("./file0") = 0 [pid 8317] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8316] <... mmap resumed>) = 0x20000000 [pid 8317] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8317] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8316] ftruncate(4, 33587195 [pid 8318] close(3) = 0 [pid 8318] close(4) = 0 [pid 8318] mkdir("./file0", 0777) = 0 [pid 8318] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8319] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8316] <... ftruncate resumed>) = 0 [pid 8319] <... openat resumed>) = 4 [ 300.559863][ T8318] loop2: detected capacity change from 0 to 4096 [ 300.574001][ T8322] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8319] ioctl(4, LOOP_SET_FD, 3 [pid 8316] unlink("./bus" [pid 8317] <... open resumed>) = 4 [pid 8317] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8316] <... unlink resumed>) = 0 [pid 8319] <... ioctl resumed>) = 0 [pid 8317] <... open resumed>) = 5 [pid 8316] sendfile(-1, -1, NULL, 281474978811909 [pid 8319] close(3 [pid 8316] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8319] <... close resumed>) = 0 [pid 8317] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8316] exit_group(0 [pid 8319] close(4 [pid 8317] <... mmap resumed>) = 0x20000000 [pid 8316] <... exit_group resumed>) = ? [pid 8319] <... close resumed>) = 0 [pid 8319] mkdir("./file0", 0777 [pid 8317] ftruncate(4, 33587195) = 0 [pid 8321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8319] <... mkdir resumed>) = 0 [pid 8317] unlink("./bus" [ 300.608847][ T8319] loop1: detected capacity change from 0 to 4096 [pid 8319] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8317] <... unlink resumed>) = 0 [pid 8317] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8318] <... mount resumed>) = 0 [pid 8317] exit_group(0 [pid 8318] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8317] <... exit_group resumed>) = ? [pid 8318] <... openat resumed>) = 3 [pid 8316] +++ exited with 0 +++ [pid 8318] chdir("./file0" [pid 8317] +++ exited with 0 +++ [pid 8318] <... chdir resumed>) = 0 [pid 8318] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8317, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 8318] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 8318] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5065] umount2("./320", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./320/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./320/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./320/binderfs") = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8316, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5065] umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5064] umount2("./326", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8318] <... open resumed>) = 4 [pid 5064] getdents64(3, [pid 8318] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8318] <... open resumed>) = 5 [pid 5064] umount2("./326/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8318] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8318] <... mmap resumed>) = 0x20000000 [pid 8318] ftruncate(4, 33587195 [pid 5064] newfstatat(AT_FDCWD, "./326/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 300.655735][ T8323] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] unlink("./326/binderfs" [pid 5065] umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8318] <... ftruncate resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./320/file0", [pid 8318] unlink("./bus" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./320/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 8321] <... write resumed>) = 2097152 [pid 5065] <... close resumed>) = 0 [pid 8321] munmap(0x7f41e0600000, 138412032 [pid 5065] rmdir("./320/file0" [pid 8319] <... mount resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 8319] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8318] <... unlink resumed>) = 0 [pid 8319] chdir("./file0") = 0 [pid 8318] sendfile(-1, -1, NULL, 281474978811909 [pid 8319] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8318] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] getdents64(3, [pid 8319] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8318] exit_group(0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8319] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8318] <... exit_group resumed>) = ? [pid 5065] close(3 [pid 8321] <... munmap resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 8321] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] rmdir("./320" [pid 5064] <... umount2 resumed>) = 0 [pid 8321] <... openat resumed>) = 4 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8321] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] mkdir("./321", 0777 [pid 8318] +++ exited with 0 +++ [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8321] <... ioctl resumed>) = 0 [pid 8319] <... open resumed>) = 4 [pid 5064] newfstatat(AT_FDCWD, "./326/file0", [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8318, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8321] close(3 [pid 8319] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... openat resumed>) = 3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8321] <... close resumed>) = 0 [pid 8319] <... open resumed>) = 5 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8321] close(4 [pid 8319] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8321] <... close resumed>) = 0 [pid 8319] <... mmap resumed>) = 0x20000000 [pid 8321] mkdir("./file0", 0777 [pid 8319] ftruncate(4, 33587195 [pid 5064] openat(AT_FDCWD, "./326/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8321] <... mkdir resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5063] umount2("./322", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8321] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8319] <... ftruncate resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] newfstatat(3, "", [pid 5064] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8319] unlink("./bus" [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(3, [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] <... close resumed>) = 0 [pid 5063] umount2("./322/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./326/file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... rmdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./322/binderfs", [pid 5064] getdents64(3, [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] unlink("./322/binderfs" [pid 5064] close(3 [pid 5063] <... unlink resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./326" [pid 8319] <... unlink resumed>) = 0 [ 300.726242][ T8324] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 300.764222][ T8321] loop0: detected capacity change from 0 to 4096 [pid 5063] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8319] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... rmdir resumed>) = 0 [pid 8319] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] mkdir("./327", 0777) = 0 [pid 8319] exit_group(0) = ? [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5065] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5065] close(3 [pid 5063] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] newfstatat(AT_FDCWD, "./322/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./322/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8326 attached [pid 8321] <... mount resumed>) = 0 [pid 8319] +++ exited with 0 +++ [pid 8321] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8319, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 8321] <... openat resumed>) = 3 [pid 8321] chdir("./file0") = 0 [pid 8321] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8326 [pid 5063] <... openat resumed>) = 4 [pid 8326] set_robust_list(0x55555745a660, 24 [pid 8321] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8326] <... set_robust_list resumed>) = 0 [pid 5063] getdents64(4, [pid 8326] chdir("./321" [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] umount2("./321", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8326] <... chdir resumed>) = 0 [pid 5063] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8326] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./321/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./321/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./321/binderfs") = 0 [pid 5062] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8326] <... prctl resumed>) = 0 [pid 8321] <... open resumed>) = 4 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 8321] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] <... close resumed>) = 0 [pid 8326] setpgid(0, 0) = 0 [pid 8321] <... open resumed>) = 5 [pid 5063] rmdir("./322/file0") = 0 [ 300.834468][ T8325] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8321] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] getdents64(3, [pid 5062] <... umount2 resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8321] <... mmap resumed>) = 0x20000000 [pid 8326] <... openat resumed>) = 3 [pid 5063] close(3 [pid 5064] <... ioctl resumed>) = 0 [pid 8326] write(3, "1000", 4 [pid 8321] ftruncate(4, 33587195 [pid 5064] close(3 [pid 5063] <... close resumed>) = 0 [pid 5062] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8326] <... write resumed>) = 4 [pid 5064] <... close resumed>) = 0 [pid 5063] rmdir("./322" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8326] close(3 [pid 8321] <... ftruncate resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... rmdir resumed>) = 0 [pid 8326] <... close resumed>) = 0 [pid 8321] unlink("./bus" [pid 5062] newfstatat(AT_FDCWD, "./321/file0", [pid 8326] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8326] <... symlink resumed>) = 0 [pid 5063] mkdir("./323", 0777 [pid 5062] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./321/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8327 attached [pid 8326] memfd_create("syzkaller", 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 8327] set_robust_list(0x55555745a660, 24 [pid 8321] <... unlink resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8327 [pid 8326] <... memfd_create resumed>) = 3 [pid 8327] <... set_robust_list resumed>) = 0 [pid 8326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] newfstatat(4, "", [pid 8327] chdir("./327" [pid 8326] <... mmap resumed>) = 0x7f41e0600000 [pid 8321] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8321] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8327] <... chdir resumed>) = 0 [pid 8327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8327] setpgid(0, 0) = 0 [pid 5063] <... openat resumed>) = 3 [pid 8327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8321] exit_group(0) = ? [pid 5062] getdents64(4, [pid 8327] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 8327] write(3, "1000", 4 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8327] <... write resumed>) = 4 [pid 5062] close(4 [pid 8327] close(3 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./321/file0" [pid 8327] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8327] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 8321] +++ exited with 0 +++ [pid 5062] <... close resumed>) = 0 [pid 8327] memfd_create("syzkaller", 0 [pid 5062] rmdir("./321") = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8321, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8327] <... memfd_create resumed>) = 3 [pid 5061] umount2("./327", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... openat resumed>) = 3 [pid 8327] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] mkdir("./322", 0777 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 8326] <... write resumed>) = 2097152 [pid 5061] getdents64(3, [pid 8326] munmap(0x7f41e0600000, 138412032 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] umount2("./327/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./327/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] unlink("./327/binderfs" [pid 8327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8326] <... munmap resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8326] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8326] <... openat resumed>) = 4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./327/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8326] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8328 attached ) = 0 [pid 5061] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./327/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./327/file0") = 0 [pid 8328] set_robust_list(0x55555745a660, 24 [pid 8327] <... write resumed>) = 2097152 [pid 8326] close(3 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8328 [pid 8326] <... close resumed>) = 0 [pid 8328] <... set_robust_list resumed>) = 0 [pid 5061] getdents64(3, [pid 8326] close(4 [pid 8328] chdir("./323" [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8328] <... chdir resumed>) = 0 [pid 8326] <... close resumed>) = 0 [pid 5061] close(3) = 0 [pid 8327] munmap(0x7f41e0600000, 138412032 [pid 5061] rmdir("./327" [pid 8328] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8327] <... munmap resumed>) = 0 [pid 8326] mkdir("./file0", 0777 [pid 5061] <... rmdir resumed>) = 0 [pid 8328] <... prctl resumed>) = 0 [pid 5061] mkdir("./328", 0777 [pid 8328] setpgid(0, 0 [pid 8326] <... mkdir resumed>) = 0 [pid 8328] <... setpgid resumed>) = 0 [pid 8328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8326] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... mkdir resumed>) = 0 [pid 8328] <... openat resumed>) = 3 [pid 8327] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8328] write(3, "1000", 4) = 4 [pid 8327] <... openat resumed>) = 4 [pid 8328] close(3 [ 301.009361][ T8326] loop4: detected capacity change from 0 to 4096 [pid 8327] ioctl(4, LOOP_SET_FD, 3 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8328] <... close resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8328] symlink("/dev/binderfs", "./binderfs" [pid 5062] close(3 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8328] <... symlink resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8327] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 8329 attached [pid 8328] memfd_create("syzkaller", 0 [pid 8329] set_robust_list(0x55555745a660, 24 [pid 8328] <... memfd_create resumed>) = 3 [pid 8327] close(3 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8329 [pid 8329] <... set_robust_list resumed>) = 0 [pid 8328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8327] <... close resumed>) = 0 [pid 8327] close(4 [pid 8329] chdir("./322" [pid 8328] <... mmap resumed>) = 0x7f41e0600000 [pid 8327] <... close resumed>) = 0 [pid 8327] mkdir("./file0", 0777 [pid 8329] <... chdir resumed>) = 0 [pid 8329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8329] setpgid(0, 0 [pid 8327] <... mkdir resumed>) = 0 [pid 8329] <... setpgid resumed>) = 0 [pid 8329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8329] write(3, "1000", 4) = 4 [pid 8329] close(3) = 0 [pid 8329] symlink("/dev/binderfs", "./binderfs") = 0 [ 301.056431][ T8327] loop3: detected capacity change from 0 to 4096 [pid 8327] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8329] memfd_create("syzkaller", 0 [pid 8326] <... mount resumed>) = 0 [pid 8326] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8326] chdir("./file0") = 0 [pid 8326] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8329] <... memfd_create resumed>) = 3 [pid 8328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8326] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [ 301.096731][ T8330] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8326] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... ioctl resumed>) = 0 [pid 8327] <... mount resumed>) = 0 [pid 8327] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8327] chdir("./file0") = 0 [pid 8327] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8327] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8326] <... open resumed>) = 4 [pid 5061] close(3) = 0 [pid 8326] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8326] <... open resumed>) = 5 ./strace-static-x86_64: Process 8332 attached [pid 8329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8326] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8332] set_robust_list(0x55555745a660, 24 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8332 [pid 8332] <... set_robust_list resumed>) = 0 [pid 8326] <... mmap resumed>) = 0x20000000 [pid 8332] chdir("./328") = 0 [pid 8332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8326] ftruncate(4, 33587195 [pid 8332] <... prctl resumed>) = 0 [pid 8332] setpgid(0, 0) = 0 [pid 8332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8332] write(3, "1000", 4) = 4 [pid 8326] <... ftruncate resumed>) = 0 [pid 8332] close(3) = 0 [pid 8332] symlink("/dev/binderfs", "./binderfs") = 0 [ 301.153454][ T8331] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8332] memfd_create("syzkaller", 0 [pid 8327] <... open resumed>) = 4 [pid 8332] <... memfd_create resumed>) = 3 [pid 8327] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8326] unlink("./bus" [pid 8327] <... open resumed>) = 5 [pid 8332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8327] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8326] <... unlink resumed>) = 0 [pid 8327] <... mmap resumed>) = 0x20000000 [pid 8326] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8327] ftruncate(4, 33587195 [pid 8328] <... write resumed>) = 2097152 [pid 8326] exit_group(0) = ? [pid 8328] munmap(0x7f41e0600000, 138412032 [pid 8327] <... ftruncate resumed>) = 0 [pid 8332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8328] <... munmap resumed>) = 0 [pid 8327] unlink("./bus" [pid 8326] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8326, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 8328] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 8328] <... openat resumed>) = 4 [pid 5065] <... restart_syscall resumed>) = 0 [pid 8328] ioctl(4, LOOP_SET_FD, 3 [pid 8329] <... write resumed>) = 2097152 [pid 8328] <... ioctl resumed>) = 0 [pid 8327] <... unlink resumed>) = 0 [pid 5065] umount2("./321", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8328] close(3 [pid 8327] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8328] <... close resumed>) = 0 [pid 8327] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8329] munmap(0x7f41e0600000, 138412032) = 0 [pid 8328] close(4 [pid 8327] exit_group(0 [pid 5065] <... openat resumed>) = 3 [pid 8327] <... exit_group resumed>) = ? [pid 5065] newfstatat(3, "", [pid 8328] <... close resumed>) = 0 [pid 8329] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8332] <... write resumed>) = 2097152 [pid 8328] mkdir("./file0", 0777 [pid 8327] +++ exited with 0 +++ [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8327, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./321/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./327", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8328] <... mkdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8328] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] newfstatat(AT_FDCWD, "./321/binderfs", [pid 5064] <... openat resumed>) = 3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] newfstatat(3, "", [pid 8329] <... openat resumed>) = 4 [pid 5065] unlink("./321/binderfs" [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8332] munmap(0x7f41e0600000, 138412032 [pid 8329] ioctl(4, LOOP_SET_FD, 3 [pid 5064] getdents64(3, [pid 8332] <... munmap resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 8332] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8332] <... openat resumed>) = 4 [pid 5064] umount2("./327/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8332] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./327/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./327/binderfs") = 0 [pid 5064] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8329] <... ioctl resumed>) = 0 [pid 8329] close(3) = 0 [ 301.272764][ T8328] loop2: detected capacity change from 0 to 4096 [ 301.306347][ T8329] loop1: detected capacity change from 0 to 4096 [ 301.316017][ T8332] loop0: detected capacity change from 0 to 4096 [pid 8329] close(4) = 0 [pid 8329] mkdir("./file0", 0777) = 0 [pid 8332] <... ioctl resumed>) = 0 [pid 8328] <... mount resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 8328] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8328] chdir("./file0" [pid 8332] close(3 [pid 8329] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8328] <... chdir resumed>) = 0 [pid 8332] <... close resumed>) = 0 [pid 5065] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8328] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8332] close(4 [pid 8328] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8332] <... close resumed>) = 0 [pid 8328] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] newfstatat(AT_FDCWD, "./321/file0", [pid 8332] mkdir("./file0", 0777 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 8332] <... mkdir resumed>) = 0 [pid 5065] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./321/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8332] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... openat resumed>) = 4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./327/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(4, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8328] <... open resumed>) = 4 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] openat(AT_FDCWD, "./327/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8328] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] getdents64(4, [pid 5064] <... openat resumed>) = 4 [pid 8328] <... open resumed>) = 5 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] newfstatat(4, "", [pid 8328] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./321/file0") = 0 [pid 8328] ftruncate(4, 33587195 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [ 301.337933][ T8333] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8328] <... ftruncate resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8328] unlink("./bus" [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5065] close(3 [pid 5064] rmdir("./327/file0" [pid 5065] <... close resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5065] rmdir("./321") = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./327" [pid 8329] <... mount resumed>) = 0 [pid 8328] <... unlink resumed>) = 0 [pid 5065] mkdir("./322", 0777 [pid 5064] <... rmdir resumed>) = 0 [pid 8329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8328] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5064] mkdir("./328", 0777 [pid 8329] <... openat resumed>) = 3 [pid 8329] chdir("./file0" [pid 8328] exit_group(0 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8328] <... exit_group resumed>) = ? [pid 8329] <... chdir resumed>) = 0 [pid 8329] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8329] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8328] +++ exited with 0 +++ [pid 8332] <... mount resumed>) = 0 [pid 8332] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8332] chdir("./file0") = 0 [pid 8332] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... mkdir resumed>) = 0 [pid 8332] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8332] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8329] <... open resumed>) = 4 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8329] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8328, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5065] <... openat resumed>) = 3 [pid 8329] <... open resumed>) = 5 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8329] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] umount2("./323", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8332] <... open resumed>) = 4 [pid 8329] <... mmap resumed>) = 0x20000000 [pid 5063] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8332] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8329] ftruncate(4, 33587195 [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8332] <... open resumed>) = 5 [pid 8329] <... ftruncate resumed>) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8332] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] umount2("./323/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./323/binderfs", [pid 8332] <... mmap resumed>) = 0x20000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8332] ftruncate(4, 33587195 [pid 5063] unlink("./323/binderfs" [pid 8329] unlink("./bus" [pid 5063] <... unlink resumed>) = 0 [pid 8332] <... ftruncate resumed>) = 0 [pid 5063] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8329] <... unlink resumed>) = 0 [ 301.415633][ T8334] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 301.436310][ T8335] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8329] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8332] unlink("./bus" [pid 5064] <... ioctl resumed>) = 0 [pid 8329] exit_group(0) = ? [pid 5064] close(3 [pid 8332] <... unlink resumed>) = 0 [pid 8332] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... close resumed>) = 0 [pid 8332] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8332] exit_group(0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8332] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 8336 attached [pid 8329] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8329, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8336 [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8336] set_robust_list(0x55555745a660, 24) = 0 [pid 5062] umount2("./322", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8336] chdir("./328" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8336] <... chdir resumed>) = 0 [pid 8336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8336] setpgid(0, 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 8336] <... setpgid resumed>) = 0 [pid 8336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8336] <... openat resumed>) = 3 [pid 5063] newfstatat(AT_FDCWD, "./323/file0", [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8336] write(3, "1000", 4 [pid 8332] +++ exited with 0 +++ [pid 5065] <... ioctl resumed>) = 0 [pid 5063] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./322/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8336] <... write resumed>) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8332, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5062] newfstatat(AT_FDCWD, "./322/binderfs", [pid 8336] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8336] <... close resumed>) = 0 [pid 5062] unlink("./322/binderfs" [pid 8336] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... unlink resumed>) = 0 [pid 8336] <... symlink resumed>) = 0 [pid 5065] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8336] memfd_create("syzkaller", 0 [pid 5063] openat(AT_FDCWD, "./323/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8336] <... memfd_create resumed>) = 3 [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 8336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] umount2("./328", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8336] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5061] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./328/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./328/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./328/binderfs") = 0 [pid 5061] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8337 attached [pid 8337] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8337 [pid 5063] getdents64(4, [pid 8337] <... set_robust_list resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 8337] chdir("./322" [pid 5063] <... close resumed>) = 0 [pid 8337] <... chdir resumed>) = 0 [pid 8337] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] rmdir("./323/file0" [pid 5062] <... umount2 resumed>) = 0 [pid 8337] <... prctl resumed>) = 0 [pid 8337] setpgid(0, 0) = 0 [pid 8337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8337] write(3, "1000", 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8337] <... write resumed>) = 4 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./322/file0", [pid 8337] close(3) = 0 [pid 8337] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8336] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] getdents64(3, [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(3 [pid 5062] openat(AT_FDCWD, "./322/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8337] memfd_create("syzkaller", 0 [pid 5063] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5061] newfstatat(AT_FDCWD, "./328/file0", [pid 8337] <... memfd_create resumed>) = 3 [pid 5063] rmdir("./323" [pid 5062] newfstatat(4, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8337] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8337] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] mkdir("./324", 0777 [pid 5062] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./322/file0") = 0 [pid 5062] getdents64(3, [pid 5061] openat(AT_FDCWD, "./328/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] rmdir("./322") = 0 [pid 5061] newfstatat(4, "", [pid 5063] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] mkdir("./323", 0777 [pid 5061] getdents64(4, [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5061] close(4 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./328/file0") = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./328") = 0 [pid 8336] <... write resumed>) = 2097152 [pid 5061] mkdir("./329", 0777 [pid 8336] munmap(0x7f41e0600000, 138412032 [pid 5061] <... mkdir resumed>) = 0 [pid 8336] <... munmap resumed>) = 0 [pid 8337] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8336] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8336] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... ioctl resumed>) = 0 [pid 8337] <... write resumed>) = 2097152 [pid 5063] close(3 [pid 8337] munmap(0x7f41e0600000, 138412032 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8338 attached , child_tidptr=0x55555745a650) = 8338 [pid 8338] set_robust_list(0x55555745a660, 24 [pid 8337] <... munmap resumed>) = 0 [pid 8338] <... set_robust_list resumed>) = 0 [pid 8338] chdir("./324") = 0 [pid 8337] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8336] <... ioctl resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8338] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8337] <... openat resumed>) = 4 [pid 8336] close(3 [pid 5062] close(3 [pid 8338] <... prctl resumed>) = 0 [pid 8337] ioctl(4, LOOP_SET_FD, 3 [pid 8336] <... close resumed>) = 0 [pid 8336] close(4 [pid 8338] setpgid(0, 0 [pid 8337] <... ioctl resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8336] <... close resumed>) = 0 [pid 8338] <... setpgid resumed>) = 0 [pid 8337] close(3 [pid 8336] mkdir("./file0", 0777 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 8339 attached ) = 3 [pid 8337] <... close resumed>) = 0 [pid 8336] <... mkdir resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8339 [pid 5061] <... ioctl resumed>) = 0 [pid 8339] set_robust_list(0x55555745a660, 24 [pid 8338] write(3, "1000", 4 [pid 8337] close(4 [pid 8339] <... set_robust_list resumed>) = 0 [pid 8338] <... write resumed>) = 4 [pid 8336] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] close(3 [pid 8337] <... close resumed>) = 0 [pid 8337] mkdir("./file0", 0777 [pid 5061] <... close resumed>) = 0 [pid 8339] chdir("./323" [pid 8338] close(3 [pid 8337] <... mkdir resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8339] <... chdir resumed>) = 0 [pid 8338] <... close resumed>) = 0 [pid 8339] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8338] symlink("/dev/binderfs", "./binderfs" [pid 8337] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8339] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 8340 attached [pid 8339] setpgid(0, 0 [pid 8338] <... symlink resumed>) = 0 [pid 8340] set_robust_list(0x55555745a660, 24 [pid 8339] <... setpgid resumed>) = 0 [pid 8339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8340 [pid 8340] <... set_robust_list resumed>) = 0 [pid 8340] chdir("./329" [pid 8339] <... openat resumed>) = 3 [pid 8338] memfd_create("syzkaller", 0 [pid 8340] <... chdir resumed>) = 0 [pid 8339] write(3, "1000", 4 [pid 8338] <... memfd_create resumed>) = 3 [pid 8340] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8339] <... write resumed>) = 4 [ 301.694174][ T8336] loop3: detected capacity change from 0 to 4096 [ 301.719602][ T8337] loop4: detected capacity change from 0 to 4096 [pid 8338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8340] <... prctl resumed>) = 0 [pid 8339] close(3 [pid 8338] <... mmap resumed>) = 0x7f41e0600000 [pid 8340] setpgid(0, 0 [pid 8339] <... close resumed>) = 0 [pid 8340] <... setpgid resumed>) = 0 [pid 8339] symlink("/dev/binderfs", "./binderfs" [pid 8340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8339] <... symlink resumed>) = 0 [pid 8340] write(3, "1000", 4 [pid 8339] memfd_create("syzkaller", 0 [pid 8336] <... mount resumed>) = 0 [pid 8336] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8336] chdir("./file0" [pid 8340] <... write resumed>) = 4 [pid 8339] <... memfd_create resumed>) = 3 [pid 8336] <... chdir resumed>) = 0 [pid 8340] close(3 [pid 8339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8336] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8340] <... close resumed>) = 0 [pid 8339] <... mmap resumed>) = 0x7f41e0600000 [pid 8336] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8336] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8340] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8340] memfd_create("syzkaller", 0) = 3 [pid 8338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8336] <... open resumed>) = 4 [ 301.789986][ T8341] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8336] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8336] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8336] unlink("./bus" [pid 8337] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8337] chdir("./file0") = 0 [pid 8337] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8337] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8336] <... unlink resumed>) = 0 [pid 8336] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8336] exit_group(0) = ? [pid 8340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8337] <... open resumed>) = 4 [pid 8337] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [ 301.867111][ T8342] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8337] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8336] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8336, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 8337] <... mmap resumed>) = 0x20000000 [pid 5064] <... restart_syscall resumed>) = 0 [pid 8337] ftruncate(4, 33587195 [pid 5064] umount2("./328", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8337] <... ftruncate resumed>) = 0 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./328/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8337] unlink("./bus" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./328/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./328/binderfs" [pid 8337] <... unlink resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 8337] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8337] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8337] exit_group(0) = ? [pid 8338] <... write resumed>) = 2097152 [pid 8338] munmap(0x7f41e0600000, 138412032 [pid 5064] <... umount2 resumed>) = 0 [pid 8339] <... write resumed>) = 2097152 [pid 8339] munmap(0x7f41e0600000, 138412032 [pid 8340] <... write resumed>) = 2097152 [pid 8338] <... munmap resumed>) = 0 [pid 8337] +++ exited with 0 +++ [pid 5064] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8340] munmap(0x7f41e0600000, 138412032 [pid 8339] <... munmap resumed>) = 0 [pid 8338] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8337, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8339] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8338] <... openat resumed>) = 4 [pid 8340] <... munmap resumed>) = 0 [pid 8339] <... openat resumed>) = 4 [pid 8338] ioctl(4, LOOP_SET_FD, 3 [pid 5064] newfstatat(AT_FDCWD, "./328/file0", [pid 8340] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8339] ioctl(4, LOOP_SET_FD, 3 [pid 5065] umount2("./322", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8340] <... openat resumed>) = 4 [pid 5064] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8340] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./328/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./328/file0" [pid 5065] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8340] <... ioctl resumed>) = 0 [pid 8339] <... ioctl resumed>) = 0 [pid 8338] <... ioctl resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5064] <... rmdir resumed>) = 0 [pid 8340] close(3 [pid 8339] close(3 [pid 8338] close(3 [pid 5065] newfstatat(3, "", [pid 5064] getdents64(3, [pid 8340] <... close resumed>) = 0 [pid 8339] <... close resumed>) = 0 [pid 8338] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8340] close(4 [pid 8339] close(4 [pid 8338] close(4 [pid 5065] getdents64(3, [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8340] <... close resumed>) = 0 [pid 8339] <... close resumed>) = 0 [pid 8338] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] close(3 [pid 8340] mkdir("./file0", 0777 [pid 8339] mkdir("./file0", 0777 [pid 8338] mkdir("./file0", 0777 [pid 5065] umount2("./322/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [pid 8340] <... mkdir resumed>) = 0 [pid 8339] <... mkdir resumed>) = 0 [pid 5064] rmdir("./328" [pid 8338] <... mkdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./322/binderfs", [pid 8339] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8338] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./322/binderfs" [pid 8340] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... unlink resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./329", 0777 [ 301.984482][ T8338] loop2: detected capacity change from 0 to 4096 [ 301.987321][ T8340] loop0: detected capacity change from 0 to 4096 [ 301.991408][ T8339] loop1: detected capacity change from 0 to 4096 [pid 5065] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... mkdir resumed>) = 0 [pid 8340] <... mount resumed>) = 0 [pid 8340] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8340] chdir("./file0") = 0 [pid 8340] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8340] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8339] <... mount resumed>) = 0 [pid 8339] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8338] <... mount resumed>) = 0 [pid 8338] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8339] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = 0 [pid 8339] chdir("./file0") = 0 [pid 8338] <... openat resumed>) = 3 [pid 5065] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8339] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8338] chdir("./file0" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8340] <... open resumed>) = 4 [pid 8339] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8338] <... chdir resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 8340] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8340] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] close(3 [pid 8339] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8338] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] newfstatat(AT_FDCWD, "./322/file0", [pid 8340] <... ftruncate resumed>) = 0 [ 302.048167][ T8343] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.062533][ T8344] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.077689][ T8345] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8338] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... close resumed>) = 0 [pid 8338] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8346 attached [pid 8340] unlink("./bus" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./322/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8346 [pid 8346] set_robust_list(0x55555745a660, 24 [pid 8340] <... unlink resumed>) = 0 [pid 8339] <... open resumed>) = 4 [pid 8338] <... open resumed>) = 4 [pid 5065] <... openat resumed>) = 4 [pid 8346] <... set_robust_list resumed>) = 0 [pid 8339] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8338] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] newfstatat(4, "", [pid 8340] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8340] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] getdents64(4, [pid 8340] exit_group(0 [pid 8339] <... open resumed>) = 5 [pid 8340] <... exit_group resumed>) = ? [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8346] chdir("./329" [pid 8338] <... open resumed>) = 5 [pid 5065] getdents64(4, [pid 8339] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 8339] <... mmap resumed>) = 0x20000000 [pid 5065] rmdir("./322/file0") = 0 [pid 8346] <... chdir resumed>) = 0 [pid 8339] ftruncate(4, 33587195 [pid 8346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8338] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8346] setpgid(0, 0) = 0 [pid 8339] <... ftruncate resumed>) = 0 [pid 8338] <... mmap resumed>) = 0x20000000 [pid 5065] getdents64(3, [pid 8346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8340] +++ exited with 0 +++ [pid 8339] unlink("./bus" [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8346] <... openat resumed>) = 3 [pid 5065] close(3 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8340, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8346] write(3, "1000", 4 [pid 8338] ftruncate(4, 33587195 [pid 5065] <... close resumed>) = 0 [pid 5061] umount2("./329", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8346] <... write resumed>) = 4 [pid 5065] rmdir("./322" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8346] close(3 [pid 5065] <... rmdir resumed>) = 0 [pid 8338] <... ftruncate resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8346] <... close resumed>) = 0 [pid 5065] mkdir("./323", 0777 [pid 8346] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 8346] <... symlink resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8346] memfd_create("syzkaller", 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] <... mkdir resumed>) = 0 [pid 8346] <... memfd_create resumed>) = 3 [pid 5061] umount2("./329/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8346] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./329/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./329/binderfs") = 0 [pid 5061] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8338] unlink("./bus" [pid 8339] <... unlink resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = 0 [pid 8339] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8339] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8339] exit_group(0 [pid 8338] <... unlink resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./329/file0", [pid 8346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8339] <... exit_group resumed>) = ? [pid 8338] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8338] exit_group(0) = ? [pid 8339] +++ exited with 0 +++ [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8339, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5062] umount2("./323", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] openat(AT_FDCWD, "./329/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] newfstatat(3, "", [pid 5061] <... openat resumed>) = 4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(4, "", [pid 5062] getdents64(3, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] getdents64(4, [pid 8338] +++ exited with 0 +++ [pid 5062] umount2("./323/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(4, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8338, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5062] newfstatat(AT_FDCWD, "./323/binderfs", [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./324", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] unlink("./323/binderfs" [pid 5061] <... close resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5061] rmdir("./329/file0" [pid 5063] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 8346] <... write resumed>) = 2097152 [pid 5063] <... openat resumed>) = 3 [pid 5062] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(3, "", [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8346] munmap(0x7f41e0600000, 138412032 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./329" [pid 8346] <... munmap resumed>) = 0 [pid 5063] getdents64(3, [pid 5061] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] mkdir("./330", 0777) = 0 [pid 8346] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... ioctl resumed>) = 0 [pid 5063] umount2("./324/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 8346] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8346] ioctl(4, LOOP_SET_FD, 3 [pid 5063] newfstatat(AT_FDCWD, "./324/binderfs", [pid 5065] close(3 [pid 5062] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... close resumed>) = 0 [pid 8346] <... ioctl resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] newfstatat(AT_FDCWD, "./323/file0", [pid 5061] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 8347 attached [pid 8346] close(3 [pid 5063] unlink("./324/binderfs" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8347] set_robust_list(0x55555745a660, 24 [pid 8346] <... close resumed>) = 0 [pid 8346] close(4) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5062] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./323/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8347] <... set_robust_list resumed>) = 0 [pid 8346] mkdir("./file0", 0777 [pid 5062] newfstatat(4, "", [pid 8347] chdir("./323" [pid 8346] <... mkdir resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8347 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8347] <... chdir resumed>) = 0 [pid 8346] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8347] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] getdents64(4, [pid 8347] <... prctl resumed>) = 0 [pid 8347] setpgid(0, 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8347] <... setpgid resumed>) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./323/file0") = 0 [ 302.277267][ T8346] loop3: detected capacity change from 0 to 4096 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... umount2 resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./323" [pid 5063] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./324/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] mkdir("./324", 0777 [pid 5063] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./324/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8347] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 4 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8346] <... mount resumed>) = 0 [pid 8347] write(3, "1000", 4) = 4 [pid 8346] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] newfstatat(4, "", [pid 5062] <... openat resumed>) = 3 [pid 8347] close(3 [pid 8346] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8347] <... close resumed>) = 0 [pid 8346] chdir("./file0" [pid 5063] getdents64(4, [pid 8347] symlink("/dev/binderfs", "./binderfs" [pid 8346] <... chdir resumed>) = 0 [pid 8347] <... symlink resumed>) = 0 [pid 8346] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8346] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8347] memfd_create("syzkaller", 0 [pid 8346] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] getdents64(4, [pid 8347] <... memfd_create resumed>) = 3 [pid 8347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8347] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] close(4) = 0 [pid 5063] rmdir("./324/file0") = 0 [pid 5063] getdents64(3, [pid 8346] <... open resumed>) = 4 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8346] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] close(3 [pid 8346] <... open resumed>) = 5 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./324") = 0 [pid 8346] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] mkdir("./325", 0777) = 0 [pid 8346] <... mmap resumed>) = 0x20000000 [pid 8346] ftruncate(4, 33587195 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 302.322727][ T8348] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8346] <... ftruncate resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8346] unlink("./bus" [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8349 attached [pid 8346] <... unlink resumed>) = 0 [pid 8349] set_robust_list(0x55555745a660, 24 [pid 8346] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8349 [pid 8349] <... set_robust_list resumed>) = 0 [pid 8346] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8349] chdir("./330" [pid 8346] exit_group(0) = ? [pid 8349] <... chdir resumed>) = 0 [pid 8349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8349] setpgid(0, 0) = 0 [pid 8349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8349] write(3, "1000", 4 [pid 8347] <... write resumed>) = 2097152 [pid 5062] close(3 [pid 8349] <... write resumed>) = 4 [pid 8349] close(3 [pid 8346] +++ exited with 0 +++ [pid 5062] <... close resumed>) = 0 [pid 8349] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8349] symlink("/dev/binderfs", "./binderfs" [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8346, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8349] <... symlink resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8349] memfd_create("syzkaller", 0) = 3 [pid 5064] umount2("./329", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8350 [pid 8349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 8350 attached ) = 0x7f41e0600000 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8350] set_robust_list(0x55555745a660, 24 [pid 8347] munmap(0x7f41e0600000, 138412032 [pid 5064] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8350] <... set_robust_list resumed>) = 0 [pid 8347] <... munmap resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 8350] chdir("./324" [pid 5064] newfstatat(3, "", [pid 8350] <... chdir resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8350] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] getdents64(3, [pid 8350] <... prctl resumed>) = 0 [pid 8350] setpgid(0, 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8350] <... setpgid resumed>) = 0 [pid 8350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] umount2("./329/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8350] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(3 [pid 8350] write(3, "1000", 4 [pid 8347] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] newfstatat(AT_FDCWD, "./329/binderfs", [pid 8350] <... write resumed>) = 4 [pid 8347] <... openat resumed>) = 4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... close resumed>) = 0 [pid 8350] close(3 [pid 8347] ioctl(4, LOOP_SET_FD, 3 [pid 5064] unlink("./329/binderfs" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8350] <... close resumed>) = 0 [pid 8350] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 8351 attached ) = 0 [pid 8349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8347] <... ioctl resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 8350] memfd_create("syzkaller", 0) = 3 [pid 8351] set_robust_list(0x55555745a660, 24 [pid 8350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8347] close(3 [pid 5064] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8351 [pid 8350] <... mmap resumed>) = 0x7f41e0600000 [pid 8351] <... set_robust_list resumed>) = 0 [pid 8347] <... close resumed>) = 0 [pid 8351] chdir("./325" [pid 8347] close(4 [pid 8351] <... chdir resumed>) = 0 [pid 8347] <... close resumed>) = 0 [pid 8351] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8347] mkdir("./file0", 0777 [pid 8351] <... prctl resumed>) = 0 [pid 8347] <... mkdir resumed>) = 0 [pid 8351] setpgid(0, 0) = 0 [pid 8351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8347] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8351] <... openat resumed>) = 3 [pid 8351] write(3, "1000", 4) = 4 [pid 8351] close(3) = 0 [pid 8351] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8351] memfd_create("syzkaller", 0) = 3 [pid 8351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5064] <... umount2 resumed>) = 0 [ 302.483256][ T8347] loop4: detected capacity change from 0 to 4096 [pid 5064] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8349] <... write resumed>) = 2097152 [pid 5064] newfstatat(AT_FDCWD, "./329/file0", [pid 8349] munmap(0x7f41e0600000, 138412032 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./329/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8349] <... munmap resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 8349] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] newfstatat(4, "", [pid 8349] <... openat resumed>) = 4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, [pid 8349] ioctl(4, LOOP_SET_FD, 3 [pid 8347] <... mount resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8347] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8347] chdir("./file0") = 0 [pid 8347] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8349] <... ioctl resumed>) = 0 [pid 8347] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] getdents64(4, [pid 8349] close(3 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8349] <... close resumed>) = 0 [pid 5064] close(4) = 0 [pid 8351] <... write resumed>) = 2097152 [pid 8349] close(4 [pid 5064] rmdir("./329/file0") = 0 [pid 8349] <... close resumed>) = 0 [pid 8349] mkdir("./file0", 0777 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8349] <... mkdir resumed>) = 0 [pid 5064] close(3) = 0 [pid 8351] munmap(0x7f41e0600000, 138412032 [pid 8349] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] rmdir("./329" [pid 8351] <... munmap resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./330", 0777) = 0 [pid 8351] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 8351] <... openat resumed>) = 4 [pid 8347] <... open resumed>) = 4 [pid 5064] ioctl(3, LOOP_CLR_FD [ 302.576628][ T8352] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.598971][ T8349] loop0: detected capacity change from 0 to 4096 [pid 8351] ioctl(4, LOOP_SET_FD, 3 [pid 8350] <... write resumed>) = 2097152 [pid 8347] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8347] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8350] munmap(0x7f41e0600000, 138412032 [pid 8347] <... mmap resumed>) = 0x20000000 [pid 8350] <... munmap resumed>) = 0 [pid 8347] ftruncate(4, 33587195 [pid 8350] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8347] <... ftruncate resumed>) = 0 [pid 8351] <... ioctl resumed>) = 0 [pid 8347] unlink("./bus" [pid 8351] close(3) = 0 [pid 8350] ioctl(4, LOOP_SET_FD, 3 [pid 8351] close(4 [pid 8349] <... mount resumed>) = 0 [pid 8351] <... close resumed>) = 0 [pid 8351] mkdir("./file0", 0777 [pid 8349] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8351] <... mkdir resumed>) = 0 [pid 8351] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8349] <... openat resumed>) = 3 [pid 8349] chdir("./file0") = 0 [pid 8349] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8347] <... unlink resumed>) = 0 [pid 8347] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8347] exit_group(0) = ? [pid 8349] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 302.645393][ T8351] loop2: detected capacity change from 0 to 4096 [ 302.666122][ T8353] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.666731][ T8350] loop1: detected capacity change from 0 to 4096 [pid 8349] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... ioctl resumed>) = 0 [pid 8350] <... ioctl resumed>) = 0 [pid 8349] <... open resumed>) = 4 [pid 5064] close(3 [pid 8347] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8347, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] umount2("./323", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 8349] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./323/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./323/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./323/binderfs" [pid 8349] <... open resumed>) = 5 [pid 5065] <... unlink resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8350] close(3) = 0 [pid 8350] close(4 [pid 8349] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8355 [pid 8350] <... close resumed>) = 0 [pid 8350] mkdir("./file0", 0777./strace-static-x86_64: Process 8355 attached [pid 5065] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8355] set_robust_list(0x55555745a660, 24 [pid 8349] <... mmap resumed>) = 0x20000000 [pid 8355] <... set_robust_list resumed>) = 0 [pid 8350] <... mkdir resumed>) = 0 [pid 8349] ftruncate(4, 33587195 [pid 8355] chdir("./330" [pid 8351] <... mount resumed>) = 0 [pid 8351] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8350] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8355] <... chdir resumed>) = 0 [pid 8351] <... openat resumed>) = 3 [pid 8355] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8351] chdir("./file0" [pid 8355] <... prctl resumed>) = 0 [pid 8351] <... chdir resumed>) = 0 [pid 8355] setpgid(0, 0 [pid 8351] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8355] <... setpgid resumed>) = 0 [pid 8351] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8351] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8355] <... openat resumed>) = 3 [pid 8349] <... ftruncate resumed>) = 0 [pid 8355] write(3, "1000", 4 [pid 8351] <... open resumed>) = 4 [pid 8349] unlink("./bus" [pid 8351] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8355] <... write resumed>) = 4 [pid 8355] close(3) = 0 [pid 8355] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8351] <... open resumed>) = 5 [pid 8349] <... unlink resumed>) = 0 [pid 8349] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... umount2 resumed>) = 0 [ 302.737832][ T8354] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8351] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = -1 EBADF (Bad file descriptor) [pid 8349] exit_group(0 [pid 8355] memfd_create("syzkaller", 0 [pid 8351] ftruncate(4, 33587195 [pid 8349] <... exit_group resumed>) = ? [pid 8355] <... memfd_create resumed>) = 3 [pid 8355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5065] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./323/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8350] <... mount resumed>) = 0 [pid 5065] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./323/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, [pid 8351] <... ftruncate resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8351] unlink("./bus" [pid 8350] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8349] +++ exited with 0 +++ [pid 5065] getdents64(4, [pid 8350] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8349, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 8350] chdir("./file0" [pid 5065] close(4 [pid 8350] <... chdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 8350] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] rmdir("./323/file0" [pid 8350] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... rmdir resumed>) = 0 [pid 5061] umount2("./330", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8350] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] getdents64(3, [pid 5061] <... openat resumed>) = 3 [pid 8351] <... unlink resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8351] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] close(3 [pid 5061] newfstatat(3, "", [pid 8351] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] <... close resumed>) = 0 [pid 8351] exit_group(0 [pid 5065] rmdir("./323" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8351] <... exit_group resumed>) = ? [pid 5065] <... rmdir resumed>) = 0 [pid 8350] <... open resumed>) = 4 [pid 5061] getdents64(3, [pid 8350] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8350] <... open resumed>) = 5 [ 302.801535][ T8356] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] mkdir("./324", 0777 [pid 5061] umount2("./330/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8350] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8351] +++ exited with 0 +++ [pid 8350] <... mmap resumed>) = 0x20000000 [pid 8350] ftruncate(4, 33587195) = 0 [pid 8350] unlink("./bus" [pid 5061] newfstatat(AT_FDCWD, "./330/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8351, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5061] unlink("./330/binderfs") = 0 [pid 8350] <... unlink resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] umount2("./325", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8350] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8350] exit_group(0 [pid 5065] <... openat resumed>) = 3 [pid 8350] <... exit_group resumed>) = ? [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8350] +++ exited with 0 +++ [pid 5063] getdents64(3, [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8350, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./325/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./324", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] newfstatat(AT_FDCWD, "./325/binderfs", [pid 5061] <... umount2 resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] newfstatat(3, "", [pid 5061] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] unlink("./325/binderfs" [pid 5062] getdents64(3, [pid 5063] <... unlink resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./330/file0", [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./324/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./324/binderfs", [pid 5061] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] unlink("./324/binderfs" [pid 5061] openat(AT_FDCWD, "./330/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8355] <... write resumed>) = 2097152 [pid 5062] <... unlink resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(4, "", [pid 8355] munmap(0x7f41e0600000, 138412032 [pid 5063] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] newfstatat(AT_FDCWD, "./325/file0", [pid 5061] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(4) = 0 [pid 5061] rmdir("./330/file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./325/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5061] close(3) = 0 [pid 5061] rmdir("./330") = 0 [ 302.858696][ T28] kauditd_printk_skb: 106 callbacks suppressed [ 302.858714][ T28] audit: type=1800 audit(1708423455.390:4909): pid=8350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [pid 8355] <... munmap resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5062] <... umount2 resumed>) = 0 [pid 5061] mkdir("./331", 0777 [pid 8355] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... mkdir resumed>) = 0 [pid 8355] <... openat resumed>) = 4 [pid 5063] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 8355] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] newfstatat(AT_FDCWD, "./324/file0", [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5063] getdents64(4, [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./325/file0") = 0 [pid 5062] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(3, [pid 5062] openat(AT_FDCWD, "./324/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5063] close(3 [pid 5062] newfstatat(4, "", [pid 5063] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] rmdir("./325" [pid 5062] getdents64(4, [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] mkdir("./326", 0777 [pid 5062] close(4 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./324/file0") = 0 [pid 5062] getdents64(3, [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] close(3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... close resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5062] rmdir("./324") = 0 [pid 5062] mkdir("./325", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8355] <... ioctl resumed>) = 0 [pid 5065] close(3 [pid 8355] close(3 [pid 5062] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 8355] <... close resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8355] close(4 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... ioctl resumed>) = 0 [ 302.947734][ T8355] loop3: detected capacity change from 0 to 4096 [pid 5061] close(3./strace-static-x86_64: Process 8357 attached [pid 8355] <... close resumed>) = 0 [pid 8357] set_robust_list(0x55555745a660, 24 [pid 8355] mkdir("./file0", 0777 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8357 [pid 8357] <... set_robust_list resumed>) = 0 [pid 8355] <... mkdir resumed>) = 0 [pid 8357] chdir("./324" [pid 8355] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8357] <... chdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8357] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8357] setpgid(0, 0./strace-static-x86_64: Process 8358 attached [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8358 [pid 8358] set_robust_list(0x55555745a660, 24 [pid 8357] <... setpgid resumed>) = 0 [pid 8358] <... set_robust_list resumed>) = 0 [pid 8358] chdir("./331" [pid 8357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8358] <... chdir resumed>) = 0 [pid 8357] <... openat resumed>) = 3 [pid 8358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8357] write(3, "1000", 4 [pid 8358] setpgid(0, 0 [pid 8357] <... write resumed>) = 4 [pid 8358] <... setpgid resumed>) = 0 [pid 8357] close(3 [pid 8358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8357] <... close resumed>) = 0 [pid 8357] symlink("/dev/binderfs", "./binderfs" [pid 8358] write(3, "1000", 4) = 4 [pid 8358] close(3) = 0 [pid 8357] <... symlink resumed>) = 0 [pid 8358] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8358] memfd_create("syzkaller", 0) = 3 [pid 8358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8357] memfd_create("syzkaller", 0 [pid 8355] <... mount resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8355] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8357] <... memfd_create resumed>) = 3 [pid 8355] <... openat resumed>) = 3 [pid 5063] close(3 [pid 5062] close(3 [pid 8357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8355] chdir("./file0" [pid 5063] <... close resumed>) = 0 [pid 8357] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8355] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 8360 attached [pid 8355] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8360 [pid 8355] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8360] set_robust_list(0x55555745a660, 24) = 0 [pid 8355] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8360] chdir("./326") = 0 [pid 8360] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8360] setpgid(0, 0) = 0 [pid 8360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... close resumed>) = 0 [pid 8360] <... openat resumed>) = 3 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8361 attached , child_tidptr=0x55555745a650) = 8361 [pid 8361] set_robust_list(0x55555745a660, 24) = 0 [pid 8361] chdir("./325") = 0 [pid 8361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8361] setpgid(0, 0) = 0 [pid 8361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8361] write(3, "1000", 4) = 4 [pid 8361] close(3 [pid 8360] write(3, "1000", 4 [pid 8361] <... close resumed>) = 0 [pid 8360] <... write resumed>) = 4 [pid 8361] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8360] close(3 [ 303.068175][ T8359] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8361] memfd_create("syzkaller", 0) = 3 [pid 8361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8360] <... close resumed>) = 0 [pid 8355] <... open resumed>) = 4 [pid 8360] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8358] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8355] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8360] memfd_create("syzkaller", 0 [pid 8357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8355] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8360] <... memfd_create resumed>) = 3 [pid 8355] <... mmap resumed>) = 0x20000000 [pid 8360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8355] ftruncate(4, 33587195 [pid 8360] <... mmap resumed>) = 0x7f41e0600000 [ 303.122413][ T28] audit: type=1800 audit(1708423455.650:4910): pid=8355 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 8361] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8355] <... ftruncate resumed>) = 0 [pid 8360] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8355] unlink("./bus") = 0 [pid 8355] sendfile(-1, -1, NULL, 281474978811909 [pid 8358] <... write resumed>) = 2097152 [pid 8357] <... write resumed>) = 2097152 [pid 8355] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8357] munmap(0x7f41e0600000, 138412032 [pid 8355] exit_group(0 [pid 8358] munmap(0x7f41e0600000, 138412032 [pid 8357] <... munmap resumed>) = 0 [pid 8355] <... exit_group resumed>) = ? [pid 8358] <... munmap resumed>) = 0 [pid 8358] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 303.200221][ T28] audit: type=1800 audit(1708423455.670:4911): pid=8355 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 8358] ioctl(4, LOOP_SET_FD, 3 [pid 8357] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8355] +++ exited with 0 +++ [pid 8357] ioctl(4, LOOP_SET_FD, 3 [pid 8358] <... ioctl resumed>) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8355, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5064] umount2("./330", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8358] close(3 [pid 5064] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8360] <... write resumed>) = 2097152 [pid 8358] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 8360] munmap(0x7f41e0600000, 138412032 [pid 8358] close(4 [pid 8357] <... ioctl resumed>) = 0 [pid 5064] newfstatat(3, "", [pid 8358] <... close resumed>) = 0 [pid 8358] mkdir("./file0", 0777) = 0 [pid 8358] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8361] <... write resumed>) = 2097152 [pid 8360] <... munmap resumed>) = 0 [pid 8357] close(3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8361] munmap(0x7f41e0600000, 138412032 [pid 8357] <... close resumed>) = 0 [pid 5064] getdents64(3, [pid 8361] <... munmap resumed>) = 0 [pid 8360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8357] close(4 [pid 8360] <... openat resumed>) = 4 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [ 303.244379][ T8358] loop0: detected capacity change from 0 to 4096 [ 303.259224][ T8357] loop4: detected capacity change from 0 to 4096 [ 303.271086][ T28] audit: type=1800 audit(1708423455.700:4912): pid=8355 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 5064] umount2("./330/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8357] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8361] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8361] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8360] ioctl(4, LOOP_SET_FD, 3 [pid 5064] newfstatat(AT_FDCWD, "./330/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8361] close(3 [pid 8357] mkdir("./file0", 0777) = 0 [pid 8361] <... close resumed>) = 0 [pid 8361] close(4 [pid 5064] unlink("./330/binderfs" [pid 8361] <... close resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 8361] mkdir("./file0", 0777 [pid 5064] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8361] <... mkdir resumed>) = 0 [pid 8357] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8361] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8360] <... ioctl resumed>) = 0 [pid 8358] <... mount resumed>) = 0 [pid 8360] close(3 [pid 8358] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8360] <... close resumed>) = 0 [pid 8358] <... openat resumed>) = 3 [pid 8360] close(4 [pid 8358] chdir("./file0" [pid 8360] <... close resumed>) = 0 [pid 8358] <... chdir resumed>) = 0 [pid 8360] mkdir("./file0", 0777) = 0 [pid 8358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8360] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8358] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 303.309819][ T8362] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.319671][ T8361] loop1: detected capacity change from 0 to 4096 [ 303.328635][ T8360] loop2: detected capacity change from 0 to 4096 [pid 8358] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8357] <... mount resumed>) = 0 [pid 8357] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8357] chdir("./file0") = 0 [pid 8358] <... open resumed>) = 4 [pid 8357] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8358] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8357] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8358] <... open resumed>) = 5 [pid 5064] <... umount2 resumed>) = 0 [pid 8358] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5064] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8361] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8361] <... openat resumed>) = 3 [pid 8360] <... mount resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./330/file0", [pid 8361] chdir("./file0" [pid 8360] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8361] <... chdir resumed>) = 0 [pid 8360] <... openat resumed>) = 3 [pid 5064] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8361] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8360] chdir("./file0" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8361] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8360] <... chdir resumed>) = 0 [pid 8358] +++ exited with 0 +++ [pid 5064] openat(AT_FDCWD, "./330/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8361] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] <... openat resumed>) = 4 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8358, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8360] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8357] <... open resumed>) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8360] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8357] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] getdents64(4, [pid 5061] umount2("./331", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8361] <... open resumed>) = 4 [pid 8357] <... open resumed>) = 5 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8361] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] getdents64(4, [pid 5061] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8361] <... open resumed>) = 5 [pid 8357] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] close(4 [pid 5061] newfstatat(3, "", [pid 5064] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] rmdir("./330/file0" [pid 5061] getdents64(3, [pid 8361] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8361] <... mmap resumed>) = 0x20000000 [pid 8357] <... mmap resumed>) = 0x20000000 [pid 5064] getdents64(3, [pid 5061] umount2("./331/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] close(3 [pid 5061] newfstatat(AT_FDCWD, "./331/binderfs", [pid 5064] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] rmdir("./330" [pid 5061] unlink("./331/binderfs" [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [ 303.431607][ T8365] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8357] ftruncate(4, 33587195 [pid 5064] mkdir("./331", 0777 [pid 5061] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8361] ftruncate(4, 33587195 [pid 8360] <... open resumed>) = 4 [pid 8357] <... ftruncate resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 8360] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8357] unlink("./bus" [pid 8360] <... open resumed>) = 5 [pid 8360] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8357] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... openat resumed>) = 3 [pid 8357] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] <... umount2 resumed>) = 0 [pid 8361] <... ftruncate resumed>) = 0 [pid 8357] exit_group(0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8357] <... exit_group resumed>) = ? [pid 8360] unlink("./bus" [pid 5061] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./331/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./331/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8361] unlink("./bus" [pid 8360] <... unlink resumed>) = 0 [ 303.483667][ T28] audit: type=1800 audit(1708423455.930:4914): pid=8358 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 303.506404][ T28] audit: type=1800 audit(1708423455.930:4915): pid=8358 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [pid 5061] <... openat resumed>) = 4 [pid 8360] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] newfstatat(4, "", [pid 8360] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8360] exit_group(0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8360] <... exit_group resumed>) = ? [pid 8357] +++ exited with 0 +++ [pid 5061] getdents64(4, [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8357, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 5065] umount2("./324", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8361] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] close(4 [pid 5065] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5061] rmdir("./331/file0" [pid 5065] newfstatat(3, "", [pid 5061] <... rmdir resumed>) = 0 [pid 8361] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5065] getdents64(3, [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] close(3 [pid 5065] umount2("./324/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] <... close resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./324/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./324/binderfs" [pid 5061] rmdir("./331" [pid 5065] <... unlink resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5065] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8361] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [ 303.530651][ T28] audit: type=1800 audit(1708423455.980:4916): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [pid 5061] mkdir("./332", 0777) = 0 [pid 8361] exit_group(0) = ? [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 303.568209][ T28] audit: type=1800 audit(1708423455.990:4917): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8361] +++ exited with 0 +++ [pid 8360] +++ exited with 0 +++ [pid 5064] <... ioctl resumed>) = 0 [pid 5064] close(3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8361, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5064] <... close resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8360, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] umount2("./326", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./326/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./326/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./326/binderfs") = 0 [pid 5063] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] umount2("./325", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 5065] newfstatat(AT_FDCWD, "./324/file0", [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8366 [pid 5062] newfstatat(3, "", [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 303.611716][ T28] audit: type=1800 audit(1708423455.990:4918): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 ./strace-static-x86_64: Process 8366 attached [pid 5065] openat(AT_FDCWD, "./324/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... ioctl resumed>) = 0 [pid 5062] umount2("./325/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./326/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./326/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] close(3 [pid 8366] set_robust_list(0x55555745a660, 24 [pid 5065] newfstatat(4, "", [pid 5063] newfstatat(4, "", [pid 5062] newfstatat(AT_FDCWD, "./325/binderfs", [pid 8366] <... set_robust_list resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... close resumed>) = 0 [pid 8366] chdir("./331" [pid 5065] getdents64(4, [pid 5063] getdents64(4, [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8366] <... chdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] unlink("./325/binderfs" [pid 8366] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] getdents64(4, [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8366] <... prctl resumed>) = 0 [pid 5063] close(4 [pid 5062] <... unlink resumed>) = 0 [pid 8366] setpgid(0, 0 [pid 5065] close(4 [pid 5063] <... close resumed>) = 0 [pid 5062] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8367 attached [pid 8366] <... setpgid resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] rmdir("./326/file0" [pid 8367] set_robust_list(0x55555745a660, 24 [pid 8366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] rmdir("./324/file0" [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8367 [pid 8367] <... set_robust_list resumed>) = 0 [pid 8367] chdir("./332" [pid 8366] <... openat resumed>) = 3 [pid 5065] <... rmdir resumed>) = 0 [pid 8366] write(3, "1000", 4 [pid 5065] getdents64(3, [pid 8367] <... chdir resumed>) = 0 [pid 8366] <... write resumed>) = 4 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(3, [pid 8367] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] close(3 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8367] <... prctl resumed>) = 0 [pid 8366] close(3 [pid 5065] <... close resumed>) = 0 [pid 5063] close(3 [pid 8367] setpgid(0, 0 [pid 8366] <... close resumed>) = 0 [pid 5065] rmdir("./324" [pid 8367] <... setpgid resumed>) = 0 [pid 8366] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... close resumed>) = 0 [pid 8367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... rmdir resumed>) = 0 [pid 5063] rmdir("./326" [pid 8366] <... symlink resumed>) = 0 [pid 5065] mkdir("./325", 0777 [pid 5063] <... rmdir resumed>) = 0 [pid 8367] <... openat resumed>) = 3 [pid 5065] <... mkdir resumed>) = 0 [pid 8367] write(3, "1000", 4 [pid 8366] memfd_create("syzkaller", 0 [pid 5063] mkdir("./327", 0777 [pid 8367] <... write resumed>) = 4 [pid 8367] close(3 [pid 8366] <... memfd_create resumed>) = 3 [pid 8366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8367] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8367] symlink("/dev/binderfs", "./binderfs" [pid 8366] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8367] <... symlink resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 8367] memfd_create("syzkaller", 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8367] <... memfd_create resumed>) = 3 [pid 8366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] newfstatat(AT_FDCWD, "./325/file0", [pid 8367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8367] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8366] <... write resumed>) = 2097152 [pid 5062] openat(AT_FDCWD, "./325/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... ioctl resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./325/file0") = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] close(3 [pid 5062] close(3 [pid 8366] munmap(0x7f41e0600000, 138412032 [pid 5065] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8366] <... munmap resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] rmdir("./325") = 0 [pid 5062] mkdir("./326", 0777) = 0 [pid 8366] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 8368 attached [pid 8368] set_robust_list(0x55555745a660, 24) = 0 [pid 8368] chdir("./325") = 0 [pid 8368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8366] <... openat resumed>) = 4 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8368 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8368] setpgid(0, 0) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8366] ioctl(4, LOOP_SET_FD, 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8368] <... openat resumed>) = 3 [pid 8366] <... ioctl resumed>) = 0 [pid 8368] write(3, "1000", 4 [pid 5063] <... ioctl resumed>) = 0 [pid 8368] <... write resumed>) = 4 [pid 8366] close(3 [pid 8368] close(3 [pid 8366] <... close resumed>) = 0 [pid 8368] <... close resumed>) = 0 [pid 8366] close(4 [pid 8368] symlink("/dev/binderfs", "./binderfs" [pid 8366] <... close resumed>) = 0 [pid 5063] close(3 [pid 8368] <... symlink resumed>) = 0 [pid 8366] mkdir("./file0", 0777 [pid 5063] <... close resumed>) = 0 [pid 8368] memfd_create("syzkaller", 0 [pid 8366] <... mkdir resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8368] <... memfd_create resumed>) = 3 [pid 8366] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, ""./strace-static-x86_64: Process 8369 attached [pid 8368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8369] set_robust_list(0x55555745a660, 24) = 0 [pid 8368] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8369 [pid 8369] chdir("./327") = 0 [pid 8369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8367] <... write resumed>) = 2097152 [pid 8369] setpgid(0, 0) = 0 [pid 8367] munmap(0x7f41e0600000, 138412032 [ 303.819503][ T8366] loop3: detected capacity change from 0 to 4096 [pid 8369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8367] <... munmap resumed>) = 0 [pid 8369] <... openat resumed>) = 3 [pid 8367] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... ioctl resumed>) = 0 [pid 8369] write(3, "1000", 4 [pid 8367] <... openat resumed>) = 4 [pid 8369] <... write resumed>) = 4 [pid 8367] ioctl(4, LOOP_SET_FD, 3 [pid 8369] close(3) = 0 [pid 5062] close(3 [pid 8369] symlink("/dev/binderfs", "./binderfs" [pid 8367] <... ioctl resumed>) = 0 [pid 8369] <... symlink resumed>) = 0 [pid 8368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8367] close(3 [pid 8366] <... mount resumed>) = 0 [pid 8366] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8369] memfd_create("syzkaller", 0 [pid 8367] <... close resumed>) = 0 [pid 8366] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 8366] chdir("./file0" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8366] <... chdir resumed>) = 0 [pid 8366] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8367] close(4) = 0 [pid 8366] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8367] mkdir("./file0", 0777 [pid 8366] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8371 [pid 8369] <... memfd_create resumed>) = 3 [pid 8367] <... mkdir resumed>) = 0 [pid 8369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8367] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, ""./strace-static-x86_64: Process 8371 attached [pid 8369] <... mmap resumed>) = 0x7f41e0600000 [pid 8371] set_robust_list(0x55555745a660, 24) = 0 [pid 8371] chdir("./326") = 0 [ 303.896889][ T8367] loop0: detected capacity change from 0 to 4096 [ 303.898778][ T8370] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8371] setpgid(0, 0) = 0 [pid 8371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8366] <... open resumed>) = 4 [pid 8366] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8366] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 3 [pid 8366] unlink("./bus" [pid 8371] write(3, "1000", 4) = 4 [pid 8371] close(3 [pid 8367] <... mount resumed>) = 0 [pid 8366] <... unlink resumed>) = 0 [pid 8366] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8366] exit_group(0) = ? [pid 8371] <... close resumed>) = 0 [pid 8367] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8371] symlink("/dev/binderfs", "./binderfs" [pid 8367] <... openat resumed>) = 3 [pid 8371] <... symlink resumed>) = 0 [pid 8367] chdir("./file0" [pid 8369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8367] <... chdir resumed>) = 0 [pid 8371] memfd_create("syzkaller", 0) = 3 [pid 8367] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8368] <... write resumed>) = 2097152 [pid 8367] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8366] +++ exited with 0 +++ [pid 8371] <... mmap resumed>) = 0x7f41e0600000 [pid 8367] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8366, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5064] umount2("./331", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./331/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./331/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 303.962551][ T8372] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8368] munmap(0x7f41e0600000, 138412032 [pid 5064] unlink("./331/binderfs") = 0 [pid 5064] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8368] <... munmap resumed>) = 0 [pid 8367] <... open resumed>) = 4 [pid 8368] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8367] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8368] <... openat resumed>) = 4 [pid 8368] ioctl(4, LOOP_SET_FD, 3 [pid 8367] <... open resumed>) = 5 [pid 8367] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8367] sendfile(-1, -1, NULL, 281474978811909 [pid 8368] close(3 [pid 8367] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8368] <... close resumed>) = 0 [pid 8367] exit_group(0 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./331/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./331/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8367] <... exit_group resumed>) = ? [pid 5064] <... openat resumed>) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 8368] close(4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8369] <... write resumed>) = 2097152 [pid 8368] <... close resumed>) = 0 [pid 8367] +++ exited with 0 +++ [pid 8369] munmap(0x7f41e0600000, 138412032 [pid 8368] mkdir("./file0", 0777 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8367, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 8368] <... mkdir resumed>) = 0 [ 304.044970][ T8368] loop4: detected capacity change from 0 to 4096 [pid 5064] close(4 [pid 5061] umount2("./332", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8369] <... munmap resumed>) = 0 [pid 8368] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] rmdir("./331/file0" [pid 5061] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, [pid 5061] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] newfstatat(3, "", [pid 8369] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8369] ioctl(4, LOOP_SET_FD, 3 [pid 5061] getdents64(3, [pid 5064] close(3 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8369] <... ioctl resumed>) = 0 [pid 5061] umount2("./332/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8369] close(3) = 0 [pid 5064] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./332/binderfs", [pid 5064] rmdir("./331" [pid 8369] close(4) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 8369] mkdir("./file0", 0777 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8369] <... mkdir resumed>) = 0 [pid 5061] unlink("./332/binderfs") = 0 [pid 5061] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8369] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] mkdir("./332", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8371] <... write resumed>) = 2097152 [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./332/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 304.111006][ T8369] loop2: detected capacity change from 0 to 4096 [ 304.150520][ T8373] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8371] munmap(0x7f41e0600000, 138412032 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./332/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./332/file0") = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./332") = 0 [pid 5061] mkdir("./333", 0777 [pid 8371] <... munmap resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 8371] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8368] <... mount resumed>) = 0 [pid 8371] <... openat resumed>) = 4 [pid 8371] ioctl(4, LOOP_SET_FD, 3 [pid 8368] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8371] <... ioctl resumed>) = 0 [pid 8369] <... mount resumed>) = 0 [pid 8368] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8371] close(3 [pid 8369] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8368] chdir("./file0" [pid 8371] <... close resumed>) = 0 [pid 8369] <... openat resumed>) = 3 [pid 8368] <... chdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8371] close(4 [pid 8369] chdir("./file0" [pid 8371] <... close resumed>) = 0 [pid 8369] <... chdir resumed>) = 0 [pid 8368] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8371] mkdir("./file0", 0777 [pid 8369] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8368] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8369] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8368] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8371] <... mkdir resumed>) = 0 [pid 8368] <... open resumed>) = 4 [pid 8368] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8371] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 304.162166][ T8374] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 304.186707][ T8371] loop1: detected capacity change from 0 to 4096 [pid 8368] <... open resumed>) = 5 [pid 8369] <... open resumed>) = 4 [pid 5064] <... ioctl resumed>) = 0 [pid 8368] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8369] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8368] <... mmap resumed>) = 0x20000000 [pid 8369] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8369] unlink("./bus" [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8368] <... ftruncate resumed>) = 0 ./strace-static-x86_64: Process 8375 attached [pid 8369] <... unlink resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8369] sendfile(-1, -1, NULL, 281474978811909 [pid 8375] set_robust_list(0x55555745a660, 24 [pid 8369] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8375] <... set_robust_list resumed>) = 0 [pid 8369] exit_group(0 [pid 8375] chdir("./332" [pid 8369] <... exit_group resumed>) = ? [pid 8375] <... chdir resumed>) = 0 [pid 8375] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8375] setpgid(0, 0 [pid 8368] unlink("./bus" [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8375 [pid 8375] <... setpgid resumed>) = 0 [pid 8375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8375] write(3, "1000", 4) = 4 [pid 8375] close(3) = 0 [pid 8369] +++ exited with 0 +++ [pid 5061] close(3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8369, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 8375] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8375] <... symlink resumed>) = 0 [pid 8368] <... unlink resumed>) = 0 [pid 8368] sendfile(-1, -1, NULL, 281474978811909./strace-static-x86_64: Process 8377 attached [pid 8375] memfd_create("syzkaller", 0 [pid 8368] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5063] umount2("./327", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8377 [pid 8377] set_robust_list(0x55555745a660, 24) = 0 [pid 8375] <... memfd_create resumed>) = 3 [pid 8368] exit_group(0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8368] <... exit_group resumed>) = ? [pid 5063] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./327/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./327/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./327/binderfs") = 0 [pid 5063] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8377] chdir("./333" [pid 8375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8377] <... chdir resumed>) = 0 [pid 8377] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8375] <... mmap resumed>) = 0x7f41e0600000 [pid 8377] <... prctl resumed>) = 0 [pid 8377] setpgid(0, 0 [pid 8371] <... mount resumed>) = 0 [pid 8371] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8377] <... setpgid resumed>) = 0 [pid 8375] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8371] chdir("./file0" [pid 8368] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = 0 [pid 8377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8368, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 8371] <... chdir resumed>) = 0 [pid 8377] <... openat resumed>) = 3 [pid 8371] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... restart_syscall resumed>) = 0 [pid 8371] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8371] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8377] write(3, "1000", 4 [pid 5065] umount2("./325", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8377] <... write resumed>) = 4 [pid 5065] openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8377] close(3) = 0 [pid 5065] <... openat resumed>) = 3 [pid 8377] symlink("/dev/binderfs", "./binderfs" [pid 5065] newfstatat(3, "", [pid 8377] <... symlink resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./325/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./325/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./325/binderfs") = 0 [pid 8377] memfd_create("syzkaller", 0 [pid 5065] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./327/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8377] <... memfd_create resumed>) = 3 [pid 8371] <... open resumed>) = 4 [pid 5063] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8371] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8377] <... mmap resumed>) = 0x7f41e0600000 [pid 8371] <... open resumed>) = 5 [ 304.310002][ T8376] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] openat(AT_FDCWD, "./327/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8371] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... openat resumed>) = 4 [pid 8371] <... mmap resumed>) = 0x20000000 [pid 8371] ftruncate(4, 33587195 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8371] <... ftruncate resumed>) = 0 [pid 5063] close(4 [pid 8371] unlink("./bus" [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./327/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8371] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 8377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8371] sendfile(-1, -1, NULL, 281474978811909 [pid 5063] close(3 [pid 5065] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8371] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8371] exit_group(0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./325/file0", [pid 8371] <... exit_group resumed>) = ? [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... close resumed>) = 0 [pid 8375] <... write resumed>) = 2097152 [pid 5065] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./327" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./325/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] mkdir("./328", 0777 [pid 5065] <... openat resumed>) = 4 [pid 5063] <... mkdir resumed>) = 0 [pid 8375] munmap(0x7f41e0600000, 138412032 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] getdents64(4, [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8371] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8371, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8375] <... munmap resumed>) = 0 [pid 5065] getdents64(4, [pid 8375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8375] <... openat resumed>) = 4 [pid 5065] close(4 [pid 8375] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./325/file0" [pid 5062] umount2("./326", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./326/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8377] <... write resumed>) = 2097152 [pid 8375] <... ioctl resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 8377] munmap(0x7f41e0600000, 138412032 [pid 8375] close(3 [pid 8377] <... munmap resumed>) = 0 [pid 8375] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] newfstatat(AT_FDCWD, "./326/binderfs", [pid 5065] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8375] close(4 [pid 5065] <... close resumed>) = 0 [pid 5062] unlink("./326/binderfs" [pid 8377] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8375] <... close resumed>) = 0 [pid 5065] rmdir("./325" [pid 8377] <... openat resumed>) = 4 [pid 5065] <... rmdir resumed>) = 0 [pid 8375] mkdir("./file0", 0777 [pid 5062] <... unlink resumed>) = 0 [pid 5065] mkdir("./326", 0777 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... mkdir resumed>) = 0 [pid 8377] ioctl(4, LOOP_SET_FD, 3 [pid 8375] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 304.416147][ T8375] loop3: detected capacity change from 0 to 4096 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8375] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, ""./strace-static-x86_64: Process 8378 attached [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8378 [pid 5062] <... umount2 resumed>) = 0 [pid 8378] set_robust_list(0x55555745a660, 24 [pid 8377] <... ioctl resumed>) = 0 [pid 8378] <... set_robust_list resumed>) = 0 [pid 8377] close(3 [pid 5062] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8378] chdir("./328") = 0 [pid 8378] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8377] <... close resumed>) = 0 [pid 8378] <... prctl resumed>) = 0 [pid 8378] setpgid(0, 0 [pid 8377] close(4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8378] <... setpgid resumed>) = 0 [pid 8377] <... close resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./326/file0", [pid 8378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8377] mkdir("./file0", 0777 [pid 8375] <... mount resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8378] <... openat resumed>) = 3 [pid 8375] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8377] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8375] <... openat resumed>) = 3 [pid 8378] write(3, "1000", 4 [pid 5062] openat(AT_FDCWD, "./326/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8375] chdir("./file0") = 0 [pid 5062] <... openat resumed>) = 4 [pid 8378] <... write resumed>) = 4 [pid 8375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] newfstatat(4, "", [pid 8378] close(3) = 0 [pid 8377] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8375] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8378] symlink("/dev/binderfs", "./binderfs" [pid 8375] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8378] <... symlink resumed>) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8378] memfd_create("syzkaller", 0 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8378] <... memfd_create resumed>) = 3 [pid 5062] close(4) = 0 [pid 8378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8375] <... open resumed>) = 4 [pid 5062] rmdir("./326/file0" [pid 8378] <... mmap resumed>) = 0x7f41e0600000 [pid 8375] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... rmdir resumed>) = 0 [ 304.464607][ T8377] loop0: detected capacity change from 0 to 4096 [ 304.492451][ T8379] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8375] <... open resumed>) = 5 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5062] rmdir("./326" [pid 5065] close(3) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8375] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8375] <... mmap resumed>) = 0x20000000 [pid 5062] mkdir("./327", 0777) = 0 [pid 8375] ftruncate(4, 33587195 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 8380 attached [pid 8380] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8380 [pid 8380] <... set_robust_list resumed>) = 0 [pid 8380] chdir("./326" [pid 8375] <... ftruncate resumed>) = 0 [pid 8380] <... chdir resumed>) = 0 [pid 8380] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8380] setpgid(0, 0 [pid 8375] unlink("./bus" [pid 8380] <... setpgid resumed>) = 0 [pid 8380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8380] write(3, "1000", 4) = 4 [pid 8375] <... unlink resumed>) = 0 [pid 8380] close(3) = 0 [pid 8380] symlink("/dev/binderfs", "./binderfs" [pid 8375] sendfile(-1, -1, NULL, 281474978811909 [pid 8380] <... symlink resumed>) = 0 [pid 8375] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8375] exit_group(0) = ? [pid 8380] memfd_create("syzkaller", 0) = 3 [pid 8380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8378] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8377] <... mount resumed>) = 0 [pid 8377] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8377] chdir("./file0") = 0 [pid 8377] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8375] +++ exited with 0 +++ [pid 8377] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8377] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8375, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [ 304.591119][ T8381] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] umount2("./332", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... ioctl resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./332/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./332/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./332/binderfs") = 0 [pid 5064] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8377] <... open resumed>) = 4 [pid 8377] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] close(3) = 0 [pid 8377] <... open resumed>) = 5 [pid 8377] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8382 [pid 8377] <... mmap resumed>) = 0x20000000 ./strace-static-x86_64: Process 8382 attached [pid 8382] set_robust_list(0x55555745a660, 24) = 0 [pid 8377] ftruncate(4, 33587195 [pid 8382] chdir("./327" [pid 8380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8382] <... chdir resumed>) = 0 [pid 8377] <... ftruncate resumed>) = 0 [pid 8382] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8378] <... write resumed>) = 2097152 [pid 8382] <... prctl resumed>) = 0 [pid 8378] munmap(0x7f41e0600000, 138412032 [pid 8377] unlink("./bus" [pid 8382] setpgid(0, 0) = 0 [pid 8382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... umount2 resumed>) = 0 [pid 8382] <... openat resumed>) = 3 [pid 5064] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8382] write(3, "1000", 4 [pid 8378] <... munmap resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8382] <... write resumed>) = 4 [pid 8378] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] newfstatat(AT_FDCWD, "./332/file0", [pid 8382] close(3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8382] <... close resumed>) = 0 [pid 8382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5064] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8377] <... unlink resumed>) = 0 [pid 8382] memfd_create("syzkaller", 0 [pid 8377] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./332/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 8382] <... memfd_create resumed>) = 3 [pid 8377] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8378] <... openat resumed>) = 4 [pid 8377] exit_group(0 [pid 8382] <... mmap resumed>) = 0x7f41e0600000 [pid 8378] ioctl(4, LOOP_SET_FD, 3 [pid 8377] <... exit_group resumed>) = ? [pid 5064] close(4) = 0 [pid 5064] rmdir("./332/file0") = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./332") = 0 [pid 8378] <... ioctl resumed>) = 0 [pid 8377] +++ exited with 0 +++ [pid 5064] mkdir("./333", 0777 [pid 8380] <... write resumed>) = 2097152 [pid 8378] close(3 [pid 5064] <... mkdir resumed>) = 0 [pid 8378] <... close resumed>) = 0 [pid 8378] close(4 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8377, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5061] umount2("./333", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8378] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8380] munmap(0x7f41e0600000, 138412032 [pid 5064] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 3 [pid 8380] <... munmap resumed>) = 0 [pid 8378] mkdir("./file0", 0777 [pid 5061] newfstatat(3, "", [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8378] <... mkdir resumed>) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./333/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8378] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8380] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./333/binderfs", [pid 8380] <... openat resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./333/binderfs" [pid 8380] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... unlink resumed>) = 0 [pid 8382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8380] <... ioctl resumed>) = 0 [pid 8380] close(3) = 0 [pid 8380] close(4) = 0 [pid 8380] mkdir("./file0", 0777) = 0 [ 304.723909][ T8378] loop2: detected capacity change from 0 to 4096 [ 304.762517][ T8380] loop4: detected capacity change from 0 to 4096 [pid 5061] <... umount2 resumed>) = 0 [pid 8380] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./333/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./333/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] <... ioctl resumed>) = 0 [pid 8382] <... write resumed>) = 2097152 [pid 5061] newfstatat(4, "", [pid 5064] close(3 [pid 8378] <... mount resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8378] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] getdents64(4, [pid 8378] <... openat resumed>) = 3 ./strace-static-x86_64: Process 8384 attached [pid 8382] munmap(0x7f41e0600000, 138412032 [pid 8378] chdir("./file0" [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8384 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8384] set_robust_list(0x55555745a660, 24 [pid 8382] <... munmap resumed>) = 0 [pid 8378] <... chdir resumed>) = 0 [pid 8384] <... set_robust_list resumed>) = 0 [pid 8384] chdir("./333" [pid 8378] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] getdents64(4, [pid 8378] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8378] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] close(4 [pid 8384] <... chdir resumed>) = 0 [pid 8382] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8384] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8382] <... openat resumed>) = 4 [pid 5061] <... close resumed>) = 0 [pid 8384] <... prctl resumed>) = 0 [ 304.813787][ T8383] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8382] ioctl(4, LOOP_SET_FD, 3 [pid 5061] rmdir("./333/file0" [pid 8384] setpgid(0, 0 [pid 8382] <... ioctl resumed>) = 0 [pid 8378] <... open resumed>) = 4 [pid 8384] <... setpgid resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8378] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] getdents64(3, [pid 8384] <... openat resumed>) = 3 [pid 8378] <... open resumed>) = 5 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8384] write(3, "1000", 4 [pid 8378] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] close(3 [pid 8384] <... write resumed>) = 4 [pid 8384] close(3) = 0 [pid 8384] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5061] <... close resumed>) = 0 [pid 8384] memfd_create("syzkaller", 0 [pid 8378] <... mmap resumed>) = 0x20000000 [pid 5061] rmdir("./333" [pid 8384] <... memfd_create resumed>) = 3 [pid 8384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8382] close(3) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8382] close(4) = 0 [pid 8382] mkdir("./file0", 0777) = 0 [pid 8382] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8380] <... mount resumed>) = 0 [pid 8378] ftruncate(4, 33587195 [pid 5061] mkdir("./334", 0777 [pid 8380] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8378] <... ftruncate resumed>) = 0 [pid 8380] <... openat resumed>) = 3 [pid 5061] <... mkdir resumed>) = 0 [pid 8380] chdir("./file0" [ 304.857883][ T8382] loop1: detected capacity change from 0 to 4096 [ 304.869498][ T8385] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8378] unlink("./bus" [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8380] <... chdir resumed>) = 0 [pid 8380] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... openat resumed>) = 3 [pid 8380] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8380] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8378] <... unlink resumed>) = 0 [pid 8378] sendfile(-1, -1, NULL, 281474978811909 [pid 8382] <... mount resumed>) = 0 [pid 8382] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8382] chdir("./file0") = 0 [pid 8378] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8378] exit_group(0 [pid 8382] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8382] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8378] <... exit_group resumed>) = ? [pid 8380] <... open resumed>) = 4 [pid 8380] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8380] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8382] <... open resumed>) = 4 [pid 8382] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8380] <... ftruncate resumed>) = 0 [pid 8380] unlink("./bus" [pid 8382] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8382] ftruncate(4, 33587195 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8384] <... write resumed>) = 2097152 [pid 8382] <... ftruncate resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 8384] munmap(0x7f41e0600000, 138412032 [pid 8382] unlink("./bus" [pid 8380] <... unlink resumed>) = 0 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 8380] sendfile(-1, -1, NULL, 281474978811909 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8380] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [ 304.929907][ T8386] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] umount2("./328/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8380] exit_group(0 [pid 5061] <... ioctl resumed>) = 0 [pid 8384] <... munmap resumed>) = 0 [pid 8380] <... exit_group resumed>) = ? [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8384] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] newfstatat(AT_FDCWD, "./328/binderfs", [pid 5061] close(3 [pid 8384] <... openat resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... close resumed>) = 0 [pid 8384] ioctl(4, LOOP_SET_FD, 3 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] unlink("./328/binderfs") = 0 [pid 5063] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8382] <... unlink resumed>) = 0 [pid 8382] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8382] exit_group(0) = ? ./strace-static-x86_64: Process 8387 attached [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8387 [pid 8387] set_robust_list(0x55555745a660, 24) = 0 [pid 8387] chdir("./334") = 0 [pid 8384] <... ioctl resumed>) = 0 [pid 8380] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8380, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5063] <... umount2 resumed>) = 0 [pid 8387] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8382] +++ exited with 0 +++ [pid 8387] setpgid(0, 0 [pid 8384] close(3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8382, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 8387] <... setpgid resumed>) = 0 [pid 8384] <... close resumed>) = 0 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 8384] close(4 [pid 5062] <... restart_syscall resumed>) = 0 [pid 8387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8384] <... close resumed>) = 0 [pid 8384] mkdir("./file0", 0777 [pid 5065] umount2("./326", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8384] <... mkdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./327", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8387] <... openat resumed>) = 3 [pid 8384] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8387] write(3, "1000", 4 [pid 5065] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8387] <... write resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 8387] close(3 [pid 5065] newfstatat(3, "", [pid 5062] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8387] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8387] symlink("/dev/binderfs", "./binderfs" [pid 5065] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8387] <... symlink resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] newfstatat(AT_FDCWD, "./328/file0", [pid 5065] umount2("./326/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] newfstatat(AT_FDCWD, "./326/binderfs", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(3, "", [pid 5063] openat(AT_FDCWD, "./328/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 8387] memfd_create("syzkaller", 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(3, [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 305.003737][ T8384] loop3: detected capacity change from 0 to 4096 [pid 5063] getdents64(4, [pid 5065] unlink("./326/binderfs" [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8387] <... memfd_create resumed>) = 3 [pid 5065] <... unlink resumed>) = 0 [pid 5063] close(4 [pid 8387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 8387] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] rmdir("./328/file0" [pid 5062] umount2("./327/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./328" [pid 5062] newfstatat(AT_FDCWD, "./327/binderfs", [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./329", 0777) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] unlink("./327/binderfs" [pid 5065] <... umount2 resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... unlink resumed>) = 0 [pid 5062] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8384] <... mount resumed>) = 0 [pid 8384] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8384] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8384] chdir("./file0" [pid 5065] newfstatat(AT_FDCWD, "./326/file0", [pid 8384] <... chdir resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8384] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 8384] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./326/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8384] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./326/file0") = 0 [pid 8384] <... open resumed>) = 4 [ 305.087469][ T8388] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8384] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8384] <... open resumed>) = 5 [pid 5065] close(3) = 0 [pid 5062] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] rmdir("./326" [pid 5062] newfstatat(AT_FDCWD, "./327/file0", [pid 5065] <... rmdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./327/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8384] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... openat resumed>) = 4 [pid 8384] <... mmap resumed>) = 0x20000000 [pid 5062] newfstatat(4, "", [pid 5065] mkdir("./327", 0777 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] getdents64(4, [pid 5065] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5062] close(4) = 0 [pid 5062] rmdir("./327/file0") = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./327") = 0 [pid 5062] mkdir("./328", 0777 [pid 8384] ftruncate(4, 33587195 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8384] <... ftruncate resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8384] unlink("./bus" [pid 8387] <... write resumed>) = 2097152 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8387] munmap(0x7f41e0600000, 138412032./strace-static-x86_64: Process 8389 attached ) = 0 [pid 8389] set_robust_list(0x55555745a660, 24) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8389 [pid 8389] chdir("./329" [pid 8387] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8389] <... chdir resumed>) = 0 [pid 8389] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8387] <... openat resumed>) = 4 [pid 8384] <... unlink resumed>) = 0 [pid 8389] <... prctl resumed>) = 0 [pid 8384] sendfile(-1, -1, NULL, 281474978811909 [pid 8389] setpgid(0, 0 [pid 8387] ioctl(4, LOOP_SET_FD, 3 [pid 8384] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8389] <... setpgid resumed>) = 0 [pid 8384] exit_group(0) = ? [pid 8389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8387] <... ioctl resumed>) = 0 [pid 8389] write(3, "1000", 4 [pid 8387] close(3 [pid 8389] <... write resumed>) = 4 [pid 8387] <... close resumed>) = 0 [pid 8389] close(3 [pid 8387] close(4 [pid 8389] <... close resumed>) = 0 [pid 8387] <... close resumed>) = 0 [pid 8389] symlink("/dev/binderfs", "./binderfs" [pid 8387] mkdir("./file0", 0777 [pid 8389] <... symlink resumed>) = 0 [pid 8387] <... mkdir resumed>) = 0 [pid 8384] +++ exited with 0 +++ [pid 8389] memfd_create("syzkaller", 0 [pid 8387] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8384, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=9 /* 0.09 s */} --- [pid 5064] umount2("./333", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8389] <... memfd_create resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./333/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 305.192578][ T8387] loop0: detected capacity change from 0 to 4096 [pid 5064] newfstatat(AT_FDCWD, "./333/binderfs", [pid 5062] close(3) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 8389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] unlink("./333/binderfs" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8391 attached [pid 8387] <... mount resumed>) = 0 [pid 8391] set_robust_list(0x55555745a660, 24 [pid 8387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... unlink resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8392 [pid 8391] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 8392 attached [pid 8391] chdir("./328" [pid 8387] <... openat resumed>) = 3 [pid 5064] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8391 [pid 8392] set_robust_list(0x55555745a660, 24 [pid 8391] <... chdir resumed>) = 0 [pid 8392] <... set_robust_list resumed>) = 0 [pid 8391] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8392] chdir("./327" [pid 8391] <... prctl resumed>) = 0 [pid 8392] <... chdir resumed>) = 0 [pid 8387] chdir("./file0" [pid 8392] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8391] setpgid(0, 0 [pid 8387] <... chdir resumed>) = 0 [pid 8391] <... setpgid resumed>) = 0 [pid 8392] <... prctl resumed>) = 0 [pid 8391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8387] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8392] setpgid(0, 0 [pid 8391] <... openat resumed>) = 3 [pid 8392] <... setpgid resumed>) = 0 [pid 8391] write(3, "1000", 4 [pid 8392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8391] <... write resumed>) = 4 [pid 8387] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8387] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8392] <... openat resumed>) = 3 [pid 8391] close(3) = 0 [pid 8391] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8392] write(3, "1000", 4) = 4 [pid 8392] close(3) = 0 [pid 8391] memfd_create("syzkaller", 0 [pid 8392] symlink("/dev/binderfs", "./binderfs" [pid 8391] <... memfd_create resumed>) = 3 [pid 8392] <... symlink resumed>) = 0 [pid 8392] memfd_create("syzkaller", 0 [pid 8391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8392] <... memfd_create resumed>) = 3 [pid 8392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 305.268136][ T8390] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] newfstatat(AT_FDCWD, "./333/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8387] <... open resumed>) = 4 [pid 8387] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8387] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] openat(AT_FDCWD, "./333/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8387] <... mmap resumed>) = 0x20000000 [pid 5064] <... openat resumed>) = 4 [pid 5064] newfstatat(4, "", [pid 8389] <... write resumed>) = 2097152 [pid 8387] ftruncate(4, 33587195 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, [pid 8387] <... ftruncate resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8387] unlink("./bus" [pid 5064] getdents64(4, [pid 8389] munmap(0x7f41e0600000, 138412032 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8389] <... munmap resumed>) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./333/file0") = 0 [pid 5064] getdents64(3, [pid 8387] <... unlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8387] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] close(3 [pid 8387] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] <... close resumed>) = 0 [pid 8387] exit_group(0) = ? [pid 8391] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8389] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] rmdir("./333") = 0 [pid 5064] mkdir("./334", 0777 [pid 8389] <... openat resumed>) = 4 [pid 5064] <... mkdir resumed>) = 0 [pid 8389] ioctl(4, LOOP_SET_FD, 3 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8387] +++ exited with 0 +++ [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8387, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 8389] <... ioctl resumed>) = 0 [pid 8392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] <... restart_syscall resumed>) = 0 [pid 5061] umount2("./334", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./334/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8389] close(3 [pid 5061] newfstatat(AT_FDCWD, "./334/binderfs", [pid 8389] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8389] close(4 [pid 5061] unlink("./334/binderfs" [pid 8389] <... close resumed>) = 0 [pid 8391] <... write resumed>) = 2097152 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8389] mkdir("./file0", 0777) = 0 [pid 8391] munmap(0x7f41e0600000, 138412032 [pid 8389] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8391] <... munmap resumed>) = 0 [pid 8391] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8392] <... write resumed>) = 2097152 [ 305.373747][ T8389] loop2: detected capacity change from 0 to 4096 [pid 8391] <... openat resumed>) = 4 [pid 8392] munmap(0x7f41e0600000, 138412032 [pid 5061] <... umount2 resumed>) = 0 [pid 8391] ioctl(4, LOOP_SET_FD, 3 [pid 8392] <... munmap resumed>) = 0 [pid 8392] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5061] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./334/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8392] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./334/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8389] <... mount resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5061] getdents64(4, [pid 8389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./334/file0" [pid 8389] <... openat resumed>) = 3 [pid 5061] <... rmdir resumed>) = 0 [pid 8389] chdir("./file0" [pid 5061] getdents64(3, [pid 8389] <... chdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8391] <... ioctl resumed>) = 0 [pid 8389] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] close(3 [pid 8391] close(3 [pid 8389] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... close resumed>) = 0 [pid 8391] <... close resumed>) = 0 [pid 8389] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] rmdir("./334") = 0 [pid 8392] <... ioctl resumed>) = 0 [pid 8391] close(4 [pid 5061] mkdir("./335", 0777 [pid 8391] <... close resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 8391] mkdir("./file0", 0777 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8391] <... mkdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8391] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] close(3 [pid 8392] close(3) = 0 [pid 5064] <... close resumed>) = 0 [pid 8392] close(4 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8392] <... close resumed>) = 0 [pid 8392] mkdir("./file0", 0777 [pid 8389] <... open resumed>) = 4 [pid 8389] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000./strace-static-x86_64: Process 8395 attached [pid 8392] <... mkdir resumed>) = 0 [pid 8389] <... open resumed>) = 5 [ 305.444185][ T8391] loop1: detected capacity change from 0 to 4096 [ 305.457853][ T8393] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 305.468822][ T8392] loop4: detected capacity change from 0 to 4096 [pid 8395] set_robust_list(0x55555745a660, 24 [pid 8392] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8395] <... set_robust_list resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8395 [pid 8395] chdir("./334") = 0 [pid 8395] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8389] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8391] <... mount resumed>) = 0 [pid 8391] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8391] chdir("./file0") = 0 [pid 8391] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8395] setpgid(0, 0 [pid 8391] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8389] ftruncate(4, 33587195 [pid 8395] <... setpgid resumed>) = 0 [pid 8395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8391] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8395] <... openat resumed>) = 3 [pid 8395] write(3, "1000", 4) = 4 [pid 8395] close(3) = 0 [pid 8391] <... open resumed>) = 4 [pid 8391] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8395] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8391] <... open resumed>) = 5 [pid 8391] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8389] <... ftruncate resumed>) = 0 [pid 8395] <... memfd_create resumed>) = 3 [pid 8395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8391] unlink("./bus" [ 305.527075][ T8394] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8389] unlink("./bus" [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 8389] <... unlink resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8389] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8389] exit_group(0./strace-static-x86_64: Process 8397 attached [pid 8391] <... unlink resumed>) = 0 [pid 8389] <... exit_group resumed>) = ? [pid 8397] set_robust_list(0x55555745a660, 24 [pid 8391] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8397 [pid 8391] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8391] exit_group(0) = ? [pid 8397] <... set_robust_list resumed>) = 0 [pid 8397] chdir("./335" [pid 8392] <... mount resumed>) = 0 [pid 8397] <... chdir resumed>) = 0 [pid 8392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8397] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8392] <... openat resumed>) = 3 [pid 8391] +++ exited with 0 +++ [pid 8392] chdir("./file0" [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8391, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 8392] <... chdir resumed>) = 0 [pid 8389] +++ exited with 0 +++ [pid 5062] <... restart_syscall resumed>) = 0 [pid 8392] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8397] <... prctl resumed>) = 0 [pid 8397] setpgid(0, 0 [pid 5062] umount2("./328", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8397] <... setpgid resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8389, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} --- [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8392] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] umount2("./329", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8397] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8397] write(3, "1000", 4 [pid 5063] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... openat resumed>) = 3 [pid 8397] <... write resumed>) = 4 [pid 5062] newfstatat(3, "", [pid 8397] close(3 [pid 8392] <... open resumed>) = 4 [pid 5063] <... openat resumed>) = 3 [pid 8392] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] newfstatat(3, "", [pid 8397] <... close resumed>) = 0 [pid 8392] <... open resumed>) = 5 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8397] symlink("/dev/binderfs", "./binderfs" [pid 8392] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8397] <... symlink resumed>) = 0 [pid 5062] getdents64(3, [pid 8397] memfd_create("syzkaller", 0 [pid 8392] <... mmap resumed>) = 0x20000000 [pid 5063] getdents64(3, [pid 8397] <... memfd_create resumed>) = 3 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [ 305.581956][ T8396] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8392] ftruncate(4, 33587195 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] umount2("./329/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./328/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./329/binderfs", [pid 8397] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./329/binderfs" [pid 8392] <... ftruncate resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./328/binderfs", [pid 5063] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8392] unlink("./bus" [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./328/binderfs") = 0 [pid 5062] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8392] <... unlink resumed>) = 0 [pid 8392] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8392] exit_group(0) = ? [pid 8395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8392] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8392, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5062] <... umount2 resumed>) = 0 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5065] umount2("./327", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./327/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./328/file0", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] newfstatat(AT_FDCWD, "./327/binderfs", [pid 5062] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./327/binderfs" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... unlink resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./328/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(4, "", [pid 5065] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./329/file0", [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./328/file0" [pid 5065] newfstatat(AT_FDCWD, "./327/file0", [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] close(3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./329/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "./327/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 4 [pid 5062] rmdir("./328" [pid 5065] newfstatat(4, "", [pid 5063] newfstatat(4, "", [pid 5062] <... rmdir resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, [pid 5063] getdents64(4, [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] mkdir("./329", 0777 [pid 5065] getdents64(4, [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(4, [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] close(4 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 5063] close(4 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5065] rmdir("./327/file0" [pid 5063] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5063] rmdir("./329/file0") = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(3, [pid 5065] close(3 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] rmdir("./329") = 0 [pid 5065] rmdir("./327" [pid 5063] mkdir("./330", 0777 [pid 5065] <... rmdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 8395] <... write resumed>) = 2097152 [pid 5065] mkdir("./328", 0777 [pid 8395] munmap(0x7f41e0600000, 138412032 [pid 8397] <... write resumed>) = 2097152 [pid 5065] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8397] munmap(0x7f41e0600000, 138412032 [pid 5065] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8395] <... munmap resumed>) = 0 [pid 8397] <... munmap resumed>) = 0 [pid 8397] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8395] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8397] <... openat resumed>) = 4 [pid 8395] <... openat resumed>) = 4 [pid 8395] ioctl(4, LOOP_SET_FD, 3 [pid 8397] ioctl(4, LOOP_SET_FD, 3 [pid 8395] <... ioctl resumed>) = 0 [pid 8395] close(3) = 0 [pid 8395] close(4 [pid 8397] <... ioctl resumed>) = 0 [pid 8395] <... close resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8397] close(3 [pid 8395] mkdir("./file0", 0777 [pid 5063] <... ioctl resumed>) = 0 [pid 8397] <... close resumed>) = 0 [pid 8395] <... mkdir resumed>) = 0 [pid 8397] close(4 [pid 8395] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8397] <... close resumed>) = 0 [pid 8397] mkdir("./file0", 0777 [pid 5062] close(3 [pid 8397] <... mkdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [ 305.764317][ T8395] loop3: detected capacity change from 0 to 4096 [ 305.764715][ T8397] loop0: detected capacity change from 0 to 4096 [pid 8397] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] close(3 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8398 attached , child_tidptr=0x55555745a650) = 8399 ./strace-static-x86_64: Process 8399 attached [pid 8398] set_robust_list(0x55555745a660, 24 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8398 [pid 8398] <... set_robust_list resumed>) = 0 [pid 8399] set_robust_list(0x55555745a660, 24 [pid 8398] chdir("./329" [pid 5065] <... ioctl resumed>) = 0 [pid 8399] <... set_robust_list resumed>) = 0 [pid 8398] <... chdir resumed>) = 0 [pid 8398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8398] setpgid(0, 0) = 0 [pid 8398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8399] chdir("./330") = 0 [pid 8398] <... openat resumed>) = 3 [pid 8399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8399] setpgid(0, 0) = 0 [pid 8398] write(3, "1000", 4) = 4 [pid 8398] close(3) = 0 [pid 8399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8398] symlink("/dev/binderfs", "./binderfs" [pid 8399] <... openat resumed>) = 3 [pid 8398] <... symlink resumed>) = 0 [pid 8399] write(3, "1000", 4 [pid 8398] memfd_create("syzkaller", 0 [pid 5065] close(3 [pid 8398] <... memfd_create resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 8399] <... write resumed>) = 4 [pid 8398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8399] close(3) = 0 [pid 8398] <... mmap resumed>) = 0x7f41e0600000 [pid 8399] symlink("/dev/binderfs", "./binderfs" [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8399] <... symlink resumed>) = 0 [pid 8399] memfd_create("syzkaller", 0 [pid 8395] <... mount resumed>) = 0 [pid 8399] <... memfd_create resumed>) = 3 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8402 [pid 8395] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8397] <... mount resumed>) = 0 [pid 8399] <... mmap resumed>) = 0x7f41e0600000 [pid 8397] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8395] <... openat resumed>) = 3 [pid 8395] chdir("./file0") = 0 [pid 8395] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 8402 attached [pid 8395] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8402] set_robust_list(0x55555745a660, 24 [pid 8397] <... openat resumed>) = 3 [pid 8402] <... set_robust_list resumed>) = 0 [pid 8402] chdir("./328" [pid 8397] chdir("./file0") = 0 [pid 8402] <... chdir resumed>) = 0 [pid 8397] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8402] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8397] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8397] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8402] <... prctl resumed>) = 0 [pid 8402] setpgid(0, 0) = 0 [ 305.870295][ T8400] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 305.883495][ T8401] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8395] <... open resumed>) = 4 [pid 8402] write(3, "1000", 4 [pid 8395] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8402] <... write resumed>) = 4 [pid 8395] <... open resumed>) = 5 [pid 8402] close(3 [pid 8395] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8402] <... close resumed>) = 0 [pid 8399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8395] <... mmap resumed>) = 0x20000000 [pid 8402] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8402] memfd_create("syzkaller", 0) = 3 [pid 8398] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8395] ftruncate(4, 33587195 [pid 8397] <... open resumed>) = 4 [pid 8402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8397] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8395] <... ftruncate resumed>) = 0 [pid 8402] <... mmap resumed>) = 0x7f41e0600000 [pid 8397] <... open resumed>) = 5 [pid 8395] unlink("./bus" [pid 8399] <... write resumed>) = 2097152 [pid 8397] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8399] munmap(0x7f41e0600000, 138412032 [pid 8397] <... mmap resumed>) = 0x20000000 [pid 8395] <... unlink resumed>) = 0 [pid 8395] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8395] exit_group(0) = ? [pid 8399] <... munmap resumed>) = 0 [pid 8397] ftruncate(4, 33587195 [pid 8399] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8399] ioctl(4, LOOP_SET_FD, 3 [pid 8395] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8395, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./334", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./334/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./334/binderfs", [pid 8399] <... ioctl resumed>) = 0 [pid 8397] <... ftruncate resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./334/binderfs") = 0 [pid 5064] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8397] unlink("./bus" [pid 8399] close(3 [pid 8402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8399] <... close resumed>) = 0 [pid 8399] close(4 [pid 8397] <... unlink resumed>) = 0 [pid 8397] sendfile(-1, -1, NULL, 281474978811909 [pid 8399] <... close resumed>) = 0 [pid 8397] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8399] mkdir("./file0", 0777 [pid 8398] <... write resumed>) = 2097152 [pid 8397] exit_group(0 [pid 5064] <... umount2 resumed>) = 0 [pid 8399] <... mkdir resumed>) = 0 [pid 8399] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8398] munmap(0x7f41e0600000, 138412032 [pid 8397] <... exit_group resumed>) = ? [pid 5064] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./334/file0", [pid 8398] <... munmap resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8398] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8398] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 305.999982][ T8399] loop2: detected capacity change from 0 to 4096 [pid 5064] openat(AT_FDCWD, "./334/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, [pid 8397] +++ exited with 0 +++ [pid 8398] <... ioctl resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8398] close(3 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8397, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8398] <... close resumed>) = 0 [pid 5064] getdents64(4, [pid 8398] close(4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8398] <... close resumed>) = 0 [pid 8398] mkdir("./file0", 0777) = 0 [pid 8398] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] umount2("./335", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8402] <... write resumed>) = 2097152 [pid 5064] close(4) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5064] rmdir("./334/file0") = 0 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 5061] getdents64(3, [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] close(3 [pid 5061] umount2("./335/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8402] munmap(0x7f41e0600000, 138412032 [pid 5064] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] rmdir("./334" [pid 5061] newfstatat(AT_FDCWD, "./335/binderfs", [pid 8402] <... munmap resumed>) = 0 [pid 8399] <... mount resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 8402] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8399] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8402] <... openat resumed>) = 4 [ 306.055213][ T8398] loop1: detected capacity change from 0 to 4096 [ 306.086617][ T8403] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8399] <... openat resumed>) = 3 [pid 8402] ioctl(4, LOOP_SET_FD, 3 [pid 8399] chdir("./file0" [pid 5064] mkdir("./335", 0777 [pid 5061] unlink("./335/binderfs" [pid 8399] <... chdir resumed>) = 0 [pid 8399] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8399] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 8399] <... open resumed>) = 4 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8399] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8402] <... ioctl resumed>) = 0 [pid 8399] <... open resumed>) = 5 [pid 8402] close(3) = 0 [pid 8399] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8402] close(4 [pid 8399] <... mmap resumed>) = 0x20000000 [pid 8402] <... close resumed>) = 0 [pid 8402] mkdir("./file0", 0777) = 0 [pid 8402] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8399] ftruncate(4, 33587195 [pid 8398] <... mount resumed>) = 0 [pid 8398] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8398] chdir("./file0") = 0 [pid 8398] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8398] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8399] <... ftruncate resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8399] unlink("./bus" [pid 8398] <... open resumed>) = 4 [pid 5061] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8398] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./335/file0", [pid 8398] <... open resumed>) = 5 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./335/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8398] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... openat resumed>) = 4 [pid 8398] <... mmap resumed>) = 0x20000000 [ 306.115390][ T8402] loop4: detected capacity change from 0 to 4096 [ 306.138646][ T8404] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] newfstatat(4, "", [pid 8399] <... unlink resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] close(3 [pid 5061] getdents64(4, [pid 5064] <... close resumed>) = 0 [pid 8399] sendfile(-1, -1, NULL, 281474978811909 [pid 8398] ftruncate(4, 33587195 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8399] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8399] exit_group(0) = ? [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 ./strace-static-x86_64: Process 8405 attached [pid 8398] <... ftruncate resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8405 [pid 5061] rmdir("./335/file0" [pid 8405] set_robust_list(0x55555745a660, 24 [pid 8398] unlink("./bus" [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 8399] +++ exited with 0 +++ [pid 8405] <... set_robust_list resumed>) = 0 [pid 8405] chdir("./335") = 0 [pid 8405] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8405] setpgid(0, 0) = 0 [pid 8405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8405] write(3, "1000", 4) = 4 [pid 8405] close(3) = 0 [pid 8405] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8405] memfd_create("syzkaller", 0) = 3 [pid 8405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./335") = 0 [pid 8398] <... unlink resumed>) = 0 [pid 5061] mkdir("./336", 0777 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8399, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8398] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8398] exit_group(0) = ? [pid 5063] umount2("./330", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... mkdir resumed>) = 0 [pid 8402] <... mount resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8402] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... openat resumed>) = 3 [pid 8402] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8402] chdir("./file0") = 0 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8402] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] getdents64(3, [pid 8402] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8402] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] umount2("./330/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8398] +++ exited with 0 +++ [pid 5063] newfstatat(AT_FDCWD, "./330/binderfs", [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8398, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./330/binderfs" [pid 5062] umount2("./329", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8402] <... open resumed>) = 4 [pid 5063] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", [pid 8402] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8402] <... open resumed>) = 5 [ 306.218960][ T8406] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./329/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8402] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8402] <... mmap resumed>) = 0x20000000 [pid 5063] <... umount2 resumed>) = 0 [pid 8402] ftruncate(4, 33587195 [pid 5063] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./329/binderfs", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./330/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5062] unlink("./329/binderfs" [pid 5061] close(3 [pid 5062] <... unlink resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8402] <... ftruncate resumed>) = 0 [pid 8402] unlink("./bus" [pid 5062] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./330/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./330/file0") = 0 [pid 8402] <... unlink resumed>) = 0 [pid 8402] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8402] exit_group(0) = ? [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8407 [pid 5063] close(3) = 0 [pid 5063] rmdir("./330"./strace-static-x86_64: Process 8407 attached ) = 0 [pid 5063] mkdir("./331", 0777 [pid 8407] set_robust_list(0x55555745a660, 24 [pid 5063] <... mkdir resumed>) = 0 [pid 8407] <... set_robust_list resumed>) = 0 [pid 8407] chdir("./336") = 0 [pid 8407] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8405] <... write resumed>) = 2097152 [pid 8402] +++ exited with 0 +++ [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... umount2 resumed>) = 0 [pid 8407] setpgid(0, 0 [pid 8405] munmap(0x7f41e0600000, 138412032 [pid 5063] <... openat resumed>) = 3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8402, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8407] <... setpgid resumed>) = 0 [pid 8407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] umount2("./328", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8407] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8405] <... munmap resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8407] write(3, "1000", 4 [pid 8405] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 3 [pid 8407] <... write resumed>) = 4 [pid 8405] <... openat resumed>) = 4 [pid 5065] newfstatat(3, "", [pid 5062] newfstatat(AT_FDCWD, "./329/file0", [pid 8407] close(3 [pid 8405] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8407] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./328/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./328/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8407] symlink("/dev/binderfs", "./binderfs" [pid 8405] <... ioctl resumed>) = 0 [pid 5062] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] unlink("./328/binderfs" [pid 8407] <... symlink resumed>) = 0 [pid 8405] close(3 [pid 5065] <... unlink resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8405] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./329/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8407] memfd_create("syzkaller", 0 [pid 8405] close(4 [pid 5065] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8407] <... memfd_create resumed>) = 3 [pid 8405] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 8407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8405] mkdir("./file0", 0777 [pid 5062] newfstatat(4, "", [pid 8407] <... mmap resumed>) = 0x7f41e0600000 [pid 8405] <... mkdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./329/file0") = 0 [pid 8405] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./329") = 0 [pid 5062] mkdir("./330", 0777 [pid 5065] <... umount2 resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5065] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 306.357915][ T8405] loop3: detected capacity change from 0 to 4096 [pid 5065] newfstatat(AT_FDCWD, "./328/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./328/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] close(4) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8409 ./strace-static-x86_64: Process 8409 attached [pid 5062] <... ioctl resumed>) = 0 [pid 8409] set_robust_list(0x55555745a660, 24 [pid 8405] <... mount resumed>) = 0 [pid 5065] rmdir("./328/file0" [pid 8409] <... set_robust_list resumed>) = 0 [pid 8405] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... rmdir resumed>) = 0 [pid 8409] chdir("./331" [pid 8405] <... openat resumed>) = 3 [pid 8409] <... chdir resumed>) = 0 [pid 8405] chdir("./file0" [pid 8409] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8405] <... chdir resumed>) = 0 [pid 5062] close(3 [pid 8409] <... prctl resumed>) = 0 [pid 8405] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] getdents64(3, [pid 8409] setpgid(0, 0 [pid 8405] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... close resumed>) = 0 [pid 8409] <... setpgid resumed>) = 0 [pid 8405] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8409] <... openat resumed>) = 3 [pid 5065] close(3 [pid 8409] write(3, "1000", 4 [pid 5065] <... close resumed>) = 0 ./strace-static-x86_64: Process 8410 attached [pid 8409] <... write resumed>) = 4 [ 306.439935][ T8408] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] rmdir("./328" [pid 8410] set_robust_list(0x55555745a660, 24 [pid 8409] close(3 [pid 5065] <... rmdir resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8410 [pid 8409] <... close resumed>) = 0 [pid 8405] <... open resumed>) = 4 [pid 8409] symlink("/dev/binderfs", "./binderfs" [pid 8405] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8410] <... set_robust_list resumed>) = 0 [pid 8409] <... symlink resumed>) = 0 [pid 8405] <... open resumed>) = 5 [pid 5065] mkdir("./329", 0777 [pid 8410] chdir("./330" [pid 8409] memfd_create("syzkaller", 0 [pid 8405] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... mkdir resumed>) = 0 [pid 8410] <... chdir resumed>) = 0 [pid 8409] <... memfd_create resumed>) = 3 [pid 8407] <... write resumed>) = 2097152 [pid 8405] <... mmap resumed>) = 0x20000000 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8410] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8410] <... prctl resumed>) = 0 [pid 8409] <... mmap resumed>) = 0x7f41e0600000 [pid 8407] munmap(0x7f41e0600000, 138412032 [pid 8405] ftruncate(4, 33587195 [pid 5065] <... openat resumed>) = 3 [pid 8410] setpgid(0, 0) = 0 [pid 8410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8410] <... openat resumed>) = 3 [pid 8410] write(3, "1000", 4) = 4 [pid 8410] close(3) = 0 [pid 8410] symlink("/dev/binderfs", "./binderfs" [pid 8407] <... munmap resumed>) = 0 [pid 8405] <... ftruncate resumed>) = 0 [pid 8410] <... symlink resumed>) = 0 [pid 8410] memfd_create("syzkaller", 0) = 3 [pid 8410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8407] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8410] <... mmap resumed>) = 0x7f41e0600000 [pid 8407] <... openat resumed>) = 4 [pid 8405] unlink("./bus" [pid 8407] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8407] close(3 [pid 8405] <... unlink resumed>) = 0 [pid 8405] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8405] exit_group(0) = ? [pid 8407] <... close resumed>) = 0 [pid 8410] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8407] close(4) = 0 [pid 8407] mkdir("./file0", 0777) = 0 [pid 8405] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8405, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5064] umount2("./335", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8407] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... openat resumed>) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./335/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./335/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./335/binderfs") = 0 [ 306.531343][ T8407] loop0: detected capacity change from 0 to 4096 [pid 5064] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8409] <... write resumed>) = 2097152 [pid 8409] munmap(0x7f41e0600000, 138412032 [pid 5065] <... ioctl resumed>) = 0 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8412 attached [pid 8412] set_robust_list(0x55555745a660, 24) = 0 [pid 8412] chdir("./329" [pid 8410] <... write resumed>) = 2097152 [pid 8409] <... munmap resumed>) = 0 [pid 8407] <... mount resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8412 [pid 8412] <... chdir resumed>) = 0 [pid 8407] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8412] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8410] munmap(0x7f41e0600000, 138412032 [pid 8407] <... openat resumed>) = 3 [pid 8407] chdir("./file0" [pid 8412] <... prctl resumed>) = 0 [pid 8410] <... munmap resumed>) = 0 [pid 8409] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8407] <... chdir resumed>) = 0 [pid 8407] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8412] setpgid(0, 0 [pid 5064] <... umount2 resumed>) = 0 [pid 8407] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8412] <... setpgid resumed>) = 0 [pid 8409] <... openat resumed>) = 4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 306.601552][ T8411] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] newfstatat(AT_FDCWD, "./335/file0", [pid 8409] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8412] <... openat resumed>) = 3 [pid 8410] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8410] <... openat resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./335/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8410] ioctl(4, LOOP_SET_FD, 3 [pid 5064] getdents64(4, [pid 8412] write(3, "1000", 4) = 4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8412] close(3) = 0 [pid 8412] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8412] memfd_create("syzkaller", 0) = 3 [pid 5064] getdents64(4, [pid 8412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8412] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] close(4 [pid 8410] <... ioctl resumed>) = 0 [pid 8409] <... ioctl resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 8410] close(3 [pid 8409] close(3 [pid 8407] <... open resumed>) = 4 [pid 5064] rmdir("./335/file0" [pid 8410] <... close resumed>) = 0 [pid 8409] <... close resumed>) = 0 [pid 8407] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... rmdir resumed>) = 0 [pid 8410] close(4 [pid 8409] close(4 [pid 8407] <... open resumed>) = 5 [pid 5064] getdents64(3, [pid 8409] <... close resumed>) = 0 [pid 8410] <... close resumed>) = 0 [pid 8409] mkdir("./file0", 0777 [pid 8407] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8409] <... mkdir resumed>) = 0 [pid 5064] close(3 [pid 8410] mkdir("./file0", 0777 [pid 8409] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8407] <... mmap resumed>) = 0x20000000 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./335" [pid 8410] <... mkdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 8407] ftruncate(4, 33587195 [pid 5064] mkdir("./336", 0777 [pid 8410] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8407] <... ftruncate resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8407] unlink("./bus" [pid 5064] <... openat resumed>) = 3 [ 306.643426][ T8409] loop2: detected capacity change from 0 to 4096 [ 306.662857][ T8410] loop1: detected capacity change from 0 to 4096 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8412] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8410] <... mount resumed>) = 0 [pid 8407] <... unlink resumed>) = 0 [pid 8410] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8407] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8410] <... openat resumed>) = 3 [pid 8407] exit_group(0) = ? [pid 8410] chdir("./file0") = 0 [pid 8410] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8410] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8407] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8407, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5061] umount2("./336", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8410] <... open resumed>) = 4 [pid 8410] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] umount2("./336/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8409] <... mount resumed>) = 0 [pid 8409] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8409] chdir("./file0") = 0 [pid 8409] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 306.724337][ T8413] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 306.753187][ T8414] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8409] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8410] <... open resumed>) = 5 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8410] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] newfstatat(AT_FDCWD, "./336/binderfs", [pid 8410] <... mmap resumed>) = 0x20000000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8412] <... write resumed>) = 2097152 [pid 8409] <... open resumed>) = 4 [pid 5061] unlink("./336/binderfs" [pid 8412] munmap(0x7f41e0600000, 138412032 [pid 8410] ftruncate(4, 33587195 [pid 8409] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... ioctl resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 8409] <... open resumed>) = 5 [pid 5061] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8409] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8410] <... ftruncate resumed>) = 0 ./strace-static-x86_64: Process 8415 attached [pid 8409] ftruncate(4, 33587195 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8415 [pid 8415] set_robust_list(0x55555745a660, 24 [pid 8412] <... munmap resumed>) = 0 [pid 8415] <... set_robust_list resumed>) = 0 [pid 8412] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... umount2 resumed>) = 0 [pid 8412] <... openat resumed>) = 4 [pid 8409] <... ftruncate resumed>) = 0 [pid 8412] ioctl(4, LOOP_SET_FD, 3 [pid 5061] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8410] unlink("./bus" [pid 8415] chdir("./336" [pid 8412] <... ioctl resumed>) = 0 [pid 8409] unlink("./bus" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./336/file0", [pid 8415] <... chdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8415] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8415] setpgid(0, 0) = 0 [pid 8415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./336/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8415] <... openat resumed>) = 3 [pid 8412] close(3 [pid 5061] <... openat resumed>) = 4 [pid 8415] write(3, "1000", 4 [pid 8412] <... close resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 8412] close(4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8412] <... close resumed>) = 0 [pid 8415] <... write resumed>) = 4 [pid 8410] <... unlink resumed>) = 0 [pid 8409] <... unlink resumed>) = 0 [pid 5061] getdents64(4, [pid 8410] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8412] mkdir("./file0", 0777 [pid 8415] close(3 [pid 8410] exit_group(0 [pid 8409] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] getdents64(4, [pid 8410] <... exit_group resumed>) = ? [pid 8415] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 8412] <... mkdir resumed>) = 0 [pid 8409] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] <... close resumed>) = 0 [pid 8415] symlink("/dev/binderfs", "./binderfs" [pid 8412] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8409] exit_group(0 [pid 5061] rmdir("./336/file0" [pid 8409] <... exit_group resumed>) = ? [pid 5061] <... rmdir resumed>) = 0 [pid 8410] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8410, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 8415] <... symlink resumed>) = 0 [pid 5062] <... restart_syscall resumed>) = 0 [pid 5062] umount2("./330", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./330/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./330/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./330/binderfs") = 0 [pid 5062] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(3, [pid 8415] memfd_create("syzkaller", 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8415] <... memfd_create resumed>) = 3 [pid 5061] close(3 [ 306.847120][ T8412] loop4: detected capacity change from 0 to 4096 [pid 8415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... close resumed>) = 0 [pid 8415] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] rmdir("./336" [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./337", 0777 [pid 5062] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... mkdir resumed>) = 0 [pid 8409] +++ exited with 0 +++ [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8409, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5062] newfstatat(AT_FDCWD, "./330/file0", [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5062] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./331", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./330/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 4 [pid 5063] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] newfstatat(4, "", [pid 5063] <... openat resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] newfstatat(3, "", [pid 5062] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(3, [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] close(4 [pid 5063] umount2("./331/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] rmdir("./330/file0" [pid 5063] newfstatat(AT_FDCWD, "./331/binderfs", [pid 5062] <... rmdir resumed>) = 0 [pid 8415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] getdents64(3, [pid 5063] unlink("./331/binderfs" [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./330") = 0 [pid 5062] mkdir("./331", 0777) = 0 [pid 8412] <... mount resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 8412] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8412] <... openat resumed>) = 3 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8412] chdir("./file0") = 0 [pid 8412] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8415] <... write resumed>) = 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8415] munmap(0x7f41e0600000, 138412032 [pid 8412] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8415] <... munmap resumed>) = 0 [pid 8412] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./331/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 306.934536][ T8416] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8415] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... ioctl resumed>) = 0 [pid 8415] <... openat resumed>) = 4 [pid 8415] ioctl(4, LOOP_SET_FD, 3 [pid 5063] openat(AT_FDCWD, "./331/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] close(3 [pid 5063] <... openat resumed>) = 4 [pid 5061] <... close resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8417 [pid 5063] getdents64(4, ./strace-static-x86_64: Process 8417 attached [pid 8415] <... ioctl resumed>) = 0 [pid 8417] set_robust_list(0x55555745a660, 24 [pid 8415] close(3 [pid 8417] <... set_robust_list resumed>) = 0 [pid 8415] <... close resumed>) = 0 [pid 8417] chdir("./337" [pid 8415] close(4 [pid 8417] <... chdir resumed>) = 0 [pid 8415] <... close resumed>) = 0 [pid 8417] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8415] mkdir("./file0", 0777 [pid 8417] <... prctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8417] setpgid(0, 0 [pid 8415] <... mkdir resumed>) = 0 [pid 8412] <... open resumed>) = 4 [pid 5063] close(4 [pid 8417] <... setpgid resumed>) = 0 [pid 8415] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8412] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8412] <... open resumed>) = 5 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./331/file0") = 0 [pid 8417] <... openat resumed>) = 3 [pid 8412] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] getdents64(3, [pid 8412] <... mmap resumed>) = 0x20000000 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./331" [pid 8417] write(3, "1000", 4 [pid 8412] ftruncate(4, 33587195 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./332", 0777 [pid 8417] <... write resumed>) = 4 [pid 8417] close(3) = 0 [pid 8417] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8412] <... ftruncate resumed>) = 0 [ 307.009587][ T8415] loop3: detected capacity change from 0 to 4096 [pid 5063] <... mkdir resumed>) = 0 [pid 8417] memfd_create("syzkaller", 0 [pid 8415] <... mount resumed>) = 0 [pid 8412] unlink("./bus" [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5062] <... ioctl resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8417] <... memfd_create resumed>) = 3 [pid 8415] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8412] <... unlink resumed>) = 0 [pid 8412] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8412] exit_group(0) = ? [pid 8417] <... mmap resumed>) = 0x7f41e0600000 [pid 8415] <... openat resumed>) = 3 [pid 8415] chdir("./file0" [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8419 attached [pid 8415] <... chdir resumed>) = 0 [pid 8412] +++ exited with 0 +++ [pid 8419] set_robust_list(0x55555745a660, 24 [pid 8415] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8412, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8419 [pid 8419] <... set_robust_list resumed>) = 0 [pid 8415] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8419] chdir("./331" [pid 8417] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8415] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8419] <... chdir resumed>) = 0 [pid 5065] umount2("./329", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8419] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8419] <... prctl resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8419] setpgid(0, 0 [pid 5065] <... openat resumed>) = 3 [ 307.057541][ T8418] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8419] <... setpgid resumed>) = 0 [pid 5065] newfstatat(3, "", [pid 8419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8419] <... openat resumed>) = 3 [pid 5065] umount2("./329/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8415] <... open resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8419] write(3, "1000", 4 [pid 8415] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8419] <... write resumed>) = 4 [pid 5065] newfstatat(AT_FDCWD, "./329/binderfs", [pid 8419] close(3 [pid 8415] <... open resumed>) = 5 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8415] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8419] <... close resumed>) = 0 [pid 5065] unlink("./329/binderfs" [pid 8419] symlink("/dev/binderfs", "./binderfs" [pid 8415] <... mmap resumed>) = 0x20000000 [pid 5065] <... unlink resumed>) = 0 [pid 8415] ftruncate(4, 33587195 [pid 8419] <... symlink resumed>) = 0 [pid 5065] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8415] <... ftruncate resumed>) = 0 [pid 8415] unlink("./bus" [pid 8419] memfd_create("syzkaller", 0) = 3 [pid 8415] <... unlink resumed>) = 0 [pid 8419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8415] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8419] <... mmap resumed>) = 0x7f41e0600000 [pid 8415] exit_group(0) = ? [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8415] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8415, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./336", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8417] <... write resumed>) = 2097152 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] umount2("./336/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8420 attached ) = -1 EINVAL (Invalid argument) [pid 8420] set_robust_list(0x55555745a660, 24) = 0 [pid 8417] munmap(0x7f41e0600000, 138412032 [pid 8420] chdir("./332" [pid 8417] <... munmap resumed>) = 0 [pid 8420] <... chdir resumed>) = 0 [pid 8420] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] newfstatat(AT_FDCWD, "./336/binderfs", [pid 8420] setpgid(0, 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8420] <... setpgid resumed>) = 0 [pid 8420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] unlink("./336/binderfs" [pid 8420] <... openat resumed>) = 3 [pid 5064] <... unlink resumed>) = 0 [pid 8420] write(3, "1000", 4) = 4 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8420 [pid 8420] close(3) = 0 [pid 8417] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8420] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8417] <... openat resumed>) = 4 [pid 5064] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8420] memfd_create("syzkaller", 0 [pid 8417] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... umount2 resumed>) = 0 [pid 8420] <... memfd_create resumed>) = 3 [pid 5065] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8420] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./329/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./329/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8419] <... write resumed>) = 2097152 [pid 5065] <... openat resumed>) = 4 [pid 5064] <... umount2 resumed>) = 0 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./329/file0") = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 8417] <... ioctl resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./329" [pid 8417] close(3 [pid 5065] <... rmdir resumed>) = 0 [pid 8417] <... close resumed>) = 0 [pid 5064] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8417] close(4 [pid 5065] mkdir("./330", 0777 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8417] <... close resumed>) = 0 [pid 8417] mkdir("./file0", 0777 [pid 5064] newfstatat(AT_FDCWD, "./336/file0", [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8417] <... mkdir resumed>) = 0 [pid 5064] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8417] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "./336/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./336/file0" [pid 8419] munmap(0x7f41e0600000, 138412032) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 8419] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] getdents64(3, [pid 8419] <... openat resumed>) = 4 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [ 307.226582][ T8417] loop0: detected capacity change from 0 to 4096 [pid 5064] rmdir("./336" [pid 8420] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8419] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./337", 0777) = 0 [pid 8419] <... ioctl resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8419] close(3 [pid 5064] <... openat resumed>) = 3 [pid 8419] <... close resumed>) = 0 [pid 8419] close(4) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8419] mkdir("./file0", 0777) = 0 [pid 5065] <... ioctl resumed>) = 0 [ 307.289491][ T8419] loop1: detected capacity change from 0 to 4096 [ 307.329360][ T8421] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8419] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, ""./strace-static-x86_64: Process 8422 attached [pid 8422] set_robust_list(0x55555745a660, 24) = 0 [pid 8422] chdir("./330" [pid 8417] <... mount resumed>) = 0 [pid 8417] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8422 [pid 8420] <... write resumed>) = 2097152 [pid 8417] <... openat resumed>) = 3 [pid 8417] chdir("./file0") = 0 [pid 8422] <... chdir resumed>) = 0 [pid 8417] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8422] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8417] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8422] <... prctl resumed>) = 0 [pid 8417] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8422] setpgid(0, 0 [pid 8419] <... mount resumed>) = 0 [pid 8422] <... setpgid resumed>) = 0 [pid 8420] munmap(0x7f41e0600000, 138412032) = 0 [pid 8422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 307.361189][ T8423] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8419] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8422] <... openat resumed>) = 3 [pid 8420] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8419] <... openat resumed>) = 3 [pid 8422] write(3, "1000", 4 [pid 8420] <... openat resumed>) = 4 [pid 8419] chdir("./file0" [pid 8422] <... write resumed>) = 4 [pid 8420] ioctl(4, LOOP_SET_FD, 3 [pid 8419] <... chdir resumed>) = 0 [pid 8422] close(3 [pid 8419] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] <... ioctl resumed>) = 0 [pid 8422] <... close resumed>) = 0 [pid 8419] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8417] <... open resumed>) = 4 [pid 5064] close(3 [pid 8422] symlink("/dev/binderfs", "./binderfs" [pid 8419] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... close resumed>) = 0 [pid 8422] <... symlink resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8422] memfd_create("syzkaller", 0 [pid 8417] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000./strace-static-x86_64: Process 8424 attached [pid 8422] <... memfd_create resumed>) = 3 [pid 8417] <... open resumed>) = 5 [pid 8422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8424] set_robust_list(0x55555745a660, 24 [pid 8422] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8424 [pid 8424] <... set_robust_list resumed>) = 0 [pid 8420] <... ioctl resumed>) = 0 [pid 8419] <... open resumed>) = 4 [pid 8417] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8419] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8419] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8419] ftruncate(4, 33587195 [pid 8420] close(3) = 0 [pid 8417] <... mmap resumed>) = 0x20000000 [pid 8420] close(4 [pid 8424] <... chdir resumed>) = 0 [pid 8420] <... close resumed>) = 0 [pid 8424] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8419] <... ftruncate resumed>) = 0 [pid 8417] ftruncate(4, 33587195 [pid 8424] <... prctl resumed>) = 0 [pid 8420] mkdir("./file0", 0777 [pid 8424] setpgid(0, 0 [pid 8420] <... mkdir resumed>) = 0 [pid 8424] <... setpgid resumed>) = 0 [pid 8424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8417] <... ftruncate resumed>) = 0 [pid 8419] unlink("./bus" [pid 8424] <... openat resumed>) = 3 [pid 8417] unlink("./bus" [pid 8424] write(3, "1000", 4) = 4 [pid 8420] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8424] close(3) = 0 [pid 8424] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8424] memfd_create("syzkaller", 0) = 3 [ 307.402873][ T8420] loop2: detected capacity change from 0 to 4096 [pid 8424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8419] <... unlink resumed>) = 0 [pid 8419] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8419] exit_group(0 [pid 8417] <... unlink resumed>) = 0 [pid 8419] <... exit_group resumed>) = ? [pid 8417] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8417] exit_group(0) = ? [pid 8422] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8419] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8419, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] umount2("./331", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8420] <... mount resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 8420] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8420] <... openat resumed>) = 3 [pid 5062] getdents64(3, [pid 8420] chdir("./file0" [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8420] <... chdir resumed>) = 0 [pid 5062] umount2("./331/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8420] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8420] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] newfstatat(AT_FDCWD, "./331/binderfs", [pid 8420] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./331/binderfs") = 0 [pid 5062] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8417] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8417, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5061] umount2("./337", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [ 307.495947][ T8425] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] umount2("./337/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./337/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./337/binderfs") = 0 [pid 5061] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8424] <... write resumed>) = 2097152 [pid 8422] <... write resumed>) = 2097152 [pid 8420] <... open resumed>) = 4 [pid 5061] <... umount2 resumed>) = 0 [pid 8424] munmap(0x7f41e0600000, 138412032 [pid 8422] munmap(0x7f41e0600000, 138412032 [pid 8420] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./331/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8420] <... open resumed>) = 5 [pid 8424] <... munmap resumed>) = 0 [pid 8422] <... munmap resumed>) = 0 [pid 8420] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8424] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8422] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8424] <... openat resumed>) = 4 [pid 8420] <... mmap resumed>) = 0x20000000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8424] ioctl(4, LOOP_SET_FD, 3 [pid 8422] <... openat resumed>) = 4 [pid 8420] ftruncate(4, 33587195 [pid 5062] openat(AT_FDCWD, "./331/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] newfstatat(AT_FDCWD, "./337/file0", [pid 8422] ioctl(4, LOOP_SET_FD, 3 [pid 8424] <... ioctl resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8424] close(3 [pid 5061] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8424] <... close resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8424] close(4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] openat(AT_FDCWD, "./337/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8424] <... close resumed>) = 0 [pid 8420] <... ftruncate resumed>) = 0 [pid 5062] getdents64(4, [pid 5061] <... openat resumed>) = 4 [pid 8424] mkdir("./file0", 0777 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] newfstatat(4, "", [pid 8424] <... mkdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 5062] getdents64(4, [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8424] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] getdents64(4, [pid 5062] close(4 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8422] <... ioctl resumed>) = 0 [pid 8420] unlink("./bus" [pid 5061] close(4 [pid 8422] close(3 [pid 8420] <... unlink resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8422] <... close resumed>) = 0 [pid 8420] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] rmdir("./331/file0" [pid 5061] rmdir("./337/file0" [pid 8422] close(4 [pid 8420] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8422] <... close resumed>) = 0 [pid 8420] exit_group(0 [pid 5061] getdents64(3, [pid 8422] mkdir("./file0", 0777 [pid 8420] <... exit_group resumed>) = ? [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] getdents64(3, [pid 5061] close(3 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... close resumed>) = 0 [pid 5062] close(3 [pid 5061] rmdir("./337" [pid 5062] <... close resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./338", 0777 [pid 5062] rmdir("./331" [pid 5061] <... mkdir resumed>) = 0 [pid 8422] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8422] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8420] +++ exited with 0 +++ [pid 5061] <... openat resumed>) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8420, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=3 /* 0.03 s */} --- [ 307.587695][ T8424] loop3: detected capacity change from 0 to 4096 [ 307.591266][ T8422] loop4: detected capacity change from 0 to 4096 [pid 5062] mkdir("./332", 0777 [pid 5063] umount2("./332", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 8424] <... mount resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8424] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./332/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8424] <... openat resumed>) = 3 [pid 8424] chdir("./file0") = 0 [pid 8424] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8424] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] newfstatat(AT_FDCWD, "./332/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./332/binderfs" [pid 8422] <... mount resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8424] <... open resumed>) = 4 [pid 8422] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5061] <... ioctl resumed>) = 0 [pid 8422] chdir("./file0" [pid 8424] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8422] <... chdir resumed>) = 0 [pid 8424] <... open resumed>) = 5 [pid 8422] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8422] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] close(3 [pid 8424] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8422] <... open resumed>) = 4 [pid 5061] <... close resumed>) = 0 [ 307.654849][ T8426] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 307.680188][ T8427] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8424] <... mmap resumed>) = 0x20000000 [pid 8422] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8428 ./strace-static-x86_64: Process 8428 attached [pid 8428] set_robust_list(0x55555745a660, 24) = 0 [pid 8428] chdir("./338" [pid 8424] ftruncate(4, 33587195 [pid 8422] <... open resumed>) = 5 [pid 8428] <... chdir resumed>) = 0 [pid 8428] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8428] setpgid(0, 0) = 0 [pid 8424] <... ftruncate resumed>) = 0 [pid 8422] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... umount2 resumed>) = 0 [pid 8428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8424] unlink("./bus" [pid 8422] <... mmap resumed>) = 0x20000000 [pid 5063] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... ioctl resumed>) = 0 [pid 8422] ftruncate(4, 33587195 [pid 8428] write(3, "1000", 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8428] <... write resumed>) = 4 [pid 5063] newfstatat(AT_FDCWD, "./332/file0", [pid 8428] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8428] <... close resumed>) = 0 [pid 8424] <... unlink resumed>) = 0 [pid 8422] <... ftruncate resumed>) = 0 [pid 5063] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(3 [pid 8428] symlink("/dev/binderfs", "./binderfs" [pid 8424] sendfile(-1, -1, NULL, 281474978811909 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... close resumed>) = 0 [pid 8428] <... symlink resumed>) = 0 [pid 8424] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8422] unlink("./bus" [pid 5063] openat(AT_FDCWD, "./332/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8424] exit_group(0 [pid 8428] memfd_create("syzkaller", 0 [pid 5063] <... openat resumed>) = 4 [pid 8424] <... exit_group resumed>) = ? [pid 5063] newfstatat(4, "", [pid 8428] <... memfd_create resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 8429 attached [pid 8428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] getdents64(4, [pid 8429] set_robust_list(0x55555745a660, 24 [pid 8428] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8429] <... set_robust_list resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8429 [pid 5063] getdents64(4, [pid 8429] chdir("./332" [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 8422] <... unlink resumed>) = 0 [pid 5063] rmdir("./332/file0" [pid 8429] <... chdir resumed>) = 0 [pid 8422] sendfile(-1, -1, NULL, 281474978811909 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 8422] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 8429] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8422] exit_group(0 [pid 5063] rmdir("./332" [pid 8429] <... prctl resumed>) = 0 [pid 8422] <... exit_group resumed>) = ? [pid 8429] setpgid(0, 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8429] <... setpgid resumed>) = 0 [pid 5063] mkdir("./333", 0777 [pid 8429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... mkdir resumed>) = 0 [pid 8429] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8429] write(3, "1000", 4) = 4 [pid 8429] close(3 [pid 8424] +++ exited with 0 +++ [pid 8429] <... close resumed>) = 0 [pid 8429] symlink("/dev/binderfs", "./binderfs" [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8424, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=3 /* 0.03 s */} --- [pid 8429] <... symlink resumed>) = 0 [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./337", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8429] memfd_create("syzkaller", 0 [pid 5064] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8429] <... memfd_create resumed>) = 3 [pid 8422] +++ exited with 0 +++ [pid 5064] <... openat resumed>) = 3 [pid 5064] newfstatat(3, "", [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8422, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./330", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./337/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8429] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./337/binderfs", [pid 5065] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] newfstatat(3, "", [pid 5064] unlink("./337/binderfs" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] <... unlink resumed>) = 0 [pid 5065] umount2("./330/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./330/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] unlink("./330/binderfs") = 0 [pid 5065] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8428] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./330/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] newfstatat(AT_FDCWD, "./337/file0", [pid 8429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./330/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./337/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... openat resumed>) = 4 [pid 5065] getdents64(4, [pid 5064] newfstatat(4, "", [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./330/file0") = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] getdents64(4, [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 8428] <... write resumed>) = 2097152 [pid 5065] close(3 [pid 5064] <... close resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... close resumed>) = 0 [pid 5064] rmdir("./337/file0" [pid 5065] rmdir("./330"./strace-static-x86_64: Process 8430 attached [pid 8429] <... write resumed>) = 2097152 [pid 8428] munmap(0x7f41e0600000, 138412032 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 8430] set_robust_list(0x55555745a660, 24) = 0 [pid 8430] chdir("./333") = 0 [pid 8430] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] getdents64(3, [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8430 [pid 8430] setpgid(0, 0 [pid 5065] mkdir("./331", 0777 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8430] <... setpgid resumed>) = 0 [pid 5064] close(3 [pid 8430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8429] munmap(0x7f41e0600000, 138412032 [pid 8428] <... munmap resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 8430] <... openat resumed>) = 3 [pid 5064] rmdir("./337" [pid 8428] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 8428] <... openat resumed>) = 4 [pid 8428] ioctl(4, LOOP_SET_FD, 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8430] write(3, "1000", 4) = 4 [pid 8429] <... munmap resumed>) = 0 [pid 8428] <... ioctl resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 8430] close(3 [pid 8429] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8428] close(3 [pid 5064] mkdir("./338", 0777 [pid 8430] <... close resumed>) = 0 [pid 8430] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8429] <... openat resumed>) = 4 [pid 8428] <... close resumed>) = 0 [pid 8428] close(4 [pid 5064] <... mkdir resumed>) = 0 [pid 8429] ioctl(4, LOOP_SET_FD, 3 [pid 8430] memfd_create("syzkaller", 0 [pid 8428] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8430] <... memfd_create resumed>) = 3 [pid 8428] mkdir("./file0", 0777 [pid 5064] <... openat resumed>) = 3 [pid 8430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8428] <... mkdir resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8430] <... mmap resumed>) = 0x7f41e0600000 [pid 8428] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8429] <... ioctl resumed>) = 0 [pid 8429] close(3) = 0 [pid 8429] close(4) = 0 [pid 8429] mkdir("./file0", 0777) = 0 [ 307.921893][ T8428] loop0: detected capacity change from 0 to 4096 [ 307.936290][ T8429] loop1: detected capacity change from 0 to 4096 [pid 8429] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8430] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... ioctl resumed>) = 0 [pid 5064] close(3) = 0 [pid 8428] <... mount resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8432 attached [pid 8428] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] close(3 [pid 8432] set_robust_list(0x55555745a660, 24 [pid 8428] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8432 [pid 8428] chdir("./file0") = 0 [pid 8432] <... set_robust_list resumed>) = 0 [pid 8428] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8428] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8428] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8432] chdir("./338" [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8433 [ 307.999201][ T8431] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds ./strace-static-x86_64: Process 8433 attached [pid 8432] <... chdir resumed>) = 0 [pid 8433] set_robust_list(0x55555745a660, 24 [pid 8432] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8433] <... set_robust_list resumed>) = 0 [pid 8432] setpgid(0, 0 [pid 8428] <... open resumed>) = 4 [pid 8430] <... write resumed>) = 2097152 [pid 8433] chdir("./331" [pid 8428] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8433] <... chdir resumed>) = 0 [pid 8432] <... setpgid resumed>) = 0 [pid 8430] munmap(0x7f41e0600000, 138412032 [pid 8428] <... open resumed>) = 5 [ 308.072158][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 308.072175][ T28] audit: type=1800 audit(1708423460.600:5018): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 308.103063][ T8434] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8433] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8432] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8430] <... munmap resumed>) = 0 [pid 8428] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8430] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8430] ioctl(4, LOOP_SET_FD, 3 [pid 8433] <... prctl resumed>) = 0 [pid 8432] <... openat resumed>) = 3 [pid 8432] write(3, "1000", 4 [pid 8433] setpgid(0, 0 [pid 8430] <... ioctl resumed>) = 0 [pid 8433] <... setpgid resumed>) = 0 [pid 8432] <... write resumed>) = 4 [pid 8429] <... mount resumed>) = 0 [pid 8428] <... ftruncate resumed>) = 0 [pid 8432] close(3 [pid 8429] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8432] <... close resumed>) = 0 [pid 8432] symlink("/dev/binderfs", "./binderfs" [pid 8430] close(3) = 0 [pid 8430] close(4) = 0 [pid 8430] mkdir("./file0", 0777 [pid 8432] <... symlink resumed>) = 0 [pid 8430] <... mkdir resumed>) = 0 [pid 8433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8432] memfd_create("syzkaller", 0 [pid 8430] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8429] <... openat resumed>) = 3 [pid 8428] unlink("./bus" [pid 8433] <... openat resumed>) = 3 [pid 8432] <... memfd_create resumed>) = 3 [pid 8433] write(3, "1000", 4 [pid 8432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8429] chdir("./file0" [pid 8433] <... write resumed>) = 4 [pid 8429] <... chdir resumed>) = 0 [pid 8433] close(3 [pid 8432] <... mmap resumed>) = 0x7f41e0600000 [pid 8429] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8433] <... close resumed>) = 0 [pid 8429] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8433] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8429] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [ 308.120867][ T28] audit: type=1800 audit(1708423460.650:5019): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 308.125789][ T8430] loop2: detected capacity change from 0 to 4096 [ 308.149123][ T28] audit: type=1800 audit(1708423460.650:5020): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [pid 8433] memfd_create("syzkaller", 0) = 3 [pid 8429] <... open resumed>) = 4 [pid 8433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8432] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8429] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8429] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0x7f41e0600000 [pid 8428] <... unlink resumed>) = 0 [pid 8428] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8428] exit_group(0) = ? [ 308.208493][ T28] audit: type=1800 audit(1708423460.730:5021): pid=8429 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 308.246045][ T8435] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8429] ftruncate(4, 33587195 [pid 8432] <... write resumed>) = 2097152 [pid 8432] munmap(0x7f41e0600000, 138412032 [pid 8430] <... mount resumed>) = 0 [pid 8430] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8430] chdir("./file0" [pid 8428] +++ exited with 0 +++ [pid 8433] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8430] <... chdir resumed>) = 0 [pid 8429] <... ftruncate resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8428, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 8430] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8429] unlink("./bus" [pid 8430] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8430] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] umount2("./338", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./338/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8432] <... munmap resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./338/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8432] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] unlink("./338/binderfs" [pid 8432] <... openat resumed>) = 4 [ 308.268042][ T28] audit: type=1800 audit(1708423460.760:5022): pid=8429 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 308.298226][ T28] audit: type=1800 audit(1708423460.770:5023): pid=8429 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [pid 5061] <... unlink resumed>) = 0 [pid 8432] ioctl(4, LOOP_SET_FD, 3 [pid 5061] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8429] <... unlink resumed>) = 0 [pid 8429] sendfile(-1, -1, NULL, 281474978811909 [pid 8430] <... open resumed>) = 4 [pid 8429] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] <... umount2 resumed>) = 0 [pid 8430] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8429] exit_group(0) = ? [pid 8430] <... open resumed>) = 5 [pid 5061] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8430] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8430] <... mmap resumed>) = 0x20000000 [pid 5061] newfstatat(AT_FDCWD, "./338/file0", [pid 8430] ftruncate(4, 33587195 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8430] <... ftruncate resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8430] unlink("./bus" [pid 5061] openat(AT_FDCWD, "./338/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./338/file0" [pid 8432] <... ioctl resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8432] close(3) = 0 [pid 8432] close(4 [pid 5061] getdents64(3, [pid 8429] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8429, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [ 308.316340][ T8432] loop3: detected capacity change from 0 to 4096 [ 308.338014][ T28] audit: type=1800 audit(1708423460.860:5024): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [pid 8432] <... close resumed>) = 0 [pid 8433] <... write resumed>) = 2097152 [pid 8430] <... unlink resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8430] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8430] exit_group(0) = ? [pid 5061] close(3 [pid 8432] mkdir("./file0", 0777 [pid 5061] <... close resumed>) = 0 [pid 8432] <... mkdir resumed>) = 0 [pid 5061] rmdir("./338" [pid 8433] munmap(0x7f41e0600000, 138412032 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./339", 0777 [pid 8432] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... mkdir resumed>) = 0 [pid 8430] +++ exited with 0 +++ [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 8433] <... munmap resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8430, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5062] umount2("./332", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8433] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8433] <... openat resumed>) = 4 [ 308.369106][ T28] audit: type=1800 audit(1708423460.870:5025): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 308.389683][ T28] audit: type=1800 audit(1708423460.870:5026): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [pid 5062] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8433] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 5063] umount2("./333", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./332/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8433] <... ioctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8433] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5062] newfstatat(AT_FDCWD, "./332/binderfs", [pid 8433] <... close resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 8433] close(4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8433] <... close resumed>) = 0 [pid 5062] unlink("./332/binderfs") = 0 [pid 8433] mkdir("./file0", 0777 [pid 5063] getdents64(3, [pid 5062] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8433] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8433] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] umount2("./333/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./333/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./333/binderfs") = 0 [pid 5063] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./332/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 308.419192][ T8433] loop4: detected capacity change from 0 to 4096 [pid 5062] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./332/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./332/file0") = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./332") = 0 [pid 5062] mkdir("./333", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 3 [pid 8432] <... mount resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8432] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] newfstatat(AT_FDCWD, "./333/file0", [pid 8433] <... mount resumed>) = 0 [pid 8432] <... openat resumed>) = 3 [pid 8432] chdir("./file0" [pid 8433] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8432] <... chdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8433] <... openat resumed>) = 3 [pid 8432] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8433] chdir("./file0" [pid 8432] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8433] <... chdir resumed>) = 0 [pid 8432] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8433] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8433] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 4 [pid 5063] openat(AT_FDCWD, "./333/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8433] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... ioctl resumed>) = 0 [pid 8433] <... open resumed>) = 5 [pid 5063] <... openat resumed>) = 4 [pid 8433] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [ 308.483386][ T8437] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 308.483815][ T8436] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] close(3 [pid 8433] <... mmap resumed>) = 0x20000000 [pid 5063] newfstatat(4, "", [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8438 attached [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8433] ftruncate(4, 33587195 [pid 8438] set_robust_list(0x55555745a660, 24 [pid 5063] getdents64(4, [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8438 [pid 8438] <... set_robust_list resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8438] chdir("./339" [pid 5063] getdents64(4, [pid 8438] <... chdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8438] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] close(4 [pid 8438] <... prctl resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8438] setpgid(0, 0 [pid 5063] rmdir("./333/file0" [pid 8438] <... setpgid resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8433] <... ftruncate resumed>) = 0 [pid 8432] <... open resumed>) = 4 [pid 5063] getdents64(3, [pid 8438] write(3, "1000", 4 [pid 8432] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8438] <... write resumed>) = 4 [pid 8438] close(3 [pid 8433] unlink("./bus" [pid 8432] <... open resumed>) = 5 [pid 5063] close(3 [pid 8438] <... close resumed>) = 0 [pid 8438] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... close resumed>) = 0 [pid 8438] <... symlink resumed>) = 0 [pid 5063] rmdir("./333" [pid 8432] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./334", 0777) = 0 [pid 8432] <... mmap resumed>) = 0x20000000 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8438] memfd_create("syzkaller", 0 [pid 8433] <... unlink resumed>) = 0 [pid 8433] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8438] <... memfd_create resumed>) = 3 [ 308.539471][ T28] audit: type=1800 audit(1708423461.060:5027): pid=8433 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [pid 8438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8433] exit_group(0) = ? [pid 8432] ftruncate(4, 33587195 [pid 5062] <... ioctl resumed>) = 0 [pid 8433] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8433, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5062] close(3 [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] umount2("./331", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8439 attached [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8439 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8439] set_robust_list(0x55555745a660, 24 [pid 5065] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8439] <... set_robust_list resumed>) = 0 [pid 8439] chdir("./333" [pid 5065] <... openat resumed>) = 3 [pid 8439] <... chdir resumed>) = 0 [pid 8432] <... ftruncate resumed>) = 0 [pid 5065] newfstatat(3, "", [pid 8439] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8439] <... prctl resumed>) = 0 [pid 5065] getdents64(3, [pid 8439] setpgid(0, 0) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] umount2("./331/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8439] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./331/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8432] unlink("./bus" [pid 5065] unlink("./331/binderfs" [pid 8439] write(3, "1000", 4) = 4 [pid 5065] <... unlink resumed>) = 0 [pid 8439] close(3) = 0 [pid 8439] symlink("/dev/binderfs", "./binderfs" [pid 5065] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8439] <... symlink resumed>) = 0 [pid 8439] memfd_create("syzkaller", 0) = 3 [pid 8439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8438] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8432] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 8432] sendfile(-1, -1, NULL, 281474978811909 [pid 8439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8432] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8432] exit_group(0 [pid 5065] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8432] <... exit_group resumed>) = ? [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./331/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8432] +++ exited with 0 +++ [pid 5065] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8432, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5065] openat(AT_FDCWD, "./331/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", [pid 5064] umount2("./338", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(4, [pid 5064] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... openat resumed>) = 3 [pid 8439] <... write resumed>) = 2097152 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] newfstatat(3, "", [pid 8439] munmap(0x7f41e0600000, 138412032 [pid 5065] close(4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] getdents64(3, [pid 5065] rmdir("./331/file0" [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] umount2("./338/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] close(3 [pid 5064] newfstatat(AT_FDCWD, "./338/binderfs", [pid 5065] <... close resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] rmdir("./331" [pid 5064] unlink("./338/binderfs" [pid 8439] <... munmap resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 8439] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] mkdir("./332", 0777 [pid 5064] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8439] <... openat resumed>) = 4 [pid 8439] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... ioctl resumed>) = 0 [pid 8439] <... ioctl resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5063] close(3 [pid 8439] close(3 [pid 8438] <... write resumed>) = 2097152 [pid 5064] <... umount2 resumed>) = 0 [pid 8439] <... close resumed>) = 0 [pid 8438] munmap(0x7f41e0600000, 138412032 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] <... close resumed>) = 0 [pid 8439] close(4 [pid 8438] <... munmap resumed>) = 0 [pid 5064] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8439] <... close resumed>) = 0 [pid 8438] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8439] mkdir("./file0", 0777) = 0 [pid 5064] newfstatat(AT_FDCWD, "./338/file0", [pid 8438] <... openat resumed>) = 4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8439] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 308.700496][ T8439] loop1: detected capacity change from 0 to 4096 [pid 5064] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8438] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./338/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8440 attached [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8440 [pid 8440] set_robust_list(0x55555745a660, 24 [pid 8439] <... mount resumed>) = 0 [pid 8438] <... ioctl resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5064] newfstatat(4, "", [pid 8440] <... set_robust_list resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, [pid 8440] chdir("./334" [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 8439] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8438] close(3 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8440] <... chdir resumed>) = 0 [pid 8439] <... openat resumed>) = 3 [pid 8438] <... close resumed>) = 0 [pid 5064] close(4 [pid 8440] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8439] chdir("./file0" [pid 8438] close(4 [pid 5064] <... close resumed>) = 0 [pid 8440] <... prctl resumed>) = 0 [pid 8439] <... chdir resumed>) = 0 [pid 8438] <... close resumed>) = 0 [pid 5064] rmdir("./338/file0" [pid 8440] setpgid(0, 0 [pid 8439] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8440] <... setpgid resumed>) = 0 [pid 8439] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8438] mkdir("./file0", 0777 [pid 5064] <... rmdir resumed>) = 0 [pid 8440] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8439] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8438] <... mkdir resumed>) = 0 [pid 8440] <... openat resumed>) = 3 [pid 8440] write(3, "1000", 4 [pid 8438] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] getdents64(3, [pid 8440] <... write resumed>) = 4 [pid 8440] close(3 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8440] <... close resumed>) = 0 [pid 5064] close(3 [pid 8440] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./338" [pid 8440] <... symlink resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./339", 0777 [pid 8440] memfd_create("syzkaller", 0 [pid 5064] <... mkdir resumed>) = 0 [ 308.752646][ T8438] loop0: detected capacity change from 0 to 4096 [ 308.763320][ T8441] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8440] <... memfd_create resumed>) = 3 [pid 5065] <... ioctl resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8439] <... open resumed>) = 4 [pid 8439] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8439] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8439] ftruncate(4, 33587195 [pid 8438] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8438] chdir("./file0" [pid 5065] close(3 [pid 8438] <... chdir resumed>) = 0 [pid 8438] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8438] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8438] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000./strace-static-x86_64: Process 8443 attached [pid 8439] <... ftruncate resumed>) = 0 [pid 8438] <... open resumed>) = 4 [pid 8438] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8443 [pid 8443] set_robust_list(0x55555745a660, 24) = 0 [pid 8443] chdir("./332" [pid 8439] unlink("./bus" [pid 8438] <... open resumed>) = 5 [pid 8443] <... chdir resumed>) = 0 [pid 8438] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8443] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8438] <... mmap resumed>) = 0x20000000 [pid 5064] <... ioctl resumed>) = 0 [pid 8443] <... prctl resumed>) = 0 [ 308.830315][ T8442] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8443] setpgid(0, 0) = 0 [pid 8438] ftruncate(4, 33587195 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8440] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8444 [pid 8443] write(3, "1000", 4 [pid 8438] <... ftruncate resumed>) = 0 [pid 8443] <... write resumed>) = 4 ./strace-static-x86_64: Process 8444 attached [pid 8444] set_robust_list(0x55555745a660, 24) = 0 [pid 8444] chdir("./339" [pid 8443] close(3 [pid 8439] <... unlink resumed>) = 0 [pid 8443] <... close resumed>) = 0 [pid 8443] symlink("/dev/binderfs", "./binderfs" [pid 8439] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8444] <... chdir resumed>) = 0 [pid 8443] <... symlink resumed>) = 0 [pid 8439] exit_group(0 [pid 8444] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8438] unlink("./bus" [pid 8444] setpgid(0, 0) = 0 [pid 8444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8444] write(3, "1000", 4) = 4 [pid 8444] close(3) = 0 [pid 8444] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8444] memfd_create("syzkaller", 0) = 3 [pid 8443] memfd_create("syzkaller", 0 [pid 8439] <... exit_group resumed>) = ? [pid 8438] <... unlink resumed>) = 0 [pid 8438] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8438] exit_group(0) = ? [pid 8444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8440] <... write resumed>) = 2097152 [pid 8440] munmap(0x7f41e0600000, 138412032 [pid 8443] <... memfd_create resumed>) = 3 [pid 8440] <... munmap resumed>) = 0 [pid 8443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8438] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8438, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] umount2("./339", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8440] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] <... openat resumed>) = 3 [pid 8440] <... openat resumed>) = 4 [pid 5061] newfstatat(3, "", [pid 8440] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8439] +++ exited with 0 +++ [pid 5061] getdents64(3, [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8439, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8440] <... ioctl resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8440] close(3) = 0 [pid 8440] close(4) = 0 [pid 8440] mkdir("./file0", 0777 [pid 5061] umount2("./339/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8440] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./339/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./339/binderfs" [pid 5062] umount2("./333", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... unlink resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8440] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", [pid 5061] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./333/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./333/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8444] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] unlink("./333/binderfs" [pid 5061] <... umount2 resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [ 308.950634][ T8440] loop2: detected capacity change from 0 to 4096 [pid 8443] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./339/file0", [pid 8440] <... mount resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8440] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8440] chdir("./file0" [pid 5061] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8440] <... chdir resumed>) = 0 [pid 8440] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./339/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8440] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 5062] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8444] <... write resumed>) = 2097152 [pid 8440] <... open resumed>) = 4 [pid 5061] <... close resumed>) = 0 [ 309.007723][ T8445] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] rmdir("./339/file0" [pid 8444] munmap(0x7f41e0600000, 138412032 [pid 8443] <... write resumed>) = 2097152 [pid 8440] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8443] munmap(0x7f41e0600000, 138412032 [pid 8440] <... open resumed>) = 5 [pid 5061] <... rmdir resumed>) = 0 [pid 8444] <... munmap resumed>) = 0 [pid 8440] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] newfstatat(AT_FDCWD, "./333/file0", [pid 5061] getdents64(3, [pid 8443] <... munmap resumed>) = 0 [pid 8440] <... mmap resumed>) = 0x20000000 [pid 8444] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8443] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] close(3 [pid 8444] <... openat resumed>) = 4 [pid 8443] <... openat resumed>) = 4 [pid 8440] ftruncate(4, 33587195 [pid 5062] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 8443] ioctl(4, LOOP_SET_FD, 3 [pid 5061] rmdir("./339" [pid 8444] ioctl(4, LOOP_SET_FD, 3 [pid 8440] <... ftruncate resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./333/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", [pid 8443] <... ioctl resumed>) = 0 [pid 8440] unlink("./bus" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8443] close(3 [pid 5061] mkdir("./340", 0777 [pid 8443] <... close resumed>) = 0 [pid 5062] getdents64(4, [pid 5061] <... mkdir resumed>) = 0 [pid 8443] close(4 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8444] <... ioctl resumed>) = 0 [pid 8443] <... close resumed>) = 0 [pid 8440] <... unlink resumed>) = 0 [pid 8444] close(3 [pid 5061] <... openat resumed>) = 3 [pid 8440] sendfile(-1, -1, NULL, 281474978811909 [pid 8444] <... close resumed>) = 0 [pid 8443] mkdir("./file0", 0777 [pid 8440] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5062] getdents64(4, [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8444] close(4) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./333/file0" [pid 8440] exit_group(0 [pid 8444] mkdir("./file0", 0777) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8444] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] close(3 [pid 8440] <... exit_group resumed>) = ? [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./333") = 0 [pid 8443] <... mkdir resumed>) = 0 [pid 5062] mkdir("./334", 0777 [pid 8443] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... mkdir resumed>) = 0 [ 309.077806][ T8443] loop4: detected capacity change from 0 to 4096 [ 309.081032][ T8444] loop3: detected capacity change from 0 to 4096 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8444] <... mount resumed>) = 0 [pid 8444] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8444] chdir("./file0") = 0 [pid 8444] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8444] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8440] +++ exited with 0 +++ [pid 5061] <... ioctl resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8440, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5061] close(3) = 0 [pid 8443] <... mount resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8443] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./334", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8448 attached [pid 8443] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8448 [pid 8443] chdir("./file0" [pid 5063] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8443] <... chdir resumed>) = 0 [pid 8443] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", [pid 8443] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8448] set_robust_list(0x55555745a660, 24 [pid 5063] getdents64(3, [pid 8448] <... set_robust_list resumed>) = 0 [pid 8448] chdir("./340" [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8448] <... chdir resumed>) = 0 [pid 5063] umount2("./334/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8443] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8448] setpgid(0, 0) = 0 [pid 8444] <... open resumed>) = 4 [pid 5063] newfstatat(AT_FDCWD, "./334/binderfs", [pid 8443] <... open resumed>) = 4 [pid 8444] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 309.141527][ T8446] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.144580][ T8447] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] unlink("./334/binderfs" [pid 8448] <... openat resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 8444] <... open resumed>) = 5 [pid 8444] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8448] write(3, "1000", 4 [pid 8444] <... mmap resumed>) = 0x20000000 [pid 8443] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8448] <... write resumed>) = 4 [pid 8448] close(3) = 0 [pid 8443] <... open resumed>) = 5 [pid 8443] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8448] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8444] ftruncate(4, 33587195 [pid 8448] memfd_create("syzkaller", 0 [pid 8443] <... mmap resumed>) = 0x20000000 [pid 8448] <... memfd_create resumed>) = 3 [pid 8444] <... ftruncate resumed>) = 0 [pid 8443] ftruncate(4, 33587195 [pid 8448] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8444] unlink("./bus" [pid 8448] <... mmap resumed>) = 0x7f41e0600000 [pid 8443] <... ftruncate resumed>) = 0 [pid 8444] <... unlink resumed>) = 0 [pid 8444] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8444] exit_group(0) = ? [pid 8443] unlink("./bus" [pid 5062] <... ioctl resumed>) = 0 [pid 8444] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8444, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5063] <... umount2 resumed>) = 0 [pid 5064] umount2("./339", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 8443] <... unlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8443] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] umount2("./339/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8443] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] close(3 [pid 8443] exit_group(0 [pid 5064] newfstatat(AT_FDCWD, "./339/binderfs", [pid 8443] <... exit_group resumed>) = ? [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... close resumed>) = 0 [pid 5064] unlink("./339/binderfs") = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(AT_FDCWD, "./334/file0", [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8449 attached ) = -1 EINVAL (Invalid argument) [pid 8449] set_robust_list(0x55555745a660, 24) = 0 [pid 8449] chdir("./334") = 0 [pid 8449] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8449] setpgid(0, 0) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8449 [pid 8449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] openat(AT_FDCWD, "./334/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", [pid 8449] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 8449] write(3, "1000", 4) = 4 [pid 8449] close(3) = 0 [pid 8449] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8449] <... symlink resumed>) = 0 [pid 5063] getdents64(4, [pid 8449] memfd_create("syzkaller", 0 [pid 8443] +++ exited with 0 +++ [pid 5064] <... umount2 resumed>) = 0 [pid 8449] <... memfd_create resumed>) = 3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8443, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8448] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(4 [pid 5065] umount2("./332", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 8449] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] rmdir("./334/file0" [pid 5065] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] newfstatat(AT_FDCWD, "./339/file0", [pid 5065] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] openat(AT_FDCWD, "./339/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./332/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 4 [pid 5065] newfstatat(AT_FDCWD, "./332/binderfs", [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] getdents64(4, [pid 5065] unlink("./332/binderfs" [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] <... unlink resumed>) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] close(4 [pid 5063] <... rmdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5064] rmdir("./339/file0" [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5063] <... close resumed>) = 0 [pid 5064] rmdir("./339" [pid 5063] rmdir("./334" [pid 5064] <... rmdir resumed>) = 0 [pid 8448] <... write resumed>) = 2097152 [pid 5063] <... rmdir resumed>) = 0 [pid 8448] munmap(0x7f41e0600000, 138412032 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] mkdir("./340", 0777 [pid 5063] mkdir("./335", 0777) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 8448] <... munmap resumed>) = 0 [pid 5065] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 3 [pid 5065] newfstatat(AT_FDCWD, "./332/file0", [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5065] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5065] openat(AT_FDCWD, "./332/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8448] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... openat resumed>) = 4 [pid 5065] newfstatat(4, "", [pid 8448] <... openat resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8448] ioctl(4, LOOP_SET_FD, 3 [pid 5065] getdents64(4, [pid 8449] <... write resumed>) = 2097152 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8448] <... ioctl resumed>) = 0 [pid 8449] munmap(0x7f41e0600000, 138412032 [pid 8448] close(3 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8449] <... munmap resumed>) = 0 [pid 8448] <... close resumed>) = 0 [pid 8449] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8448] close(4) = 0 [pid 8449] <... openat resumed>) = 4 [pid 8448] mkdir("./file0", 0777) = 0 [pid 8449] ioctl(4, LOOP_SET_FD, 3 [pid 5065] close(4 [pid 5063] <... ioctl resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] close(3) = 0 [pid 8448] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] rmdir("./332/file0"./strace-static-x86_64: Process 8450 attached ) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 8450] set_robust_list(0x55555745a660, 24 [pid 5065] getdents64(3, [pid 5064] close(3 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8450 [pid 8450] <... set_robust_list resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8451 attached [pid 8450] chdir("./335" [pid 5065] rmdir("./332" [pid 8451] set_robust_list(0x55555745a660, 24 [pid 8449] <... ioctl resumed>) = 0 [pid 8449] close(3) = 0 [pid 8449] close(4) = 0 [ 309.366055][ T8448] loop0: detected capacity change from 0 to 4096 [ 309.402222][ T8449] loop1: detected capacity change from 0 to 4096 [pid 8449] mkdir("./file0", 0777 [pid 8451] <... set_robust_list resumed>) = 0 [pid 8450] <... chdir resumed>) = 0 [pid 8449] <... mkdir resumed>) = 0 [pid 8448] <... mount resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 8451] chdir("./340" [pid 8448] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8451 [pid 8448] <... openat resumed>) = 3 [pid 8450] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8448] chdir("./file0" [pid 8451] <... chdir resumed>) = 0 [pid 8450] <... prctl resumed>) = 0 [pid 5065] mkdir("./333", 0777 [pid 8450] setpgid(0, 0 [pid 8449] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8448] <... chdir resumed>) = 0 [pid 8451] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8450] <... setpgid resumed>) = 0 [pid 8448] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... mkdir resumed>) = 0 [pid 8451] <... prctl resumed>) = 0 [pid 8450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8448] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8451] setpgid(0, 0) = 0 [pid 8450] <... openat resumed>) = 3 [pid 8448] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... openat resumed>) = 3 [pid 8451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8450] write(3, "1000", 4 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8450] <... write resumed>) = 4 [pid 8450] close(3) = 0 [pid 8450] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8451] <... openat resumed>) = 3 [pid 8450] memfd_create("syzkaller", 0 [pid 8448] <... open resumed>) = 4 [pid 8448] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8451] write(3, "1000", 4 [pid 8450] <... memfd_create resumed>) = 3 [pid 8449] <... mount resumed>) = 0 [pid 8451] <... write resumed>) = 4 [pid 8451] close(3 [pid 8450] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8451] <... close resumed>) = 0 [pid 8450] <... mmap resumed>) = 0x7f41e0600000 [pid 8449] <... openat resumed>) = 3 [pid 8451] symlink("/dev/binderfs", "./binderfs" [pid 8449] chdir("./file0" [pid 8451] <... symlink resumed>) = 0 [pid 8449] <... chdir resumed>) = 0 [pid 8448] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8451] memfd_create("syzkaller", 0 [pid 8449] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8448] <... mmap resumed>) = 0x20000000 [pid 8451] <... memfd_create resumed>) = 3 [pid 8449] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8449] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8448] ftruncate(4, 33587195 [pid 8451] <... mmap resumed>) = 0x7f41e0600000 [pid 8448] <... ftruncate resumed>) = 0 [ 309.442369][ T8452] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.479650][ T8453] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8448] unlink("./bus") = 0 [pid 8448] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8448] exit_group(0) = ? [pid 8449] <... open resumed>) = 4 [pid 8449] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5065] <... ioctl resumed>) = 0 [pid 8449] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8450] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8448] +++ exited with 0 +++ [pid 5065] close(3 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8448, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8449] ftruncate(4, 33587195 [pid 5065] <... close resumed>) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... restart_syscall resumed>) = 0 [pid 8449] <... ftruncate resumed>) = 0 ./strace-static-x86_64: Process 8454 attached [pid 8449] unlink("./bus" [pid 8454] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8454 [pid 8454] <... set_robust_list resumed>) = 0 [pid 5061] umount2("./340", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8454] chdir("./333" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8454] <... chdir resumed>) = 0 [pid 8454] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... openat resumed>) = 3 [pid 8454] <... prctl resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 8454] setpgid(0, 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8454] <... setpgid resumed>) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] umount2("./340/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./340/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./340/binderfs") = 0 [pid 5061] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8454] <... openat resumed>) = 3 [pid 8449] <... unlink resumed>) = 0 [pid 8454] write(3, "1000", 4 [pid 8449] sendfile(-1, -1, NULL, 281474978811909 [pid 8454] <... write resumed>) = 4 [pid 8449] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] <... umount2 resumed>) = 0 [pid 8454] close(3 [pid 8449] exit_group(0 [pid 5061] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8454] <... close resumed>) = 0 [pid 8449] <... exit_group resumed>) = ? [pid 8454] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8454] <... symlink resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./340/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8454] memfd_create("syzkaller", 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./340/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8449] +++ exited with 0 +++ [pid 5061] <... openat resumed>) = 4 [pid 8454] <... memfd_create resumed>) = 3 [pid 5061] newfstatat(4, "", [pid 8454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8449, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 8454] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... restart_syscall resumed>) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] umount2("./334", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8450] <... write resumed>) = 2097152 [pid 5062] <... openat resumed>) = 3 [pid 5061] close(4) = 0 [pid 5062] newfstatat(3, "", [pid 5061] rmdir("./340/file0") = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5062] getdents64(3, [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8450] munmap(0x7f41e0600000, 138412032 [pid 5061] close(3 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... close resumed>) = 0 [pid 5062] umount2("./334/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./340") = 0 [pid 5061] mkdir("./341", 0777) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] newfstatat(AT_FDCWD, "./334/binderfs", [pid 5061] <... openat resumed>) = 3 [pid 8450] <... munmap resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5062] unlink("./334/binderfs") = 0 [pid 8450] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8450] <... openat resumed>) = 4 [pid 8450] ioctl(4, LOOP_SET_FD, 3 [pid 8454] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8451] <... write resumed>) = 2097152 [pid 8451] munmap(0x7f41e0600000, 138412032 [pid 8450] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8451] <... munmap resumed>) = 0 [pid 8450] close(3 [pid 5062] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8450] <... close resumed>) = 0 [pid 8450] close(4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./334/file0", [pid 8450] <... close resumed>) = 0 [pid 8450] mkdir("./file0", 0777 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8451] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8451] ioctl(4, LOOP_SET_FD, 3 [pid 8450] <... mkdir resumed>) = 0 [pid 5062] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8454] <... write resumed>) = 2097152 [pid 8451] <... ioctl resumed>) = 0 [pid 8450] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./334/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8454] munmap(0x7f41e0600000, 138412032 [pid 8451] close(3 [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8454] <... munmap resumed>) = 0 [pid 5062] getdents64(4, [pid 8451] <... close resumed>) = 0 [pid 8451] close(4 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8451] <... close resumed>) = 0 [ 309.655125][ T8450] loop2: detected capacity change from 0 to 4096 [ 309.680208][ T8451] loop3: detected capacity change from 0 to 4096 [pid 5062] getdents64(4, [pid 8451] mkdir("./file0", 0777 [pid 8454] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8451] <... mkdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8454] ioctl(4, LOOP_SET_FD, 3 [pid 8451] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8450] <... mount resumed>) = 0 [pid 5062] close(4 [pid 8450] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./334/file0" [pid 8450] chdir("./file0" [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5062] getdents64(3, [pid 8450] <... chdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 8450] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 8450] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] rmdir("./334" [pid 8450] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8454] <... ioctl resumed>) = 0 [pid 8454] close(3) = 0 [pid 8454] close(4) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8454] mkdir("./file0", 0777 [pid 5062] mkdir("./335", 0777 [pid 8454] <... mkdir resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... mkdir resumed>) = 0 [pid 8454] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8456 [pid 8450] <... open resumed>) = 4 ./strace-static-x86_64: Process 8456 attached [pid 8450] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8456] set_robust_list(0x55555745a660, 24) = 0 [pid 8450] <... open resumed>) = 5 [ 309.716798][ T8455] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.732021][ T8454] loop4: detected capacity change from 0 to 4096 [pid 8450] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8456] chdir("./341" [pid 8451] <... mount resumed>) = 0 [pid 8450] <... mmap resumed>) = 0x20000000 [pid 8456] <... chdir resumed>) = 0 [pid 8451] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8450] ftruncate(4, 33587195 [pid 8456] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8456] setpgid(0, 0) = 0 [pid 8456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8456] write(3, "1000", 4) = 4 [pid 8456] close(3) = 0 [pid 8456] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8454] <... mount resumed>) = 0 [pid 8451] <... openat resumed>) = 3 [pid 8450] <... ftruncate resumed>) = 0 [pid 8456] memfd_create("syzkaller", 0 [pid 8450] unlink("./bus" [pid 8454] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8451] chdir("./file0" [pid 8456] <... memfd_create resumed>) = 3 [pid 8454] <... openat resumed>) = 3 [pid 8451] <... chdir resumed>) = 0 [pid 8456] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8451] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8454] chdir("./file0" [pid 8456] <... mmap resumed>) = 0x7f41e0600000 [pid 8454] <... chdir resumed>) = 0 [pid 8454] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8451] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8454] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8451] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [ 309.776579][ T8457] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.792737][ T8458] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8454] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8450] <... unlink resumed>) = 0 [pid 8450] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8450] exit_group(0) = ? [pid 8454] <... open resumed>) = 4 [pid 8454] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8451] <... open resumed>) = 4 [pid 8451] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8454] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8450] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8450, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8456] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] umount2("./335", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8451] <... open resumed>) = 5 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8454] <... mmap resumed>) = 0x20000000 [pid 8451] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... ioctl resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] close(3 [pid 5063] newfstatat(3, "", [pid 5062] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] getdents64(3, ./strace-static-x86_64: Process 8459 attached 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./335/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8459] set_robust_list(0x55555745a660, 24 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8459] <... set_robust_list resumed>) = 0 [pid 8454] ftruncate(4, 33587195 [pid 8451] <... mmap resumed>) = 0x20000000 [pid 5063] newfstatat(AT_FDCWD, "./335/binderfs", [pid 8459] chdir("./335" [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8459] <... chdir resumed>) = 0 [pid 8459] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8454] <... ftruncate resumed>) = 0 [pid 8451] ftruncate(4, 33587195 [pid 5063] unlink("./335/binderfs" [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8459 [pid 8459] <... prctl resumed>) = 0 [pid 8459] setpgid(0, 0) = 0 [pid 8459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8456] <... write resumed>) = 2097152 [pid 8454] unlink("./bus" [pid 8459] <... openat resumed>) = 3 [pid 8451] <... ftruncate resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 8459] write(3, "1000", 4 [pid 8456] munmap(0x7f41e0600000, 138412032 [pid 5063] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8459] <... write resumed>) = 4 [pid 8456] <... munmap resumed>) = 0 [pid 8451] unlink("./bus" [pid 8459] close(3 [pid 8456] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8454] <... unlink resumed>) = 0 [pid 8459] <... close resumed>) = 0 [pid 8459] symlink("/dev/binderfs", "./binderfs" [pid 8454] sendfile(-1, -1, NULL, 281474978811909 [pid 8459] <... symlink resumed>) = 0 [pid 8454] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8451] <... unlink resumed>) = 0 [pid 8454] exit_group(0 [pid 8451] sendfile(-1, -1, NULL, 281474978811909 [pid 8454] <... exit_group resumed>) = ? [pid 8451] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8451] exit_group(0 [pid 8459] memfd_create("syzkaller", 0 [pid 8451] <... exit_group resumed>) = ? [pid 8459] <... memfd_create resumed>) = 3 [pid 8456] <... openat resumed>) = 4 [pid 8454] +++ exited with 0 +++ [pid 8459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8451] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = 0 [pid 8459] <... mmap resumed>) = 0x7f41e0600000 [pid 8456] ioctl(4, LOOP_SET_FD, 3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8454, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8451, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5063] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./335/file0", [pid 5064] umount2("./340", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "./335/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] newfstatat(3, "", [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] umount2("./340/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./335/file0" [pid 5064] newfstatat(AT_FDCWD, "./340/binderfs", [pid 5063] <... rmdir resumed>) = 0 [pid 5065] umount2("./333", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] unlink("./340/binderfs" [pid 5063] getdents64(3, [pid 5065] <... openat resumed>) = 3 [pid 5064] <... unlink resumed>) = 0 [pid 5065] newfstatat(3, "", [pid 5064] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] close(3 [pid 8456] <... ioctl resumed>) = 0 [pid 5065] getdents64(3, [pid 5063] <... close resumed>) = 0 [pid 8456] close(3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] rmdir("./335" [pid 8456] <... close resumed>) = 0 [pid 5065] umount2("./333/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8456] close(4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./333/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8456] <... close resumed>) = 0 [pid 5065] unlink("./333/binderfs" [pid 8456] mkdir("./file0", 0777 [pid 5063] mkdir("./336", 0777 [pid 5065] <... unlink resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 8456] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8456] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5064] <... umount2 resumed>) = 0 [pid 8459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 309.955809][ T8456] loop0: detected capacity change from 0 to 4096 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./333/file0", [pid 5064] newfstatat(AT_FDCWD, "./340/file0", [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./333/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(4, "", [pid 5064] openat(AT_FDCWD, "./340/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5065] getdents64(4, [pid 5064] newfstatat(4, "", [pid 8456] <... mount resumed>) = 0 [pid 8456] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8456] <... openat resumed>) = 3 [pid 8456] chdir("./file0") = 0 [pid 5065] getdents64(4, [pid 5064] getdents64(4, [pid 8456] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8456] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] close(4 [pid 5064] getdents64(4, [pid 5065] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] rmdir("./333/file0" [pid 5064] close(4 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] rmdir("./340/file0" [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5065] close(3 [pid 8456] <... open resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 5064] getdents64(3, [pid 5065] rmdir("./333") = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8456] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] mkdir("./334", 0777 [pid 5064] close(3 [pid 8456] <... open resumed>) = 5 [pid 5065] <... mkdir resumed>) = 0 [pid 8456] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5064] rmdir("./340" [pid 8456] ftruncate(4, 33587195 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./341", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8456] <... ftruncate resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [ 310.006394][ T8460] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] <... ioctl resumed>) = 0 [pid 8456] unlink("./bus" [pid 5063] close(3) = 0 [pid 8459] <... write resumed>) = 2097152 [pid 8456] <... unlink resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8459] munmap(0x7f41e0600000, 138412032 [pid 8456] sendfile(-1, -1, NULL, 281474978811909./strace-static-x86_64: Process 8461 attached [pid 8459] <... munmap resumed>) = 0 [pid 8456] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8461] set_robust_list(0x55555745a660, 24) = 0 [pid 8456] exit_group(0 [pid 8461] chdir("./336" [pid 8456] <... exit_group resumed>) = ? [pid 8461] <... chdir resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8461 [pid 8459] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8461] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8456] +++ exited with 0 +++ [pid 8461] <... prctl resumed>) = 0 [pid 8459] <... openat resumed>) = 4 [pid 8461] setpgid(0, 0) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8456, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8459] ioctl(4, LOOP_SET_FD, 3 [pid 8461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8461] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8461] write(3, "1000", 4 [pid 8459] <... ioctl resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8461] <... write resumed>) = 4 [pid 5061] newfstatat(3, "", [pid 8461] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8461] <... close resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5061] getdents64(3, [pid 8461] symlink("/dev/binderfs", "./binderfs" [pid 8459] close(3 [pid 5065] <... ioctl resumed>) = 0 [pid 8459] <... close resumed>) = 0 [pid 8461] <... symlink resumed>) = 0 [pid 8459] close(4) = 0 [pid 8461] memfd_create("syzkaller", 0) = 3 [pid 8461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8459] mkdir("./file0", 0777 [pid 5064] close(3 [pid 5061] umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./341/binderfs", [pid 8459] <... mkdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./341/binderfs") = 0 [pid 5061] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8459] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] close(3) = 0 ./strace-static-x86_64: Process 8462 attached [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8462] set_robust_list(0x55555745a660, 24) = 0 [pid 8462] chdir("./341" [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8462 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8463 [pid 8462] <... chdir resumed>) = 0 [pid 8462] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 310.110675][ T8459] loop1: detected capacity change from 0 to 4096 [pid 8462] setpgid(0, 0) = 0 [pid 8462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8462] write(3, "1000", 4) = 4 [pid 8462] close(3) = 0 ./strace-static-x86_64: Process 8463 attached [pid 8462] symlink("/dev/binderfs", "./binderfs" [pid 8463] set_robust_list(0x55555745a660, 24 [pid 8462] <... symlink resumed>) = 0 [pid 8459] <... mount resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8462] memfd_create("syzkaller", 0 [pid 8463] <... set_robust_list resumed>) = 0 [pid 8459] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8463] chdir("./334" [pid 8462] <... memfd_create resumed>) = 3 [pid 8459] <... openat resumed>) = 3 [pid 8459] chdir("./file0" [pid 8462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8463] <... chdir resumed>) = 0 [pid 8459] <... chdir resumed>) = 0 [pid 5061] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8463] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8459] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./341/file0", [pid 8463] <... prctl resumed>) = 0 [pid 8463] setpgid(0, 0 [pid 8459] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8463] <... setpgid resumed>) = 0 [pid 8459] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8463] <... openat resumed>) = 3 [pid 8463] write(3, "1000", 4 [pid 5061] openat(AT_FDCWD, "./341/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8463] <... write resumed>) = 4 [pid 5061] <... openat resumed>) = 4 [pid 8463] close(3 [pid 8459] <... open resumed>) = 4 [pid 8463] <... close resumed>) = 0 [pid 8459] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] newfstatat(4, "", [pid 8463] symlink("/dev/binderfs", "./binderfs" [pid 8459] <... open resumed>) = 5 [ 310.181606][ T8464] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8463] <... symlink resumed>) = 0 [pid 8459] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8463] memfd_create("syzkaller", 0 [pid 8459] <... mmap resumed>) = 0x20000000 [pid 5061] getdents64(4, [pid 8463] <... memfd_create resumed>) = 3 [pid 8459] ftruncate(4, 33587195 [pid 8463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8459] <... ftruncate resumed>) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./341/file0" [pid 8463] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] <... rmdir resumed>) = 0 [pid 8459] unlink("./bus" [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8459] <... unlink resumed>) = 0 [pid 5061] close(3 [pid 8459] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] <... close resumed>) = 0 [pid 8459] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] rmdir("./341" [pid 8459] exit_group(0 [pid 5061] <... rmdir resumed>) = 0 [pid 8459] <... exit_group resumed>) = ? [pid 5061] mkdir("./342", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 8462] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8459] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8459, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5062] umount2("./335", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./335/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8461] <... write resumed>) = 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8461] munmap(0x7f41e0600000, 138412032 [pid 5062] newfstatat(AT_FDCWD, "./335/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./335/binderfs") = 0 [pid 5062] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8461] <... munmap resumed>) = 0 [pid 8461] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8463] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8461] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... umount2 resumed>) = 0 [pid 8461] <... ioctl resumed>) = 0 [pid 5062] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8461] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8461] <... close resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./335/file0", [pid 8461] close(4) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8461] mkdir("./file0", 0777 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8461] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./335/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8462] <... write resumed>) = 2097152 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8461] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] newfstatat(4, "", [pid 8462] munmap(0x7f41e0600000, 138412032 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 8465 attached [pid 8462] <... munmap resumed>) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8465] set_robust_list(0x55555745a660, 24 [pid 5062] getdents64(4, [pid 8465] <... set_robust_list resumed>) = 0 [ 310.312125][ T8461] loop2: detected capacity change from 0 to 4096 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8465 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8465] chdir("./342" [pid 8462] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8465] <... chdir resumed>) = 0 [pid 8463] <... write resumed>) = 2097152 [pid 8462] <... openat resumed>) = 4 [pid 5062] close(4 [pid 8465] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8462] ioctl(4, LOOP_SET_FD, 3 [pid 8465] <... prctl resumed>) = 0 [pid 8461] <... mount resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8462] <... ioctl resumed>) = 0 [pid 8465] setpgid(0, 0 [pid 8463] munmap(0x7f41e0600000, 138412032 [pid 8461] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] rmdir("./335/file0" [pid 8465] <... setpgid resumed>) = 0 [pid 8461] <... openat resumed>) = 3 [pid 8462] close(3) = 0 [pid 8461] chdir("./file0" [pid 5062] <... rmdir resumed>) = 0 [pid 8465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8463] <... munmap resumed>) = 0 [pid 8462] close(4 [pid 8461] <... chdir resumed>) = 0 [pid 8462] <... close resumed>) = 0 [pid 8461] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8465] <... openat resumed>) = 3 [pid 8463] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8462] mkdir("./file0", 0777 [pid 8461] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] getdents64(3, [pid 8465] write(3, "1000", 4 [pid 8463] <... openat resumed>) = 4 [pid 8461] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8465] <... write resumed>) = 4 [pid 8462] <... mkdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8465] close(3) = 0 [ 310.380397][ T8462] loop3: detected capacity change from 0 to 4096 [ 310.386716][ T8466] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8463] ioctl(4, LOOP_SET_FD, 3 [pid 5062] close(3 [pid 8462] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... close resumed>) = 0 [pid 8465] symlink("/dev/binderfs", "./binderfs" [pid 5062] rmdir("./335") = 0 [pid 8465] <... symlink resumed>) = 0 [pid 5062] mkdir("./336", 0777) = 0 [pid 8465] memfd_create("syzkaller", 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8465] <... memfd_create resumed>) = 3 [pid 8463] <... ioctl resumed>) = 0 [pid 8465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8463] close(3 [pid 8465] <... mmap resumed>) = 0x7f41e0600000 [pid 8463] <... close resumed>) = 0 [pid 8463] close(4) = 0 [pid 8463] mkdir("./file0", 0777) = 0 [pid 8463] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8461] <... open resumed>) = 4 [pid 8461] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8461] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8463] <... mount resumed>) = 0 [pid 8462] <... mount resumed>) = 0 [pid 8461] <... unlink resumed>) = 0 [pid 8462] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8462] chdir("./file0" [pid 8463] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8462] <... chdir resumed>) = 0 [pid 8461] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] <... ioctl resumed>) = 0 [pid 8463] <... openat resumed>) = 3 [pid 8462] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8461] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5062] close(3 [pid 8463] chdir("./file0") = 0 [pid 8462] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8461] exit_group(0 [pid 5062] <... close resumed>) = 0 [pid 8463] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8461] <... exit_group resumed>) = ? [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8463] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8462] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000./strace-static-x86_64: Process 8469 attached [pid 8463] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8461] +++ exited with 0 +++ [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8469 [pid 8469] set_robust_list(0x55555745a660, 24) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8461, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 8469] chdir("./336") = 0 [pid 8469] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8469] setpgid(0, 0 [pid 5063] umount2("./336", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8469] <... setpgid resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8469] write(3, "1000", 4) = 4 [ 310.493076][ T8467] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 310.505493][ T8468] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8469] close(3 [pid 8463] <... open resumed>) = 4 [pid 8462] <... open resumed>) = 4 [pid 5063] <... openat resumed>) = 3 [pid 8469] <... close resumed>) = 0 [pid 8463] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8462] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8469] symlink("/dev/binderfs", "./binderfs" [pid 8463] <... open resumed>) = 5 [pid 8462] <... open resumed>) = 5 [pid 5063] newfstatat(3, "", [pid 8462] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8469] <... symlink resumed>) = 0 [pid 8465] <... write resumed>) = 2097152 [pid 8463] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8462] <... mmap resumed>) = 0x20000000 [pid 5063] getdents64(3, [pid 8462] ftruncate(4, 33587195 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8469] memfd_create("syzkaller", 0 [pid 5063] umount2("./336/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8469] <... memfd_create resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8465] munmap(0x7f41e0600000, 138412032 [pid 5063] newfstatat(AT_FDCWD, "./336/binderfs", [pid 8469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8465] <... munmap resumed>) = 0 [pid 8463] <... mmap resumed>) = 0x20000000 [pid 8462] <... ftruncate resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8469] <... mmap resumed>) = 0x7f41e0600000 [pid 8465] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8463] ftruncate(4, 33587195 [pid 5063] unlink("./336/binderfs" [pid 8465] <... openat resumed>) = 4 [pid 8462] unlink("./bus" [pid 5063] <... unlink resumed>) = 0 [pid 8465] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8463] <... ftruncate resumed>) = 0 [pid 8463] unlink("./bus" [pid 8462] <... unlink resumed>) = 0 [pid 8465] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8465] close(3 [pid 8462] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8462] exit_group(0 [pid 8465] <... close resumed>) = 0 [pid 8463] <... unlink resumed>) = 0 [pid 8462] <... exit_group resumed>) = ? [pid 8469] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8465] close(4 [pid 8463] sendfile(-1, -1, NULL, 281474978811909 [pid 5063] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8465] <... close resumed>) = 0 [pid 8463] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8465] mkdir("./file0", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8463] exit_group(0 [pid 8465] <... mkdir resumed>) = 0 [pid 8463] <... exit_group resumed>) = ? [pid 5063] newfstatat(AT_FDCWD, "./336/file0", [pid 8465] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./336/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 310.590849][ T8465] loop0: detected capacity change from 0 to 4096 [pid 5063] getdents64(4, [pid 8462] +++ exited with 0 +++ [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8462, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5064] umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(4, [pid 5064] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8463] +++ exited with 0 +++ [pid 5063] close(4 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8463, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5063] <... close resumed>) = 0 [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 5063] rmdir("./336/file0" [pid 5065] umount2("./334", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", [pid 5064] newfstatat(AT_FDCWD, "./341/binderfs", [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./334/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(3, [pid 5065] newfstatat(AT_FDCWD, "./334/binderfs", [pid 5064] unlink("./341/binderfs" [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5065] unlink("./334/binderfs" [pid 5064] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8465] <... mount resumed>) = 0 [pid 5063] close(3 [pid 8465] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] <... close resumed>) = 0 [pid 8465] chdir("./file0" [pid 5063] rmdir("./336" [pid 8469] <... write resumed>) = 2097152 [pid 8465] <... chdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8469] munmap(0x7f41e0600000, 138412032 [pid 5063] mkdir("./337", 0777 [pid 8469] <... munmap resumed>) = 0 [pid 8465] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... mkdir resumed>) = 0 [pid 8465] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8465] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8469] openat(AT_FDCWD, "/dev/loop1", O_RDWR [ 310.678291][ T8470] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8469] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 3 [pid 8469] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8469] <... ioctl resumed>) = 0 [pid 5065] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./334/file0", [pid 5064] newfstatat(AT_FDCWD, "./341/file0", [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./334/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8469] close(3 [pid 8465] <... open resumed>) = 4 [pid 5065] <... openat resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./341/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8465] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] newfstatat(4, "", [pid 8469] <... close resumed>) = 0 [pid 8465] <... open resumed>) = 5 [pid 5064] <... openat resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8469] close(4 [pid 8465] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] getdents64(4, [pid 5064] newfstatat(4, "", [pid 8469] <... close resumed>) = 0 [pid 8465] <... mmap resumed>) = 0x20000000 [pid 8465] ftruncate(4, 33587195 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8469] mkdir("./file0", 0777 [pid 5065] getdents64(4, [pid 5064] getdents64(4, [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8465] <... ftruncate resumed>) = 0 [pid 5065] close(4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8469] <... mkdir resumed>) = 0 [pid 8465] unlink("./bus" [pid 5065] <... close resumed>) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] rmdir("./334/file0" [pid 5064] close(4) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] rmdir("./341/file0" [pid 8469] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8465] <... unlink resumed>) = 0 [pid 8465] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8465] exit_group(0) = ? [pid 8465] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8465, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 310.723889][ T8469] loop1: detected capacity change from 0 to 4096 [pid 5061] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] getdents64(3, [pid 5064] getdents64(3, [pid 5063] <... ioctl resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 5061] <... openat resumed>) = 3 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./341" [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5061] newfstatat(3, "", [pid 5065] close(3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... close resumed>) = 0 [pid 5061] getdents64(3, [pid 5065] rmdir("./334" [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8469] <... mount resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5061] umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8472 attached [pid 8469] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8472] set_robust_list(0x55555745a660, 24 [pid 8469] <... openat resumed>) = 3 [pid 5061] newfstatat(AT_FDCWD, "./342/binderfs", [pid 8469] chdir("./file0" [pid 8472] <... set_robust_list resumed>) = 0 [pid 8469] <... chdir resumed>) = 0 [pid 5065] mkdir("./335", 0777 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8472 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8469] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8472] chdir("./337" [pid 8469] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5061] unlink("./342/binderfs" [pid 8469] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] mkdir("./342", 0777 [pid 8472] <... chdir resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 8472] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 8472] <... prctl resumed>) = 0 [pid 8472] setpgid(0, 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8472] <... setpgid resumed>) = 0 [pid 8472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8472] write(3, "1000", 4) = 4 [pid 8472] close(3) = 0 [pid 8472] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5064] <... openat resumed>) = 3 [pid 8472] memfd_create("syzkaller", 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8472] <... memfd_create resumed>) = 3 [pid 8472] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8469] <... open resumed>) = 4 [pid 5061] <... umount2 resumed>) = 0 [ 310.777310][ T8471] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8469] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8469] <... open resumed>) = 5 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8469] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8472] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] newfstatat(AT_FDCWD, "./342/file0", [pid 5065] <... ioctl resumed>) = 0 [pid 8469] <... mmap resumed>) = 0x20000000 [pid 5065] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./342/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... openat resumed>) = 4 [pid 8469] ftruncate(4, 33587195 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 8469] <... ftruncate resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 8473 attached [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8473] set_robust_list(0x55555745a660, 24 [pid 5061] close(4) = 0 [pid 8473] <... set_robust_list resumed>) = 0 [pid 5061] rmdir("./342/file0" [pid 8473] chdir("./335" [pid 5061] <... rmdir resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8473 [pid 5061] getdents64(3, [pid 8473] <... chdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8473] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8469] unlink("./bus" [pid 8473] <... prctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 8473] setpgid(0, 0 [pid 5061] rmdir("./342" [pid 8473] <... setpgid resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8473] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8473] write(3, "1000", 4 [pid 5064] close(3 [pid 5061] mkdir("./343", 0777 [pid 8473] <... write resumed>) = 4 [pid 8472] <... write resumed>) = 2097152 [pid 8469] <... unlink resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 8473] close(3 [pid 8472] munmap(0x7f41e0600000, 138412032 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8469] sendfile(-1, -1, NULL, 281474978811909 [pid 8473] <... close resumed>) = 0 [pid 8472] <... munmap resumed>) = 0 [pid 8469] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8473] symlink("/dev/binderfs", "./binderfs" [pid 8469] exit_group(0 [pid 8473] <... symlink resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8474 [pid 8469] <... exit_group resumed>) = ? [pid 8473] memfd_create("syzkaller", 0) = 3 [pid 8473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8472] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8473] <... mmap resumed>) = 0x7f41e0600000 [pid 8472] <... openat resumed>) = 4 ./strace-static-x86_64: Process 8474 attached [pid 8474] set_robust_list(0x55555745a660, 24) = 0 [pid 8472] ioctl(4, LOOP_SET_FD, 3 [pid 8474] chdir("./342" [pid 8469] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8469, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8472] <... ioctl resumed>) = 0 [pid 5062] umount2("./336", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8474] <... chdir resumed>) = 0 [pid 8473] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8474] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8472] close(3 [pid 5062] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8472] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8474] <... prctl resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 8474] setpgid(0, 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8474] <... setpgid resumed>) = 0 [pid 5062] getdents64(3, [pid 8474] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8472] close(4 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8472] <... close resumed>) = 0 [pid 5062] umount2("./336/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8474] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8472] mkdir("./file0", 0777 [pid 5062] newfstatat(AT_FDCWD, "./336/binderfs", [pid 8474] write(3, "1000", 4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8474] <... write resumed>) = 4 [pid 5062] unlink("./336/binderfs" [pid 8474] close(3 [pid 8472] <... mkdir resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 8474] <... close resumed>) = 0 [pid 5062] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8474] symlink("/dev/binderfs", "./binderfs" [pid 8472] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8474] <... symlink resumed>) = 0 [pid 8474] memfd_create("syzkaller", 0) = 3 [pid 8474] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [ 310.941890][ T8472] loop2: detected capacity change from 0 to 4096 [pid 5062] <... umount2 resumed>) = 0 [pid 8473] <... write resumed>) = 2097152 [pid 5062] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8473] munmap(0x7f41e0600000, 138412032 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./336/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8472] <... mount resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./336/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8473] <... munmap resumed>) = 0 [pid 8473] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8472] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... openat resumed>) = 4 [pid 5061] <... ioctl resumed>) = 0 [pid 8473] <... openat resumed>) = 4 [pid 8473] ioctl(4, LOOP_SET_FD, 3 [pid 8472] <... openat resumed>) = 3 [pid 5062] newfstatat(4, "", [pid 5061] close(3 [pid 8472] chdir("./file0") = 0 [pid 8472] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... close resumed>) = 0 [pid 5062] getdents64(4, [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8472] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 8472] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8476 [pid 5062] close(4./strace-static-x86_64: Process 8476 attached [pid 8473] <... ioctl resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8472] <... open resumed>) = 4 [pid 8476] set_robust_list(0x55555745a660, 24 [pid 8473] close(3 [pid 5062] rmdir("./336/file0" [pid 8476] <... set_robust_list resumed>) = 0 [pid 8474] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8473] <... close resumed>) = 0 [pid 8472] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... rmdir resumed>) = 0 [pid 8472] <... open resumed>) = 5 [pid 5062] getdents64(3, [pid 8476] chdir("./343" [pid 8473] close(4 [pid 8472] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8476] <... chdir resumed>) = 0 [pid 8473] <... close resumed>) = 0 [pid 8472] <... mmap resumed>) = 0x20000000 [pid 5062] close(3 [pid 8476] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8473] mkdir("./file0", 0777 [pid 8472] ftruncate(4, 33587195 [pid 8476] <... prctl resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8476] setpgid(0, 0 [pid 8473] <... mkdir resumed>) = 0 [pid 5062] rmdir("./336" [pid 8476] <... setpgid resumed>) = 0 [pid 8473] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8472] <... ftruncate resumed>) = 0 [pid 8476] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8472] unlink("./bus" [pid 8476] <... openat resumed>) = 3 [pid 8476] write(3, "1000", 4) = 4 [pid 8476] close(3) = 0 [pid 8476] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] <... rmdir resumed>) = 0 [ 311.022431][ T8475] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 311.045598][ T8473] loop4: detected capacity change from 0 to 4096 [pid 8476] memfd_create("syzkaller", 0 [pid 5062] mkdir("./337", 0777 [pid 8476] <... memfd_create resumed>) = 3 [pid 8472] <... unlink resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 8476] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8472] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 8476] <... mmap resumed>) = 0x7f41e0600000 [pid 8472] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8473] <... mount resumed>) = 0 [pid 8473] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8472] exit_group(0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8473] <... openat resumed>) = 3 [pid 8472] <... exit_group resumed>) = ? [pid 8473] chdir("./file0") = 0 [pid 8473] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8473] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8474] <... write resumed>) = 2097152 [pid 8472] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8472, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5063] umount2("./337", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8474] munmap(0x7f41e0600000, 138412032 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8473] <... open resumed>) = 4 [pid 5063] getdents64(3, [pid 8474] <... munmap resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8474] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8473] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] umount2("./337/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8474] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8473] <... open resumed>) = 5 [pid 5063] newfstatat(AT_FDCWD, "./337/binderfs", [pid 8474] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 311.125635][ T8477] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8473] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] unlink("./337/binderfs" [pid 8473] <... mmap resumed>) = 0x20000000 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8473] ftruncate(4, 33587195 [pid 8476] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8474] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8474] close(3) = 0 [pid 5063] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8474] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8474] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./337/file0", [pid 8474] mkdir("./file0", 0777) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8473] <... ftruncate resumed>) = 0 [pid 5063] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./337/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8474] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 311.167781][ T8474] loop3: detected capacity change from 0 to 4096 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8474] <... mount resumed>) = 0 [pid 8473] unlink("./bus" [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8474] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8474] chdir("./file0") = 0 [pid 8474] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8474] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 8479 attached [pid 5063] close(4 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8479 [pid 5063] <... close resumed>) = 0 [pid 8473] <... unlink resumed>) = 0 [pid 5063] rmdir("./337/file0" [pid 8473] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5063] <... rmdir resumed>) = 0 [pid 8479] set_robust_list(0x55555745a660, 24 [pid 8473] exit_group(0 [pid 8479] <... set_robust_list resumed>) = 0 [pid 8476] <... write resumed>) = 2097152 [pid 8474] <... open resumed>) = 4 [pid 8473] <... exit_group resumed>) = ? [pid 5063] getdents64(3, [pid 8476] munmap(0x7f41e0600000, 138412032 [pid 8474] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./337" [pid 8479] chdir("./337" [pid 8476] <... munmap resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8476] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8479] <... chdir resumed>) = 0 [pid 8479] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8476] <... openat resumed>) = 4 [pid 8474] <... open resumed>) = 5 [ 311.213183][ T8478] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] mkdir("./338", 0777 [pid 8479] <... prctl resumed>) = 0 [pid 8476] ioctl(4, LOOP_SET_FD, 3 [pid 8474] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... mkdir resumed>) = 0 [pid 8474] <... mmap resumed>) = 0x20000000 [pid 8479] setpgid(0, 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8479] <... setpgid resumed>) = 0 [pid 8474] ftruncate(4, 33587195 [pid 5063] <... openat resumed>) = 3 [pid 8479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8479] <... openat resumed>) = 3 [pid 8473] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8473, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8479] write(3, "1000", 4 [pid 8474] <... ftruncate resumed>) = 0 [pid 8479] <... write resumed>) = 4 [pid 8476] <... ioctl resumed>) = 0 [pid 8474] unlink("./bus" [pid 8479] close(3 [pid 8476] close(3 [pid 8479] <... close resumed>) = 0 [pid 8476] <... close resumed>) = 0 [pid 8476] close(4 [pid 5065] umount2("./335", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8479] symlink("/dev/binderfs", "./binderfs" [pid 8476] <... close resumed>) = 0 [pid 8476] mkdir("./file0", 0777 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8479] <... symlink resumed>) = 0 [pid 8476] <... mkdir resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", [pid 8479] memfd_create("syzkaller", 0 [pid 8476] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8474] <... unlink resumed>) = 0 [pid 8474] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8474] exit_group(0) = ? [pid 8474] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8474, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [ 311.262288][ T8476] loop0: detected capacity change from 0 to 4096 [pid 5065] getdents64(3, [pid 8479] <... memfd_create resumed>) = 3 [pid 5063] <... ioctl resumed>) = 0 [pid 5064] umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8479] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] <... openat resumed>) = 3 [pid 5065] umount2("./335/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] newfstatat(3, "", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./335/binderfs", [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] unlink("./335/binderfs" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... unlink resumed>) = 0 [pid 5063] close(3 [pid 5065] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] newfstatat(AT_FDCWD, "./342/binderfs", [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./342/binderfs"./strace-static-x86_64: Process 8480 attached [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8480 [pid 8480] set_robust_list(0x55555745a660, 24) = 0 [pid 8480] chdir("./338") = 0 [pid 8480] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8480] setpgid(0, 0) = 0 [pid 8480] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8480] write(3, "1000", 4) = 4 [pid 8480] close(3 [pid 5064] <... unlink resumed>) = 0 [pid 8480] <... close resumed>) = 0 [pid 8480] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8480] memfd_create("syzkaller", 0 [pid 5064] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8480] <... memfd_create resumed>) = 3 [pid 8480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5065] <... umount2 resumed>) = 0 [pid 8476] <... mount resumed>) = 0 [pid 8480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8476] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5064] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8476] chdir("./file0" [pid 5065] newfstatat(AT_FDCWD, "./335/file0", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8476] <... chdir resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] newfstatat(AT_FDCWD, "./342/file0", [pid 5065] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./335/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8476] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5065] <... openat resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./342/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8476] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] newfstatat(4, "", [pid 5064] <... openat resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] newfstatat(4, "", [pid 5065] getdents64(4, [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./342/file0") = 0 [pid 5065] getdents64(4, [pid 5064] getdents64(3, [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] close(3 [pid 5065] rmdir("./335/file0" [pid 5064] <... close resumed>) = 0 [pid 8476] <... open resumed>) = 4 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] rmdir("./342" [pid 8476] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] mkdir("./343", 0777 [pid 8479] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8476] <... open resumed>) = 5 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 8476] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] close(3 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8476] <... mmap resumed>) = 0x20000000 [pid 5065] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 8476] ftruncate(4, 33587195 [pid 5065] rmdir("./335") = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [ 311.381312][ T8481] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] mkdir("./336", 0777) = 0 [pid 8480] <... write resumed>) = 2097152 [pid 8476] <... ftruncate resumed>) = 0 [pid 8480] munmap(0x7f41e0600000, 138412032 [pid 8476] unlink("./bus" [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8480] <... munmap resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8480] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8479] <... write resumed>) = 2097152 [pid 8476] <... unlink resumed>) = 0 [pid 8480] <... openat resumed>) = 4 [pid 8479] munmap(0x7f41e0600000, 138412032 [pid 8476] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8480] ioctl(4, LOOP_SET_FD, 3 [pid 8479] <... munmap resumed>) = 0 [pid 8476] exit_group(0 [pid 8479] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8476] <... exit_group resumed>) = ? [pid 8479] <... openat resumed>) = 4 [pid 8479] ioctl(4, LOOP_SET_FD, 3 [pid 8480] <... ioctl resumed>) = 0 [pid 8476] +++ exited with 0 +++ [pid 8480] close(3) = 0 [pid 8480] close(4) = 0 [pid 8480] mkdir("./file0", 0777) = 0 [pid 8480] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8479] <... ioctl resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8476, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8479] close(3 [pid 5064] <... ioctl resumed>) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 8479] <... close resumed>) = 0 [pid 5061] <... restart_syscall resumed>) = 0 [pid 5061] umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", [pid 8479] close(4) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8479] mkdir("./file0", 0777 [pid 5061] getdents64(3, [pid 8479] <... mkdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./343/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./343/binderfs") = 0 [pid 8479] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 311.467023][ T8480] loop2: detected capacity change from 0 to 4096 [ 311.483617][ T8479] loop1: detected capacity change from 0 to 4096 [pid 5061] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] close(3 [pid 8480] <... mount resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 8480] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8480] <... openat resumed>) = 3 [pid 8480] chdir("./file0" [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8485 attached [pid 8485] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8485 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8484 ./strace-static-x86_64: Process 8484 attached [pid 8485] <... set_robust_list resumed>) = 0 [pid 8484] set_robust_list(0x55555745a660, 24 [pid 8485] chdir("./336" [pid 8480] <... chdir resumed>) = 0 [pid 8480] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8485] <... chdir resumed>) = 0 [pid 8485] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8484] <... set_robust_list resumed>) = 0 [pid 8485] <... prctl resumed>) = 0 [pid 8484] chdir("./343" [pid 8485] setpgid(0, 0 [pid 8484] <... chdir resumed>) = 0 [pid 8485] <... setpgid resumed>) = 0 [pid 8484] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8484] <... prctl resumed>) = 0 [pid 8485] <... openat resumed>) = 3 [pid 8484] setpgid(0, 0 [pid 8485] write(3, "1000", 4 [pid 8484] <... setpgid resumed>) = 0 [pid 8485] <... write resumed>) = 4 [pid 8484] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8485] close(3 [pid 8480] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8484] <... openat resumed>) = 3 [pid 8485] <... close resumed>) = 0 [pid 8485] symlink("/dev/binderfs", "./binderfs" [pid 8484] write(3, "1000", 4) = 4 [pid 8484] close(3 [pid 8485] <... symlink resumed>) = 0 [pid 8484] <... close resumed>) = 0 [pid 8485] memfd_create("syzkaller", 0 [pid 8480] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8484] symlink("/dev/binderfs", "./binderfs" [pid 8485] <... memfd_create resumed>) = 3 [pid 8484] <... symlink resumed>) = 0 [pid 8485] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8484] memfd_create("syzkaller", 0 [pid 8485] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] <... umount2 resumed>) = 0 [pid 8479] <... mount resumed>) = 0 [pid 5061] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8484] <... memfd_create resumed>) = 3 [pid 8479] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8479] <... openat resumed>) = 3 [pid 5061] newfstatat(AT_FDCWD, "./343/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8479] chdir("./file0" [pid 5061] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8484] <... mmap resumed>) = 0x7f41e0600000 [pid 8480] <... open resumed>) = 4 [pid 8479] <... chdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8480] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8479] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] openat(AT_FDCWD, "./343/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8480] <... open resumed>) = 5 [pid 8479] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 311.525857][ T8482] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 311.545472][ T8483] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8480] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8479] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", [pid 8480] <... mmap resumed>) = 0x20000000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8480] ftruncate(4, 33587195 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 8479] <... open resumed>) = 4 [pid 5061] <... close resumed>) = 0 [pid 8479] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] rmdir("./343/file0" [pid 8479] <... open resumed>) = 5 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 8480] <... ftruncate resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./343" [pid 8479] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5061] mkdir("./344", 0777 [pid 8479] ftruncate(4, 33587195 [pid 5061] <... mkdir resumed>) = 0 [pid 8480] unlink("./bus" [pid 8479] <... ftruncate resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8479] unlink("./bus" [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8480] <... unlink resumed>) = 0 [pid 8479] <... unlink resumed>) = 0 [pid 8480] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8479] sendfile(-1, -1, NULL, 281474978811909 [pid 8480] exit_group(0 [pid 8484] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8479] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8480] <... exit_group resumed>) = ? [pid 8485] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8479] exit_group(0 [pid 8480] +++ exited with 0 +++ [pid 8479] <... exit_group resumed>) = ? [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8480, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5063] umount2("./338", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./338/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./338/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8479] +++ exited with 0 +++ [pid 5063] unlink("./338/binderfs" [pid 5061] <... ioctl resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8479, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5062] umount2("./337", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./337/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./337/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./337/binderfs") = 0 [pid 5062] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8486 [pid 5063] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 8486 attached [pid 5063] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8486] set_robust_list(0x55555745a660, 24 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8486] <... set_robust_list resumed>) = 0 [pid 8485] <... write resumed>) = 2097152 [pid 5063] newfstatat(AT_FDCWD, "./338/file0", [pid 8486] chdir("./344" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8486] <... chdir resumed>) = 0 [pid 8484] <... write resumed>) = 2097152 [pid 5063] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8486] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8484] munmap(0x7f41e0600000, 138412032 [pid 8485] munmap(0x7f41e0600000, 138412032 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8486] <... prctl resumed>) = 0 [pid 8484] <... munmap resumed>) = 0 [pid 8485] <... munmap resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./338/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = 0 [pid 8486] setpgid(0, 0 [pid 8484] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... openat resumed>) = 4 [pid 8486] <... setpgid resumed>) = 0 [pid 8484] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 8486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8484] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8485] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] getdents64(4, [pid 8485] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8485] ioctl(4, LOOP_SET_FD, 3 [pid 5063] getdents64(4, [pid 8486] <... openat resumed>) = 3 [pid 8484] <... ioctl resumed>) = 0 [pid 8486] write(3, "1000", 4 [pid 8484] close(3 [pid 8485] <... ioctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8486] <... write resumed>) = 4 [pid 8484] <... close resumed>) = 0 [pid 8485] close(3 [pid 5063] close(4 [pid 5062] newfstatat(AT_FDCWD, "./337/file0", [pid 8486] close(3 [pid 8484] close(4 [pid 8485] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8486] <... close resumed>) = 0 [pid 8484] <... close resumed>) = 0 [pid 8485] close(4 [pid 5063] rmdir("./338/file0" [pid 5062] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8486] symlink("/dev/binderfs", "./binderfs" [pid 8484] mkdir("./file0", 0777 [pid 8485] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8485] mkdir("./file0", 0777 [pid 5063] getdents64(3, [pid 5062] openat(AT_FDCWD, "./337/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8484] <... mkdir resumed>) = 0 [pid 8485] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5063] close(3 [pid 5062] newfstatat(4, "", [pid 8486] <... symlink resumed>) = 0 [pid 8484] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] rmdir("./338" [pid 5062] getdents64(4, [pid 8485] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] mkdir("./339", 0777 [pid 5062] getdents64(4, [pid 8486] memfd_create("syzkaller", 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 8486] <... memfd_create resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./337/file0" [pid 8486] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... rmdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8486] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] close(3) = 0 [pid 5062] rmdir("./337") = 0 [ 311.778505][ T8484] loop3: detected capacity change from 0 to 4096 [ 311.782319][ T8485] loop4: detected capacity change from 0 to 4096 [pid 5062] mkdir("./338", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8486] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8484] <... mount resumed>) = 0 [pid 8484] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8486] <... write resumed>) = 2097152 [pid 8484] <... openat resumed>) = 3 [pid 8486] munmap(0x7f41e0600000, 138412032 [pid 8484] chdir("./file0") = 0 [pid 8484] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8484] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8485] <... mount resumed>) = 0 [pid 8485] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8485] chdir("./file0" [pid 8486] <... munmap resumed>) = 0 [pid 8485] <... chdir resumed>) = 0 [pid 8486] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8485] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8486] <... openat resumed>) = 4 [pid 8485] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 311.846900][ T8487] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 311.880716][ T8488] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8486] ioctl(4, LOOP_SET_FD, 3 [pid 8485] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8486] <... ioctl resumed>) = 0 [pid 8484] <... open resumed>) = 4 [pid 5063] <... ioctl resumed>) = 0 [pid 8486] close(3) = 0 [pid 8486] close(4) = 0 [pid 8486] mkdir("./file0", 0777) = 0 [pid 5063] close(3 [pid 8486] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8484] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8484] <... open resumed>) = 5 ./strace-static-x86_64: Process 8489 attached [pid 8484] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... ioctl resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8489 [pid 8485] <... open resumed>) = 4 [pid 8489] set_robust_list(0x55555745a660, 24 [pid 8484] <... mmap resumed>) = 0x20000000 [pid 8489] <... set_robust_list resumed>) = 0 [pid 8484] ftruncate(4, 33587195 [pid 8489] chdir("./339") = 0 [pid 8485] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] close(3 [pid 8489] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... close resumed>) = 0 [pid 8489] <... prctl resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8489] setpgid(0, 0) = 0 [ 311.902145][ T8486] loop0: detected capacity change from 0 to 4096 [pid 8489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 8490 attached [pid 8484] <... ftruncate resumed>) = 0 [pid 8485] <... open resumed>) = 5 [pid 8490] set_robust_list(0x55555745a660, 24 [pid 8489] <... openat resumed>) = 3 [pid 8484] unlink("./bus" [pid 8485] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8490 [pid 8490] <... set_robust_list resumed>) = 0 [pid 8490] chdir("./338" [pid 8485] <... mmap resumed>) = 0x20000000 [pid 8489] write(3, "1000", 4) = 4 [pid 8485] ftruncate(4, 33587195 [pid 8490] <... chdir resumed>) = 0 [pid 8489] close(3 [pid 8490] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8489] <... close resumed>) = 0 [pid 8490] <... prctl resumed>) = 0 [pid 8489] symlink("/dev/binderfs", "./binderfs" [pid 8490] setpgid(0, 0 [pid 8485] <... ftruncate resumed>) = 0 [pid 8490] <... setpgid resumed>) = 0 [pid 8484] <... unlink resumed>) = 0 [pid 8489] <... symlink resumed>) = 0 [pid 8484] sendfile(-1, -1, NULL, 281474978811909 [pid 8490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8484] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8490] <... openat resumed>) = 3 [pid 8489] memfd_create("syzkaller", 0 [pid 8484] exit_group(0 [pid 8490] write(3, "1000", 4 [pid 8489] <... memfd_create resumed>) = 3 [pid 8484] <... exit_group resumed>) = ? [pid 8490] <... write resumed>) = 4 [pid 8489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8485] unlink("./bus" [pid 8490] close(3) = 0 [pid 8489] <... mmap resumed>) = 0x7f41e0600000 [pid 8486] <... mount resumed>) = 0 [pid 8490] symlink("/dev/binderfs", "./binderfs" [pid 8486] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8490] <... symlink resumed>) = 0 [pid 8486] <... openat resumed>) = 3 [pid 8486] chdir("./file0" [pid 8490] memfd_create("syzkaller", 0 [pid 8486] <... chdir resumed>) = 0 [pid 8490] <... memfd_create resumed>) = 3 [pid 8490] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8486] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8490] <... mmap resumed>) = 0x7f41e0600000 [pid 8486] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8484] +++ exited with 0 +++ [pid 8486] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8484, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8485] <... unlink resumed>) = 0 [pid 8485] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8485] exit_group(0) = ? [pid 5064] umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 311.987989][ T8491] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8486] <... open resumed>) = 4 [pid 5064] newfstatat(3, "", [pid 8486] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8486] <... open resumed>) = 5 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8486] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8486] <... mmap resumed>) = 0x20000000 [pid 5064] newfstatat(AT_FDCWD, "./343/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8486] ftruncate(4, 33587195 [pid 5064] unlink("./343/binderfs") = 0 [pid 5064] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8490] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8485] +++ exited with 0 +++ [pid 8486] <... ftruncate resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8485, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=3 /* 0.03 s */} --- [pid 5065] umount2("./336", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8486] unlink("./bus" [pid 5065] getdents64(3, [pid 5064] <... umount2 resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8486] <... unlink resumed>) = 0 [pid 5065] umount2("./336/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8486] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./336/binderfs", [pid 8486] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8486] exit_group(0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] newfstatat(AT_FDCWD, "./343/file0", [pid 8486] <... exit_group resumed>) = ? [pid 5065] unlink("./336/binderfs" [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... unlink resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "./343/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8486] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8486, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5064] getdents64(4, [pid 8489] <... write resumed>) = 2097152 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8489] munmap(0x7f41e0600000, 138412032 [pid 5064] close(4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... close resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] rmdir("./343/file0" [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./344/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./344/binderfs" [pid 8490] <... write resumed>) = 2097152 [pid 5061] <... unlink resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5061] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8490] munmap(0x7f41e0600000, 138412032 [pid 8489] <... munmap resumed>) = 0 [pid 5065] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(3, [pid 8489] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8490] <... munmap resumed>) = 0 [pid 8489] <... openat resumed>) = 4 [pid 5065] newfstatat(AT_FDCWD, "./336/file0", [pid 5064] close(3 [pid 8490] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8489] ioctl(4, LOOP_SET_FD, 3 [pid 8490] <... openat resumed>) = 4 [pid 8489] <... ioctl resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... close resumed>) = 0 [pid 8490] ioctl(4, LOOP_SET_FD, 3 [pid 5064] rmdir("./343" [pid 8489] close(3 [pid 5065] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8490] <... ioctl resumed>) = 0 [pid 8489] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] mkdir("./344", 0777 [pid 8490] close(3 [pid 8489] close(4 [pid 5065] openat(AT_FDCWD, "./336/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8490] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 8489] <... close resumed>) = 0 [pid 5065] newfstatat(4, "", [pid 5064] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8490] close(4 [pid 8489] mkdir("./file0", 0777 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./344/file0", [pid 8490] <... close resumed>) = 0 [pid 8489] <... mkdir resumed>) = 0 [pid 5065] getdents64(4, [pid 5064] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8490] mkdir("./file0", 0777 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8489] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8490] <... mkdir resumed>) = 0 [pid 5065] getdents64(4, [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8490] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] openat(AT_FDCWD, "./344/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] close(4 [pid 5061] <... openat resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 5065] rmdir("./336/file0" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] getdents64(3, [pid 5061] close(4) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] rmdir("./344/file0") = 0 [ 312.139130][ T8489] loop2: detected capacity change from 0 to 4096 [ 312.146748][ T8490] loop1: detected capacity change from 0 to 4096 [pid 5061] getdents64(3, [pid 5065] close(3) = 0 [pid 5065] rmdir("./336" [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 8489] <... mount resumed>) = 0 [pid 5061] close(3) = 0 [pid 8489] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] mkdir("./337", 0777 [pid 5061] rmdir("./344") = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5061] mkdir("./345", 0777 [pid 8489] <... openat resumed>) = 3 [pid 8489] chdir("./file0" [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... mkdir resumed>) = 0 [pid 8489] <... chdir resumed>) = 0 [pid 8490] <... mount resumed>) = 0 [pid 8489] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8490] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8489] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8490] <... openat resumed>) = 3 [pid 8489] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] <... openat resumed>) = 3 [pid 8490] chdir("./file0") = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8490] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8490] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8489] <... open resumed>) = 4 [pid 8489] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8490] <... open resumed>) = 4 [pid 8490] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8489] <... open resumed>) = 5 [pid 8490] <... open resumed>) = 5 [pid 8489] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8490] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0x20000000 [pid 8490] ftruncate(4, 33587195 [ 312.194794][ T8492] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 312.216063][ T8493] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8489] ftruncate(4, 33587195 [pid 8490] <... ftruncate resumed>) = 0 [pid 8489] <... ftruncate resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 8490] unlink("./bus" [pid 8489] unlink("./bus" [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8494 [pid 8490] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 8494 attached [pid 8490] sendfile(-1, -1, NULL, 281474978811909 [pid 8489] <... unlink resumed>) = 0 [pid 8490] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8489] sendfile(-1, -1, NULL, 281474978811909 [pid 8494] set_robust_list(0x55555745a660, 24 [pid 8490] exit_group(0 [pid 8489] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] <... ioctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8494] <... set_robust_list resumed>) = 0 [pid 8490] <... exit_group resumed>) = ? [pid 8489] exit_group(0 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] close(3./strace-static-x86_64: Process 8495 attached [pid 8494] chdir("./344" [pid 5061] <... close resumed>) = 0 [pid 8495] set_robust_list(0x55555745a660, 24 [pid 8494] <... chdir resumed>) = 0 [pid 8489] <... exit_group resumed>) = ? [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8495 [pid 8495] <... set_robust_list resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8495] chdir("./337" [pid 8494] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8495] <... chdir resumed>) = 0 [pid 8494] setpgid(0, 0 [pid 8490] +++ exited with 0 +++ [pid 8495] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8494] <... setpgid resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8490, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8494] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8495] <... prctl resumed>) = 0 [pid 8494] <... openat resumed>) = 3 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8496 [pid 8495] setpgid(0, 0 [pid 8494] write(3, "1000", 4 [pid 8495] <... setpgid resumed>) = 0 [pid 8495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] umount2("./338", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8496 attached [pid 8495] <... openat resumed>) = 3 [pid 8494] <... write resumed>) = 4 [pid 8489] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8496] set_robust_list(0x55555745a660, 24 [pid 8495] write(3, "1000", 4 [pid 8494] close(3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8489, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5062] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8496] <... set_robust_list resumed>) = 0 [pid 8495] <... write resumed>) = 4 [pid 8494] <... close resumed>) = 0 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5062] <... openat resumed>) = 3 [pid 8496] chdir("./345" [pid 8495] close(3 [pid 8494] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... restart_syscall resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 8496] <... chdir resumed>) = 0 [pid 8495] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8496] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8495] symlink("/dev/binderfs", "./binderfs" [pid 5062] getdents64(3, [pid 8496] <... prctl resumed>) = 0 [pid 8495] <... symlink resumed>) = 0 [pid 8494] <... symlink resumed>) = 0 [pid 5063] umount2("./339", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8496] setpgid(0, 0 [pid 8495] memfd_create("syzkaller", 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./338/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8496] <... setpgid resumed>) = 0 [pid 8495] <... memfd_create resumed>) = 3 [pid 8494] memfd_create("syzkaller", 0 [pid 5063] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8495] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8494] <... memfd_create resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5062] newfstatat(AT_FDCWD, "./338/binderfs", [pid 8496] <... openat resumed>) = 3 [pid 8495] <... mmap resumed>) = 0x7f41e0600000 [pid 8494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] newfstatat(3, "", [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8494] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8496] write(3, "1000", 4 [pid 5063] getdents64(3, [pid 5062] unlink("./338/binderfs" [pid 8496] <... write resumed>) = 4 [pid 5062] <... unlink resumed>) = 0 [pid 8496] close(3 [pid 5062] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8496] <... close resumed>) = 0 [pid 5063] umount2("./339/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8496] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8496] <... symlink resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./339/binderfs", [pid 8496] memfd_create("syzkaller", 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5063] unlink("./339/binderfs" [pid 8496] <... memfd_create resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8496] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8494] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./339/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./338/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8495] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] openat(AT_FDCWD, "./339/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8496] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... openat resumed>) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] openat(AT_FDCWD, "./338/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(4, [pid 5062] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5062] getdents64(4, [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] close(4 [pid 5062] getdents64(4, [pid 8494] <... write resumed>) = 2097152 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8494] munmap(0x7f41e0600000, 138412032 [pid 5063] <... close resumed>) = 0 [pid 5062] close(4 [pid 5063] rmdir("./339/file0" [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./338/file0" [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 8495] <... write resumed>) = 2097152 [pid 8494] <... munmap resumed>) = 0 [pid 5063] getdents64(3, [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5063] close(3 [pid 5062] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] rmdir("./338" [pid 5063] rmdir("./339" [pid 5062] <... rmdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8494] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5062] mkdir("./339", 0777 [pid 8495] munmap(0x7f41e0600000, 138412032 [pid 8494] ioctl(4, LOOP_SET_FD, 3 [pid 5063] mkdir("./340", 0777 [pid 8496] <... write resumed>) = 2097152 [pid 5062] <... mkdir resumed>) = 0 [pid 8496] munmap(0x7f41e0600000, 138412032) = 0 [pid 8495] <... munmap resumed>) = 0 [pid 8494] <... ioctl resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8495] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8494] close(3 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8495] <... openat resumed>) = 4 [pid 8494] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8496] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8495] ioctl(4, LOOP_SET_FD, 3 [pid 8494] close(4 [pid 8496] <... openat resumed>) = 4 [pid 5062] <... openat resumed>) = 3 [pid 8496] ioctl(4, LOOP_SET_FD, 3 [pid 8494] <... close resumed>) = 0 [pid 8494] mkdir("./file0", 0777 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8494] <... mkdir resumed>) = 0 [pid 8495] <... ioctl resumed>) = 0 [pid 8495] close(3 [pid 8494] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8495] <... close resumed>) = 0 [pid 8495] close(4) = 0 [pid 8495] mkdir("./file0", 0777) = 0 [pid 8495] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8496] <... ioctl resumed>) = 0 [pid 8496] close(3) = 0 [pid 8496] close(4) = 0 [pid 8496] mkdir("./file0", 0777) = 0 [ 312.472837][ T8494] loop3: detected capacity change from 0 to 4096 [ 312.495871][ T8495] loop4: detected capacity change from 0 to 4096 [ 312.496767][ T8496] loop0: detected capacity change from 0 to 4096 [pid 8496] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8495] <... mount resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8495] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] <... ioctl resumed>) = 0 [pid 8495] chdir("./file0") = 0 [pid 5063] close(3 [pid 8495] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 8495] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 312.541274][ T8497] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8499 attached [pid 8495] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8499] set_robust_list(0x55555745a660, 24 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8499 [pid 5062] close(3 [pid 8499] <... set_robust_list resumed>) = 0 [pid 8499] chdir("./340" [pid 8494] <... mount resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8494] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8499] <... chdir resumed>) = 0 [pid 8494] <... openat resumed>) = 3 [pid 8494] chdir("./file0" [pid 8499] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8494] <... chdir resumed>) = 0 [pid 8499] <... prctl resumed>) = 0 [pid 8494] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 8500 attached [pid 8499] setpgid(0, 0 [pid 8495] <... open resumed>) = 4 [pid 8494] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8500] set_robust_list(0x55555745a660, 24 [pid 8499] <... setpgid resumed>) = 0 [pid 8495] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8494] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8500 [pid 8500] <... set_robust_list resumed>) = 0 [pid 8499] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8500] chdir("./339" [pid 8499] <... openat resumed>) = 3 [pid 8495] <... open resumed>) = 5 [pid 8500] <... chdir resumed>) = 0 [pid 8495] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8500] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8500] setpgid(0, 0 [pid 8499] write(3, "1000", 4 [pid 8495] <... mmap resumed>) = 0x20000000 [pid 8500] <... setpgid resumed>) = 0 [pid 8499] <... write resumed>) = 4 [pid 8495] ftruncate(4, 33587195 [pid 8500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8499] close(3 [pid 8495] <... ftruncate resumed>) = 0 [pid 8499] <... close resumed>) = 0 [pid 8499] symlink("/dev/binderfs", "./binderfs" [pid 8500] <... openat resumed>) = 3 [pid 8500] write(3, "1000", 4 [pid 8499] <... symlink resumed>) = 0 [ 312.592053][ T8498] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8495] unlink("./bus" [pid 8499] memfd_create("syzkaller", 0 [pid 8500] <... write resumed>) = 4 [pid 8495] <... unlink resumed>) = 0 [pid 8495] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8495] exit_group(0) = ? [pid 8500] close(3 [pid 8499] <... memfd_create resumed>) = 3 [pid 8500] <... close resumed>) = 0 [pid 8499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8500] symlink("/dev/binderfs", "./binderfs" [pid 8499] <... mmap resumed>) = 0x7f41e0600000 [pid 8500] <... symlink resumed>) = 0 [pid 8494] <... open resumed>) = 4 [pid 8494] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8500] memfd_create("syzkaller", 0 [pid 8496] <... mount resumed>) = 0 [pid 8494] <... open resumed>) = 5 [pid 8496] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8494] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8500] <... memfd_create resumed>) = 3 [pid 8496] <... openat resumed>) = 3 [pid 8496] chdir("./file0") = 0 [pid 8496] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8496] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8494] <... mmap resumed>) = 0x20000000 [pid 8494] ftruncate(4, 33587195 [pid 8500] <... mmap resumed>) = 0x7f41e0600000 [pid 8496] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8495] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8495, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8496] <... open resumed>) = 4 [pid 8494] <... ftruncate resumed>) = 0 [pid 8496] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8496] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8494] unlink("./bus" [pid 5065] umount2("./337", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8496] <... ftruncate resumed>) = 0 [pid 8499] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8494] <... unlink resumed>) = 0 [pid 5065] newfstatat(3, "", [pid 8494] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8496] unlink("./bus" [pid 8494] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./337/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8500] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8494] exit_group(0 [pid 5065] newfstatat(AT_FDCWD, "./337/binderfs", [pid 8494] <... exit_group resumed>) = ? [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./337/binderfs") = 0 [pid 8496] <... unlink resumed>) = 0 [pid 5065] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8496] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8496] exit_group(0) = ? [pid 8496] +++ exited with 0 +++ [pid 8494] +++ exited with 0 +++ [pid 5065] <... umount2 resumed>) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8494, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8496, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8500] <... write resumed>) = 2097152 [pid 8499] <... write resumed>) = 2097152 [pid 5065] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8500] munmap(0x7f41e0600000, 138412032 [pid 8499] munmap(0x7f41e0600000, 138412032 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8500] <... munmap resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./337/file0", [pid 8500] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... openat resumed>) = 3 [pid 8500] <... openat resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(3, "", [pid 8500] ioctl(4, LOOP_SET_FD, 3 [pid 8499] <... munmap resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] openat(AT_FDCWD, "./337/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(3, [pid 5064] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] <... openat resumed>) = 3 [pid 5061] umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] newfstatat(3, "", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(AT_FDCWD, "./345/binderfs", [pid 5065] newfstatat(4, "", [pid 5064] getdents64(3, [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8500] <... ioctl resumed>) = 0 [pid 8499] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] unlink("./345/binderfs" [pid 8500] close(3 [pid 8499] <... openat resumed>) = 4 [pid 5065] getdents64(4, [pid 5064] umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8500] <... close resumed>) = 0 [pid 8499] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] newfstatat(AT_FDCWD, "./344/binderfs", [pid 5061] <... unlink resumed>) = 0 [pid 5065] getdents64(4, [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] unlink("./344/binderfs" [pid 5061] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] close(4 [pid 5064] <... unlink resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] rmdir("./337/file0") = 0 [pid 5065] getdents64(3, [pid 8500] close(4 [pid 8499] <... ioctl resumed>) = 0 [pid 8500] <... close resumed>) = 0 [pid 8499] close(3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8500] mkdir("./file0", 0777 [pid 8499] <... close resumed>) = 0 [pid 5065] close(3 [pid 5064] <... umount2 resumed>) = 0 [pid 5061] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8500] <... mkdir resumed>) = 0 [pid 8499] close(4 [pid 5065] <... close resumed>) = 0 [pid 5064] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8499] <... close resumed>) = 0 [pid 8500] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] rmdir("./337" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... rmdir resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./344/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] mkdir("./338", 0777 [pid 5064] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./344/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8499] mkdir("./file0", 0777 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... openat resumed>) = 4 [pid 5061] newfstatat(AT_FDCWD, "./345/file0", [pid 8499] <... mkdir resumed>) = 0 [ 312.806241][ T8500] loop1: detected capacity change from 0 to 4096 [ 312.817087][ T8499] loop2: detected capacity change from 0 to 4096 [pid 8499] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... openat resumed>) = 3 [pid 5064] newfstatat(4, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] openat(AT_FDCWD, "./345/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5064] close(4) = 0 [pid 5061] newfstatat(4, "", [pid 5064] rmdir("./344/file0") = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 5061] getdents64(4, [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./344" [pid 5061] getdents64(4, [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] mkdir("./345", 0777 [pid 5061] close(4) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 8500] <... mount resumed>) = 0 [pid 5061] rmdir("./345/file0" [pid 8500] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8500] <... openat resumed>) = 3 [pid 5061] <... rmdir resumed>) = 0 [pid 8500] chdir("./file0" [pid 5064] <... openat resumed>) = 3 [pid 5061] getdents64(3, [pid 8499] <... mount resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8499] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8500] <... chdir resumed>) = 0 [pid 8499] <... openat resumed>) = 3 [pid 5061] close(3 [pid 8499] chdir("./file0" [pid 5061] <... close resumed>) = 0 [pid 8500] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] rmdir("./345" [pid 8500] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8500] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8499] <... chdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8499] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] mkdir("./346", 0777 [pid 8500] <... open resumed>) = 4 [pid 8499] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... mkdir resumed>) = 0 [pid 8500] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8499] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8500] <... open resumed>) = 5 [pid 8500] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8500] <... mmap resumed>) = 0x20000000 [pid 8500] ftruncate(4, 33587195) = 0 [pid 8500] unlink("./bus" [pid 5065] <... ioctl resumed>) = 0 [pid 5065] close(3) = 0 [pid 8500] <... unlink resumed>) = 0 [ 312.881881][ T8502] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 312.905355][ T8503] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8500] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8500] exit_group(0) = ? [pid 8499] <... open resumed>) = 4 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8499] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000./strace-static-x86_64: Process 8504 attached [pid 8500] +++ exited with 0 +++ [pid 8499] <... open resumed>) = 5 [pid 8499] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8504 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8500, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 8499] <... mmap resumed>) = 0x20000000 [pid 5062] umount2("./339", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8504] set_robust_list(0x55555745a660, 24 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8504] <... set_robust_list resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8504] chdir("./338" [pid 5062] newfstatat(3, "", [pid 8504] <... chdir resumed>) = 0 [pid 8499] ftruncate(4, 33587195 [pid 8504] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... ioctl resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8504] <... prctl resumed>) = 0 [pid 5062] getdents64(3, [pid 5064] close(3 [pid 5061] close(3 [pid 8504] setpgid(0, 0 [pid 5064] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... close resumed>) = 0 [pid 8504] <... setpgid resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] umount2("./339/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8505 attached [pid 8504] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8499] <... ftruncate resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./339/binderfs", [pid 8505] set_robust_list(0x55555745a660, 24 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8505 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 8506 attached [pid 8505] <... set_robust_list resumed>) = 0 [pid 8504] <... openat resumed>) = 3 [pid 8499] unlink("./bus" [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8506 [pid 5062] unlink("./339/binderfs" [pid 8506] set_robust_list(0x55555745a660, 24 [pid 8505] chdir("./346") = 0 [pid 8504] write(3, "1000", 4 [pid 5062] <... unlink resumed>) = 0 [pid 8506] <... set_robust_list resumed>) = 0 [pid 8505] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8504] <... write resumed>) = 4 [pid 5062] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8506] chdir("./345" [pid 8505] <... prctl resumed>) = 0 [pid 8504] close(3 [pid 8506] <... chdir resumed>) = 0 [pid 8505] setpgid(0, 0 [pid 8504] <... close resumed>) = 0 [pid 8499] <... unlink resumed>) = 0 [pid 8506] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8504] symlink("/dev/binderfs", "./binderfs" [pid 8499] sendfile(-1, -1, NULL, 281474978811909 [pid 8505] <... setpgid resumed>) = 0 [pid 8506] <... prctl resumed>) = 0 [pid 8505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8506] setpgid(0, 0 [pid 8504] <... symlink resumed>) = 0 [pid 8499] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8506] <... setpgid resumed>) = 0 [pid 8506] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8499] exit_group(0 [pid 8506] <... openat resumed>) = 3 [pid 8505] <... openat resumed>) = 3 [pid 8505] write(3, "1000", 4 [pid 8504] memfd_create("syzkaller", 0 [pid 8499] <... exit_group resumed>) = ? [pid 8506] write(3, "1000", 4) = 4 [pid 8506] close(3) = 0 [pid 8506] symlink("/dev/binderfs", "./binderfs" [pid 8505] <... write resumed>) = 4 [pid 8504] <... memfd_create resumed>) = 3 [pid 8499] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = 0 [pid 8505] close(3 [pid 8504] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8505] <... close resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8499, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5062] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8505] symlink("/dev/binderfs", "./binderfs" [pid 8504] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./340", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./339/file0", [pid 8506] <... symlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8505] <... symlink resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(3, "", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8506] memfd_create("syzkaller", 0 [pid 8505] memfd_create("syzkaller", 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] openat(AT_FDCWD, "./339/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8506] <... memfd_create resumed>) = 3 [pid 8505] <... memfd_create resumed>) = 3 [pid 5063] getdents64(3, [pid 5062] <... openat resumed>) = 4 [pid 8506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] newfstatat(4, "", [pid 8506] <... mmap resumed>) = 0x7f41e0600000 [pid 8505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] umount2("./340/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8505] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./340/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./340/binderfs") = 0 [pid 5062] getdents64(4, [pid 5063] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./339/file0") = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./339") = 0 [pid 5062] mkdir("./340", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8504] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8505] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./340/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8506] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] openat(AT_FDCWD, "./340/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 8505] <... write resumed>) = 2097152 [pid 8505] munmap(0x7f41e0600000, 138412032 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./340/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./340") = 0 [pid 5063] mkdir("./341", 0777) = 0 [pid 8506] <... write resumed>) = 2097152 [pid 8505] <... munmap resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8506] munmap(0x7f41e0600000, 138412032 [pid 8504] <... write resumed>) = 2097152 [pid 8504] munmap(0x7f41e0600000, 138412032) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8505] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8504] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8505] <... openat resumed>) = 4 [pid 8504] <... openat resumed>) = 4 [pid 8504] ioctl(4, LOOP_SET_FD, 3 [pid 8506] <... munmap resumed>) = 0 [pid 8505] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... ioctl resumed>) = 0 [pid 8506] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8505] <... ioctl resumed>) = 0 [pid 8504] <... ioctl resumed>) = 0 [pid 8505] close(3 [pid 8504] close(3 [pid 8505] <... close resumed>) = 0 [pid 8504] <... close resumed>) = 0 [pid 5062] close(3 [pid 8506] <... openat resumed>) = 4 [pid 8505] close(4 [pid 8504] close(4 [pid 5062] <... close resumed>) = 0 [pid 8506] ioctl(4, LOOP_SET_FD, 3 [pid 8505] <... close resumed>) = 0 [pid 8504] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8505] mkdir("./file0", 0777 [pid 8504] mkdir("./file0", 0777./strace-static-x86_64: Process 8507 attached [pid 8505] <... mkdir resumed>) = 0 [pid 8507] set_robust_list(0x55555745a660, 24) = 0 [pid 8505] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8507] chdir("./340") = 0 [pid 8504] <... mkdir resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8507 [pid 8504] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8507] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8507] setpgid(0, 0 [pid 8506] <... ioctl resumed>) = 0 [pid 8506] close(3) = 0 [pid 8506] close(4) = 0 [ 313.174911][ T8504] loop4: detected capacity change from 0 to 4096 [ 313.183049][ T8505] loop0: detected capacity change from 0 to 4096 [ 313.201850][ T8506] loop3: detected capacity change from 0 to 4096 [pid 8506] mkdir("./file0", 0777) = 0 [pid 8507] <... setpgid resumed>) = 0 [pid 8505] <... mount resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8506] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8504] <... mount resumed>) = 0 [pid 8504] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8504] chdir("./file0") = 0 [pid 8504] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8507] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8504] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] close(3 [pid 8505] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8507] <... openat resumed>) = 3 [pid 8505] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8505] chdir("./file0"./strace-static-x86_64: Process 8510 attached ) = 0 [pid 8510] set_robust_list(0x55555745a660, 24 [pid 8505] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8510] <... set_robust_list resumed>) = 0 [pid 8507] write(3, "1000", 4 [pid 8505] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8510 [pid 8510] chdir("./341" [pid 8507] <... write resumed>) = 4 [pid 8507] close(3) = 0 [pid 8507] symlink("/dev/binderfs", "./binderfs" [pid 8510] <... chdir resumed>) = 0 [pid 8505] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8507] <... symlink resumed>) = 0 [pid 8510] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8510] setpgid(0, 0) = 0 [ 313.248537][ T8509] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.259295][ T8508] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8507] memfd_create("syzkaller", 0) = 3 [pid 8510] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8506] <... mount resumed>) = 0 [pid 8505] <... open resumed>) = 4 [pid 8504] <... open resumed>) = 4 [pid 8506] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8505] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8506] <... openat resumed>) = 3 [pid 8504] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8506] chdir("./file0" [pid 8507] <... mmap resumed>) = 0x7f41e0600000 [pid 8506] <... chdir resumed>) = 0 [pid 8505] <... open resumed>) = 5 [pid 8504] <... open resumed>) = 5 [pid 8506] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8510] <... openat resumed>) = 3 [pid 8506] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8505] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8504] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8504] ftruncate(4, 33587195 [pid 8510] write(3, "1000", 4) = 4 [pid 8510] close(3) = 0 [pid 8505] <... mmap resumed>) = 0x20000000 [pid 8504] <... ftruncate resumed>) = 0 [pid 8510] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8505] ftruncate(4, 33587195 [pid 8504] unlink("./bus" [pid 8510] memfd_create("syzkaller", 0) = 3 [pid 8504] <... unlink resumed>) = 0 [pid 8504] sendfile(-1, -1, NULL, 281474978811909 [pid 8510] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8504] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8510] <... mmap resumed>) = 0x7f41e0600000 [pid 8504] exit_group(0 [pid 8506] <... open resumed>) = 4 [pid 8504] <... exit_group resumed>) = ? [pid 8506] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8505] <... ftruncate resumed>) = 0 [ 313.291837][ T8511] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.306929][ T28] kauditd_printk_skb: 104 callbacks suppressed [ 313.306946][ T28] audit: type=1800 audit(1708423465.830:5132): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [pid 8506] <... open resumed>) = 5 [ 313.371383][ T28] audit: type=1800 audit(1708423465.860:5133): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 313.393695][ T28] audit: type=1800 audit(1708423465.860:5134): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [pid 8505] unlink("./bus" [pid 8510] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8507] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8506] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8505] <... unlink resumed>) = 0 [pid 8504] +++ exited with 0 +++ [ 313.417358][ T28] audit: type=1800 audit(1708423465.860:5135): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 313.438246][ T28] audit: type=1800 audit(1708423465.870:5136): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [pid 8505] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8505] exit_group(0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8504, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8506] <... mmap resumed>) = 0x20000000 [pid 8505] <... exit_group resumed>) = ? [pid 8506] ftruncate(4, 33587195 [pid 5065] umount2("./338", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8505] +++ exited with 0 +++ [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8505, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5061] umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(3, "", [pid 5061] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 5061] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] newfstatat(3, "", [pid 5065] umount2("./338/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./338/binderfs", [pid 5061] getdents64(3, [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] unlink("./338/binderfs" [pid 5061] umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... unlink resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./346/binderfs", [pid 5065] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8506] <... ftruncate resumed>) = 0 [pid 5061] unlink("./346/binderfs") = 0 [ 313.458503][ T28] audit: type=1800 audit(1708423465.870:5137): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 313.481980][ T28] audit: type=1800 audit(1708423465.890:5138): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 5061] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8506] unlink("./bus" [pid 8510] <... write resumed>) = 2097152 [pid 8510] munmap(0x7f41e0600000, 138412032 [pid 5061] <... umount2 resumed>) = 0 [pid 8510] <... munmap resumed>) = 0 [pid 8507] <... write resumed>) = 2097152 [pid 5061] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8510] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8507] munmap(0x7f41e0600000, 138412032 [pid 8506] <... unlink resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8506] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... umount2 resumed>) = 0 [ 313.516642][ T28] audit: type=1800 audit(1708423465.910:5139): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 313.539641][ T28] audit: type=1800 audit(1708423466.010:5140): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 8510] <... openat resumed>) = 4 [pid 8510] ioctl(4, LOOP_SET_FD, 3 [pid 8506] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8506] exit_group(0) = ? [pid 5065] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./338/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] newfstatat(AT_FDCWD, "./346/file0", [pid 5065] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./338/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 4 [pid 5061] openat(AT_FDCWD, "./346/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] newfstatat(4, "", [pid 5061] <... openat resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(4, "", [pid 8510] <... ioctl resumed>) = 0 [pid 8507] <... munmap resumed>) = 0 [pid 5065] getdents64(4, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 5065] getdents64(4, [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] getdents64(4, [pid 5065] close(4 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8507] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... close resumed>) = 0 [pid 5061] close(4 [pid 8510] close(3 [pid 8507] <... openat resumed>) = 4 [pid 8506] +++ exited with 0 +++ [pid 5065] rmdir("./338/file0" [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./346/file0" [pid 8510] <... close resumed>) = 0 [pid 8507] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8506, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8510] close(4) = 0 [pid 8510] mkdir("./file0", 0777) = 0 [pid 8507] <... ioctl resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... rmdir resumed>) = 0 [pid 8507] close(3) = 0 [pid 8507] close(4) = 0 [pid 8507] mkdir("./file0", 0777) = 0 [pid 8510] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8507] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] getdents64(3, [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5061] close(3 [pid 5065] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5065] rmdir("./338" [pid 5061] rmdir("./346") = 0 [ 313.573403][ T8510] loop2: detected capacity change from 0 to 4096 [ 313.592313][ T8507] loop1: detected capacity change from 0 to 4096 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] mkdir("./347", 0777) = 0 [pid 5064] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] mkdir("./339", 0777 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... openat resumed>) = 3 [pid 5065] <... mkdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5064] newfstatat(3, "", [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8510] <... mount resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] newfstatat(AT_FDCWD, "./345/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5064] unlink("./345/binderfs" [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8507] <... mount resumed>) = 0 [pid 8510] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8507] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... unlink resumed>) = 0 [pid 8507] <... openat resumed>) = 3 [pid 8507] chdir("./file0") = 0 [pid 8507] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8510] <... openat resumed>) = 3 [pid 8507] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8507] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8510] chdir("./file0" [pid 5064] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... ioctl resumed>) = 0 [pid 8510] <... chdir resumed>) = 0 [pid 8510] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8510] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8510] <... open resumed>) = 4 ./strace-static-x86_64: Process 8514 attached [pid 8510] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8514 [ 313.652002][ T8512] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.669092][ T8513] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8514] set_robust_list(0x55555745a660, 24 [pid 8510] <... open resumed>) = 5 [pid 5064] <... umount2 resumed>) = 0 [pid 8510] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8507] <... open resumed>) = 4 [pid 8507] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8507] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8510] <... mmap resumed>) = 0x20000000 [pid 5064] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8510] ftruncate(4, 33587195 [pid 8514] chdir("./347" [pid 8507] ftruncate(4, 33587195 [pid 5065] <... ioctl resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8514] <... chdir resumed>) = 0 [pid 8514] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] newfstatat(AT_FDCWD, "./345/file0", [pid 8514] <... prctl resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8514] setpgid(0, 0 [pid 8507] <... ftruncate resumed>) = 0 [pid 5064] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8514] <... setpgid resumed>) = 0 [pid 8507] unlink("./bus" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] openat(AT_FDCWD, "./345/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8514] <... openat resumed>) = 3 [pid 8510] <... ftruncate resumed>) = 0 [pid 8507] <... unlink resumed>) = 0 [pid 5065] close(3 [pid 8514] write(3, "1000", 4 [pid 8510] unlink("./bus" [pid 8514] <... write resumed>) = 4 [ 313.722875][ T28] audit: type=1800 audit(1708423466.250:5141): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [pid 8507] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 8514] close(3 [pid 8510] <... unlink resumed>) = 0 [pid 8507] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] newfstatat(4, "", [pid 8514] <... close resumed>) = 0 [pid 8507] exit_group(0 [pid 8514] symlink("/dev/binderfs", "./binderfs" [pid 8507] <... exit_group resumed>) = ? [pid 8514] <... symlink resumed>) = 0 [pid 8514] memfd_create("syzkaller", 0) = 3 [pid 8514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8510] sendfile(-1, -1, NULL, 281474978811909./strace-static-x86_64: Process 8515 attached ) = -1 EBADF (Bad file descriptor) [pid 8507] +++ exited with 0 +++ [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8514] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8510] exit_group(0 [pid 8515] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8515 [pid 5064] getdents64(4, [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8507, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8515] <... set_robust_list resumed>) = 0 [pid 8510] <... exit_group resumed>) = ? [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./345/file0") = 0 [pid 8515] chdir("./339" [pid 5064] getdents64(3, [pid 5062] umount2("./340", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8515] <... chdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8515] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] close(3 [pid 5062] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8515] <... prctl resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 8515] setpgid(0, 0 [pid 8510] +++ exited with 0 +++ [pid 5064] rmdir("./345" [pid 5062] <... openat resumed>) = 3 [pid 8515] <... setpgid resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8510, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] mkdir("./346", 0777 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 8515] <... openat resumed>) = 3 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 8515] write(3, "1000", 4 [pid 5063] umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8515] <... write resumed>) = 4 [pid 5063] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8515] close(3 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 5062] getdents64(3, [pid 8515] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", [pid 8515] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8515] <... symlink resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] getdents64(3, [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./340/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8515] memfd_create("syzkaller", 0 [pid 5063] newfstatat(AT_FDCWD, "./341/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./341/binderfs") = 0 [pid 8515] <... memfd_create resumed>) = 3 [pid 5063] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./340/binderfs", [pid 8515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8515] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8514] <... write resumed>) = 2097152 [pid 5063] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] unlink("./340/binderfs" [pid 8514] munmap(0x7f41e0600000, 138412032 [pid 5062] <... unlink resumed>) = 0 [pid 8514] <... munmap resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(AT_FDCWD, "./341/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8514] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8515] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] openat(AT_FDCWD, "./341/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = 0 [pid 8514] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 4 [pid 5062] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(4, "", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] newfstatat(AT_FDCWD, "./340/file0", [pid 8514] ioctl(4, LOOP_SET_FD, 3 [pid 5063] getdents64(4, [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5062] openat(AT_FDCWD, "./340/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... ioctl resumed>) = 0 [pid 8514] <... ioctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] <... openat resumed>) = 4 [pid 8514] close(3) = 0 [pid 8514] close(4) = 0 [pid 8514] mkdir("./file0", 0777 [pid 5063] close(4 [pid 5062] newfstatat(4, "", [pid 8514] <... mkdir resumed>) = 0 [pid 5064] close(3 [pid 5063] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] rmdir("./341/file0" [pid 5062] getdents64(4, [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8514] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] getdents64(3, [pid 5062] getdents64(4, ./strace-static-x86_64: Process 8516 attached [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5062] close(4 [pid 5063] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] rmdir("./341" [pid 5062] rmdir("./340/file0" [pid 8516] set_robust_list(0x55555745a660, 24 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8516] <... set_robust_list resumed>) = 0 [pid 8516] chdir("./346" [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8516 [pid 5063] mkdir("./342", 0777 [pid 5062] getdents64(3, [pid 8516] <... chdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8516] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] close(3 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] rmdir("./340" [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./341", 0777) = 0 [ 313.875268][ T8514] loop0: detected capacity change from 0 to 4096 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 8516] setpgid(0, 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8516] <... setpgid resumed>) = 0 [pid 8516] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8515] <... write resumed>) = 2097152 [pid 8516] write(3, "1000", 4) = 4 [pid 8515] munmap(0x7f41e0600000, 138412032 [pid 8516] close(3 [pid 8515] <... munmap resumed>) = 0 [pid 8516] <... close resumed>) = 0 [pid 8516] symlink("/dev/binderfs", "./binderfs" [pid 8515] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8516] <... symlink resumed>) = 0 [pid 8516] memfd_create("syzkaller", 0 [pid 8515] <... openat resumed>) = 4 [pid 8515] ioctl(4, LOOP_SET_FD, 3 [pid 8516] <... memfd_create resumed>) = 3 [pid 8514] <... mount resumed>) = 0 [pid 8516] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8515] <... ioctl resumed>) = 0 [pid 8514] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8516] <... mmap resumed>) = 0x7f41e0600000 [pid 8515] close(3) = 0 [pid 8514] <... openat resumed>) = 3 [pid 8515] close(4 [pid 8514] chdir("./file0" [pid 8515] <... close resumed>) = 0 [pid 8514] <... chdir resumed>) = 0 [pid 8514] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8515] mkdir("./file0", 0777 [pid 8514] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8515] <... mkdir resumed>) = 0 [pid 8514] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8516] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8515] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8514] <... open resumed>) = 4 [pid 8514] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [ 313.950698][ T8517] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.963031][ T8515] loop4: detected capacity change from 0 to 4096 [pid 8514] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8515] <... mount resumed>) = 0 [pid 8514] <... unlink resumed>) = 0 [pid 5062] close(3 [pid 8515] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8514] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] <... close resumed>) = 0 [pid 8514] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8514] exit_group(0 [pid 8515] <... openat resumed>) = 3 [pid 8514] <... exit_group resumed>) = ? [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8520 ./strace-static-x86_64: Process 8520 attached [pid 8515] chdir("./file0" [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8519 [pid 8520] set_robust_list(0x55555745a660, 24 [pid 8515] <... chdir resumed>) = 0 [pid 8515] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8520] <... set_robust_list resumed>) = 0 [pid 8515] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8520] chdir("./341" [pid 8515] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8520] <... chdir resumed>) = 0 [pid 8520] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8520] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 8519 attached [pid 8519] set_robust_list(0x55555745a660, 24) = 0 [pid 8519] chdir("./342" [ 314.026604][ T8518] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8514] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8514, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8520] <... openat resumed>) = 3 [pid 8519] <... chdir resumed>) = 0 [pid 8515] <... open resumed>) = 4 [pid 8519] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8515] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8520] write(3, "1000", 4 [pid 8519] <... prctl resumed>) = 0 [pid 8515] <... open resumed>) = 5 [pid 8516] <... write resumed>) = 2097152 [pid 8520] <... write resumed>) = 4 [pid 8519] setpgid(0, 0 [pid 8515] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8519] <... setpgid resumed>) = 0 [pid 8516] munmap(0x7f41e0600000, 138412032 [pid 8520] close(3 [pid 8519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8515] <... mmap resumed>) = 0x20000000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8520] <... close resumed>) = 0 [pid 8519] <... openat resumed>) = 3 [pid 8515] ftruncate(4, 33587195 [pid 5061] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8520] symlink("/dev/binderfs", "./binderfs" [pid 8519] write(3, "1000", 4 [pid 8516] <... munmap resumed>) = 0 [pid 8516] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... openat resumed>) = 3 [pid 8519] <... write resumed>) = 4 [pid 5061] newfstatat(3, "", [pid 8519] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8520] <... symlink resumed>) = 0 [pid 8519] <... close resumed>) = 0 [pid 8519] symlink("/dev/binderfs", "./binderfs" [pid 5061] getdents64(3, [pid 8519] <... symlink resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8519] memfd_create("syzkaller", 0 [pid 8515] <... ftruncate resumed>) = 0 [pid 5061] umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8520] memfd_create("syzkaller", 0) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8520] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] newfstatat(AT_FDCWD, "./347/binderfs", [pid 8520] <... mmap resumed>) = 0x7f41e0600000 [pid 8516] <... openat resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8519] <... memfd_create resumed>) = 3 [pid 5061] unlink("./347/binderfs" [pid 8519] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8516] ioctl(4, LOOP_SET_FD, 3 [pid 8515] unlink("./bus" [pid 8516] <... ioctl resumed>) = 0 [pid 8516] close(3 [pid 8520] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8516] <... close resumed>) = 0 [pid 8515] <... unlink resumed>) = 0 [pid 8515] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8515] exit_group(0) = ? [pid 8516] close(4 [pid 5061] <... umount2 resumed>) = 0 [pid 8516] <... close resumed>) = 0 [pid 5061] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8519] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8516] mkdir("./file0", 0777 [pid 8515] +++ exited with 0 +++ [pid 5061] newfstatat(AT_FDCWD, "./347/file0", [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8515, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8516] <... mkdir resumed>) = 0 [pid 5061] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./339", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8516] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] openat(AT_FDCWD, "./347/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... openat resumed>) = 3 [pid 8520] <... write resumed>) = 2097152 [pid 5065] newfstatat(3, "", [pid 5061] <... openat resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 5061] newfstatat(4, "", [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./339/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./339/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./339/binderfs") = 0 [pid 5065] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 8520] munmap(0x7f41e0600000, 138412032 [ 314.129664][ T8516] loop3: detected capacity change from 0 to 4096 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 8520] <... munmap resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./347/file0" [pid 8520] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8520] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... rmdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 8520] <... ioctl resumed>) = 0 [pid 8516] <... mount resumed>) = 0 [pid 5061] getdents64(3, [pid 8516] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8520] close(3 [pid 8516] <... openat resumed>) = 3 [pid 5061] close(3 [pid 8520] <... close resumed>) = 0 [pid 8519] <... write resumed>) = 2097152 [pid 8516] chdir("./file0" [pid 5065] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 8520] close(4 [pid 8519] munmap(0x7f41e0600000, 138412032 [pid 8516] <... chdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] rmdir("./347" [pid 8520] <... close resumed>) = 0 [pid 8516] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8520] mkdir("./file0", 0777 [pid 8519] <... munmap resumed>) = 0 [pid 8516] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] newfstatat(AT_FDCWD, "./339/file0", [pid 5061] <... rmdir resumed>) = 0 [pid 8520] <... mkdir resumed>) = 0 [pid 5061] mkdir("./348", 0777 [pid 8520] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8516] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... mkdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8519] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] openat(AT_FDCWD, "./339/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... openat resumed>) = 4 [pid 8519] <... openat resumed>) = 4 [pid 5065] newfstatat(4, "", [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8516] <... open resumed>) = 4 [pid 5065] getdents64(4, [ 314.204746][ T8520] loop1: detected capacity change from 0 to 4096 [ 314.212101][ T8521] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8519] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 8516] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8519] <... ioctl resumed>) = 0 [pid 8516] <... open resumed>) = 5 [pid 5065] close(4 [pid 8516] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./339/file0") = 0 [pid 8520] <... mount resumed>) = 0 [pid 8520] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8520] chdir("./file0") = 0 [pid 8520] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8520] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8519] close(3 [pid 8516] <... mmap resumed>) = 0x20000000 [pid 5065] getdents64(3, [pid 8519] <... close resumed>) = 0 [pid 8516] ftruncate(4, 33587195 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8519] close(4 [pid 5065] close(3 [pid 8519] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 8519] mkdir("./file0", 0777 [pid 5065] rmdir("./339" [pid 8519] <... mkdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 8519] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8516] <... ftruncate resumed>) = 0 [pid 5065] mkdir("./340", 0777 [pid 8516] unlink("./bus" [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8520] <... open resumed>) = 4 [ 314.255815][ T8519] loop2: detected capacity change from 0 to 4096 [ 314.266719][ T8522] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8520] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8516] <... unlink resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8516] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8520] <... open resumed>) = 5 [pid 8516] exit_group(0 [pid 5061] close(3) = 0 [pid 8516] <... exit_group resumed>) = ? [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8520] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8524 [pid 8519] <... mount resumed>) = 0 [pid 8524] set_robust_list(0x55555745a660, 24 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8516, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8524] <... set_robust_list resumed>) = 0 [pid 8519] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8524] chdir("./348" [pid 8519] <... openat resumed>) = 3 [pid 5064] umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8524] <... chdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8524] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8524] setpgid(0, 0 [pid 8520] <... ftruncate resumed>) = 0 [pid 8519] chdir("./file0" [pid 5064] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8519] <... chdir resumed>) = 0 [pid 8519] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8519] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8524] <... setpgid resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 8520] unlink("./bus" [pid 8524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... ioctl resumed>) = 0 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 8524] <... openat resumed>) = 3 [pid 5065] close(3 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8524] write(3, "1000", 4 [pid 5064] umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8524] <... write resumed>) = 4 [pid 8520] <... unlink resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./346/binderfs", [pid 8524] close(3 [pid 8520] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8524] <... close resumed>) = 0 [pid 8520] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8524] symlink("/dev/binderfs", "./binderfs" [ 314.341269][ T8523] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8520] exit_group(0 [pid 8519] <... open resumed>) = 4 [pid 8524] <... symlink resumed>) = 0 [pid 8520] <... exit_group resumed>) = ? [pid 8519] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] unlink("./346/binderfs" [pid 8519] <... open resumed>) = 5 [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8519] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8524] memfd_create("syzkaller", 0 [pid 8520] +++ exited with 0 +++ [pid 5064] <... umount2 resumed>) = 0 [pid 8525] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8525 [pid 8525] <... set_robust_list resumed>) = 0 [pid 8524] <... memfd_create resumed>) = 3 [pid 5064] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8520, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 8519] <... ftruncate resumed>) = 0 [pid 8525] chdir("./340" [pid 8524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 8525] <... chdir resumed>) = 0 [pid 8524] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] newfstatat(AT_FDCWD, "./346/file0", [pid 5062] <... restart_syscall resumed>) = 0 [pid 8525] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8519] unlink("./bus" [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8525] <... prctl resumed>) = 0 [pid 8525] setpgid(0, 0 [pid 5064] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8525] <... setpgid resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] openat(AT_FDCWD, "./346/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8519] <... unlink resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8519] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5062] <... openat resumed>) = 3 [pid 8519] exit_group(0 [pid 5062] newfstatat(3, "", [pid 8519] <... exit_group resumed>) = ? [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8525] <... openat resumed>) = 3 [pid 5064] <... openat resumed>) = 4 [pid 8525] write(3, "1000", 4 [pid 5064] newfstatat(4, "", [pid 8525] <... write resumed>) = 4 [pid 8525] close(3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 8525] <... close resumed>) = 0 [pid 5064] getdents64(4, [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8525] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8525] <... symlink resumed>) = 0 [pid 5064] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] newfstatat(AT_FDCWD, "./341/binderfs", [pid 8525] memfd_create("syzkaller", 0 [pid 5064] close(4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8525] <... memfd_create resumed>) = 3 [pid 5064] <... close resumed>) = 0 [pid 5062] unlink("./341/binderfs" [pid 8525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8519] +++ exited with 0 +++ [pid 8524] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] rmdir("./346/file0" [pid 5062] <... unlink resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8519, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5062] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8525] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5064] getdents64(3, [pid 5063] <... restart_syscall resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./342/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5063] unlink("./342/binderfs") = 0 [pid 5063] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] close(3) = 0 [pid 5062] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./341/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./341/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] rmdir("./346" [pid 5063] <... umount2 resumed>) = 0 [pid 8524] <... write resumed>) = 2097152 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(4, "", [pid 5064] mkdir("./347", 0777 [pid 8525] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] newfstatat(AT_FDCWD, "./342/file0", [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8524] munmap(0x7f41e0600000, 138412032 [pid 8525] <... write resumed>) = 2097152 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] getdents64(4, [pid 8525] munmap(0x7f41e0600000, 138412032 [pid 5063] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8524] <... munmap resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] close(4 [pid 5063] openat(AT_FDCWD, "./342/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8525] <... munmap resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5062] rmdir("./341/file0" [pid 8525] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8524] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] newfstatat(4, "", [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 8525] <... openat resumed>) = 4 [pid 8524] <... openat resumed>) = 4 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8525] ioctl(4, LOOP_SET_FD, 3 [pid 8524] ioctl(4, LOOP_SET_FD, 3 [pid 5063] getdents64(4, [pid 5062] close(3 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./341") = 0 [pid 5062] mkdir("./342", 0777 [pid 8524] <... ioctl resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5063] getdents64(4, [pid 8525] <... ioctl resumed>) = 0 [pid 5064] close(3 [pid 8525] close(3 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8525] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 8525] close(4 [pid 5063] close(4 [pid 8525] <... close resumed>) = 0 [pid 8524] close(3) = 0 [pid 8524] close(4) = 0 [pid 8524] mkdir("./file0", 0777) = 0 [pid 8524] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8525] mkdir("./file0", 0777 [pid 5063] <... close resumed>) = 0 [pid 8525] <... mkdir resumed>) = 0 [pid 5063] rmdir("./342/file0" [pid 8525] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... mkdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./342"./strace-static-x86_64: Process 8526 attached [pid 8526] set_robust_list(0x55555745a660, 24) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8526 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8526] chdir("./347" [pid 5063] mkdir("./343", 0777 [pid 8526] <... chdir resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8526] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... mkdir resumed>) = 0 [pid 8526] <... prctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8526] setpgid(0, 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8526] <... setpgid resumed>) = 0 [pid 8526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 314.515456][ T8525] loop4: detected capacity change from 0 to 4096 [ 314.519150][ T8524] loop0: detected capacity change from 0 to 4096 [pid 8526] write(3, "1000", 4 [pid 8525] <... mount resumed>) = 0 [pid 8525] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8525] chdir("./file0") = 0 [pid 8525] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8526] <... write resumed>) = 4 [pid 8525] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8526] close(3 [pid 8525] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8526] <... close resumed>) = 0 [pid 8526] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8526] memfd_create("syzkaller", 0 [pid 8524] <... mount resumed>) = 0 [pid 8526] <... memfd_create resumed>) = 3 [pid 8524] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8526] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8525] <... open resumed>) = 4 [pid 8524] <... openat resumed>) = 3 [pid 8525] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8524] chdir("./file0" [pid 8526] <... mmap resumed>) = 0x7f41e0600000 [pid 8524] <... chdir resumed>) = 0 [pid 8525] <... open resumed>) = 5 [pid 8524] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8524] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8525] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... ioctl resumed>) = 0 [pid 8525] <... ftruncate resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 5062] close(3 [pid 5063] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8525] unlink("./bus" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8530 attached ./strace-static-x86_64: Process 8529 attached [pid 8524] <... open resumed>) = 4 [pid 8529] set_robust_list(0x55555745a660, 24) = 0 [pid 8529] chdir("./343") = 0 [pid 8529] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8529] setpgid(0, 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8529 [pid 8529] <... setpgid resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8530 [pid 8529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8530] set_robust_list(0x55555745a660, 24) = 0 [pid 8524] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8529] <... openat resumed>) = 3 [pid 8530] chdir("./342" [pid 8529] write(3, "1000", 4 [pid 8524] <... open resumed>) = 5 [pid 8529] <... write resumed>) = 4 [pid 8529] close(3 [pid 8526] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8525] <... unlink resumed>) = 0 [pid 8530] <... chdir resumed>) = 0 [pid 8529] <... close resumed>) = 0 [pid 8525] sendfile(-1, -1, NULL, 281474978811909 [pid 8524] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8529] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8525] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8524] <... mmap resumed>) = 0x20000000 [pid 8530] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8529] memfd_create("syzkaller", 0 [pid 8525] exit_group(0) = ? [pid 8530] <... prctl resumed>) = 0 [pid 8524] ftruncate(4, 33587195 [pid 8530] setpgid(0, 0 [pid 8529] <... memfd_create resumed>) = 3 [pid 8529] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8530] <... setpgid resumed>) = 0 [pid 8530] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8525] +++ exited with 0 +++ [pid 8530] <... openat resumed>) = 3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8525, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5065] umount2("./340", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8530] write(3, "1000", 4 [pid 8524] <... ftruncate resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8524] unlink("./bus" [pid 5065] getdents64(3, [pid 8530] <... write resumed>) = 4 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8530] close(3 [pid 5065] umount2("./340/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8530] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8530] symlink("/dev/binderfs", "./binderfs" [pid 5065] newfstatat(AT_FDCWD, "./340/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./340/binderfs" [pid 8526] <... write resumed>) = 2097152 [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8530] <... symlink resumed>) = 0 [pid 8526] munmap(0x7f41e0600000, 138412032 [pid 8530] memfd_create("syzkaller", 0 [pid 8524] <... unlink resumed>) = 0 [pid 8530] <... memfd_create resumed>) = 3 [pid 8524] sendfile(-1, -1, NULL, 281474978811909 [pid 8530] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8524] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8530] <... mmap resumed>) = 0x7f41e0600000 [pid 8524] exit_group(0) = ? [pid 8526] <... munmap resumed>) = 0 [pid 8524] +++ exited with 0 +++ [pid 8526] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8524, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8526] <... openat resumed>) = 4 [pid 5061] umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8526] ioctl(4, LOOP_SET_FD, 3 [pid 5061] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8529] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... umount2 resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8526] <... ioctl resumed>) = 0 [pid 5061] umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8526] close(3) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8526] close(4 [pid 5061] newfstatat(AT_FDCWD, "./348/binderfs", [pid 8526] <... close resumed>) = 0 [pid 8526] mkdir("./file0", 0777 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./348/binderfs") = 0 [pid 8526] <... mkdir resumed>) = 0 [pid 5061] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8530] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8526] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./340/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./340/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./348/file0", [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 314.778060][ T8526] loop3: detected capacity change from 0 to 4096 [pid 5065] close(4 [pid 8529] <... write resumed>) = 2097152 [pid 8526] <... mount resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8526] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] rmdir("./340/file0" [pid 5061] openat(AT_FDCWD, "./348/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8529] munmap(0x7f41e0600000, 138412032 [pid 8526] <... openat resumed>) = 3 [pid 8529] <... munmap resumed>) = 0 [pid 8526] chdir("./file0" [pid 5065] <... rmdir resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 8526] <... chdir resumed>) = 0 [pid 8526] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] newfstatat(4, "", [pid 8526] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8526] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8529] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8529] ioctl(4, LOOP_SET_FD, 3 [pid 5065] close(3) = 0 [pid 5065] rmdir("./340") = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] mkdir("./341", 0777) = 0 [pid 5061] getdents64(4, [pid 8529] <... ioctl resumed>) = 0 [pid 8530] <... write resumed>) = 2097152 [pid 8526] <... open resumed>) = 4 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8530] munmap(0x7f41e0600000, 138412032 [pid 8529] close(3 [pid 8526] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8529] <... close resumed>) = 0 [pid 8526] <... open resumed>) = 5 [pid 5065] <... openat resumed>) = 3 [pid 5061] getdents64(4, [pid 8530] <... munmap resumed>) = 0 [pid 8529] close(4 [ 314.837700][ T8531] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.860461][ T8529] loop2: detected capacity change from 0 to 4096 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8530] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8529] <... close resumed>) = 0 [pid 5061] close(4 [pid 8530] <... openat resumed>) = 4 [pid 8526] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... close resumed>) = 0 [pid 8530] ioctl(4, LOOP_SET_FD, 3 [pid 8529] mkdir("./file0", 0777 [pid 5061] rmdir("./348/file0" [pid 8526] <... mmap resumed>) = 0x20000000 [pid 8529] <... mkdir resumed>) = 0 [pid 8526] ftruncate(4, 33587195 [pid 5061] <... rmdir resumed>) = 0 [pid 8530] <... ioctl resumed>) = 0 [pid 8529] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8530] close(3 [pid 8526] <... ftruncate resumed>) = 0 [pid 5061] getdents64(3, [pid 8530] <... close resumed>) = 0 [pid 8530] close(4) = 0 [pid 8530] mkdir("./file0", 0777 [pid 8526] unlink("./bus" [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [ 314.892867][ T8530] loop1: detected capacity change from 0 to 4096 [pid 8530] <... mkdir resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./348" [pid 8530] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./349", 0777 [pid 8529] <... mount resumed>) = 0 [pid 8526] <... unlink resumed>) = 0 [pid 5065] close(3 [pid 5061] <... mkdir resumed>) = 0 [pid 8526] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... close resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8526] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8529] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8526] exit_group(0 [pid 5061] <... openat resumed>) = 3 [pid 8529] <... openat resumed>) = 3 [pid 8526] <... exit_group resumed>) = ? [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8529] chdir("./file0") = 0 [pid 8529] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8529] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8533 ./strace-static-x86_64: Process 8533 attached [pid 8533] set_robust_list(0x55555745a660, 24) = 0 [pid 8533] chdir("./341") = 0 [pid 8526] +++ exited with 0 +++ [pid 8533] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8526, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 8533] <... prctl resumed>) = 0 [pid 8533] setpgid(0, 0 [pid 5064] umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8533] <... setpgid resumed>) = 0 [pid 8533] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... openat resumed>) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [ 314.938840][ T8532] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8533] <... openat resumed>) = 3 [pid 8533] write(3, "1000", 4 [pid 5064] newfstatat(AT_FDCWD, "./347/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8533] <... write resumed>) = 4 [pid 8533] close(3 [pid 5064] unlink("./347/binderfs" [pid 8533] <... close resumed>) = 0 [pid 8533] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... unlink resumed>) = 0 [pid 8533] <... symlink resumed>) = 0 [pid 8533] memfd_create("syzkaller", 0 [pid 5064] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8533] <... memfd_create resumed>) = 3 [pid 8533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8529] <... open resumed>) = 4 [pid 8529] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3 [pid 8529] <... open resumed>) = 5 [pid 8529] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8530] <... mount resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8535 attached [pid 8530] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8535] set_robust_list(0x55555745a660, 24 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8535 [pid 8530] <... openat resumed>) = 3 [pid 8530] chdir("./file0" [pid 8535] <... set_robust_list resumed>) = 0 [pid 8530] <... chdir resumed>) = 0 [pid 8535] chdir("./349" [pid 8530] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8529] ftruncate(4, 33587195 [pid 8530] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8530] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8535] <... chdir resumed>) = 0 [pid 8535] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8535] setpgid(0, 0) = 0 [pid 8535] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 315.026974][ T8534] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8535] write(3, "1000", 4) = 4 [pid 8529] <... ftruncate resumed>) = 0 [pid 8535] close(3 [pid 8533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8530] <... open resumed>) = 4 [pid 5064] <... umount2 resumed>) = 0 [pid 8535] <... close resumed>) = 0 [pid 8535] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8529] unlink("./bus" [pid 8535] memfd_create("syzkaller", 0 [pid 8530] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5064] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8535] <... memfd_create resumed>) = 3 [pid 8530] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8529] <... unlink resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./347/file0", [pid 8530] <... mmap resumed>) = 0x20000000 [pid 8535] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8529] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8529] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8535] <... mmap resumed>) = 0x7f41e0600000 [pid 8529] exit_group(0 [pid 5064] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8530] ftruncate(4, 33587195 [pid 8529] <... exit_group resumed>) = ? [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./347/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, [pid 8529] +++ exited with 0 +++ [pid 8530] <... ftruncate resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8529, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5064] getdents64(4, [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./347/file0" [pid 8530] unlink("./bus" [pid 5063] umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8530] <... unlink resumed>) = 0 [pid 5064] getdents64(3, [pid 8530] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5063] newfstatat(3, "", [pid 8530] exit_group(0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8530] <... exit_group resumed>) = ? [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(3, [pid 5064] close(3 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./347" [pid 5063] umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./348", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./343/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 8535] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] unlink("./343/binderfs") = 0 [pid 5063] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 8533] <... write resumed>) = 2097152 [pid 8530] +++ exited with 0 +++ [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8530, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./343/file0", [pid 5062] umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(3, "", [pid 5063] openat(AT_FDCWD, "./343/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] newfstatat(4, "", [pid 5062] umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./342/binderfs", [pid 5063] getdents64(4, [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] unlink("./342/binderfs") = 0 [pid 5063] getdents64(4, [pid 5062] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./343/file0") = 0 [pid 8533] munmap(0x7f41e0600000, 138412032 [pid 5062] <... umount2 resumed>) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8533] <... munmap resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8533] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] newfstatat(AT_FDCWD, "./342/file0", [pid 8533] <... openat resumed>) = 4 [pid 5063] rmdir("./343" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8533] ioctl(4, LOOP_SET_FD, 3 [pid 5062] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./342/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] <... rmdir resumed>) = 0 [pid 8535] <... write resumed>) = 2097152 [pid 8533] <... ioctl resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 8533] close(3 [pid 8535] munmap(0x7f41e0600000, 138412032 [pid 5063] mkdir("./344", 0777 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8533] <... close resumed>) = 0 [pid 8533] close(4 [pid 5062] getdents64(4, [pid 8533] <... close resumed>) = 0 [pid 8533] mkdir("./file0", 0777 [pid 8535] <... munmap resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8533] <... mkdir resumed>) = 0 [pid 8535] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... ioctl resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [ 315.178373][ T8533] loop4: detected capacity change from 0 to 4096 [pid 5062] getdents64(4, [pid 8535] <... openat resumed>) = 4 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8535] ioctl(4, LOOP_SET_FD, 3 [pid 5062] close(4 [pid 8533] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] close(3 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./342/file0" [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8536 ./strace-static-x86_64: Process 8536 attached [pid 8535] <... ioctl resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8536] set_robust_list(0x55555745a660, 24 [pid 5062] getdents64(3, [pid 8536] <... set_robust_list resumed>) = 0 [pid 8535] close(3 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8535] <... close resumed>) = 0 [pid 8536] chdir("./348" [pid 8535] close(4 [pid 5062] close(3 [pid 8535] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8536] <... chdir resumed>) = 0 [pid 8535] mkdir("./file0", 0777 [pid 5062] rmdir("./342" [pid 8536] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8535] <... mkdir resumed>) = 0 [pid 8536] <... prctl resumed>) = 0 [pid 8535] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... rmdir resumed>) = 0 [pid 8536] setpgid(0, 0 [ 315.221406][ T8535] loop0: detected capacity change from 0 to 4096 [pid 5062] mkdir("./343", 0777 [pid 8536] <... setpgid resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8533] <... mount resumed>) = 0 [pid 8533] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8536] write(3, "1000", 4 [pid 8533] <... openat resumed>) = 3 [pid 8536] <... write resumed>) = 4 [pid 8533] chdir("./file0" [pid 8536] close(3 [pid 8533] <... chdir resumed>) = 0 [pid 8533] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8536] <... close resumed>) = 0 [pid 8535] <... mount resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8536] symlink("/dev/binderfs", "./binderfs" [pid 8533] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8536] <... symlink resumed>) = 0 [pid 8535] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8536] memfd_create("syzkaller", 0 [pid 8535] chdir("./file0") = 0 [pid 8535] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8536] <... memfd_create resumed>) = 3 [pid 8535] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] close(3 [pid 8536] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8535] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... close resumed>) = 0 [pid 8536] <... mmap resumed>) = 0x7f41e0600000 [pid 8533] <... open resumed>) = 4 [pid 8533] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8533] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [ 315.268015][ T8537] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 315.298672][ T8538] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... ioctl resumed>) = 0 [pid 8533] <... ftruncate resumed>) = 0 [pid 8533] unlink("./bus"./strace-static-x86_64: Process 8539 attached [pid 8539] set_robust_list(0x55555745a660, 24 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8539 [pid 8539] <... set_robust_list resumed>) = 0 [pid 8539] chdir("./344" [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8539] <... chdir resumed>) = 0 [pid 8539] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8539] setpgid(0, 0./strace-static-x86_64: Process 8540 attached ) = 0 [pid 8533] <... unlink resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8540 [pid 8533] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8533] exit_group(0) = ? [pid 8540] set_robust_list(0x55555745a660, 24 [pid 8539] <... openat resumed>) = 3 [pid 8533] +++ exited with 0 +++ [pid 8540] <... set_robust_list resumed>) = 0 [pid 8535] <... open resumed>) = 4 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8533, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 8540] chdir("./343" [pid 8539] write(3, "1000", 4 [pid 8535] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8540] <... chdir resumed>) = 0 [pid 8539] <... write resumed>) = 4 [pid 8535] <... open resumed>) = 5 [pid 8540] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8539] close(3 [pid 5065] umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8540] <... prctl resumed>) = 0 [pid 8539] <... close resumed>) = 0 [pid 8535] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8540] setpgid(0, 0 [pid 8539] symlink("/dev/binderfs", "./binderfs" [pid 8536] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8535] <... mmap resumed>) = 0x20000000 [pid 5065] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8540] <... setpgid resumed>) = 0 [pid 8539] <... symlink resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 8535] ftruncate(4, 33587195 [pid 5065] newfstatat(3, "", [pid 8540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8539] memfd_create("syzkaller", 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8539] <... memfd_create resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8540] <... openat resumed>) = 3 [pid 8539] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] newfstatat(AT_FDCWD, "./341/binderfs", [pid 8540] write(3, "1000", 4 [pid 8539] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8540] <... write resumed>) = 4 [pid 8535] <... ftruncate resumed>) = 0 [pid 5065] unlink("./341/binderfs") = 0 [pid 8535] unlink("./bus" [pid 8540] close(3 [pid 5065] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8540] <... close resumed>) = 0 [pid 8540] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 8540] memfd_create("syzkaller", 0 [pid 5065] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8540] <... memfd_create resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8540] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] newfstatat(AT_FDCWD, "./341/file0", [pid 8540] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8535] <... unlink resumed>) = 0 [pid 8535] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8535] exit_group(0) = ? [pid 5065] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8539] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8536] <... write resumed>) = 2097152 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./341/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8535] +++ exited with 0 +++ [pid 5065] getdents64(4, [pid 8536] munmap(0x7f41e0600000, 138412032 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8535, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8536] <... munmap resumed>) = 0 [pid 5065] getdents64(4, [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5061] umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] rmdir("./341/file0" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] <... rmdir resumed>) = 0 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5065] getdents64(3, [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8536] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8536] <... openat resumed>) = 4 [pid 5065] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8540] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8536] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... close resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./349/binderfs", [pid 5065] rmdir("./341" [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./349/binderfs") = 0 [pid 5061] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8536] <... ioctl resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5065] mkdir("./342", 0777 [pid 8539] <... write resumed>) = 2097152 [pid 8536] close(3 [pid 5065] <... mkdir resumed>) = 0 [pid 8540] <... write resumed>) = 2097152 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8540] munmap(0x7f41e0600000, 138412032 [pid 5065] <... openat resumed>) = 3 [pid 8539] munmap(0x7f41e0600000, 138412032 [pid 8536] <... close resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8536] close(4 [pid 5061] newfstatat(AT_FDCWD, "./349/file0", [pid 8536] <... close resumed>) = 0 [pid 8536] mkdir("./file0", 0777 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8539] <... munmap resumed>) = 0 [pid 8536] <... mkdir resumed>) = 0 [pid 5061] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8540] <... munmap resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8536] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8540] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] openat(AT_FDCWD, "./349/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8540] <... openat resumed>) = 4 [pid 8540] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", [pid 8539] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8539] <... openat resumed>) = 4 [ 315.473468][ T8536] loop3: detected capacity change from 0 to 4096 [pid 8539] ioctl(4, LOOP_SET_FD, 3 [pid 8540] <... ioctl resumed>) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8540] close(3 [pid 5061] close(4 [pid 8540] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8540] close(4 [pid 5061] rmdir("./349/file0" [pid 8540] <... close resumed>) = 0 [pid 8540] mkdir("./file0", 0777 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 8539] <... ioctl resumed>) = 0 [pid 8540] <... mkdir resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8539] close(3) = 0 [pid 5065] close(3 [pid 8539] close(4 [pid 5065] <... close resumed>) = 0 [pid 8539] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8539] mkdir("./file0", 0777 [pid 8540] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] close(3 [pid 8539] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8541 attached [pid 5061] <... close resumed>) = 0 [pid 8541] set_robust_list(0x55555745a660, 24 [pid 8539] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8541 [pid 8541] <... set_robust_list resumed>) = 0 [pid 5061] rmdir("./349" [pid 8541] chdir("./342") = 0 [pid 5061] <... rmdir resumed>) = 0 [ 315.518030][ T8540] loop1: detected capacity change from 0 to 4096 [ 315.532469][ T8539] loop2: detected capacity change from 0 to 4096 [pid 5061] mkdir("./350", 0777 [pid 8541] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8541] setpgid(0, 0) = 0 [pid 8541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8541] write(3, "1000", 4) = 4 [pid 8541] close(3) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 8536] <... mount resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8536] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8541] symlink("/dev/binderfs", "./binderfs" [pid 8536] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 3 [pid 8541] <... symlink resumed>) = 0 [pid 8536] chdir("./file0") = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8541] memfd_create("syzkaller", 0 [pid 8536] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8541] <... memfd_create resumed>) = 3 [pid 8536] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8536] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8541] <... mmap resumed>) = 0x7f41e0600000 [ 315.577962][ T8542] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8540] <... mount resumed>) = 0 [pid 8540] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8540] chdir("./file0") = 0 [pid 8540] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 315.621904][ T8543] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8540] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8536] <... open resumed>) = 4 [pid 5061] <... ioctl resumed>) = 0 [pid 8539] <... mount resumed>) = 0 [pid 8536] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8539] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8536] <... open resumed>) = 5 [pid 5061] close(3 [pid 8539] <... openat resumed>) = 3 [pid 8536] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... close resumed>) = 0 [pid 8536] <... mmap resumed>) = 0x20000000 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8539] chdir("./file0" [pid 8540] <... open resumed>) = 4 [pid 8539] <... chdir resumed>) = 0 [pid 8539] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 8545 attached [pid 8541] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8540] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8536] ftruncate(4, 33587195 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8545 [pid 8545] set_robust_list(0x55555745a660, 24 [pid 8540] <... open resumed>) = 5 [pid 8539] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8545] <... set_robust_list resumed>) = 0 [pid 8545] chdir("./350" [pid 8539] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8545] <... chdir resumed>) = 0 [pid 8545] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8540] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8536] <... ftruncate resumed>) = 0 [pid 8540] <... mmap resumed>) = 0x20000000 [pid 8540] ftruncate(4, 33587195 [pid 8545] <... prctl resumed>) = 0 [ 315.662841][ T8544] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8536] unlink("./bus" [pid 8545] setpgid(0, 0) = 0 [pid 8540] <... ftruncate resumed>) = 0 [pid 8545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8540] unlink("./bus" [pid 8545] <... openat resumed>) = 3 [pid 8536] <... unlink resumed>) = 0 [pid 8545] write(3, "1000", 4 [pid 8536] sendfile(-1, -1, NULL, 281474978811909 [pid 8545] <... write resumed>) = 4 [pid 8536] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8545] close(3 [pid 8536] exit_group(0 [pid 8545] <... close resumed>) = 0 [pid 8536] <... exit_group resumed>) = ? [pid 8545] symlink("/dev/binderfs", "./binderfs" [pid 8539] <... open resumed>) = 4 [pid 8539] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8545] <... symlink resumed>) = 0 [pid 8539] <... open resumed>) = 5 [pid 8545] memfd_create("syzkaller", 0) = 3 [pid 8539] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8540] <... unlink resumed>) = 0 [pid 8539] <... mmap resumed>) = 0x20000000 [pid 8536] +++ exited with 0 +++ [pid 8545] <... mmap resumed>) = 0x7f41e0600000 [pid 8540] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8536, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8540] exit_group(0 [pid 8539] ftruncate(4, 33587195 [pid 8540] <... exit_group resumed>) = ? [pid 5064] umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8539] <... ftruncate resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8539] unlink("./bus" [pid 5064] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8545] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./348/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8540] +++ exited with 0 +++ [pid 5064] unlink("./348/binderfs") = 0 [pid 5064] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8540, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 8541] <... write resumed>) = 2097152 [pid 8539] <... unlink resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 8539] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5062] umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8539] exit_group(0 [pid 8541] munmap(0x7f41e0600000, 138412032 [pid 8539] <... exit_group resumed>) = ? [pid 5064] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] newfstatat(AT_FDCWD, "./348/file0", [pid 8541] <... munmap resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5064] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./348/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8545] <... write resumed>) = 2097152 [pid 8541] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8539] +++ exited with 0 +++ [pid 5064] newfstatat(4, "", [pid 5062] newfstatat(3, "", [pid 8545] munmap(0x7f41e0600000, 138412032 [pid 8541] <... openat resumed>) = 4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8539, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8541] ioctl(4, LOOP_SET_FD, 3 [pid 5064] getdents64(4, [pid 5062] getdents64(3, [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] getdents64(4, [pid 5063] umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./343/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./343/binderfs") = 0 [pid 5062] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8545] <... munmap resumed>) = 0 [pid 8541] <... ioctl resumed>) = 0 [pid 5064] close(4 [pid 5063] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8545] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8541] close(3 [pid 8545] <... openat resumed>) = 4 [pid 8545] ioctl(4, LOOP_SET_FD, 3 [pid 8541] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = 0 [pid 5064] rmdir("./348/file0" [pid 8541] close(4 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5062] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8545] <... ioctl resumed>) = 0 [pid 8541] <... close resumed>) = 0 [pid 8541] mkdir("./file0", 0777 [pid 8545] close(3) = 0 [pid 8545] close(4) = 0 [pid 8545] mkdir("./file0", 0777) = 0 [pid 8541] <... mkdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 5063] getdents64(3, [pid 5062] newfstatat(AT_FDCWD, "./343/file0", [pid 8541] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... close resumed>) = 0 [pid 8545] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] rmdir("./348" [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./349", 0777 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./343/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./344/binderfs", [pid 5062] newfstatat(4, "", [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] unlink("./344/binderfs" [pid 5062] getdents64(4, [pid 5064] <... openat resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [ 315.821578][ T8541] loop4: detected capacity change from 0 to 4096 [ 315.848176][ T8545] loop0: detected capacity change from 0 to 4096 [pid 5062] rmdir("./343/file0") = 0 [pid 5062] getdents64(3, [pid 8545] <... mount resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8545] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] close(3) = 0 [pid 5062] rmdir("./343" [pid 8545] <... openat resumed>) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 8545] chdir("./file0" [pid 5062] mkdir("./344", 0777 [pid 8545] <... chdir resumed>) = 0 [pid 8545] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 8545] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8541] <... mount resumed>) = 0 [pid 8545] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8541] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 8541] <... openat resumed>) = 3 [pid 8541] chdir("./file0") = 0 [pid 5063] newfstatat(AT_FDCWD, "./344/file0", [pid 8541] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8541] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./344/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8541] <... open resumed>) = 4 [pid 8541] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8541] <... open resumed>) = 5 [pid 8545] <... open resumed>) = 4 [pid 5064] <... ioctl resumed>) = 0 [pid 5063] getdents64(4, [pid 8541] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8545] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 8545] <... open resumed>) = 5 [pid 5063] <... close resumed>) = 0 [ 315.900475][ T8546] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 315.924428][ T8547] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] rmdir("./344/file0" [pid 8541] <... mmap resumed>) = 0x20000000 [pid 8545] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8541] ftruncate(4, 33587195 [pid 5064] close(3 [pid 5063] <... rmdir resumed>) = 0 [pid 8541] <... ftruncate resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 8541] unlink("./bus" [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8545] <... mmap resumed>) = 0x20000000 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8548 ./strace-static-x86_64: Process 8548 attached [pid 8548] set_robust_list(0x55555745a660, 24) = 0 [pid 8548] chdir("./349" [pid 8545] ftruncate(4, 33587195 [pid 5063] getdents64(3, [pid 8548] <... chdir resumed>) = 0 [pid 8548] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8541] <... unlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8548] <... prctl resumed>) = 0 [pid 8541] sendfile(-1, -1, NULL, 281474978811909 [pid 8548] setpgid(0, 0 [pid 8541] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8541] exit_group(0 [pid 8548] <... setpgid resumed>) = 0 [pid 8548] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8541] <... exit_group resumed>) = ? [pid 8548] <... openat resumed>) = 3 [pid 8548] write(3, "1000", 4) = 4 [pid 8548] close(3) = 0 [pid 8548] symlink("/dev/binderfs", "./binderfs" [pid 5063] close(3 [pid 8548] <... symlink resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8548] memfd_create("syzkaller", 0 [pid 5063] rmdir("./344" [pid 8548] <... memfd_create resumed>) = 3 [pid 8548] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8545] <... ftruncate resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8541] +++ exited with 0 +++ [pid 5063] mkdir("./345", 0777 [pid 8545] unlink("./bus" [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8541, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5065] umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./342/binderfs", [pid 5062] <... ioctl resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./342/binderfs") = 0 [pid 8545] <... unlink resumed>) = 0 [pid 8545] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8545] exit_group(0 [pid 8548] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8545] <... exit_group resumed>) = ? [pid 5065] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8549 attached [pid 8549] set_robust_list(0x55555745a660, 24) = 0 [pid 8545] +++ exited with 0 +++ [pid 8549] chdir("./344" [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8545, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8549] <... chdir resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8549 [pid 8549] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8549] setpgid(0, 0) = 0 [pid 8549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8549] write(3, "1000", 4) = 4 [pid 8549] close(3) = 0 [pid 8549] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8549] memfd_create("syzkaller", 0 [pid 5061] umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8549] <... memfd_create resumed>) = 3 [pid 8549] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5061] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 5065] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] newfstatat(AT_FDCWD, "./342/file0", [pid 5061] umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./350/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] openat(AT_FDCWD, "./342/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] unlink("./350/binderfs" [pid 5065] newfstatat(4, "", [pid 5061] <... unlink resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./342/file0") = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./342") = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8548] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 8550 attached [pid 8549] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] mkdir("./343", 0777 [pid 5061] <... umount2 resumed>) = 0 [pid 8548] munmap(0x7f41e0600000, 138412032 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8550 [pid 5061] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8550] set_robust_list(0x55555745a660, 24) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8550] chdir("./345") = 0 [pid 8548] <... munmap resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./350/file0", [pid 8550] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8548] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8550] <... prctl resumed>) = 0 [pid 8548] <... openat resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8550] setpgid(0, 0 [pid 8548] ioctl(4, LOOP_SET_FD, 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8550] <... setpgid resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./350/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8550] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 8550] <... openat resumed>) = 3 [pid 8548] <... ioctl resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8550] write(3, "1000", 4 [pid 8548] close(3 [pid 5061] rmdir("./350/file0" [pid 8550] <... write resumed>) = 4 [pid 8548] <... close resumed>) = 0 [pid 8550] close(3 [pid 8548] close(4 [pid 5061] <... rmdir resumed>) = 0 [pid 8550] <... close resumed>) = 0 [pid 8548] <... close resumed>) = 0 [pid 8550] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5061] getdents64(3, [pid 8550] memfd_create("syzkaller", 0 [pid 8548] mkdir("./file0", 0777 [pid 8550] <... memfd_create resumed>) = 3 [pid 8549] <... write resumed>) = 2097152 [pid 8548] <... mkdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8550] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8549] munmap(0x7f41e0600000, 138412032 [pid 5061] close(3 [pid 8550] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] <... close resumed>) = 0 [pid 8549] <... munmap resumed>) = 0 [pid 8548] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] rmdir("./350") = 0 [pid 8549] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] mkdir("./351", 0777) = 0 [pid 8549] <... openat resumed>) = 4 [ 316.156489][ T8548] loop3: detected capacity change from 0 to 4096 [pid 8549] ioctl(4, LOOP_SET_FD, 3 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8549] <... ioctl resumed>) = 0 [pid 8549] close(3) = 0 [pid 8549] close(4) = 0 [pid 8549] mkdir("./file0", 0777) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 8548] <... mount resumed>) = 0 [pid 8550] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8549] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8548] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8548] <... openat resumed>) = 3 [pid 8548] chdir("./file0" [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8552 [pid 8548] <... chdir resumed>) = 0 [pid 8548] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 8552 attached ) = -1 EBUSY (Device or resource busy) [ 316.212179][ T8549] loop1: detected capacity change from 0 to 4096 [ 316.234256][ T8551] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8548] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8552] set_robust_list(0x55555745a660, 24 [pid 5061] <... ioctl resumed>) = 0 [pid 8552] <... set_robust_list resumed>) = 0 [pid 8548] <... open resumed>) = 4 [pid 8552] chdir("./343" [pid 8548] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8548] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] close(3 [pid 8548] <... ftruncate resumed>) = 0 [pid 8549] <... mount resumed>) = 0 [pid 8549] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8548] unlink("./bus" [pid 8549] <... openat resumed>) = 3 [pid 5061] <... close resumed>) = 0 [pid 8552] <... chdir resumed>) = 0 [pid 8549] chdir("./file0" [pid 8548] <... unlink resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8548] sendfile(-1, -1, NULL, 281474978811909 [pid 8552] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8550] <... write resumed>) = 2097152 [pid 8549] <... chdir resumed>) = 0 [pid 8548] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8552] <... prctl resumed>) = 0 [pid 8549] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8548] exit_group(0) = ? [pid 8552] setpgid(0, 0 [pid 8549] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8552] <... setpgid resumed>) = 0 [pid 8550] munmap(0x7f41e0600000, 138412032 [pid 8549] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8554 [pid 8550] <... munmap resumed>) = 0 [pid 8548] +++ exited with 0 +++ [pid 8552] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8548, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- ./strace-static-x86_64: Process 8554 attached [pid 8554] set_robust_list(0x55555745a660, 24 [pid 8552] <... openat resumed>) = 3 [pid 8550] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8554] <... set_robust_list resumed>) = 0 [pid 8552] write(3, "1000", 4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8552] <... write resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8552] close(3 [pid 8554] chdir("./351" [pid 8550] <... openat resumed>) = 4 [pid 8552] <... close resumed>) = 0 [ 316.311154][ T8553] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8550] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... openat resumed>) = 3 [pid 8554] <... chdir resumed>) = 0 [pid 8552] symlink("/dev/binderfs", "./binderfs" [pid 8550] <... ioctl resumed>) = 0 [pid 5064] newfstatat(3, "", [pid 8554] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8552] <... symlink resumed>) = 0 [pid 5064] getdents64(3, [pid 8554] <... prctl resumed>) = 0 [pid 8552] memfd_create("syzkaller", 0 [pid 8549] <... open resumed>) = 4 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8549] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8554] setpgid(0, 0 [pid 5064] umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8554] <... setpgid resumed>) = 0 [pid 8554] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8549] <... open resumed>) = 5 [pid 5064] newfstatat(AT_FDCWD, "./349/binderfs", [pid 8549] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8554] <... openat resumed>) = 3 [pid 8552] <... memfd_create resumed>) = 3 [pid 8549] <... mmap resumed>) = 0x20000000 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./349/binderfs" [pid 8549] ftruncate(4, 33587195 [pid 8554] write(3, "1000", 4 [pid 8552] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8550] close(3 [pid 8549] <... ftruncate resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 8554] <... write resumed>) = 4 [pid 8552] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8554] close(3 [pid 8550] <... close resumed>) = 0 [pid 8549] unlink("./bus" [pid 8554] <... close resumed>) = 0 [pid 8554] symlink("/dev/binderfs", "./binderfs" [pid 8550] close(4) = 0 [pid 8550] mkdir("./file0", 0777 [pid 8554] <... symlink resumed>) = 0 [pid 8550] <... mkdir resumed>) = 0 [pid 8554] memfd_create("syzkaller", 0 [pid 8550] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8549] <... unlink resumed>) = 0 [pid 8549] sendfile(-1, -1, NULL, 281474978811909 [pid 8554] <... memfd_create resumed>) = 3 [pid 8549] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8554] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8549] exit_group(0 [pid 8554] <... mmap resumed>) = 0x7f41e0600000 [pid 8549] <... exit_group resumed>) = ? [pid 8549] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8549, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [ 316.361073][ T8550] loop2: detected capacity change from 0 to 4096 [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5062] umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./349/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./349/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./349/file0") = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./349") = 0 [pid 5064] mkdir("./350", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8550] <... mount resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8550] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] <... openat resumed>) = 3 [pid 8550] chdir("./file0" [pid 5062] newfstatat(3, "", [pid 8550] <... chdir resumed>) = 0 [pid 8550] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8550] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8550] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] getdents64(3, [pid 8552] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8550] <... open resumed>) = 4 [pid 8550] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8550] <... open resumed>) = 5 [pid 8550] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] newfstatat(AT_FDCWD, "./344/binderfs", [pid 8554] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8550] <... mmap resumed>) = 0x20000000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./344/binderfs" [pid 8550] ftruncate(4, 33587195 [pid 5062] <... unlink resumed>) = 0 [pid 5062] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8550] <... ftruncate resumed>) = 0 [ 316.427517][ T8555] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8550] unlink("./bus") = 0 [pid 8550] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8550] exit_group(0) = ? [pid 8550] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8550, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8552] <... write resumed>) = 2097152 [pid 5064] <... ioctl resumed>) = 0 [pid 5063] umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 8552] munmap(0x7f41e0600000, 138412032 [pid 5064] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5062] newfstatat(AT_FDCWD, "./344/file0", [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] getdents64(3, [pid 5062] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8554] <... write resumed>) = 2097152 [pid 8552] <... munmap resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8554] munmap(0x7f41e0600000, 138412032 [pid 8552] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8556 attached ) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./344/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8556] set_robust_list(0x55555745a660, 24) = 0 [pid 5063] newfstatat(AT_FDCWD, "./345/binderfs", [pid 5062] <... openat resumed>) = 4 [pid 8556] chdir("./350" [pid 8552] <... openat resumed>) = 4 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8556 [pid 5062] newfstatat(4, "", [pid 8556] <... chdir resumed>) = 0 [pid 8554] <... munmap resumed>) = 0 [pid 8552] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8556] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8556] <... prctl resumed>) = 0 [pid 5063] unlink("./345/binderfs" [pid 8556] setpgid(0, 0) = 0 [pid 8556] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8556] write(3, "1000", 4) = 4 [pid 8556] close(3 [pid 8554] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8552] <... ioctl resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5062] getdents64(4, [pid 8552] close(3 [pid 8556] <... close resumed>) = 0 [pid 8554] <... openat resumed>) = 4 [pid 8552] <... close resumed>) = 0 [pid 5063] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8556] symlink("/dev/binderfs", "./binderfs" [pid 8554] ioctl(4, LOOP_SET_FD, 3 [pid 8552] close(4 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8552] <... close resumed>) = 0 [pid 8552] mkdir("./file0", 0777) = 0 [pid 8556] <... symlink resumed>) = 0 [pid 8554] <... ioctl resumed>) = 0 [pid 5062] close(4 [pid 8556] memfd_create("syzkaller", 0 [pid 5062] <... close resumed>) = 0 [pid 8556] <... memfd_create resumed>) = 3 [pid 8554] close(3 [pid 8552] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] rmdir("./344/file0") = 0 [pid 8556] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8554] <... close resumed>) = 0 [pid 5062] getdents64(3, [pid 8554] close(4 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8554] <... close resumed>) = 0 [pid 8556] <... mmap resumed>) = 0x7f41e0600000 [pid 8554] mkdir("./file0", 0777 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] close(3) = 0 [ 316.546440][ T8552] loop4: detected capacity change from 0 to 4096 [ 316.564056][ T8554] loop0: detected capacity change from 0 to 4096 [pid 5062] rmdir("./344" [pid 5063] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8554] <... mkdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8552] <... mount resumed>) = 0 [pid 8552] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8552] chdir("./file0") = 0 [pid 8552] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8552] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] newfstatat(AT_FDCWD, "./345/file0", [pid 5062] mkdir("./345", 0777 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8554] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8552] <... open resumed>) = 4 [pid 5063] openat(AT_FDCWD, "./345/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8552] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... openat resumed>) = 3 [pid 8552] <... open resumed>) = 5 [pid 5063] <... openat resumed>) = 4 [pid 8552] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] newfstatat(4, "", [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8552] <... mmap resumed>) = 0x20000000 [pid 5063] getdents64(4, [pid 8552] ftruncate(4, 33587195 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./345/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 8552] <... ftruncate resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8552] unlink("./bus" [pid 5063] rmdir("./345") = 0 [pid 5063] mkdir("./346", 0777) = 0 [pid 8552] <... unlink resumed>) = 0 [pid 8552] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8552] exit_group(0) = ? [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 316.589861][ T8557] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8552] +++ exited with 0 +++ [pid 8556] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8554] <... mount resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8552, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- [pid 5062] <... ioctl resumed>) = 0 [pid 8554] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8554] chdir("./file0" [pid 5065] umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8554] <... chdir resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", [pid 8554] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 8554] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 8559 attached [pid 8554] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8559 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./343/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8559] set_robust_list(0x55555745a660, 24) = 0 [pid 8559] chdir("./345") = 0 [pid 5065] unlink("./343/binderfs" [pid 8559] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8559] setpgid(0, 0) = 0 [pid 8559] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... unlink resumed>) = 0 [pid 8559] <... openat resumed>) = 3 [ 316.678317][ T8558] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8556] <... write resumed>) = 2097152 [pid 8559] write(3, "1000", 4 [pid 8554] <... open resumed>) = 4 [pid 8556] munmap(0x7f41e0600000, 138412032 [pid 8559] <... write resumed>) = 4 [pid 8554] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8559] close(3 [pid 5063] <... ioctl resumed>) = 0 [pid 8559] <... close resumed>) = 0 [pid 5063] close(3 [pid 8559] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... close resumed>) = 0 [pid 8559] <... symlink resumed>) = 0 [pid 8556] <... munmap resumed>) = 0 [pid 8554] <... open resumed>) = 5 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8559] memfd_create("syzkaller", 0 [pid 8556] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8554] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... umount2 resumed>) = 0 [pid 8559] <... memfd_create resumed>) = 3 [pid 8556] <... openat resumed>) = 4 ./strace-static-x86_64: Process 8560 attached [pid 8556] ioctl(4, LOOP_SET_FD, 3 [pid 8560] set_robust_list(0x55555745a660, 24 [pid 8559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8554] <... mmap resumed>) = 0x20000000 [pid 5065] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8560 [pid 8559] <... mmap resumed>) = 0x7f41e0600000 [pid 8560] <... set_robust_list resumed>) = 0 [pid 8556] <... ioctl resumed>) = 0 [pid 8554] ftruncate(4, 33587195 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8560] chdir("./346" [pid 5065] newfstatat(AT_FDCWD, "./343/file0", [pid 8560] <... chdir resumed>) = 0 [pid 8556] close(3 [pid 8554] <... ftruncate resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8560] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8560] <... prctl resumed>) = 0 [pid 8556] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8560] setpgid(0, 0 [pid 8556] close(4 [pid 5065] openat(AT_FDCWD, "./343/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8560] <... setpgid resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5065] newfstatat(4, "", [pid 8560] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8559] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8556] <... close resumed>) = 0 [pid 8554] unlink("./bus" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8560] write(3, "1000", 4 [ 316.770065][ T8556] loop3: detected capacity change from 0 to 4096 [pid 8556] mkdir("./file0", 0777) = 0 [pid 8560] <... write resumed>) = 4 [pid 8554] <... unlink resumed>) = 0 [pid 5065] getdents64(4, [pid 8560] close(3 [pid 8554] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8560] <... close resumed>) = 0 [pid 8554] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8560] symlink("/dev/binderfs", "./binderfs" [pid 8554] exit_group(0 [pid 5065] close(4) = 0 [pid 8560] <... symlink resumed>) = 0 [pid 8556] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8554] <... exit_group resumed>) = ? [pid 5065] rmdir("./343/file0" [pid 8560] memfd_create("syzkaller", 0) = 3 [pid 5065] <... rmdir resumed>) = 0 [pid 8560] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5065] getdents64(3, [pid 8560] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8559] <... write resumed>) = 2097152 [pid 8556] <... mount resumed>) = 0 [pid 8554] +++ exited with 0 +++ [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8556] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8559] munmap(0x7f41e0600000, 138412032 [pid 8556] <... openat resumed>) = 3 [pid 5065] close(3 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8554, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 8559] <... munmap resumed>) = 0 [pid 8556] chdir("./file0" [pid 5065] <... close resumed>) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 8556] <... chdir resumed>) = 0 [pid 5065] rmdir("./343" [pid 5061] <... restart_syscall resumed>) = 0 [pid 8556] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8556] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... rmdir resumed>) = 0 [pid 5061] umount2("./351", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8559] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8559] <... openat resumed>) = 4 [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 8559] ioctl(4, LOOP_SET_FD, 3 [pid 5065] mkdir("./344", 0777 [pid 8556] <... open resumed>) = 4 [pid 5065] <... mkdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8556] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] getdents64(3, [pid 8556] <... open resumed>) = 5 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] umount2("./351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] newfstatat(AT_FDCWD, "./351/binderfs", [pid 8556] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./351/binderfs" [pid 8556] <... mmap resumed>) = 0x20000000 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8556] ftruncate(4, 33587195 [pid 8559] <... ioctl resumed>) = 0 [pid 8559] close(3 [pid 8556] <... ftruncate resumed>) = 0 [pid 8560] <... write resumed>) = 2097152 [pid 8559] <... close resumed>) = 0 [pid 8556] unlink("./bus" [pid 8560] munmap(0x7f41e0600000, 138412032 [pid 8559] close(4) = 0 [pid 8559] mkdir("./file0", 0777) = 0 [pid 8560] <... munmap resumed>) = 0 [pid 8556] <... unlink resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8560] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8559] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8556] sendfile(-1, -1, NULL, 281474978811909 [pid 8560] <... openat resumed>) = 4 [pid 8556] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8556] exit_group(0 [ 316.864992][ T8561] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 316.893814][ T8559] loop1: detected capacity change from 0 to 4096 [pid 8560] ioctl(4, LOOP_SET_FD, 3 [pid 8556] <... exit_group resumed>) = ? [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./351/file0", [pid 8560] <... ioctl resumed>) = 0 [pid 8556] +++ exited with 0 +++ [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./351/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8556, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 8560] close(3 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8560] <... close resumed>) = 0 [pid 5061] getdents64(4, [pid 8560] close(4 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8560] <... close resumed>) = 0 [pid 8560] mkdir("./file0", 0777 [pid 5061] close(4 [pid 8560] <... mkdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5064] umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] rmdir("./351/file0" [pid 8560] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... rmdir resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5061] getdents64(3, [pid 5064] newfstatat(3, "", [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] close(3 [pid 5064] getdents64(3, [pid 5061] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] rmdir("./351" [pid 5064] umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./350/binderfs", [pid 5061] <... rmdir resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./350/binderfs" [pid 5061] mkdir("./352", 0777 [pid 5064] <... unlink resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5064] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5065] <... ioctl resumed>) = 0 [ 316.939077][ T8560] loop2: detected capacity change from 0 to 4096 [pid 5065] close(3 [pid 8559] <... mount resumed>) = 0 [pid 8559] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8564 attached [pid 8560] <... mount resumed>) = 0 [pid 8559] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = 0 [pid 8560] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8559] chdir("./file0" [pid 5064] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8564] set_robust_list(0x55555745a660, 24 [pid 8560] <... openat resumed>) = 3 [pid 8559] <... chdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8564] <... set_robust_list resumed>) = 0 [pid 8560] chdir("./file0" [pid 8559] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8564 [pid 5064] newfstatat(AT_FDCWD, "./350/file0", [pid 8564] chdir("./344") = 0 [pid 8564] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8560] <... chdir resumed>) = 0 [pid 8559] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8564] <... prctl resumed>) = 0 [pid 8560] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8559] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8564] setpgid(0, 0 [pid 8560] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8564] <... setpgid resumed>) = 0 [pid 8564] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8560] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8564] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "./350/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8564] write(3, "1000", 4 [pid 5064] <... openat resumed>) = 4 [pid 8564] <... write resumed>) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 316.998999][ T8562] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.011885][ T8563] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8564] close(3 [pid 5064] getdents64(4, [pid 8564] <... close resumed>) = 0 [pid 8560] <... open resumed>) = 4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8564] symlink("/dev/binderfs", "./binderfs" [pid 5064] getdents64(4, [pid 8564] <... symlink resumed>) = 0 [pid 8560] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8559] <... open resumed>) = 4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8564] memfd_create("syzkaller", 0 [pid 8560] <... open resumed>) = 5 [pid 8559] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] close(4 [pid 5061] <... ioctl resumed>) = 0 [pid 8564] <... memfd_create resumed>) = 3 [pid 8560] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... close resumed>) = 0 [pid 8564] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8559] <... open resumed>) = 5 [pid 5064] rmdir("./350/file0" [pid 5061] close(3 [pid 8564] <... mmap resumed>) = 0x7f41e0600000 [pid 8560] <... mmap resumed>) = 0x20000000 [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8560] ftruncate(4, 33587195 [pid 8559] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] getdents64(3, [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8559] <... mmap resumed>) = 0x20000000 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 ./strace-static-x86_64: Process 8565 attached [pid 5064] rmdir("./350" [pid 8565] set_robust_list(0x55555745a660, 24 [pid 5064] <... rmdir resumed>) = 0 [pid 8565] <... set_robust_list resumed>) = 0 [pid 8559] ftruncate(4, 33587195 [pid 8565] chdir("./352" [pid 8560] <... ftruncate resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8565 [pid 8565] <... chdir resumed>) = 0 [pid 5064] mkdir("./351", 0777 [pid 8565] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8559] <... ftruncate resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 8565] <... prctl resumed>) = 0 [pid 8559] unlink("./bus" [pid 8565] setpgid(0, 0) = 0 [pid 8565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8565] write(3, "1000", 4) = 4 [pid 8565] close(3) = 0 [pid 8565] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8559] <... unlink resumed>) = 0 [pid 8560] unlink("./bus" [pid 8559] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8559] exit_group(0) = ? [pid 8565] memfd_create("syzkaller", 0 [pid 8560] <... unlink resumed>) = 0 [pid 8560] sendfile(-1, -1, NULL, 281474978811909 [pid 8565] <... memfd_create resumed>) = 3 [pid 8565] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8560] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8565] <... mmap resumed>) = 0x7f41e0600000 [pid 8560] exit_group(0) = ? [pid 8559] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8559, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 8564] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... restart_syscall resumed>) = 0 [pid 5062] umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8560] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8560, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5062] newfstatat(AT_FDCWD, "./345/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./345/binderfs" [pid 5063] umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... unlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./346/binderfs", [pid 5062] <... umount2 resumed>) = 0 [pid 8565] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... ioctl resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] unlink("./346/binderfs" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./345/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8564] <... write resumed>) = 2097152 [pid 5063] <... unlink resumed>) = 0 [pid 5062] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./345/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", [pid 5064] close(3 [pid 8564] munmap(0x7f41e0600000, 138412032 [pid 5064] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] getdents64(4, [pid 8564] <... munmap resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8566 [pid 5062] close(4) = 0 [pid 5062] rmdir("./345/file0") = 0 ./strace-static-x86_64: Process 8566 attached [pid 8566] set_robust_list(0x55555745a660, 24) = 0 [pid 8566] chdir("./351" [pid 5062] getdents64(3, [pid 8564] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8566] <... chdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8566] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] close(3 [pid 8566] setpgid(0, 0 [pid 8564] <... openat resumed>) = 4 [pid 5062] <... close resumed>) = 0 [pid 8566] <... setpgid resumed>) = 0 [pid 8564] ioctl(4, LOOP_SET_FD, 3 [pid 5062] rmdir("./345" [pid 8564] <... ioctl resumed>) = 0 [pid 8566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8566] write(3, "1000", 4) = 4 [pid 8566] close(3) = 0 [pid 8566] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8566] memfd_create("syzkaller", 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./346", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8566] <... memfd_create resumed>) = 3 [pid 8566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8566] <... mmap resumed>) = 0x7f41e0600000 [pid 8564] close(3 [pid 5063] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8564] <... close resumed>) = 0 [pid 8564] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8564] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./346/file0", [pid 8564] mkdir("./file0", 0777 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8564] <... mkdir resumed>) = 0 [pid 5063] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8564] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8565] <... write resumed>) = 2097152 [pid 5063] openat(AT_FDCWD, "./346/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./346/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [ 317.211388][ T8564] loop4: detected capacity change from 0 to 4096 [pid 8565] munmap(0x7f41e0600000, 138412032) = 0 [pid 8565] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] rmdir("./346" [pid 8565] <... openat resumed>) = 4 [pid 8565] ioctl(4, LOOP_SET_FD, 3 [pid 8566] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... rmdir resumed>) = 0 [pid 8564] <... mount resumed>) = 0 [pid 5063] mkdir("./347", 0777 [pid 8564] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] <... mkdir resumed>) = 0 [pid 8564] chdir("./file0") = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8564] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5063] <... openat resumed>) = 3 [pid 8564] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8565] <... ioctl resumed>) = 0 [pid 8565] close(3 [pid 8564] <... open resumed>) = 4 [pid 8565] <... close resumed>) = 0 [pid 8564] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... ioctl resumed>) = 0 [pid 8565] close(4) = 0 [pid 8565] mkdir("./file0", 0777 [pid 8564] <... open resumed>) = 5 [pid 8565] <... mkdir resumed>) = 0 [pid 8565] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] close(3 [pid 8564] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... close resumed>) = 0 [ 317.264853][ T8567] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.285352][ T8565] loop0: detected capacity change from 0 to 4096 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8564] <... mmap resumed>) = 0x20000000 [pid 8564] ftruncate(4, 33587195 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8568 ./strace-static-x86_64: Process 8568 attached [pid 8568] set_robust_list(0x55555745a660, 24) = 0 [pid 8568] chdir("./346") = 0 [pid 8568] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8568] setpgid(0, 0) = 0 [pid 8568] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8568] write(3, "1000", 4) = 4 [pid 8568] close(3) = 0 [pid 8568] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8564] <... ftruncate resumed>) = 0 [pid 8568] memfd_create("syzkaller", 0 [pid 8564] unlink("./bus" [pid 8568] <... memfd_create resumed>) = 3 [pid 8568] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8565] <... mount resumed>) = 0 [pid 8565] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8565] chdir("./file0") = 0 [pid 8565] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8564] <... unlink resumed>) = 0 [pid 8565] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8565] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8564] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8564] exit_group(0) = ? [pid 5063] <... ioctl resumed>) = 0 [pid 8566] <... write resumed>) = 2097152 [pid 5063] close(3 [pid 8564] +++ exited with 0 +++ [pid 5063] <... close resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8564, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8566] munmap(0x7f41e0600000, 138412032) = 0 [pid 5065] umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8570 attached ) = 3 [pid 8570] set_robust_list(0x55555745a660, 24 [pid 5065] newfstatat(3, "", [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8570 [pid 8570] <... set_robust_list resumed>) = 0 [ 317.373303][ T8569] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8566] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8566] <... openat resumed>) = 4 [pid 8566] ioctl(4, LOOP_SET_FD, 3 [pid 5065] getdents64(3, [pid 8570] chdir("./347" [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./344/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./344/binderfs") = 0 [pid 5065] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8570] <... chdir resumed>) = 0 [pid 8565] <... open resumed>) = 4 [pid 8570] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8570] setpgid(0, 0 [pid 8565] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8570] <... setpgid resumed>) = 0 [pid 8570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8565] <... open resumed>) = 5 [pid 8570] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = 0 [pid 8565] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8570] write(3, "1000", 4 [pid 8565] <... mmap resumed>) = 0x20000000 [pid 8570] <... write resumed>) = 4 [pid 8570] close(3) = 0 [pid 8566] <... ioctl resumed>) = 0 [pid 8570] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8566] close(3) = 0 [pid 8568] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8566] close(4) = 0 [pid 8570] memfd_create("syzkaller", 0 [pid 8566] mkdir("./file0", 0777) = 0 [pid 8565] ftruncate(4, 33587195 [pid 8566] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8565] <... ftruncate resumed>) = 0 [pid 8570] <... memfd_create resumed>) = 3 [pid 5065] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8570] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8565] unlink("./bus" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8570] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] newfstatat(AT_FDCWD, "./344/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./344/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8565] <... unlink resumed>) = 0 [pid 8565] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... openat resumed>) = 4 [pid 8565] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [ 317.432241][ T8566] loop3: detected capacity change from 0 to 4096 [pid 5065] newfstatat(4, "", [pid 8565] exit_group(0) = ? [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./344/file0") = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./344" [pid 8565] +++ exited with 0 +++ [pid 5065] <... rmdir resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8565, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5065] mkdir("./345", 0777 [pid 5061] umount2("./352", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./352/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./352/binderfs", [pid 5065] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] unlink("./352/binderfs") = 0 [pid 5061] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8570] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8566] <... mount resumed>) = 0 [pid 8566] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8566] chdir("./file0" [pid 8568] <... write resumed>) = 2097152 [pid 8566] <... chdir resumed>) = 0 [pid 8568] munmap(0x7f41e0600000, 138412032 [pid 8566] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... umount2 resumed>) = 0 [pid 8566] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8566] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8568] <... munmap resumed>) = 0 [pid 5061] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8570] <... write resumed>) = 2097152 [pid 8568] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8568] <... openat resumed>) = 4 [ 317.509205][ T8571] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8570] munmap(0x7f41e0600000, 138412032 [pid 8568] ioctl(4, LOOP_SET_FD, 3 [pid 5061] newfstatat(AT_FDCWD, "./352/file0", [pid 8570] <... munmap resumed>) = 0 [pid 8566] <... open resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8570] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8570] ioctl(4, LOOP_SET_FD, 3 [pid 8566] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8568] <... ioctl resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 8570] <... ioctl resumed>) = 0 [pid 8568] close(3 [pid 8566] <... open resumed>) = 5 [pid 5065] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8570] close(3 [pid 8568] <... close resumed>) = 0 [pid 8566] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... close resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./352/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8570] <... close resumed>) = 0 [pid 8570] close(4) = 0 [pid 8566] <... mmap resumed>) = 0x20000000 [pid 8570] mkdir("./file0", 0777 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... openat resumed>) = 4 [pid 8568] close(4 [pid 8566] ftruncate(4, 33587195 [pid 5061] newfstatat(4, "", [pid 8570] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8572 attached [pid 8568] <... close resumed>) = 0 [pid 8566] <... ftruncate resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8570] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8566] unlink("./bus" [pid 5061] getdents64(4, [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8572 [pid 8568] mkdir("./file0", 0777 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [ 317.579689][ T8568] loop1: detected capacity change from 0 to 4096 [ 317.595021][ T8570] loop2: detected capacity change from 0 to 4096 [pid 8572] set_robust_list(0x55555745a660, 24 [pid 8568] <... mkdir resumed>) = 0 [pid 5061] rmdir("./352/file0" [pid 8572] <... set_robust_list resumed>) = 0 [pid 8568] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8566] <... unlink resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8566] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] getdents64(3, [pid 8572] chdir("./345" [pid 8566] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./352" [pid 8566] exit_group(0 [pid 8572] <... chdir resumed>) = 0 [pid 8566] <... exit_group resumed>) = ? [pid 5061] <... rmdir resumed>) = 0 [pid 8572] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8572] setpgid(0, 0 [pid 8570] <... mount resumed>) = 0 [pid 8572] <... setpgid resumed>) = 0 [pid 8572] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] mkdir("./353", 0777 [pid 8572] <... openat resumed>) = 3 [pid 8570] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8572] write(3, "1000", 4 [pid 8570] <... openat resumed>) = 3 [pid 5061] <... mkdir resumed>) = 0 [pid 8572] <... write resumed>) = 4 [pid 8570] chdir("./file0" [pid 8572] close(3 [pid 8570] <... chdir resumed>) = 0 [pid 8572] <... close resumed>) = 0 [pid 8570] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8566] +++ exited with 0 +++ [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8572] symlink("/dev/binderfs", "./binderfs" [pid 8570] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8566, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5061] <... openat resumed>) = 3 [pid 8572] <... symlink resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8572] memfd_create("syzkaller", 0 [pid 8570] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8572] <... memfd_create resumed>) = 3 [pid 5064] umount2("./351", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8568] <... mount resumed>) = 0 [pid 8572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8568] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8572] <... mmap resumed>) = 0x7f41e0600000 [pid 8570] <... open resumed>) = 4 [pid 8568] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./351/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./351/binderfs") = 0 [pid 8568] chdir("./file0" [pid 5064] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8570] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8568] <... chdir resumed>) = 0 [pid 8570] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8568] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8570] <... mmap resumed>) = 0x20000000 [pid 8568] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8570] ftruncate(4, 33587195 [pid 8568] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8570] <... ftruncate resumed>) = 0 [ 317.660956][ T8573] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.695619][ T8574] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8570] unlink("./bus") = 0 [pid 8570] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8570] exit_group(0) = ? [pid 8568] <... open resumed>) = 4 [pid 8572] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8568] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... umount2 resumed>) = 0 [pid 8570] +++ exited with 0 +++ [pid 8568] <... open resumed>) = 5 [pid 8568] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8570, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5063] umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8568] <... mmap resumed>) = 0x20000000 [pid 8568] ftruncate(4, 33587195 [pid 5064] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] newfstatat(AT_FDCWD, "./351/file0", [pid 5063] <... openat resumed>) = 3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, [pid 8568] <... ftruncate resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... ioctl resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./351/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(4, "", [pid 5063] newfstatat(AT_FDCWD, "./347/binderfs", [pid 8568] unlink("./bus" [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] close(3 [pid 5064] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] unlink("./347/binderfs" [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5064] close(4./strace-static-x86_64: Process 8575 attached ) = 0 [pid 8575] set_robust_list(0x55555745a660, 24 [pid 5064] rmdir("./351/file0" [pid 5063] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8575] <... set_robust_list resumed>) = 0 [pid 8575] chdir("./353" [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8575 [pid 8575] <... chdir resumed>) = 0 [pid 8575] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8572] <... write resumed>) = 2097152 [pid 8568] <... unlink resumed>) = 0 [pid 5064] getdents64(3, [pid 8575] setpgid(0, 0 [pid 8568] sendfile(-1, -1, NULL, 281474978811909 [pid 8575] <... setpgid resumed>) = 0 [pid 8572] munmap(0x7f41e0600000, 138412032 [pid 8568] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8575] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8568] exit_group(0 [pid 5064] close(3 [pid 8568] <... exit_group resumed>) = ? [pid 8575] <... openat resumed>) = 3 [pid 8572] <... munmap resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8575] write(3, "1000", 4 [pid 5064] rmdir("./351" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8575] <... write resumed>) = 4 [pid 8572] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8568] +++ exited with 0 +++ [pid 5064] <... rmdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./347/file0", [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8568, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 8575] close(3 [pid 8572] <... openat resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8572] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8575] <... close resumed>) = 0 [pid 5064] mkdir("./352", 0777 [pid 8575] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... mkdir resumed>) = 0 [pid 8575] <... symlink resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 8575] memfd_create("syzkaller", 0 [pid 8572] <... ioctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./347/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8572] close(3) = 0 [pid 5063] <... openat resumed>) = 4 [pid 8575] <... memfd_create resumed>) = 3 [pid 8572] close(4 [pid 5063] newfstatat(4, "", [pid 8572] <... close resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8572] mkdir("./file0", 0777 [pid 5062] umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8572] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8575] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8572] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] newfstatat(3, "", [pid 5063] getdents64(4, [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] newfstatat(AT_FDCWD, "./346/binderfs", [pid 5063] close(4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] unlink("./346/binderfs" [pid 5063] rmdir("./347/file0" [pid 5062] <... unlink resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8575] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./347") = 0 [ 317.841230][ T8572] loop4: detected capacity change from 0 to 4096 [pid 5063] mkdir("./348", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8572] <... mount resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 8572] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8572] chdir("./file0" [pid 5064] close(3 [pid 5062] <... umount2 resumed>) = 0 [pid 8572] <... chdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 8572] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8572] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000./strace-static-x86_64: Process 8577 attached [pid 8575] <... write resumed>) = 2097152 [pid 5062] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8577] set_robust_list(0x55555745a660, 24 [pid 8575] munmap(0x7f41e0600000, 138412032 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./346/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./346/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8577] <... set_robust_list resumed>) = 0 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 8577] chdir("./352" [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8577 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 8577] <... chdir resumed>) = 0 [pid 8575] <... munmap resumed>) = 0 [pid 8572] <... open resumed>) = 4 [pid 5062] <... close resumed>) = 0 [pid 8577] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8572] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] rmdir("./346/file0" [pid 8577] <... prctl resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8577] setpgid(0, 0 [ 317.923296][ T8576] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8575] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8572] <... open resumed>) = 5 [pid 5062] getdents64(3, [pid 8577] <... setpgid resumed>) = 0 [pid 8575] <... openat resumed>) = 4 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 8577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8572] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8575] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./346") = 0 [pid 5062] mkdir("./347", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8577] <... openat resumed>) = 3 [pid 8575] <... ioctl resumed>) = 0 [pid 8572] <... mmap resumed>) = 0x20000000 [pid 8577] write(3, "1000", 4 [pid 8575] close(3 [pid 8577] <... write resumed>) = 4 [pid 8575] <... close resumed>) = 0 [pid 8572] ftruncate(4, 33587195 [pid 5063] <... ioctl resumed>) = 0 [pid 8575] close(4) = 0 [pid 8577] close(3) = 0 [pid 8577] symlink("/dev/binderfs", "./binderfs" [pid 8575] mkdir("./file0", 0777 [pid 5063] close(3 [pid 8577] <... symlink resumed>) = 0 [pid 8575] <... mkdir resumed>) = 0 [pid 8577] memfd_create("syzkaller", 0 [pid 8575] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8572] <... ftruncate resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8577] <... memfd_create resumed>) = 3 [pid 8577] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8572] unlink("./bus" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8577] <... mmap resumed>) = 0x7f41e0600000 ./strace-static-x86_64: Process 8578 attached [pid 8578] set_robust_list(0x55555745a660, 24) = 0 [pid 8578] chdir("./348") = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8578 [pid 8578] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8578] setpgid(0, 0) = 0 [pid 8578] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8572] <... unlink resumed>) = 0 [pid 8578] <... openat resumed>) = 3 [pid 8572] sendfile(-1, -1, NULL, 281474978811909 [pid 8578] write(3, "1000", 4) = 4 [ 317.971202][ T8575] loop0: detected capacity change from 0 to 4096 [pid 8578] close(3) = 0 [pid 8578] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8578] memfd_create("syzkaller", 0) = 3 [pid 8578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8572] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8572] exit_group(0) = ? [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3 [pid 8572] +++ exited with 0 +++ [pid 8577] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8575] <... mount resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8572, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8575] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8575] <... openat resumed>) = 3 [pid 5065] umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8575] chdir("./file0"./strace-static-x86_64: Process 8580 attached [pid 8578] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8575] <... chdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8575] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8580] set_robust_list(0x55555745a660, 24 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8580 [pid 8580] <... set_robust_list resumed>) = 0 [pid 8575] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8580] chdir("./347") = 0 [pid 8575] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... openat resumed>) = 3 [pid 8580] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] newfstatat(3, "", [pid 8580] <... prctl resumed>) = 0 [pid 8580] setpgid(0, 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8580] <... setpgid resumed>) = 0 [pid 8580] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] getdents64(3, [pid 8580] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8580] write(3, "1000", 4 [pid 5065] umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8580] <... write resumed>) = 4 [pid 8580] close(3 [pid 5065] newfstatat(AT_FDCWD, "./345/binderfs", [pid 8580] <... close resumed>) = 0 [pid 8580] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 318.066626][ T8579] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8580] <... symlink resumed>) = 0 [pid 8575] <... open resumed>) = 4 [pid 5065] unlink("./345/binderfs") = 0 [pid 5065] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8575] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8580] memfd_create("syzkaller", 0 [pid 8575] <... open resumed>) = 5 [pid 8575] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 3 [pid 8578] <... write resumed>) = 2097152 [pid 8577] <... write resumed>) = 2097152 [pid 8575] ftruncate(4, 33587195 [pid 5065] <... umount2 resumed>) = 0 [pid 8580] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8577] munmap(0x7f41e0600000, 138412032 [pid 8580] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8577] <... munmap resumed>) = 0 [pid 8575] <... ftruncate resumed>) = 0 [pid 8577] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8575] unlink("./bus" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8577] <... openat resumed>) = 4 [pid 5065] newfstatat(AT_FDCWD, "./345/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8578] munmap(0x7f41e0600000, 138412032 [pid 8577] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8578] <... munmap resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./345/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8577] <... ioctl resumed>) = 0 [pid 8580] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8578] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8575] <... unlink resumed>) = 0 [pid 5065] getdents64(4, [pid 8578] <... openat resumed>) = 4 [pid 8577] close(3 [pid 8575] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8577] <... close resumed>) = 0 [pid 8575] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] close(4 [pid 8577] close(4 [pid 8575] exit_group(0 [pid 5065] <... close resumed>) = 0 [pid 8577] <... close resumed>) = 0 [pid 8577] mkdir("./file0", 0777 [pid 8575] <... exit_group resumed>) = ? [pid 8578] ioctl(4, LOOP_SET_FD, 3 [pid 8577] <... mkdir resumed>) = 0 [pid 5065] rmdir("./345/file0" [pid 8578] <... ioctl resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 8578] close(3 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8578] <... close resumed>) = 0 [pid 8578] close(4 [pid 5065] close(3 [pid 8578] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 8578] mkdir("./file0", 0777 [pid 5065] rmdir("./345" [pid 8577] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8575] +++ exited with 0 +++ [pid 8578] <... mkdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8575, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5065] mkdir("./346", 0777 [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./353", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8578] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 5065] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./353/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./353/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./353/binderfs") = 0 [ 318.166280][ T8577] loop3: detected capacity change from 0 to 4096 [ 318.200043][ T8578] loop2: detected capacity change from 0 to 4096 [pid 5061] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8580] <... write resumed>) = 2097152 [pid 8580] munmap(0x7f41e0600000, 138412032 [pid 8577] <... mount resumed>) = 0 [pid 8580] <... munmap resumed>) = 0 [pid 8577] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8578] <... mount resumed>) = 0 [pid 8580] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8577] chdir("./file0" [pid 8580] <... openat resumed>) = 4 [pid 8577] <... chdir resumed>) = 0 [pid 8577] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8580] ioctl(4, LOOP_SET_FD, 3 [pid 8577] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8580] <... ioctl resumed>) = 0 [pid 8578] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8578] chdir("./file0" [pid 5061] <... umount2 resumed>) = 0 [pid 8578] <... chdir resumed>) = 0 [pid 8578] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8578] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./353/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./353/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", [pid 8578] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./353/file0") = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [ 318.245198][ T8581] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 318.263450][ T8582] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 318.281239][ T8580] loop1: detected capacity change from 0 to 4096 [pid 5061] close(3 [pid 8580] close(3 [pid 8578] <... open resumed>) = 4 [pid 8577] <... open resumed>) = 4 [pid 5065] close(3 [pid 8580] <... close resumed>) = 0 [pid 8578] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8577] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... close resumed>) = 0 [pid 8580] close(4 [pid 8577] <... open resumed>) = 5 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... close resumed>) = 0 [pid 8580] <... close resumed>) = 0 [pid 8577] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8580] mkdir("./file0", 0777 [pid 8578] <... open resumed>) = 5 [pid 8577] <... mmap resumed>) = 0x20000000 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8583 [pid 8580] <... mkdir resumed>) = 0 [pid 8577] ftruncate(4, 33587195 [pid 5061] rmdir("./353"./strace-static-x86_64: Process 8583 attached [ 318.319173][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 318.319189][ T28] audit: type=1800 audit(1708423470.850:5243): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [pid 8580] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8578] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8577] <... ftruncate resumed>) = 0 [pid 8583] set_robust_list(0x55555745a660, 24 [pid 8577] unlink("./bus" [pid 5061] <... rmdir resumed>) = 0 [pid 8578] <... mmap resumed>) = 0x20000000 [pid 8578] ftruncate(4, 33587195 [pid 8583] <... set_robust_list resumed>) = 0 [pid 5061] mkdir("./354", 0777 [pid 8583] chdir("./346" [pid 8577] <... unlink resumed>) = 0 [pid 8583] <... chdir resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 8578] <... ftruncate resumed>) = 0 [pid 8577] sendfile(-1, -1, NULL, 281474978811909 [pid 8583] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8578] unlink("./bus" [pid 8577] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8577] exit_group(0 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8583] <... prctl resumed>) = 0 [ 318.361342][ T28] audit: type=1800 audit(1708423470.850:5244): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 318.394510][ T28] audit: type=1800 audit(1708423470.880:5245): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 8583] setpgid(0, 0 [pid 8577] <... exit_group resumed>) = ? [pid 8583] <... setpgid resumed>) = 0 [pid 8578] <... unlink resumed>) = 0 [pid 8577] +++ exited with 0 +++ [ 318.416235][ T28] audit: type=1800 audit(1708423470.880:5246): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 318.440163][ T28] audit: type=1800 audit(1708423470.880:5247): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 8580] <... mount resumed>) = 0 [pid 8578] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8577, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 8580] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8578] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8580] chdir("./file0" [pid 8578] exit_group(0 [pid 8580] <... chdir resumed>) = 0 [pid 8580] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8578] <... exit_group resumed>) = ? [pid 5064] umount2("./352", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8580] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./352/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./352/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./352/binderfs") = 0 [pid 8583] <... openat resumed>) = 3 [pid 8580] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8583] write(3, "1000", 4) = 4 [pid 8583] close(3) = 0 [pid 8583] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8583] memfd_create("syzkaller", 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8578] +++ exited with 0 +++ [pid 8583] <... memfd_create resumed>) = 3 [pid 8583] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8578, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- [pid 5061] close(3 [ 318.461345][ T8584] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... openat resumed>) = 3 ./strace-static-x86_64: Process 8585 attached [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8585 [pid 8585] set_robust_list(0x55555745a660, 24 [pid 8580] <... open resumed>) = 4 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8585] <... set_robust_list resumed>) = 0 [pid 8583] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8585] chdir("./354" [pid 8580] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... umount2 resumed>) = 0 [ 318.510917][ T28] audit: type=1800 audit(1708423470.900:5248): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 318.540311][ T28] audit: type=1800 audit(1708423471.070:5249): pid=8580 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [pid 5063] umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8585] <... chdir resumed>) = 0 [pid 8580] <... open resumed>) = 5 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8585] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8580] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] newfstatat(AT_FDCWD, "./348/binderfs", [pid 8585] <... prctl resumed>) = 0 [pid 8580] <... mmap resumed>) = 0x20000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8585] setpgid(0, 0 [pid 8580] ftruncate(4, 33587195 [pid 5063] unlink("./348/binderfs" [pid 8585] <... setpgid resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 8585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8585] <... openat resumed>) = 3 [pid 8585] write(3, "1000", 4) = 4 [pid 8585] close(3) = 0 [pid 8585] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8585] memfd_create("syzkaller", 0) = 3 [pid 8585] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8583] <... write resumed>) = 2097152 [pid 8580] <... ftruncate resumed>) = 0 [pid 5064] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 8580] unlink("./bus" [pid 5063] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./348/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./348/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./348/file0") = 0 [ 318.576126][ T28] audit: type=1800 audit(1708423471.100:5250): pid=8580 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./348" [pid 8583] munmap(0x7f41e0600000, 138412032 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 8580] <... unlink resumed>) = 0 [pid 8580] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] newfstatat(AT_FDCWD, "./352/file0", [pid 8580] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] mkdir("./349", 0777 [pid 8583] <... munmap resumed>) = 0 [pid 8580] exit_group(0 [pid 5064] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... mkdir resumed>) = 0 [pid 8583] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8585] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8583] <... openat resumed>) = 4 [pid 8580] <... exit_group resumed>) = ? [pid 5064] openat(AT_FDCWD, "./352/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8583] ioctl(4, LOOP_SET_FD, 3 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8583] <... ioctl resumed>) = 0 [pid 8580] +++ exited with 0 +++ [pid 5064] <... openat resumed>) = 4 [pid 8583] close(3 [pid 5064] newfstatat(4, "", [pid 8583] <... close resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8580, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8583] close(4 [pid 5064] getdents64(4, [pid 5062] umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8583] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8583] mkdir("./file0", 0777 [pid 5064] getdents64(4, [pid 5062] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8585] <... write resumed>) = 2097152 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5062] <... openat resumed>) = 3 [pid 8585] munmap(0x7f41e0600000, 138412032 [pid 5064] <... close resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 5064] rmdir("./352/file0" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5064] getdents64(3, [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8585] <... munmap resumed>) = 0 [pid 8583] <... mkdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8585] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8583] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8585] <... openat resumed>) = 4 [pid 5064] <... close resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./347/binderfs", [pid 5064] rmdir("./352" [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 318.612906][ T28] audit: type=1800 audit(1708423471.100:5251): pid=8580 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 318.647187][ T8583] loop4: detected capacity change from 0 to 4096 [pid 8585] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... rmdir resumed>) = 0 [pid 5062] unlink("./347/binderfs") = 0 [pid 5062] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] mkdir("./353", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8585] <... ioctl resumed>) = 0 [pid 8585] close(3) = 0 [pid 8585] close(4) = 0 [pid 8583] <... mount resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8583] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] close(3 [pid 8583] <... openat resumed>) = 3 [pid 8583] chdir("./file0" [pid 5063] <... close resumed>) = 0 [pid 8583] <... chdir resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8583] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8587 attached [pid 8585] mkdir("./file0", 0777 [pid 8583] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8583] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] newfstatat(AT_FDCWD, "./347/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8587] set_robust_list(0x55555745a660, 24 [pid 8585] <... mkdir resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8587 [pid 5062] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8587] <... set_robust_list resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./347/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 318.686719][ T8585] loop0: detected capacity change from 0 to 4096 [ 318.713985][ T8586] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8587] chdir("./349" [pid 5062] <... openat resumed>) = 4 [pid 8587] <... chdir resumed>) = 0 [pid 8585] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8587] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] newfstatat(4, "", [pid 8587] <... prctl resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8587] setpgid(0, 0 [pid 5062] getdents64(4, [pid 8587] <... setpgid resumed>) = 0 [pid 8587] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 8587] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 8587] write(3, "1000", 4 [pid 8583] <... open resumed>) = 4 [pid 5062] rmdir("./347/file0" [pid 8587] <... write resumed>) = 4 [pid 8583] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... rmdir resumed>) = 0 [pid 8587] close(3) = 0 [pid 8587] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8583] <... open resumed>) = 5 [pid 5064] <... ioctl resumed>) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5064] close(3) = 0 [pid 8587] memfd_create("syzkaller", 0 [pid 8583] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./347" [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 8589 attached [pid 8587] <... memfd_create resumed>) = 3 [pid 8583] <... mmap resumed>) = 0x20000000 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8589 [pid 8589] set_robust_list(0x55555745a660, 24) = 0 [ 318.799709][ T28] audit: type=1800 audit(1708423471.320:5252): pid=8583 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [pid 8589] chdir("./353" [pid 8587] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8589] <... chdir resumed>) = 0 [pid 8589] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8589] setpgid(0, 0 [pid 8587] <... mmap resumed>) = 0x7f41e0600000 [pid 8589] <... setpgid resumed>) = 0 [pid 8589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8589] write(3, "1000", 4) = 4 [pid 8589] close(3) = 0 [pid 8589] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8589] memfd_create("syzkaller", 0) = 3 [pid 8589] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5062] mkdir("./348", 0777 [pid 8583] ftruncate(4, 33587195 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8585] <... mount resumed>) = 0 [pid 8585] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] <... openat resumed>) = 3 [pid 8585] chdir("./file0") = 0 [pid 8585] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8585] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8583] <... ftruncate resumed>) = 0 [pid 8583] unlink("./bus") = 0 [pid 8583] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8583] exit_group(0) = ? [pid 8587] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8583] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8583, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5065] umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 318.841857][ T8588] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./346/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./346/binderfs") = 0 [pid 5065] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8585] <... open resumed>) = 4 [pid 8585] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8585] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8589] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8585] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 8585] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] <... ioctl resumed>) = 0 [pid 8585] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8585] exit_group(0 [pid 5065] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8585] <... exit_group resumed>) = ? [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./346/file0", [pid 8587] <... write resumed>) = 2097152 [pid 8585] +++ exited with 0 +++ [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8587] munmap(0x7f41e0600000, 138412032 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8590 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8585, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5061] umount2("./354", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./346/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 4 [pid 5061] newfstatat(3, "", ./strace-static-x86_64: Process 8590 attached [pid 8590] set_robust_list(0x55555745a660, 24 [pid 5065] newfstatat(4, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8590] <... set_robust_list resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8590] chdir("./348" [pid 8587] <... munmap resumed>) = 0 [pid 5065] getdents64(4, [pid 5061] getdents64(3, [pid 8590] <... chdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8590] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] getdents64(4, [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8590] <... prctl resumed>) = 0 [pid 8587] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] umount2("./354/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8590] setpgid(0, 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8590] <... setpgid resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./354/binderfs", [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] close(4 [pid 8590] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8587] <... openat resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 5061] unlink("./354/binderfs" [pid 8590] <... openat resumed>) = 3 [pid 8587] ioctl(4, LOOP_SET_FD, 3 [pid 5065] rmdir("./346/file0") = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./346") = 0 [pid 5065] mkdir("./347", 0777 [pid 8590] write(3, "1000", 4 [pid 8589] <... write resumed>) = 2097152 [pid 8587] <... ioctl resumed>) = 0 [pid 5061] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8590] <... write resumed>) = 4 [pid 8589] munmap(0x7f41e0600000, 138412032 [pid 8587] close(3 [pid 5065] <... mkdir resumed>) = 0 [pid 8590] close(3 [pid 8589] <... munmap resumed>) = 0 [pid 8587] <... close resumed>) = 0 [pid 8590] <... close resumed>) = 0 [pid 8587] close(4 [pid 8590] symlink("/dev/binderfs", "./binderfs" [pid 8587] <... close resumed>) = 0 [pid 8590] <... symlink resumed>) = 0 [pid 8589] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... umount2 resumed>) = 0 [pid 8587] mkdir("./file0", 0777 [pid 5065] <... openat resumed>) = 3 [pid 8590] memfd_create("syzkaller", 0 [pid 8589] <... openat resumed>) = 4 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8589] ioctl(4, LOOP_SET_FD, 3 [pid 8587] <... mkdir resumed>) = 0 [pid 8590] <... memfd_create resumed>) = 3 [pid 8589] <... ioctl resumed>) = 0 [pid 5061] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8590] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8589] close(3 [pid 8587] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8590] <... mmap resumed>) = 0x7f41e0600000 [pid 8589] <... close resumed>) = 0 [pid 8589] close(4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8589] <... close resumed>) = 0 [pid 8589] mkdir("./file0", 0777 [pid 5061] newfstatat(AT_FDCWD, "./354/file0", [pid 8589] <... mkdir resumed>) = 0 [ 318.980095][ T8587] loop2: detected capacity change from 0 to 4096 [ 319.019742][ T8589] loop3: detected capacity change from 0 to 4096 [pid 8589] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8587] <... mount resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./354/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8587] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8587] <... openat resumed>) = 3 [pid 5061] close(4) = 0 [pid 8590] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8587] chdir("./file0" [pid 5061] rmdir("./354/file0" [pid 8587] <... chdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./354") = 0 [pid 5061] mkdir("./355", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8587] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8587] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8589] <... mount resumed>) = 0 [pid 8589] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8589] chdir("./file0") = 0 [pid 8589] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8589] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 4 [ 319.070055][ T8591] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.081949][ T8592] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8589] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8589] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 4 [pid 5065] <... ioctl resumed>) = 0 [pid 8587] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8590] <... write resumed>) = 2097152 [pid 5065] close(3 [pid 8589] ftruncate(4, 33587195 [pid 8587] <... open resumed>) = 5 [pid 8587] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8587] ftruncate(4, 33587195 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8589] <... ftruncate resumed>) = 0 [pid 8590] munmap(0x7f41e0600000, 138412032 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8593 [pid 8589] unlink("./bus" [pid 8587] <... ftruncate resumed>) = 0 ./strace-static-x86_64: Process 8593 attached [pid 8590] <... munmap resumed>) = 0 [pid 8589] <... unlink resumed>) = 0 [pid 8587] unlink("./bus" [pid 5061] <... ioctl resumed>) = 0 [pid 8593] set_robust_list(0x55555745a660, 24 [pid 8590] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8589] sendfile(-1, -1, NULL, 281474978811909 [pid 8593] <... set_robust_list resumed>) = 0 [pid 8590] <... openat resumed>) = 4 [pid 8589] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] close(3 [pid 8593] chdir("./347" [pid 8590] ioctl(4, LOOP_SET_FD, 3 [pid 8589] exit_group(0 [pid 5061] <... close resumed>) = 0 [pid 8593] <... chdir resumed>) = 0 [pid 8587] <... unlink resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8587] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8587] exit_group(0) = ? ./strace-static-x86_64: Process 8594 attached [pid 8593] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8590] <... ioctl resumed>) = 0 [pid 8589] <... exit_group resumed>) = ? [pid 8594] set_robust_list(0x55555745a660, 24 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8594 [pid 8594] <... set_robust_list resumed>) = 0 [pid 8590] close(3 [pid 8593] <... prctl resumed>) = 0 [pid 8594] chdir("./355" [pid 8593] setpgid(0, 0 [pid 8590] <... close resumed>) = 0 [pid 8593] <... setpgid resumed>) = 0 [pid 8593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8590] close(4 [pid 8594] <... chdir resumed>) = 0 [pid 8593] <... openat resumed>) = 3 [pid 8590] <... close resumed>) = 0 [pid 8589] +++ exited with 0 +++ [pid 8587] +++ exited with 0 +++ [pid 8594] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8593] write(3, "1000", 4 [pid 8590] mkdir("./file0", 0777 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8589, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 8594] <... prctl resumed>) = 0 [pid 8593] <... write resumed>) = 4 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8587, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 8593] close(3 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 8594] setpgid(0, 0 [pid 8593] <... close resumed>) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 8594] <... setpgid resumed>) = 0 [pid 8593] symlink("/dev/binderfs", "./binderfs" [pid 8590] <... mkdir resumed>) = 0 [pid 8594] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8593] <... symlink resumed>) = 0 [pid 5064] umount2("./353", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8594] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8593] memfd_create("syzkaller", 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8594] write(3, "1000", 4 [pid 5063] <... openat resumed>) = 3 [pid 8594] <... write resumed>) = 4 [pid 8593] <... memfd_create resumed>) = 3 [pid 8594] close(3) = 0 [pid 8593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8594] symlink("/dev/binderfs", "./binderfs" [pid 8593] <... mmap resumed>) = 0x7f41e0600000 [pid 8590] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 319.183011][ T8590] loop1: detected capacity change from 0 to 4096 [pid 5063] getdents64(3, [pid 8594] <... symlink resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] newfstatat(3, "", [pid 5063] umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./349/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./349/binderfs") = 0 [pid 5064] getdents64(3, [pid 5063] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./353/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8594] memfd_create("syzkaller", 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./353/binderfs", [pid 8594] <... memfd_create resumed>) = 3 [pid 5063] <... umount2 resumed>) = 0 [pid 8594] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8590] <... mount resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8590] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5064] unlink("./353/binderfs" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8590] chdir("./file0" [pid 5063] newfstatat(AT_FDCWD, "./349/file0", [pid 8590] <... chdir resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8590] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8590] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] openat(AT_FDCWD, "./349/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8590] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] close(4) = 0 [pid 5063] rmdir("./349/file0" [pid 8594] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8590] <... open resumed>) = 4 [pid 5063] close(3 [pid 8590] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] <... close resumed>) = 0 [pid 8590] <... open resumed>) = 5 [pid 5063] rmdir("./349") = 0 [pid 8590] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8590] ftruncate(4, 33587195 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5064] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./353/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./353/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 319.262148][ T8595] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5064] getdents64(4, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./353/file0" [pid 8590] <... ftruncate resumed>) = 0 [pid 8590] unlink("./bus" [pid 5064] <... rmdir resumed>) = 0 [pid 8594] <... write resumed>) = 2097152 [pid 8593] <... write resumed>) = 2097152 [pid 8590] <... unlink resumed>) = 0 [pid 5064] getdents64(3, [pid 8594] munmap(0x7f41e0600000, 138412032 [pid 8593] munmap(0x7f41e0600000, 138412032 [pid 8590] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8594] <... munmap resumed>) = 0 [pid 8593] <... munmap resumed>) = 0 [pid 8590] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] close(3 [pid 8590] exit_group(0 [pid 5064] <... close resumed>) = 0 [pid 8594] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8593] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8590] <... exit_group resumed>) = ? [pid 5064] rmdir("./353" [pid 8594] <... openat resumed>) = 4 [pid 8593] <... openat resumed>) = 4 [pid 8594] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... rmdir resumed>) = 0 [pid 8593] ioctl(4, LOOP_SET_FD, 3 [pid 5064] mkdir("./354", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8590] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8590, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5062] umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8594] <... ioctl resumed>) = 0 [pid 8593] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./348/binderfs", [pid 8594] close(3 [pid 8593] close(3 [pid 5063] <... ioctl resumed>) = 0 [pid 8594] <... close resumed>) = 0 [pid 8593] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8594] close(4) = 0 [pid 8593] close(4 [pid 5063] close(3 [pid 5062] unlink("./348/binderfs" [pid 5063] <... close resumed>) = 0 [pid 8593] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8593] mkdir("./file0", 0777 [pid 8594] mkdir("./file0", 0777 [pid 8593] <... mkdir resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 8596 attached [pid 5062] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8596] set_robust_list(0x55555745a660, 24) = 0 [pid 8594] <... mkdir resumed>) = 0 [ 319.354888][ T8593] loop4: detected capacity change from 0 to 4096 [ 319.362366][ T8594] loop0: detected capacity change from 0 to 4096 [pid 8593] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8596 [pid 5062] <... umount2 resumed>) = 0 [pid 8596] chdir("./350" [pid 8594] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8596] <... chdir resumed>) = 0 [pid 8596] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8596] setpgid(0, 0 [pid 5062] newfstatat(AT_FDCWD, "./348/file0", [pid 8596] <... setpgid resumed>) = 0 [pid 8596] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8596] <... openat resumed>) = 3 [pid 5062] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8596] write(3, "1000", 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8596] <... write resumed>) = 4 [pid 5062] openat(AT_FDCWD, "./348/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8596] close(3) = 0 [pid 5062] <... openat resumed>) = 4 [pid 8596] symlink("/dev/binderfs", "./binderfs" [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8596] <... symlink resumed>) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8596] memfd_create("syzkaller", 0) = 3 [pid 5062] close(4 [pid 8596] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./348/file0") = 0 [pid 5062] getdents64(3, [pid 8594] <... mount resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 8594] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8594] chdir("./file0") = 0 [pid 8594] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8593] <... mount resumed>) = 0 [pid 5064] close(3 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8594] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8593] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... close resumed>) = 0 [pid 5062] close(3 [pid 8594] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8593] <... openat resumed>) = 3 [pid 8593] chdir("./file0" [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... close resumed>) = 0 [pid 8593] <... chdir resumed>) = 0 [pid 8593] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5062] rmdir("./348" [pid 8593] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8599 [pid 5062] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 8599 attached [pid 8596] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] mkdir("./349", 0777 [pid 8599] set_robust_list(0x55555745a660, 24 [pid 5062] <... mkdir resumed>) = 0 [pid 8599] <... set_robust_list resumed>) = 0 [pid 8594] <... open resumed>) = 4 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8594] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8599] chdir("./354" [pid 8594] <... open resumed>) = 5 [pid 5062] <... openat resumed>) = 3 [pid 8599] <... chdir resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8599] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8599] setpgid(0, 0) = 0 [pid 8594] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8599] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8594] <... mmap resumed>) = 0x20000000 [pid 8599] <... openat resumed>) = 3 [pid 8599] write(3, "1000", 4) = 4 [ 319.457936][ T8597] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.483114][ T8598] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8594] ftruncate(4, 33587195 [pid 8599] close(3) = 0 [pid 8593] <... open resumed>) = 4 [pid 8599] symlink("/dev/binderfs", "./binderfs" [pid 8593] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8599] <... symlink resumed>) = 0 [pid 8593] <... open resumed>) = 5 [pid 8594] <... ftruncate resumed>) = 0 [pid 8593] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8599] memfd_create("syzkaller", 0 [pid 8594] unlink("./bus" [pid 8593] <... mmap resumed>) = 0x20000000 [pid 8599] <... memfd_create resumed>) = 3 [pid 8599] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8593] ftruncate(4, 33587195 [pid 8594] <... unlink resumed>) = 0 [pid 8594] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8594] exit_group(0 [pid 8599] <... mmap resumed>) = 0x7f41e0600000 [pid 8594] <... exit_group resumed>) = ? [pid 8593] <... ftruncate resumed>) = 0 [pid 8593] unlink("./bus" [pid 8594] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8594, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5061] umount2("./355", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5062] close(3 [pid 8596] <... write resumed>) = 2097152 [pid 8593] <... unlink resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8596] munmap(0x7f41e0600000, 138412032 [pid 8593] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] umount2("./355/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8593] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5062] <... close resumed>) = 0 [pid 8593] exit_group(0 [pid 8599] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8593] <... exit_group resumed>) = ? [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8596] <... munmap resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8596] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./355/binderfs", [pid 8596] <... openat resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./355/binderfs") = 0 [pid 5061] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8596] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8600 ./strace-static-x86_64: Process 8600 attached [pid 8593] +++ exited with 0 +++ [pid 8600] set_robust_list(0x55555745a660, 24 [pid 8596] <... ioctl resumed>) = 0 [pid 8600] <... set_robust_list resumed>) = 0 [pid 8596] close(3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8593, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8600] chdir("./349" [pid 8596] <... close resumed>) = 0 [pid 5065] umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = 0 [pid 8600] <... chdir resumed>) = 0 [pid 8596] close(4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8600] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8596] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8600] <... prctl resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 8600] setpgid(0, 0 [pid 5065] newfstatat(3, "", [pid 8600] <... setpgid resumed>) = 0 [pid 8596] mkdir("./file0", 0777 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8596] <... mkdir resumed>) = 0 [pid 5065] getdents64(3, [pid 8600] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8600] write(3, "1000", 4 [pid 8596] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(AT_FDCWD, "./355/file0", [pid 8600] <... write resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8600] close(3 [pid 5065] newfstatat(AT_FDCWD, "./347/binderfs", [pid 5061] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8600] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8600] symlink("/dev/binderfs", "./binderfs" [pid 8599] <... write resumed>) = 2097152 [pid 5065] unlink("./347/binderfs" [pid 8600] <... symlink resumed>) = 0 [pid 8599] munmap(0x7f41e0600000, 138412032 [pid 5065] <... unlink resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./355/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8600] memfd_create("syzkaller", 0 [pid 5065] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [ 319.632840][ T8596] loop2: detected capacity change from 0 to 4096 [pid 8600] <... memfd_create resumed>) = 3 [pid 8599] <... munmap resumed>) = 0 [pid 8596] <... mount resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5061] getdents64(4, [pid 8600] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8599] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8599] <... openat resumed>) = 4 [pid 5061] close(4) = 0 [pid 5061] rmdir("./355/file0") = 0 [pid 8600] <... mmap resumed>) = 0x7f41e0600000 [pid 8596] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8599] ioctl(4, LOOP_SET_FD, 3 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./355") = 0 [pid 5061] mkdir("./356", 0777 [pid 8596] <... openat resumed>) = 3 [pid 5061] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5065] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./347/file0", [pid 8596] chdir("./file0" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8596] <... chdir resumed>) = 0 [pid 5065] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8596] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./347/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8596] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... openat resumed>) = 4 [pid 8596] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] newfstatat(4, "", [pid 8599] <... ioctl resumed>) = 0 [pid 8599] close(3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8599] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 8599] close(4 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 8599] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8599] mkdir("./file0", 0777 [pid 5065] close(4) = 0 [pid 5065] rmdir("./347/file0") = 0 [pid 8599] <... mkdir resumed>) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 8599] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./347") = 0 [pid 5065] mkdir("./348", 0777) = 0 [pid 8596] <... open resumed>) = 4 [ 319.691641][ T8601] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.706201][ T8599] loop3: detected capacity change from 0 to 4096 [pid 8600] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8596] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8599] <... mount resumed>) = 0 [pid 8596] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... ioctl resumed>) = 0 [pid 8599] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8596] <... mmap resumed>) = 0x20000000 [pid 8599] chdir("./file0" [pid 8596] ftruncate(4, 33587195 [pid 8599] <... chdir resumed>) = 0 [pid 8599] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8599] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] close(3 [pid 8596] <... ftruncate resumed>) = 0 [pid 8600] <... write resumed>) = 2097152 [pid 8599] <... open resumed>) = 4 [pid 8596] unlink("./bus" [pid 8600] munmap(0x7f41e0600000, 138412032 [ 319.751812][ T8602] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8599] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... close resumed>) = 0 [pid 8599] <... open resumed>) = 5 [pid 8599] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8603 attached [pid 8599] <... mmap resumed>) = 0x20000000 [pid 8603] set_robust_list(0x55555745a660, 24) = 0 [pid 8599] ftruncate(4, 33587195 [pid 8603] chdir("./356" [pid 8599] <... ftruncate resumed>) = 0 [pid 8603] <... chdir resumed>) = 0 [pid 8600] <... munmap resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8603 [pid 8603] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8600] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8599] unlink("./bus" [pid 8600] <... openat resumed>) = 4 [pid 8596] <... unlink resumed>) = 0 [pid 8603] setpgid(0, 0 [pid 8596] sendfile(-1, -1, NULL, 281474978811909 [pid 8603] <... setpgid resumed>) = 0 [pid 8596] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8603] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8600] ioctl(4, LOOP_SET_FD, 3 [pid 8599] <... unlink resumed>) = 0 [pid 8596] exit_group(0 [pid 8599] sendfile(-1, -1, NULL, 281474978811909 [pid 8596] <... exit_group resumed>) = ? [pid 8603] write(3, "1000", 4 [pid 8599] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8599] exit_group(0 [pid 8603] <... write resumed>) = 4 [pid 5065] <... ioctl resumed>) = 0 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8599] <... exit_group resumed>) = ? [pid 8603] close(3./strace-static-x86_64: Process 8604 attached ) = 0 [pid 8600] <... ioctl resumed>) = 0 [pid 8599] +++ exited with 0 +++ [pid 8596] +++ exited with 0 +++ [pid 8603] symlink("/dev/binderfs", "./binderfs" [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8599, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8596, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 8604] set_robust_list(0x55555745a660, 24 [pid 8603] <... symlink resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8604 [pid 8604] <... set_robust_list resumed>) = 0 [pid 8603] memfd_create("syzkaller", 0 [pid 8600] close(3 [pid 8603] <... memfd_create resumed>) = 3 [pid 8603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8604] chdir("./348" [pid 8600] <... close resumed>) = 0 [pid 5064] umount2("./354", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8604] <... chdir resumed>) = 0 [pid 8603] <... mmap resumed>) = 0x7f41e0600000 [pid 8600] close(4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8604] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8600] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8604] <... prctl resumed>) = 0 [pid 8600] mkdir("./file0", 0777 [pid 5064] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 8604] setpgid(0, 0 [pid 8600] <... mkdir resumed>) = 0 [pid 5064] newfstatat(3, "", [pid 5063] newfstatat(3, "", [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8604] <... setpgid resumed>) = 0 [pid 5064] getdents64(3, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8600] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] getdents64(3, [pid 8604] <... openat resumed>) = 3 [pid 5064] umount2("./354/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [ 319.851974][ T8600] loop1: detected capacity change from 0 to 4096 [pid 8604] write(3, "1000", 4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8604] <... write resumed>) = 4 [pid 5064] newfstatat(AT_FDCWD, "./354/binderfs", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8604] close(3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] newfstatat(AT_FDCWD, "./350/binderfs", [pid 8604] <... close resumed>) = 0 [pid 5064] unlink("./354/binderfs" [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8604] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... unlink resumed>) = 0 [pid 5063] unlink("./350/binderfs" [pid 5064] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... unlink resumed>) = 0 [pid 8604] <... symlink resumed>) = 0 [pid 5063] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8604] memfd_create("syzkaller", 0) = 3 [pid 8604] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8603] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(AT_FDCWD, "./350/file0", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] newfstatat(AT_FDCWD, "./354/file0", [pid 5063] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./350/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 5064] openat(AT_FDCWD, "./354/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5064] getdents64(4, [pid 8600] <... mount resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8600] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] getdents64(4, [pid 5063] getdents64(4, [pid 8600] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8600] chdir("./file0" [pid 5064] close(4 [pid 5063] close(4 [pid 8600] <... chdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8600] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] rmdir("./354/file0" [pid 5063] rmdir("./350/file0" [pid 8600] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8600] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8604] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] getdents64(3, [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 8603] <... write resumed>) = 2097152 [pid 8603] munmap(0x7f41e0600000, 138412032 [pid 5064] close(3 [pid 5063] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] rmdir("./350" [pid 5064] rmdir("./354" [pid 5063] <... rmdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] mkdir("./351", 0777 [pid 8603] <... munmap resumed>) = 0 [pid 5064] mkdir("./355", 0777 [pid 5063] <... mkdir resumed>) = 0 [pid 8603] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8603] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 3 [ 319.970804][ T8605] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8603] ioctl(4, LOOP_SET_FD, 3 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8603] <... ioctl resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8603] close(3) = 0 [pid 8603] close(4) = 0 [pid 8600] <... open resumed>) = 4 [pid 8603] mkdir("./file0", 0777 [pid 8604] <... write resumed>) = 2097152 [pid 8603] <... mkdir resumed>) = 0 [pid 8600] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8603] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8600] <... open resumed>) = 5 [pid 8600] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8604] munmap(0x7f41e0600000, 138412032 [pid 8600] <... ftruncate resumed>) = 0 [pid 8600] unlink("./bus" [pid 8604] <... munmap resumed>) = 0 [ 320.019005][ T8603] loop0: detected capacity change from 0 to 4096 [pid 8600] <... unlink resumed>) = 0 [pid 8600] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8600] exit_group(0 [pid 8604] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8600] <... exit_group resumed>) = ? [pid 8604] <... openat resumed>) = 4 [pid 8604] ioctl(4, LOOP_SET_FD, 3 [pid 8603] <... mount resumed>) = 0 [pid 8603] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8603] chdir("./file0" [pid 5064] <... ioctl resumed>) = 0 [pid 8604] <... ioctl resumed>) = 0 [pid 8604] close(3) = 0 [pid 8603] <... chdir resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8604] close(4 [pid 8603] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8604] <... close resumed>) = 0 [pid 8603] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] close(3 [pid 8603] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... close resumed>) = 0 [pid 8600] +++ exited with 0 +++ [pid 5064] close(3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8600, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 8604] mkdir("./file0", 0777 [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8607 [pid 5062] umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8604] <... mkdir resumed>) = 0 [pid 8603] <... open resumed>) = 4 [pid 5062] <... openat resumed>) = 3 ./strace-static-x86_64: Process 8607 attached [pid 8604] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8603] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] newfstatat(3, "", [pid 8607] set_robust_list(0x55555745a660, 24 [pid 8603] <... open resumed>) = 5 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 320.076546][ T8606] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 320.094328][ T8604] loop4: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 8608 attached [pid 8607] <... set_robust_list resumed>) = 0 [pid 8603] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8608 [pid 5062] getdents64(3, [pid 8608] set_robust_list(0x55555745a660, 24 [pid 8607] chdir("./351" [pid 8603] <... mmap resumed>) = 0x20000000 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8608] <... set_robust_list resumed>) = 0 [pid 8607] <... chdir resumed>) = 0 [pid 5062] umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8608] chdir("./355" [pid 8607] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8603] ftruncate(4, 33587195 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8608] <... chdir resumed>) = 0 [pid 8607] <... prctl resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./349/binderfs", [pid 8608] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8607] setpgid(0, 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./349/binderfs" [pid 8608] <... prctl resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 8608] setpgid(0, 0 [pid 8607] <... setpgid resumed>) = 0 [pid 8608] <... setpgid resumed>) = 0 [pid 8607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8603] <... ftruncate resumed>) = 0 [pid 5062] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8607] <... openat resumed>) = 3 [pid 8608] <... openat resumed>) = 3 [pid 8603] unlink("./bus" [pid 8607] write(3, "1000", 4 [pid 8608] write(3, "1000", 4 [pid 8607] <... write resumed>) = 4 [pid 8608] <... write resumed>) = 4 [pid 8607] close(3 [pid 8608] close(3 [pid 8607] <... close resumed>) = 0 [pid 8608] <... close resumed>) = 0 [pid 8607] symlink("/dev/binderfs", "./binderfs" [pid 8608] symlink("/dev/binderfs", "./binderfs" [pid 8607] <... symlink resumed>) = 0 [pid 8608] <... symlink resumed>) = 0 [pid 8607] memfd_create("syzkaller", 0 [pid 8608] memfd_create("syzkaller", 0 [pid 8607] <... memfd_create resumed>) = 3 [pid 8603] <... unlink resumed>) = 0 [pid 8603] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8608] <... memfd_create resumed>) = 3 [pid 8607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8603] exit_group(0 [pid 8607] <... mmap resumed>) = 0x7f41e0600000 [pid 8603] <... exit_group resumed>) = ? [pid 8608] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8603] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./349/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8603, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5062] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... restart_syscall resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./349/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", [pid 5061] umount2("./356", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(4, [pid 5061] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] <... openat resumed>) = 3 [pid 5062] getdents64(4, [pid 5061] newfstatat(3, "", [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] close(4 [pid 5061] getdents64(3, [pid 5062] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] rmdir("./349/file0" [pid 5061] umount2("./356/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8604] <... mount resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] newfstatat(AT_FDCWD, "./356/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] close(3) = 0 [pid 8608] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8604] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] rmdir("./349" [pid 5061] unlink("./356/binderfs" [pid 8604] <... openat resumed>) = 3 [pid 5061] <... unlink resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [ 320.200832][ T8609] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8604] chdir("./file0" [pid 5062] mkdir("./350", 0777 [pid 5061] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8604] <... chdir resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 8604] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8608] <... write resumed>) = 2097152 [pid 8607] <... write resumed>) = 2097152 [pid 8604] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... umount2 resumed>) = 0 [pid 8608] munmap(0x7f41e0600000, 138412032 [pid 8607] munmap(0x7f41e0600000, 138412032 [pid 8604] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./356/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./356/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", [pid 8608] <... munmap resumed>) = 0 [pid 8607] <... munmap resumed>) = 0 [pid 8604] <... open resumed>) = 4 [pid 8608] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8607] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8604] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8608] <... openat resumed>) = 4 [pid 8608] ioctl(4, LOOP_SET_FD, 3 [pid 8607] <... openat resumed>) = 4 [pid 8604] <... open resumed>) = 5 [pid 5061] getdents64(4, [pid 8607] ioctl(4, LOOP_SET_FD, 3 [pid 8608] <... ioctl resumed>) = 0 [pid 8604] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8608] close(3 [pid 8604] <... mmap resumed>) = 0x20000000 [pid 8608] <... close resumed>) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 8608] close(4) = 0 [pid 5061] rmdir("./356/file0" [pid 8608] mkdir("./file0", 0777 [pid 8604] ftruncate(4, 33587195 [pid 5061] <... rmdir resumed>) = 0 [pid 8608] <... mkdir resumed>) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8607] <... ioctl resumed>) = 0 [pid 5061] close(3 [pid 8607] close(3) = 0 [pid 5061] <... close resumed>) = 0 [pid 8607] close(4 [pid 8608] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8607] <... close resumed>) = 0 [pid 5061] rmdir("./356" [pid 8607] mkdir("./file0", 0777 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8607] <... mkdir resumed>) = 0 [pid 5062] close(3 [pid 5061] mkdir("./357", 0777) = 0 [pid 8604] <... ftruncate resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8607] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... openat resumed>) = 3 [pid 8604] unlink("./bus" [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8604] <... unlink resumed>) = 0 [pid 8604] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8604] exit_group(0) = ? ./strace-static-x86_64: Process 8610 attached [ 320.296366][ T8608] loop3: detected capacity change from 0 to 4096 [ 320.296540][ T8607] loop2: detected capacity change from 0 to 4096 [pid 8610] set_robust_list(0x55555745a660, 24 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8610 [pid 8610] <... set_robust_list resumed>) = 0 [pid 8608] <... mount resumed>) = 0 [pid 8610] chdir("./350" [pid 8608] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8604] +++ exited with 0 +++ [pid 8610] <... chdir resumed>) = 0 [pid 8608] <... openat resumed>) = 3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8604, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 8610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8608] chdir("./file0" [pid 5065] umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8607] <... mount resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8607] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8607] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 3 [pid 8607] chdir("./file0" [pid 5065] newfstatat(3, "", [pid 8607] <... chdir resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8607] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] getdents64(3, [pid 8610] setpgid(0, 0 [pid 8608] <... chdir resumed>) = 0 [pid 8607] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8610] <... setpgid resumed>) = 0 [pid 8608] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8607] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./348/binderfs", [pid 8608] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8608] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] unlink("./348/binderfs" [pid 8610] write(3, "1000", 4 [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8610] <... write resumed>) = 4 [pid 8610] close(3) = 0 [pid 8610] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8610] memfd_create("syzkaller", 0) = 3 [pid 8608] <... open resumed>) = 4 [ 320.355236][ T8611] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 320.388346][ T8612] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8610] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8608] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8610] <... mmap resumed>) = 0x7f41e0600000 [pid 8608] <... open resumed>) = 5 [pid 5065] <... umount2 resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8608] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8607] <... open resumed>) = 4 [pid 8607] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8608] <... ftruncate resumed>) = 0 [pid 8607] <... open resumed>) = 5 [pid 8607] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8607] ftruncate(4, 33587195 [pid 5065] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] close(3 [pid 5065] newfstatat(AT_FDCWD, "./348/file0", [pid 5061] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8607] <... ftruncate resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./348/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8607] unlink("./bus" [pid 5065] <... openat resumed>) = 4 ./strace-static-x86_64: Process 8613 attached [pid 5065] newfstatat(4, "", [pid 8613] set_robust_list(0x55555745a660, 24 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8613 [pid 8613] <... set_robust_list resumed>) = 0 [pid 5065] getdents64(4, [pid 8613] chdir("./357" [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8613] <... chdir resumed>) = 0 [pid 5065] getdents64(4, [pid 8613] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8613] <... prctl resumed>) = 0 [pid 5065] close(4 [pid 8613] setpgid(0, 0 [pid 8608] <... unlink resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 8613] <... setpgid resumed>) = 0 [pid 5065] rmdir("./348/file0" [pid 8613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8608] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... rmdir resumed>) = 0 [pid 8613] <... openat resumed>) = 3 [pid 8608] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8607] <... unlink resumed>) = 0 [pid 5065] getdents64(3, [pid 8613] write(3, "1000", 4 [pid 8607] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8613] <... write resumed>) = 4 [pid 8607] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8608] exit_group(0 [pid 5065] close(3 [pid 8613] close(3 [pid 8608] <... exit_group resumed>) = ? [pid 8607] exit_group(0 [pid 5065] <... close resumed>) = 0 [pid 8613] <... close resumed>) = 0 [pid 8607] <... exit_group resumed>) = ? [pid 5065] rmdir("./348" [pid 8613] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... rmdir resumed>) = 0 [pid 8613] <... symlink resumed>) = 0 [pid 5065] mkdir("./349", 0777 [pid 8613] memfd_create("syzkaller", 0) = 3 [pid 5065] <... mkdir resumed>) = 0 [pid 8613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8610] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8608] +++ exited with 0 +++ [pid 8607] +++ exited with 0 +++ [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8608, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=2 /* 0.02 s */} --- [pid 5065] <... openat resumed>) = 3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8607, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5064] umount2("./355", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./351", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./351/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./351/binderfs") = 0 [pid 5064] umount2("./355/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] newfstatat(AT_FDCWD, "./355/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./355/binderfs") = 0 [pid 5064] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 8613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./351/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./351/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./351/file0" [pid 5064] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(3, [pid 5064] newfstatat(AT_FDCWD, "./355/file0", [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./351") = 0 [pid 5064] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] mkdir("./352", 0777 [pid 5064] openat(AT_FDCWD, "./355/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... mkdir resumed>) = 0 [pid 8610] <... write resumed>) = 2097152 [pid 5064] <... openat resumed>) = 4 [pid 8610] munmap(0x7f41e0600000, 138412032) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5064] newfstatat(4, "", [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5064] getdents64(4, [pid 8610] <... openat resumed>) = 4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8610] ioctl(4, LOOP_SET_FD, 3 [pid 8613] <... write resumed>) = 2097152 [pid 5064] getdents64(4, [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8614 attached [pid 8614] set_robust_list(0x55555745a660, 24 [pid 8613] munmap(0x7f41e0600000, 138412032 [pid 8610] <... ioctl resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8614 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8614] <... set_robust_list resumed>) = 0 [pid 5064] close(4 [pid 8614] chdir("./349" [pid 5064] <... close resumed>) = 0 [pid 8614] <... chdir resumed>) = 0 [pid 5064] rmdir("./355/file0" [pid 8614] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8610] close(3 [pid 8614] <... prctl resumed>) = 0 [pid 8610] <... close resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 8610] close(4 [pid 8614] setpgid(0, 0 [pid 8610] <... close resumed>) = 0 [pid 8614] <... setpgid resumed>) = 0 [pid 8613] <... munmap resumed>) = 0 [pid 8610] mkdir("./file0", 0777 [pid 5064] getdents64(3, [pid 8614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8613] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8614] <... openat resumed>) = 3 [pid 8613] <... openat resumed>) = 4 [pid 5064] close(3 [pid 8614] write(3, "1000", 4 [pid 8613] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... close resumed>) = 0 [pid 8614] <... write resumed>) = 4 [pid 8610] <... mkdir resumed>) = 0 [pid 5064] rmdir("./355" [pid 8610] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... rmdir resumed>) = 0 [pid 8614] close(3 [pid 8613] <... ioctl resumed>) = 0 [pid 8614] <... close resumed>) = 0 [pid 8614] symlink("/dev/binderfs", "./binderfs" [pid 8613] close(3 [pid 5064] mkdir("./356", 0777 [pid 8614] <... symlink resumed>) = 0 [pid 8613] <... close resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 8614] memfd_create("syzkaller", 0 [pid 8613] close(4) = 0 [pid 8613] mkdir("./file0", 0777 [pid 8614] <... memfd_create resumed>) = 3 [pid 8613] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 320.596080][ T8610] loop1: detected capacity change from 0 to 4096 [ 320.633881][ T8613] loop0: detected capacity change from 0 to 4096 [pid 8614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5064] <... openat resumed>) = 3 [pid 8613] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8616 attached [pid 8610] <... mount resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8616 [pid 8610] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8610] chdir("./file0") = 0 [pid 8610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8616] set_robust_list(0x55555745a660, 24 [pid 8610] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 320.681813][ T8615] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8616] <... set_robust_list resumed>) = 0 [pid 8616] chdir("./352") = 0 [pid 8616] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8610] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8616] <... prctl resumed>) = 0 [pid 8610] <... open resumed>) = 4 [pid 8610] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8616] setpgid(0, 0) = 0 [pid 8616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8610] <... open resumed>) = 5 [pid 8616] write(3, "1000", 4) = 4 [pid 8613] <... mount resumed>) = 0 [pid 8613] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8616] close(3 [pid 8613] <... openat resumed>) = 3 [pid 8616] <... close resumed>) = 0 [pid 8613] chdir("./file0" [pid 8610] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8616] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8610] <... mmap resumed>) = 0x20000000 [pid 8613] <... chdir resumed>) = 0 [pid 8616] memfd_create("syzkaller", 0 [pid 8613] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8616] <... memfd_create resumed>) = 3 [pid 8616] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8613] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8610] ftruncate(4, 33587195 [pid 5064] <... ioctl resumed>) = 0 [pid 8616] <... mmap resumed>) = 0x7f41e0600000 [pid 8613] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] close(3) = 0 [ 320.730719][ T8617] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8618 attached [pid 8610] <... ftruncate resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8618 [pid 8618] set_robust_list(0x55555745a660, 24) = 0 [pid 8616] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8618] chdir("./356") = 0 [pid 8613] <... open resumed>) = 4 [pid 8610] unlink("./bus" [pid 8618] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8613] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8618] setpgid(0, 0 [pid 8614] <... write resumed>) = 2097152 [pid 8613] <... open resumed>) = 5 [pid 8613] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8614] munmap(0x7f41e0600000, 138412032 [pid 8613] <... mmap resumed>) = 0x20000000 [pid 8618] <... setpgid resumed>) = 0 [pid 8613] ftruncate(4, 33587195 [pid 8618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8614] <... munmap resumed>) = 0 [pid 8613] <... ftruncate resumed>) = 0 [pid 8618] write(3, "1000", 4) = 4 [pid 8614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8610] <... unlink resumed>) = 0 [pid 8618] close(3 [pid 8614] <... openat resumed>) = 4 [pid 8613] unlink("./bus" [pid 8618] <... close resumed>) = 0 [pid 8610] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8610] exit_group(0) = ? [pid 8618] symlink("/dev/binderfs", "./binderfs" [pid 8614] ioctl(4, LOOP_SET_FD, 3 [pid 8613] <... unlink resumed>) = 0 [pid 8618] <... symlink resumed>) = 0 [pid 8613] sendfile(-1, -1, NULL, 281474978811909 [pid 8618] memfd_create("syzkaller", 0 [pid 8613] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8613] exit_group(0 [pid 8618] <... memfd_create resumed>) = 3 [pid 8613] <... exit_group resumed>) = ? [pid 8618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8610] +++ exited with 0 +++ [pid 8618] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8610, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8616] <... write resumed>) = 2097152 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 8614] <... ioctl resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8616] munmap(0x7f41e0600000, 138412032 [pid 8614] close(3 [pid 5062] umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8616] <... munmap resumed>) = 0 [pid 8614] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./350/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8614] close(4 [pid 5062] unlink("./350/binderfs" [pid 8614] <... close resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 8614] mkdir("./file0", 0777 [pid 8613] +++ exited with 0 +++ [pid 5062] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8614] <... mkdir resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8613, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 8616] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8614] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8616] <... openat resumed>) = 4 [pid 8616] ioctl(4, LOOP_SET_FD, 3 [pid 5061] umount2("./357", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 320.856715][ T8614] loop4: detected capacity change from 0 to 4096 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", [pid 8618] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5062] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./357/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./350/file0", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8616] <... ioctl resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] newfstatat(AT_FDCWD, "./357/binderfs", [pid 8616] close(3) = 0 [pid 8616] close(4) = 0 [pid 8616] mkdir("./file0", 0777) = 0 [pid 8616] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] unlink("./357/binderfs" [pid 8614] <... mount resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./350/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] <... unlink resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 5061] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8618] <... write resumed>) = 2097152 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8614] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... umount2 resumed>) = 0 [pid 8614] <... openat resumed>) = 3 [pid 8614] chdir("./file0") = 0 [pid 8614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] getdents64(4, [pid 8614] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8614] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [ 320.911398][ T8616] loop2: detected capacity change from 0 to 4096 [ 320.938731][ T8619] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] getdents64(4, [pid 5061] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8618] munmap(0x7f41e0600000, 138412032 [pid 8614] <... open resumed>) = 4 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./350/file0" [pid 8616] <... mount resumed>) = 0 [pid 8616] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 8614] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8616] chdir("./file0") = 0 [pid 8616] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] close(3 [pid 8616] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./350" [pid 8616] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... rmdir resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./357/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] mkdir("./351", 0777 [pid 5061] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./357/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] getdents64(4, [pid 8614] <... open resumed>) = 5 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] getdents64(4, [pid 8614] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 8618] <... munmap resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./357/file0" [pid 8618] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8614] <... mmap resumed>) = 0x20000000 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... rmdir resumed>) = 0 [pid 8618] <... openat resumed>) = 4 [pid 5061] getdents64(3, [pid 8618] ioctl(4, LOOP_SET_FD, 3 [pid 8614] ftruncate(4, 33587195 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./357") = 0 [pid 5061] mkdir("./358", 0777 [pid 8618] <... ioctl resumed>) = 0 [pid 8616] <... open resumed>) = 4 [pid 8614] <... ftruncate resumed>) = 0 [pid 8618] close(3 [pid 8616] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... mkdir resumed>) = 0 [pid 8618] <... close resumed>) = 0 [pid 8614] unlink("./bus" [pid 8618] close(4 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8618] <... close resumed>) = 0 [pid 8616] <... open resumed>) = 5 [pid 5061] <... openat resumed>) = 3 [pid 8618] mkdir("./file0", 0777 [pid 8616] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8616] <... mmap resumed>) = 0x20000000 [pid 8616] ftruncate(4, 33587195 [pid 8618] <... mkdir resumed>) = 0 [pid 8614] <... unlink resumed>) = 0 [pid 8618] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 320.994578][ T8620] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.025651][ T8618] loop3: detected capacity change from 0 to 4096 [pid 8614] sendfile(-1, -1, NULL, 281474978811909 [pid 8616] <... ftruncate resumed>) = 0 [pid 8614] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8614] exit_group(0) = ? [pid 8616] unlink("./bus") = 0 [pid 8616] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8616] exit_group(0) = ? [pid 8614] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8614, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5065] umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... ioctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] close(3 [pid 5065] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 8616] +++ exited with 0 +++ [pid 5065] newfstatat(3, "", [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8622 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8616, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 8623 attached ./strace-static-x86_64: Process 8622 attached [pid 8618] <... mount resumed>) = 0 [pid 5065] getdents64(3, [pid 5063] umount2("./352", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8623 [pid 8623] set_robust_list(0x55555745a660, 24 [pid 8622] set_robust_list(0x55555745a660, 24 [pid 8618] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8618] <... openat resumed>) = 3 [pid 8623] <... set_robust_list resumed>) = 0 [pid 8622] <... set_robust_list resumed>) = 0 [pid 8618] chdir("./file0" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8623] chdir("./351" [pid 8622] chdir("./358" [pid 8618] <... chdir resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./349/binderfs", [pid 5063] <... openat resumed>) = 3 [pid 8623] <... chdir resumed>) = 0 [pid 8622] <... chdir resumed>) = 0 [pid 8618] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] newfstatat(3, "", [pid 8623] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8622] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8618] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] unlink("./349/binderfs" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8623] <... prctl resumed>) = 0 [pid 8622] <... prctl resumed>) = 0 [pid 8618] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... unlink resumed>) = 0 [pid 5063] getdents64(3, [pid 8623] setpgid(0, 0 [pid 8622] setpgid(0, 0 [pid 5065] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8623] <... setpgid resumed>) = 0 [pid 8622] <... setpgid resumed>) = 0 [pid 5063] umount2("./352/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8618] <... open resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8623] <... openat resumed>) = 3 [pid 8622] <... openat resumed>) = 3 [pid 8618] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] newfstatat(AT_FDCWD, "./352/binderfs", [pid 8623] write(3, "1000", 4 [pid 8622] write(3, "1000", 4 [pid 8623] <... write resumed>) = 4 [pid 8622] <... write resumed>) = 4 [pid 8618] <... open resumed>) = 5 [pid 8623] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8623] <... close resumed>) = 0 [pid 8622] close(3 [pid 8618] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] unlink("./352/binderfs" [pid 8623] symlink("/dev/binderfs", "./binderfs" [pid 8622] <... close resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 8623] <... symlink resumed>) = 0 [pid 8622] symlink("/dev/binderfs", "./binderfs" [pid 8618] <... mmap resumed>) = 0x20000000 [pid 5063] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8622] <... symlink resumed>) = 0 [ 321.112414][ T8621] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8618] ftruncate(4, 33587195 [pid 8622] memfd_create("syzkaller", 0 [pid 8618] <... ftruncate resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 8623] memfd_create("syzkaller", 0 [pid 8622] <... memfd_create resumed>) = 3 [pid 8618] unlink("./bus" [pid 5065] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 8623] <... memfd_create resumed>) = 3 [pid 8622] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8622] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] newfstatat(AT_FDCWD, "./349/file0", [pid 5063] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8623] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./352/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./349/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] openat(AT_FDCWD, "./352/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] newfstatat(4, "", [pid 5063] <... openat resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8618] <... unlink resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 8618] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8618] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8618] exit_group(0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5065] getdents64(4, [pid 8618] <... exit_group resumed>) = ? [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./352/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./352" [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5063] <... rmdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] mkdir("./353", 0777 [pid 5065] rmdir("./349/file0") = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 8623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8622] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8618] +++ exited with 0 +++ [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8618, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] close(3) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5064] umount2("./356", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] rmdir("./349" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5064] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] umount2("./356/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] mkdir("./350", 0777 [pid 5064] newfstatat(AT_FDCWD, "./356/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./356/binderfs") = 0 [pid 5064] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... umount2 resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8623] <... write resumed>) = 2097152 [pid 8622] <... write resumed>) = 2097152 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8623] munmap(0x7f41e0600000, 138412032 [pid 8622] munmap(0x7f41e0600000, 138412032 [pid 5064] newfstatat(AT_FDCWD, "./356/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8623] <... munmap resumed>) = 0 [pid 8622] <... munmap resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5064] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./356/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", [pid 8622] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8623] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8622] <... openat resumed>) = 4 [pid 5064] getdents64(4, [pid 8623] <... openat resumed>) = 4 [pid 8623] ioctl(4, LOOP_SET_FD, 3 [pid 8622] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./356/file0") = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./356") = 0 [pid 5064] mkdir("./357", 0777 [pid 8623] <... ioctl resumed>) = 0 [pid 8622] <... ioctl resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] close(3 [pid 8622] close(3) = 0 [pid 5063] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8623] close(3 [pid 8622] close(4 [pid 5065] close(3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8623] <... close resumed>) = 0 [pid 8622] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 8623] close(4 [pid 8622] mkdir("./file0", 0777 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8623] <... close resumed>) = 0 [pid 8622] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8624 attached [pid 8623] mkdir("./file0", 0777 [pid 8622] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8625 ./strace-static-x86_64: Process 8625 attached [pid 8623] <... mkdir resumed>) = 0 [pid 8625] set_robust_list(0x55555745a660, 24) = 0 [pid 8625] chdir("./353") = 0 [pid 8624] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8624 [pid 8625] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8624] <... set_robust_list resumed>) = 0 [pid 8625] <... prctl resumed>) = 0 [pid 8625] setpgid(0, 0 [pid 8624] chdir("./350" [pid 8625] <... setpgid resumed>) = 0 [pid 8625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8624] <... chdir resumed>) = 0 [pid 8624] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8623] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8624] <... prctl resumed>) = 0 [pid 8625] <... openat resumed>) = 3 [pid 8624] setpgid(0, 0 [pid 8625] write(3, "1000", 4) = 4 [pid 8625] close(3 [pid 8624] <... setpgid resumed>) = 0 [pid 8625] <... close resumed>) = 0 [pid 8625] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8625] memfd_create("syzkaller", 0 [ 321.312151][ T8623] loop1: detected capacity change from 0 to 4096 [ 321.321328][ T8622] loop0: detected capacity change from 0 to 4096 [pid 8624] write(3, "1000", 4 [pid 8625] <... memfd_create resumed>) = 3 [pid 8625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8624] <... write resumed>) = 4 [pid 8625] <... mmap resumed>) = 0x7f41e0600000 [pid 8624] close(3) = 0 [pid 8624] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8624] memfd_create("syzkaller", 0) = 3 [pid 8624] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8625] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8624] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8623] <... mount resumed>) = 0 [pid 8622] <... mount resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 8623] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8622] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8623] <... openat resumed>) = 3 [pid 8623] chdir("./file0" [pid 8622] <... openat resumed>) = 3 [pid 8623] <... chdir resumed>) = 0 [pid 8622] chdir("./file0" [pid 8623] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8622] <... chdir resumed>) = 0 [pid 8623] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8622] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8622] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [ 321.393807][ T8626] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.407724][ T8627] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8623] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] close(3 [pid 8623] <... open resumed>) = 4 [pid 8622] <... open resumed>) = 4 [pid 8623] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8622] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8622] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8623] <... open resumed>) = 5 [pid 8623] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8623] ftruncate(4, 33587195 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8628 attached [pid 8628] set_robust_list(0x55555745a660, 24) = 0 [pid 8623] <... ftruncate resumed>) = 0 [pid 8622] <... ftruncate resumed>) = 0 [pid 8624] <... write resumed>) = 2097152 [pid 8628] chdir("./357" [pid 8624] munmap(0x7f41e0600000, 138412032 [pid 8623] unlink("./bus" [pid 8622] unlink("./bus" [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8628 [pid 8628] <... chdir resumed>) = 0 [pid 8624] <... munmap resumed>) = 0 [pid 8628] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8624] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8628] <... prctl resumed>) = 0 [pid 8624] <... openat resumed>) = 4 [pid 8623] <... unlink resumed>) = 0 [pid 8628] setpgid(0, 0 [pid 8625] <... write resumed>) = 2097152 [pid 8624] ioctl(4, LOOP_SET_FD, 3 [pid 8623] sendfile(-1, -1, NULL, 281474978811909 [pid 8628] <... setpgid resumed>) = 0 [pid 8623] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8622] <... unlink resumed>) = 0 [pid 8628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8623] exit_group(0 [pid 8622] sendfile(-1, -1, NULL, 281474978811909 [pid 8623] <... exit_group resumed>) = ? [pid 8628] <... openat resumed>) = 3 [pid 8622] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8622] exit_group(0 [pid 8628] write(3, "1000", 4 [pid 8625] munmap(0x7f41e0600000, 138412032 [pid 8622] <... exit_group resumed>) = ? [pid 8625] <... munmap resumed>) = 0 [pid 8628] <... write resumed>) = 4 [pid 8625] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8624] <... ioctl resumed>) = 0 [pid 8623] +++ exited with 0 +++ [pid 8628] close(3 [pid 8625] <... openat resumed>) = 4 [pid 8624] close(3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8623, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8628] <... close resumed>) = 0 [pid 8625] ioctl(4, LOOP_SET_FD, 3 [pid 8624] <... close resumed>) = 0 [pid 8622] +++ exited with 0 +++ [pid 8628] symlink("/dev/binderfs", "./binderfs" [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8622, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8624] close(4 [pid 5062] umount2("./351", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8628] <... symlink resumed>) = 0 [pid 8625] <... ioctl resumed>) = 0 [pid 8624] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8628] memfd_create("syzkaller", 0 [pid 8625] close(3 [pid 8624] mkdir("./file0", 0777 [pid 5062] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] umount2("./358", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8628] <... memfd_create resumed>) = 3 [pid 8625] <... close resumed>) = 0 [pid 8624] <... mkdir resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8628] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8625] close(4 [pid 8624] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] newfstatat(3, "", [pid 5061] openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8628] <... mmap resumed>) = 0x7f41e0600000 [pid 8625] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8625] mkdir("./file0", 0777 [pid 5062] getdents64(3, [pid 5061] newfstatat(3, "", [pid 8625] <... mkdir resumed>) = 0 [pid 8625] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 321.514184][ T8624] loop4: detected capacity change from 0 to 4096 [ 321.546564][ T8625] loop2: detected capacity change from 0 to 4096 [pid 5061] getdents64(3, [pid 5062] newfstatat(AT_FDCWD, "./351/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8624] <... mount resumed>) = 0 [pid 5062] unlink("./351/binderfs" [pid 8624] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] umount2("./358/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8624] <... openat resumed>) = 3 [pid 5062] <... unlink resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8624] chdir("./file0" [pid 5062] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(AT_FDCWD, "./358/binderfs", [pid 8624] <... chdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8624] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] unlink("./358/binderfs" [pid 8624] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... unlink resumed>) = 0 [pid 8624] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8628] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8625] <... mount resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8625] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8624] <... open resumed>) = 4 [pid 5062] <... umount2 resumed>) = 0 [pid 8625] <... openat resumed>) = 3 [pid 8624] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8625] chdir("./file0" [pid 8624] <... open resumed>) = 5 [pid 5062] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8625] <... chdir resumed>) = 0 [pid 8624] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] newfstatat(AT_FDCWD, "./358/file0", [pid 8625] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8624] <... mmap resumed>) = 0x20000000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8625] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8624] ftruncate(4, 33587195 [pid 5062] newfstatat(AT_FDCWD, "./351/file0", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8625] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8624] <... ftruncate resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "./358/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8624] unlink("./bus" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8625] <... open resumed>) = 4 [pid 8625] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... openat resumed>) = 4 [pid 8625] <... open resumed>) = 5 [ 321.597119][ T8629] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.634094][ T8630] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] openat(AT_FDCWD, "./351/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] newfstatat(4, "", [pid 8625] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... openat resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8625] <... mmap resumed>) = 0x20000000 [pid 8624] <... unlink resumed>) = 0 [pid 5061] getdents64(4, [pid 8625] ftruncate(4, 33587195 [pid 8624] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] newfstatat(4, "", [pid 8624] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8624] exit_group(0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 8624] <... exit_group resumed>) = ? [pid 5062] getdents64(4, [pid 8625] <... ftruncate resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 8628] <... write resumed>) = 2097152 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8628] munmap(0x7f41e0600000, 138412032 [pid 8625] unlink("./bus" [pid 5062] getdents64(4, [pid 5061] <... close resumed>) = 0 [pid 8628] <... munmap resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] rmdir("./358/file0" [pid 8624] +++ exited with 0 +++ [pid 5062] close(4 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8624, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5062] <... close resumed>) = 0 [pid 5065] umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] rmdir("./351/file0" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8628] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8625] <... unlink resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8625] sendfile(-1, -1, NULL, 281474978811909 [pid 8628] <... openat resumed>) = 4 [pid 8625] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] <... openat resumed>) = 3 [pid 5062] getdents64(3, [pid 5061] getdents64(3, [pid 8628] ioctl(4, LOOP_SET_FD, 3 [pid 8625] exit_group(0 [pid 5065] newfstatat(3, "", [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 8625] <... exit_group resumed>) = ? [pid 5062] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] rmdir("./351" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./352", 0777 [pid 8628] <... ioctl resumed>) = 0 [pid 8625] +++ exited with 0 +++ [pid 5065] getdents64(3, [pid 5061] close(3 [pid 8628] close(3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8625, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 8628] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... close resumed>) = 0 [pid 8628] close(4 [pid 5065] umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... mkdir resumed>) = 0 [pid 5061] rmdir("./358" [pid 5063] umount2("./353", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8628] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(AT_FDCWD, "./350/binderfs", [pid 5063] newfstatat(3, "", [pid 8628] mkdir("./file0", 0777 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] mkdir("./359", 0777 [pid 8628] <... mkdir resumed>) = 0 [pid 5065] unlink("./350/binderfs" [pid 5063] getdents64(3, [pid 5065] <... unlink resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5065] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] umount2("./353/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8628] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./353/binderfs", [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./353/binderfs" [pid 5065] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8628] <... mount resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 8628] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8628] <... openat resumed>) = 3 [pid 5065] newfstatat(AT_FDCWD, "./350/file0", [pid 8628] chdir("./file0" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8628] <... chdir resumed>) = 0 [pid 5065] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8628] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8628] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8628] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] openat(AT_FDCWD, "./350/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./350/file0") = 0 [pid 8628] <... open resumed>) = 4 [pid 5065] getdents64(3, [pid 8628] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 8628] <... open resumed>) = 5 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./350") = 0 [ 321.714314][ T8628] loop3: detected capacity change from 0 to 4096 [ 321.751525][ T8631] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8628] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8628] <... mmap resumed>) = 0x20000000 [pid 5065] mkdir("./351", 0777 [pid 5063] newfstatat(AT_FDCWD, "./353/file0", [pid 8628] ftruncate(4, 33587195 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8628] <... ftruncate resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "./353/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] newfstatat(4, "", [pid 8628] unlink("./bus" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 8628] <... unlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8628] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8628] exit_group(0) = ? [pid 5063] close(4) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5063] rmdir("./353/file0" [pid 5062] close(3 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] close(3 [pid 8628] +++ exited with 0 +++ [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8628, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8632 ./strace-static-x86_64: Process 8632 attached [pid 5064] umount2("./357", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8632] set_robust_list(0x55555745a660, 24 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8632] <... set_robust_list resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8632] chdir("./352" [pid 5064] <... openat resumed>) = 3 [pid 5064] newfstatat(3, "", [pid 8632] <... chdir resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] close(3 [pid 5064] getdents64(3, [pid 8632] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./353" [pid 8632] <... prctl resumed>) = 0 [pid 8632] setpgid(0, 0) = 0 [pid 8632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8632] write(3, "1000", 4 [pid 5063] <... rmdir resumed>) = 0 [pid 8632] <... write resumed>) = 4 [pid 8632] close(3 [pid 5064] umount2("./357/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] mkdir("./354", 0777 [pid 5061] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./357/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./357/binderfs") = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8632] <... close resumed>) = 0 [pid 8632] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8632] memfd_create("syzkaller", 0) = 3 [pid 8632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 8633 attached [pid 8633] set_robust_list(0x55555745a660, 24 [pid 5063] <... openat resumed>) = 3 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8633 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8633] <... set_robust_list resumed>) = 0 [pid 8633] chdir("./359") = 0 [pid 8633] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8633] setpgid(0, 0) = 0 [pid 8633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8633] write(3, "1000", 4) = 4 [pid 5065] <... ioctl resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 8633] close(3 [pid 5065] close(3 [pid 8633] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 8633] symlink("/dev/binderfs", "./binderfs" [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8634 attached [pid 8634] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8634 [pid 8634] <... set_robust_list resumed>) = 0 [pid 8634] chdir("./351") = 0 [pid 8634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8634] setpgid(0, 0 [pid 5064] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8634] <... setpgid resumed>) = 0 [pid 8633] <... symlink resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8633] memfd_create("syzkaller", 0 [pid 8632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] newfstatat(AT_FDCWD, "./357/file0", [pid 8633] <... memfd_create resumed>) = 3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8634] <... openat resumed>) = 3 [pid 8633] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5064] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./357/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./357/file0") = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./357") = 0 [pid 5064] mkdir("./358", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 8634] write(3, "1000", 4 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8634] <... write resumed>) = 4 [pid 5063] <... ioctl resumed>) = 0 [pid 8634] close(3 [pid 5063] close(3 [pid 8634] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8634] symlink("/dev/binderfs", "./binderfs" [pid 8633] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8634] <... symlink resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8635 ./strace-static-x86_64: Process 8635 attached [pid 8634] memfd_create("syzkaller", 0 [pid 8635] set_robust_list(0x55555745a660, 24 [pid 8634] <... memfd_create resumed>) = 3 [pid 8632] <... write resumed>) = 2097152 [pid 8634] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8635] <... set_robust_list resumed>) = 0 [pid 8634] <... mmap resumed>) = 0x7f41e0600000 [pid 8635] chdir("./354") = 0 [pid 8635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8635] setpgid(0, 0) = 0 [pid 8635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8633] <... write resumed>) = 2097152 [pid 8635] <... openat resumed>) = 3 [pid 8635] write(3, "1000", 4) = 4 [pid 8633] munmap(0x7f41e0600000, 138412032 [pid 8635] close(3 [pid 8633] <... munmap resumed>) = 0 [pid 8632] munmap(0x7f41e0600000, 138412032) = 0 [pid 8635] <... close resumed>) = 0 [pid 8633] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... ioctl resumed>) = 0 [pid 8635] symlink("/dev/binderfs", "./binderfs" [pid 8632] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8635] <... symlink resumed>) = 0 [pid 8633] <... openat resumed>) = 4 [pid 8632] <... openat resumed>) = 4 [pid 8633] ioctl(4, LOOP_SET_FD, 3 [pid 8635] memfd_create("syzkaller", 0 [pid 8632] ioctl(4, LOOP_SET_FD, 3 [pid 5064] close(3 [pid 8635] <... memfd_create resumed>) = 3 [pid 5064] <... close resumed>) = 0 [pid 8633] <... ioctl resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8633] close(3./strace-static-x86_64: Process 8636 attached ) = 0 [pid 8633] close(4 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8636 [pid 8632] <... ioctl resumed>) = 0 [pid 8632] close(3) = 0 [pid 8636] set_robust_list(0x55555745a660, 24) = 0 [pid 8632] close(4 [pid 8636] chdir("./358" [pid 8632] <... close resumed>) = 0 [pid 8632] mkdir("./file0", 0777 [pid 8633] <... close resumed>) = 0 [pid 8632] <... mkdir resumed>) = 0 [pid 8636] <... chdir resumed>) = 0 [pid 8633] mkdir("./file0", 0777 [pid 8636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8634] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8633] <... mkdir resumed>) = 0 [pid 8632] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8636] setpgid(0, 0 [pid 8635] <... mmap resumed>) = 0x7f41e0600000 [ 322.024243][ T8633] loop0: detected capacity change from 0 to 4096 [ 322.025105][ T8632] loop1: detected capacity change from 0 to 4096 [pid 8636] <... setpgid resumed>) = 0 [pid 8633] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8636] write(3, "1000", 4) = 4 [pid 8636] close(3) = 0 [pid 8636] symlink("/dev/binderfs", "./binderfs" [pid 8635] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8634] <... write resumed>) = 2097152 [pid 8636] <... symlink resumed>) = 0 [pid 8632] <... mount resumed>) = 0 [pid 8632] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8632] chdir("./file0" [pid 8636] memfd_create("syzkaller", 0 [pid 8634] munmap(0x7f41e0600000, 138412032 [pid 8632] <... chdir resumed>) = 0 [pid 8636] <... memfd_create resumed>) = 3 [pid 8634] <... munmap resumed>) = 0 [pid 8636] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8634] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8633] <... mount resumed>) = 0 [pid 8632] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8636] <... mmap resumed>) = 0x7f41e0600000 [pid 8633] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8632] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8634] <... openat resumed>) = 4 [pid 8633] <... openat resumed>) = 3 [pid 8632] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8634] ioctl(4, LOOP_SET_FD, 3 [pid 8633] chdir("./file0") = 0 [pid 8633] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8633] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 4 [pid 8633] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8632] <... open resumed>) = 4 [pid 8632] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8633] <... open resumed>) = 5 [pid 8632] <... open resumed>) = 5 [pid 8634] <... ioctl resumed>) = 0 [pid 8632] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8634] close(3) = 0 [pid 8634] close(4 [pid 8633] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8634] <... close resumed>) = 0 [pid 8632] <... mmap resumed>) = 0x20000000 [pid 8634] mkdir("./file0", 0777 [pid 8633] ftruncate(4, 33587195) = 0 [pid 8634] <... mkdir resumed>) = 0 [pid 8633] unlink("./bus" [pid 8632] ftruncate(4, 33587195 [pid 8634] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8632] <... ftruncate resumed>) = 0 [pid 8633] <... unlink resumed>) = 0 [pid 8633] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8633] exit_group(0 [pid 8632] unlink("./bus" [pid 8633] <... exit_group resumed>) = ? [pid 8633] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8633, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./359", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./359/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8632] <... unlink resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./359/binderfs", [pid 8632] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8635] <... write resumed>) = 2097152 [pid 8632] exit_group(0 [pid 5061] unlink("./359/binderfs" [pid 8635] munmap(0x7f41e0600000, 138412032 [pid 8634] <... mount resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 8634] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8632] <... exit_group resumed>) = ? [pid 8636] <... write resumed>) = 2097152 [pid 8635] <... munmap resumed>) = 0 [pid 8634] <... openat resumed>) = 3 [pid 5061] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8636] munmap(0x7f41e0600000, 138412032 [pid 8635] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8634] chdir("./file0" [pid 8636] <... munmap resumed>) = 0 [pid 8635] <... openat resumed>) = 4 [pid 8634] <... chdir resumed>) = 0 [pid 8635] ioctl(4, LOOP_SET_FD, 3 [pid 8634] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8634] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8636] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8635] <... ioctl resumed>) = 0 [pid 8634] <... open resumed>) = 4 [pid 8632] +++ exited with 0 +++ [pid 5061] <... umount2 resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8632, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5062] umount2("./352", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8634] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", [pid 8635] close(3 [pid 8636] <... openat resumed>) = 4 [pid 8635] <... close resumed>) = 0 [pid 8634] <... open resumed>) = 5 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8636] ioctl(4, LOOP_SET_FD, 3 [pid 8635] close(4 [pid 8634] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8635] <... close resumed>) = 0 [ 322.249081][ T8639] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.286516][ T8635] loop2: detected capacity change from 0 to 4096 [pid 5062] umount2("./352/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./352/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./352/binderfs") = 0 [pid 5062] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8635] mkdir("./file0", 0777 [pid 5061] newfstatat(AT_FDCWD, "./359/file0", [pid 8634] <... mmap resumed>) = 0x20000000 [pid 8636] <... ioctl resumed>) = 0 [pid 8635] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8635] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./352/file0", [pid 8636] close(3 [pid 8634] ftruncate(4, 33587195 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8636] <... close resumed>) = 0 [pid 5062] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8636] close(4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./359/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8636] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./352/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8636] mkdir("./file0", 0777 [pid 8634] <... ftruncate resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 8636] <... mkdir resumed>) = 0 [pid 8634] unlink("./bus" [pid 5062] newfstatat(4, "", [pid 5061] <... openat resumed>) = 4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(4, "", [pid 5062] getdents64(4, [pid 8636] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./352/file0") = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 5061] getdents64(4, [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] close(3) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] rmdir("./352" [pid 5061] close(4 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./359/file0" [pid 5062] mkdir("./353", 0777 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 8634] <... unlink resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [ 322.314171][ T8636] loop3: detected capacity change from 0 to 4096 [pid 8634] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] close(3 [pid 8634] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8634] exit_group(0 [pid 5061] <... close resumed>) = 0 [pid 8634] <... exit_group resumed>) = ? [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8636] <... mount resumed>) = 0 [pid 8636] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] rmdir("./359" [pid 8636] <... openat resumed>) = 3 [pid 8636] chdir("./file0") = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8636] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8636] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] mkdir("./360", 0777) = 0 [pid 8636] <... open resumed>) = 4 [pid 8636] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8636] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8636] ftruncate(4, 33587195 [pid 5061] <... openat resumed>) = 3 [pid 8636] <... ftruncate resumed>) = 0 [pid 8636] unlink("./bus" [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8634] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8634, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8635] <... mount resumed>) = 0 [pid 8635] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] umount2("./351", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8635] <... openat resumed>) = 3 [pid 8635] chdir("./file0" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8636] <... unlink resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 8636] sendfile(-1, -1, NULL, 281474978811909 [pid 8635] <... chdir resumed>) = 0 [pid 8636] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8636] exit_group(0 [pid 8635] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8636] <... exit_group resumed>) = ? [pid 8636] +++ exited with 0 +++ [pid 8635] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] newfstatat(3, "", [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8636, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 8635] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 322.376982][ T8640] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.415904][ T8641] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] umount2("./358", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] getdents64(3, [pid 5064] newfstatat(3, "", [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] umount2("./351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... ioctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(3, [pid 5065] newfstatat(AT_FDCWD, "./351/binderfs", [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./351/binderfs" [pid 5064] umount2("./358/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... unlink resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] close(3 [pid 5064] newfstatat(AT_FDCWD, "./358/binderfs", [pid 5065] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] unlink("./358/binderfs") = 0 [pid 5064] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 8642 attached [pid 8642] set_robust_list(0x55555745a660, 24 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8642 [pid 8642] <... set_robust_list resumed>) = 0 [pid 8642] chdir("./353") = 0 [pid 8642] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8642] setpgid(0, 0 [pid 8635] <... open resumed>) = 4 [pid 8642] <... setpgid resumed>) = 0 [pid 8635] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 8642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8635] <... open resumed>) = 5 [pid 8635] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8642] write(3, "1000", 4) = 4 [pid 8642] close(3) = 0 [pid 8642] symlink("/dev/binderfs", "./binderfs" [pid 8635] <... mmap resumed>) = 0x20000000 [pid 8642] <... symlink resumed>) = 0 [pid 8642] memfd_create("syzkaller", 0 [pid 8635] ftruncate(4, 33587195 [pid 5064] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8642] <... memfd_create resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8642] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8635] <... ftruncate resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./358/file0", [pid 8642] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8635] unlink("./bus" [pid 5064] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./358/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 4 [pid 5061] close(3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... close resumed>) = 0 [pid 8635] <... unlink resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./351/file0", [pid 5064] newfstatat(4, "", [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8635] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 5065] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./358/file0" [pid 8635] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... rmdir resumed>) = 0 [pid 8635] exit_group(0 [pid 5065] openat(AT_FDCWD, "./351/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] getdents64(3, [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8643 [pid 8635] <... exit_group resumed>) = ? [pid 5065] <... openat resumed>) = 4 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 8643 attached [pid 5064] close(3 [pid 8643] set_robust_list(0x55555745a660, 24 [pid 5064] <... close resumed>) = 0 [pid 8643] <... set_robust_list resumed>) = 0 [pid 5064] rmdir("./358" [pid 8643] chdir("./360" [pid 5064] <... rmdir resumed>) = 0 [pid 8643] <... chdir resumed>) = 0 [pid 8643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8643] setpgid(0, 0 [pid 5065] newfstatat(4, "", [pid 5064] mkdir("./359", 0777 [pid 8643] <... setpgid resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] getdents64(4, [pid 8643] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8643] write(3, "1000", 4 [pid 5065] close(4 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 8643] <... write resumed>) = 4 [pid 8643] close(3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8643] <... close resumed>) = 0 [pid 8643] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8642] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] rmdir("./351/file0") = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 8643] memfd_create("syzkaller", 0 [pid 5065] <... close resumed>) = 0 [pid 8643] <... memfd_create resumed>) = 3 [pid 5065] rmdir("./351" [pid 8643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5065] <... rmdir resumed>) = 0 [pid 8635] +++ exited with 0 +++ [pid 5065] mkdir("./352", 0777 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8635, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 8643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] umount2("./354", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./354/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./354/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./354/binderfs") = 0 [pid 5063] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8642] <... write resumed>) = 2097152 [pid 8642] munmap(0x7f41e0600000, 138412032) = 0 [pid 8642] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... umount2 resumed>) = 0 [pid 8642] <... openat resumed>) = 4 [pid 5063] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8642] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8643] <... write resumed>) = 2097152 [pid 5063] newfstatat(AT_FDCWD, "./354/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./354/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./354/file0" [pid 5064] <... ioctl resumed>) = 0 [pid 8643] munmap(0x7f41e0600000, 138412032 [pid 5064] close(3 [pid 5063] <... rmdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] close(3) = 0 [pid 5063] rmdir("./354" [pid 8643] <... munmap resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 8644 attached [pid 8643] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8644] set_robust_list(0x55555745a660, 24 [pid 8643] <... openat resumed>) = 4 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8644 [pid 8644] <... set_robust_list resumed>) = 0 [pid 8643] ioctl(4, LOOP_SET_FD, 3 [pid 8642] <... ioctl resumed>) = 0 [pid 8642] close(3 [pid 5063] mkdir("./355", 0777 [pid 8644] chdir("./359" [pid 8642] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 8644] <... chdir resumed>) = 0 [pid 8644] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8643] <... ioctl resumed>) = 0 [pid 8644] <... prctl resumed>) = 0 [pid 8643] close(3 [pid 8644] setpgid(0, 0 [pid 8643] <... close resumed>) = 0 [pid 8642] close(4) = 0 [pid 8642] mkdir("./file0", 0777 [pid 8644] <... setpgid resumed>) = 0 [pid 8643] close(4) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 8644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8643] mkdir("./file0", 0777 [pid 8642] <... mkdir resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8642] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8643] <... mkdir resumed>) = 0 [ 322.601181][ T8642] loop1: detected capacity change from 0 to 4096 [ 322.633265][ T8643] loop0: detected capacity change from 0 to 4096 [pid 8644] <... openat resumed>) = 3 [pid 8643] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... ioctl resumed>) = 0 [pid 8644] write(3, "1000", 4 [pid 5065] close(3 [pid 8644] <... write resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 8644] close(3 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8644] <... close resumed>) = 0 [pid 8644] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 8645 attached [pid 8645] set_robust_list(0x55555745a660, 24) = 0 [pid 8645] chdir("./352" [pid 8644] memfd_create("syzkaller", 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8645 [pid 8644] <... memfd_create resumed>) = 3 [pid 8645] <... chdir resumed>) = 0 [pid 8645] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8645] <... prctl resumed>) = 0 [pid 8644] <... mmap resumed>) = 0x7f41e0600000 [pid 8645] setpgid(0, 0) = 0 [pid 8645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8645] write(3, "1000", 4) = 4 [pid 8645] close(3) = 0 [pid 8645] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8645] memfd_create("syzkaller", 0) = 3 [pid 8645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8642] <... mount resumed>) = 0 [pid 8642] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8642] chdir("./file0") = 0 [pid 8642] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8642] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8643] <... mount resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8643] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] close(3 [pid 8643] <... openat resumed>) = 3 [pid 8642] <... open resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 8643] chdir("./file0" [pid 8642] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8643] <... chdir resumed>) = 0 [pid 8642] <... open resumed>) = 5 [pid 8645] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8643] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8642] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8643] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8642] ftruncate(4, 33587195 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8648 [pid 8648] <... set_robust_list resumed>) = 0 [pid 8648] chdir("./355") = 0 [pid 8642] <... ftruncate resumed>) = 0 [pid 8643] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8642] unlink("./bus" [ 322.733915][ T8646] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.762748][ T8647] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8648] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8648] setpgid(0, 0) = 0 [pid 8643] <... open resumed>) = 4 [pid 8642] <... unlink resumed>) = 0 [pid 8648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8643] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8642] sendfile(-1, -1, NULL, 281474978811909 [pid 8648] <... openat resumed>) = 3 [pid 8642] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8648] write(3, "1000", 4 [pid 8643] <... open resumed>) = 5 [pid 8642] exit_group(0 [pid 8648] <... write resumed>) = 4 [pid 8642] <... exit_group resumed>) = ? [pid 8648] close(3 [pid 8643] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8648] <... close resumed>) = 0 [pid 8648] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8643] <... mmap resumed>) = 0x20000000 [pid 8648] memfd_create("syzkaller", 0 [pid 8643] ftruncate(4, 33587195 [pid 8648] <... memfd_create resumed>) = 3 [pid 8648] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8644] <... write resumed>) = 2097152 [pid 8643] <... ftruncate resumed>) = 0 [pid 8648] <... mmap resumed>) = 0x7f41e0600000 [pid 8643] unlink("./bus" [pid 8644] munmap(0x7f41e0600000, 138412032 [pid 8642] +++ exited with 0 +++ [pid 8644] <... munmap resumed>) = 0 [pid 8644] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8642, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5062] umount2("./353", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8643] <... unlink resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8643] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8644] <... openat resumed>) = 4 [pid 8643] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5062] <... openat resumed>) = 3 [pid 8644] ioctl(4, LOOP_SET_FD, 3 [pid 5062] newfstatat(3, "", [pid 8643] exit_group(0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8643] <... exit_group resumed>) = ? [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./353/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./353/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8648] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8645] <... write resumed>) = 2097152 [pid 8644] <... ioctl resumed>) = 0 [pid 8643] +++ exited with 0 +++ [pid 5062] unlink("./353/binderfs" [pid 8645] munmap(0x7f41e0600000, 138412032 [pid 8644] close(3 [pid 5062] <... unlink resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8643, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 8645] <... munmap resumed>) = 0 [pid 8644] <... close resumed>) = 0 [pid 5062] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5062] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8644] close(4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8644] <... close resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./353/file0", [pid 8645] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 322.871571][ T8644] loop3: detected capacity change from 0 to 4096 [pid 8644] mkdir("./file0", 0777 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8645] <... openat resumed>) = 4 [pid 8644] <... mkdir resumed>) = 0 [pid 5062] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8645] ioctl(4, LOOP_SET_FD, 3 [pid 5062] openat(AT_FDCWD, "./353/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] umount2("./360", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8644] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] newfstatat(4, "", [pid 5061] <... openat resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(3, "", [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] getdents64(3, [pid 5062] close(4) = 0 [pid 5062] rmdir("./353/file0" [pid 8648] <... write resumed>) = 2097152 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./360/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./360/binderfs", [pid 8648] munmap(0x7f41e0600000, 138412032 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./360/binderfs") = 0 [pid 5061] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./353") = 0 [pid 8648] <... munmap resumed>) = 0 [pid 8645] <... ioctl resumed>) = 0 [pid 8644] <... mount resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8644] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8648] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8645] close(3 [pid 8644] chdir("./file0" [pid 5062] mkdir("./354", 0777 [pid 5061] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8648] <... openat resumed>) = 4 [pid 8645] <... close resumed>) = 0 [pid 8644] <... chdir resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8645] close(4 [ 322.916927][ T8645] loop4: detected capacity change from 0 to 4096 [ 322.951403][ T8649] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8644] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8648] ioctl(4, LOOP_SET_FD, 3 [pid 8644] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8648] <... ioctl resumed>) = 0 [pid 8645] <... close resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./360/file0", [pid 8644] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5061] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./360/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8645] mkdir("./file0", 0777) = 0 [pid 5061] newfstatat(4, "", [pid 8645] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8644] <... open resumed>) = 4 [pid 5061] getdents64(4, [pid 8644] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8644] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] close(4 [pid 8644] <... mmap resumed>) = 0x20000000 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./360/file0" [pid 8644] ftruncate(4, 33587195 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 8648] close(3 [pid 5061] rmdir("./360" [pid 8648] <... close resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8648] close(4 [pid 5061] mkdir("./361", 0777 [pid 8648] <... close resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 8644] <... ftruncate resumed>) = 0 [pid 8644] unlink("./bus" [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8648] mkdir("./file0", 0777 [pid 5061] <... openat resumed>) = 3 [ 322.968833][ T8648] loop2: detected capacity change from 0 to 4096 [pid 8648] <... mkdir resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8644] <... unlink resumed>) = 0 [pid 8644] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8644] exit_group(0) = ? [pid 8645] <... mount resumed>) = 0 [pid 8645] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8645] chdir("./file0" [pid 8648] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8645] <... chdir resumed>) = 0 [pid 8645] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8645] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8644] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8644, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5064] umount2("./359", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./359/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./359/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./359/binderfs") = 0 [ 323.022435][ T8650] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 8648] <... mount resumed>) = 0 [pid 8645] <... open resumed>) = 4 [pid 5064] <... umount2 resumed>) = 0 [pid 8648] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8645] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8648] chdir("./file0") = 0 [pid 8645] <... open resumed>) = 5 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8652 [pid 8648] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8645] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8652] set_robust_list(0x55555745a660, 24 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8652] <... set_robust_list resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./359/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8652] chdir("./354" [pid 8645] <... mmap resumed>) = 0x20000000 [pid 5064] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8652] <... chdir resumed>) = 0 [pid 8648] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8652] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] openat(AT_FDCWD, "./359/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8652] setpgid(0, 0 [pid 5064] <... openat resumed>) = 4 [pid 8652] <... setpgid resumed>) = 0 [pid 5064] newfstatat(4, "", [pid 8652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8648] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8645] ftruncate(4, 33587195 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8652] <... openat resumed>) = 3 [pid 5064] getdents64(4, [pid 5061] <... ioctl resumed>) = 0 [pid 8652] write(3, "1000", 4 [pid 8645] <... ftruncate resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 8652] <... write resumed>) = 4 [pid 5064] <... close resumed>) = 0 [pid 8652] close(3 [pid 5064] rmdir("./359/file0" [pid 8652] <... close resumed>) = 0 [pid 8645] unlink("./bus" [pid 5064] <... rmdir resumed>) = 0 [pid 8652] symlink("/dev/binderfs", "./binderfs" [pid 5064] getdents64(3, [pid 8652] <... symlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 8652] memfd_create("syzkaller", 0 [pid 8648] <... open resumed>) = 4 [pid 5064] close(3 [pid 8652] <... memfd_create resumed>) = 3 [pid 5064] <... close resumed>) = 0 [pid 8652] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] rmdir("./359" [pid 5061] <... close resumed>) = 0 [pid 8652] <... mmap resumed>) = 0x7f41e0600000 [ 323.102169][ T8651] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8648] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... rmdir resumed>) = 0 [pid 8648] <... open resumed>) = 5 [pid 8645] <... unlink resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8653 ./strace-static-x86_64: Process 8653 attached [pid 8653] set_robust_list(0x55555745a660, 24 [pid 5064] mkdir("./360", 0777 [pid 8653] <... set_robust_list resumed>) = 0 [pid 8653] chdir("./361") = 0 [pid 8653] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8648] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8645] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... mkdir resumed>) = 0 [pid 8645] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8653] <... prctl resumed>) = 0 [pid 8653] setpgid(0, 0) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8648] <... mmap resumed>) = 0x20000000 [pid 8653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8648] ftruncate(4, 33587195 [pid 8645] exit_group(0 [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8645] <... exit_group resumed>) = ? [pid 8653] <... openat resumed>) = 3 [pid 8653] write(3, "1000", 4) = 4 [pid 8653] close(3) = 0 [pid 8648] <... ftruncate resumed>) = 0 [pid 8653] symlink("/dev/binderfs", "./binderfs" [pid 8648] unlink("./bus" [pid 8653] <... symlink resumed>) = 0 [pid 8653] memfd_create("syzkaller", 0 [pid 8645] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8645, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 8653] <... memfd_create resumed>) = 3 [pid 8653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8652] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8648] <... unlink resumed>) = 0 [pid 8648] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5065] umount2("./352", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8648] exit_group(0) = ? [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./352/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./352/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./352/binderfs") = 0 [pid 5065] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8648] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8648, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] umount2("./355", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] <... umount2 resumed>) = 0 [pid 5063] umount2("./355/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8653] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./355/binderfs", [pid 5065] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./352/file0", [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./352/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] unlink("./355/binderfs" [pid 8652] <... write resumed>) = 2097152 [pid 5063] <... unlink resumed>) = 0 [pid 8652] munmap(0x7f41e0600000, 138412032 [pid 5063] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8652] <... munmap resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 8652] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] newfstatat(4, "", [pid 8652] <... openat resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8652] ioctl(4, LOOP_SET_FD, 3 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./352/file0") = 0 [pid 5065] getdents64(3, [pid 5064] close(3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] close(3 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./352") = 0 [pid 5065] mkdir("./353", 0777) = 0 [pid 5063] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] newfstatat(AT_FDCWD, "./355/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./355/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8654 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 8652] <... ioctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 8652] close(3 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8652] <... close resumed>) = 0 [pid 5063] close(4 [pid 8652] close(4 [pid 5063] <... close resumed>) = 0 ./strace-static-x86_64: Process 8654 attached [pid 8654] set_robust_list(0x55555745a660, 24) = 0 [pid 8654] chdir("./360") = 0 [pid 8652] <... close resumed>) = 0 [pid 5063] rmdir("./355/file0" [pid 8654] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8652] mkdir("./file0", 0777 [pid 8654] <... prctl resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8654] setpgid(0, 0) = 0 [pid 8652] <... mkdir resumed>) = 0 [pid 5063] getdents64(3, [pid 8654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8652] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8654] <... openat resumed>) = 3 [pid 8654] write(3, "1000", 4) = 4 [pid 5063] close(3 [pid 8654] close(3) = 0 [pid 8654] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... close resumed>) = 0 [pid 8654] <... symlink resumed>) = 0 [pid 5063] rmdir("./355") = 0 [pid 8654] memfd_create("syzkaller", 0 [pid 5063] mkdir("./356", 0777 [pid 8654] <... memfd_create resumed>) = 3 [pid 8654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5063] <... mkdir resumed>) = 0 [ 323.267861][ T8652] loop1: detected capacity change from 0 to 4096 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8652] <... mount resumed>) = 0 [pid 8652] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8652] chdir("./file0") = 0 [pid 8652] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8653] <... write resumed>) = 2097152 [pid 8652] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8652] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8653] munmap(0x7f41e0600000, 138412032) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 8654] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8653] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5065] close(3 [ 323.332794][ T8655] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8653] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... close resumed>) = 0 [pid 8653] <... ioctl resumed>) = 0 [pid 8652] <... open resumed>) = 4 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8652] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5063] <... ioctl resumed>) = 0 [pid 8652] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] close(3 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8656 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8653] close(3) = 0 [pid 8653] close(4) = 0 [pid 8653] mkdir("./file0", 0777) = 0 [pid 8652] <... mmap resumed>) = 0x20000000 [pid 8653] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, ""./strace-static-x86_64: Process 8657 attached [pid 8652] ftruncate(4, 33587195 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8657 ./strace-static-x86_64: Process 8656 attached [pid 8657] set_robust_list(0x55555745a660, 24) = 0 [pid 8656] set_robust_list(0x55555745a660, 24) = 0 [pid 8657] chdir("./356" [pid 8652] <... ftruncate resumed>) = 0 [ 323.378769][ T8653] loop0: detected capacity change from 0 to 4096 [ 323.393248][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 323.393264][ T28] audit: type=1800 audit(1708423475.920:5354): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [pid 8656] chdir("./353" [pid 8657] <... chdir resumed>) = 0 [pid 8656] <... chdir resumed>) = 0 [pid 8652] unlink("./bus" [pid 8656] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8657] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8656] <... prctl resumed>) = 0 [pid 8657] <... prctl resumed>) = 0 [pid 8656] setpgid(0, 0 [pid 8654] <... write resumed>) = 2097152 [pid 8652] <... unlink resumed>) = 0 [pid 8657] setpgid(0, 0 [pid 8656] <... setpgid resumed>) = 0 [pid 8652] sendfile(-1, -1, NULL, 281474978811909 [pid 8656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8652] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8657] <... setpgid resumed>) = 0 [pid 8652] exit_group(0 [pid 8657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8652] <... exit_group resumed>) = ? [pid 8657] <... openat resumed>) = 3 [pid 8656] <... openat resumed>) = 3 [pid 8653] <... mount resumed>) = 0 [pid 8653] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8653] chdir("./file0") = 0 [pid 8653] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8654] munmap(0x7f41e0600000, 138412032 [pid 8653] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8654] <... munmap resumed>) = 0 [pid 8654] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 323.475489][ T8658] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 323.486744][ T28] audit: type=1800 audit(1708423475.920:5355): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 323.501174][ T8654] loop3: detected capacity change from 0 to 4096 [pid 8654] ioctl(4, LOOP_SET_FD, 3 [pid 8657] write(3, "1000", 4 [pid 8656] write(3, "1000", 4 [pid 8652] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8652, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} --- [pid 8657] <... write resumed>) = 4 [pid 8656] <... write resumed>) = 4 [pid 8656] close(3 [pid 8657] close(3 [pid 5062] umount2("./354", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8657] <... close resumed>) = 0 [pid 8656] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8656] symlink("/dev/binderfs", "./binderfs" [pid 8657] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8657] <... symlink resumed>) = 0 [pid 5062] getdents64(3, [pid 8656] <... symlink resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8657] memfd_create("syzkaller", 0 [pid 5062] umount2("./354/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8656] memfd_create("syzkaller", 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8657] <... memfd_create resumed>) = 3 [pid 8657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] newfstatat(AT_FDCWD, "./354/binderfs", [pid 8657] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./354/binderfs") = 0 [pid 5062] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8653] <... open resumed>) = 4 [pid 8656] <... memfd_create resumed>) = 3 [pid 8656] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 323.510531][ T28] audit: type=1800 audit(1708423475.960:5356): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [pid 8653] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8656] <... mmap resumed>) = 0x7f41e0600000 [pid 8653] <... open resumed>) = 5 [pid 8653] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... umount2 resumed>) = 0 [pid 8653] <... ftruncate resumed>) = 0 [pid 8654] <... ioctl resumed>) = 0 [pid 8656] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8654] close(3 [pid 8653] unlink("./bus" [pid 8654] <... close resumed>) = 0 [pid 8654] close(4 [pid 8653] <... unlink resumed>) = 0 [pid 8654] <... close resumed>) = 0 [pid 8653] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8654] mkdir("./file0", 0777 [pid 8653] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8654] <... mkdir resumed>) = 0 [pid 8653] exit_group(0 [pid 8654] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8653] <... exit_group resumed>) = ? [pid 5062] newfstatat(AT_FDCWD, "./354/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8653] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./354/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8653, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5062] getdents64(4, [pid 5061] <... restart_syscall resumed>) = 0 [pid 8657] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] umount2("./361", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(4) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8654] <... mount resumed>) = 0 [pid 5062] rmdir("./354/file0" [pid 5061] openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8654] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8656] <... write resumed>) = 2097152 [pid 8654] <... openat resumed>) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5062] getdents64(3, [pid 5061] newfstatat(3, "", [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] close(3 [pid 5061] getdents64(3, [pid 5062] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] rmdir("./354" [pid 5061] umount2("./361/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./361/binderfs", [pid 5062] mkdir("./355", 0777 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] unlink("./361/binderfs" [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... unlink resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5061] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8656] munmap(0x7f41e0600000, 138412032 [ 323.613312][ T8659] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 323.627608][ T28] audit: type=1800 audit(1708423476.070:5357): pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [pid 8654] chdir("./file0") = 0 [pid 8656] <... munmap resumed>) = 0 [pid 8654] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8656] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8657] <... write resumed>) = 2097152 [pid 8657] munmap(0x7f41e0600000, 138412032 [pid 8656] <... openat resumed>) = 4 [pid 8654] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... umount2 resumed>) = 0 [pid 8656] ioctl(4, LOOP_SET_FD, 3 [pid 8654] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8657] <... munmap resumed>) = 0 [ 323.648905][ T28] audit: type=1800 audit(1708423476.080:5358): pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 323.672333][ T28] audit: type=1800 audit(1708423476.080:5359): pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 323.704356][ T8656] loop4: detected capacity change from 0 to 4096 [pid 5061] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8656] <... ioctl resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8657] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./361/file0", [pid 8657] <... openat resumed>) = 4 [pid 8654] <... open resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8657] ioctl(4, LOOP_SET_FD, 3 [pid 5061] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8657] <... ioctl resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8654] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] openat(AT_FDCWD, "./361/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./361/file0") = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./361") = 0 [pid 5061] mkdir("./362", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8657] close(3) = 0 [pid 8657] close(4) = 0 [pid 8657] mkdir("./file0", 0777) = 0 [pid 8654] <... open resumed>) = 5 [pid 8656] close(3 [pid 8654] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [ 323.718613][ T8657] loop2: detected capacity change from 0 to 4096 [ 323.728393][ T28] audit: type=1800 audit(1708423476.240:5360): pid=8654 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 8657] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8656] <... close resumed>) = 0 [pid 8654] <... mmap resumed>) = 0x20000000 [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8656] close(4 [pid 8654] ftruncate(4, 33587195 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8660 [pid 8656] <... close resumed>) = 0 ./strace-static-x86_64: Process 8660 attached [pid 8656] mkdir("./file0", 0777 [pid 8660] set_robust_list(0x55555745a660, 24 [pid 8656] <... mkdir resumed>) = 0 [pid 8660] <... set_robust_list resumed>) = 0 [pid 8660] chdir("./355" [pid 8656] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8660] <... chdir resumed>) = 0 [pid 8660] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8660] setpgid(0, 0) = 0 [ 323.751991][ T28] audit: type=1800 audit(1708423476.280:5361): pid=8654 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 323.773021][ T28] audit: type=1800 audit(1708423476.280:5362): pid=8654 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 8660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8660] write(3, "1000", 4 [pid 8656] <... mount resumed>) = 0 [pid 8656] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8660] <... write resumed>) = 4 [pid 8656] <... openat resumed>) = 3 [pid 8654] <... ftruncate resumed>) = 0 [pid 8656] chdir("./file0" [pid 8654] unlink("./bus" [pid 8656] <... chdir resumed>) = 0 [pid 8656] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8656] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8660] close(3) = 0 [pid 8654] <... unlink resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8660] symlink("/dev/binderfs", "./binderfs" [pid 8654] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8654] exit_group(0) = ? [pid 8660] <... symlink resumed>) = 0 [pid 8654] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8654, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 8660] memfd_create("syzkaller", 0 [pid 5064] umount2("./360", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8660] <... memfd_create resumed>) = 3 [pid 8660] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8657] <... mount resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8657] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] getdents64(3, [pid 8657] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8657] chdir("./file0") = 0 [pid 5064] umount2("./360/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8657] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8657] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] newfstatat(AT_FDCWD, "./360/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./360/binderfs") = 0 [pid 5064] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(3 [pid 8660] <... mmap resumed>) = 0x7f41e0600000 [pid 8656] <... open resumed>) = 4 [pid 8656] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... close resumed>) = 0 [pid 8656] <... open resumed>) = 5 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 323.810115][ T8661] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 323.833483][ T8662] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8656] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<, child_tidptr=0x55555745a650) = 8663 ./strace-static-x86_64: Process 8663 attached [pid 8663] set_robust_list(0x55555745a660, 24) = 0 [pid 8663] chdir("./362") = 0 [pid 8663] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8656] ftruncate(4, 33587195 [pid 8663] <... prctl resumed>) = 0 [pid 8660] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8657] <... open resumed>) = 4 [pid 8656] <... ftruncate resumed>) = 0 [pid 8663] setpgid(0, 0) = 0 [pid 8663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8657] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8656] unlink("./bus" [pid 8657] <... open resumed>) = 5 [pid 8656] <... unlink resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 8657] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8656] sendfile(-1, -1, NULL, 281474978811909 [pid 8657] <... mmap resumed>) = 0x20000000 [pid 8656] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8663] <... openat resumed>) = 3 [pid 8657] ftruncate(4, 33587195 [pid 8656] exit_group(0 [pid 5064] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8663] write(3, "1000", 4 [pid 8656] <... exit_group resumed>) = ? [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8663] <... write resumed>) = 4 [ 323.891718][ T28] audit: type=1800 audit(1708423476.390:5363): pid=8656 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [pid 8663] close(3) = 0 [pid 8663] symlink("/dev/binderfs", "./binderfs" [pid 5064] newfstatat(AT_FDCWD, "./360/file0", [pid 8663] <... symlink resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8663] memfd_create("syzkaller", 0 [pid 8657] <... ftruncate resumed>) = 0 [pid 8656] +++ exited with 0 +++ [pid 5064] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8663] <... memfd_create resumed>) = 3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8656, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./360/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8663] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8657] unlink("./bus" [pid 5064] <... openat resumed>) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 8660] <... write resumed>) = 2097152 [pid 8657] <... unlink resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 8660] munmap(0x7f41e0600000, 138412032 [pid 8657] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] umount2("./353", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./360/file0" [pid 8657] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... rmdir resumed>) = 0 [pid 8657] exit_group(0 [pid 5065] <... openat resumed>) = 3 [pid 5064] getdents64(3, [pid 8657] <... exit_group resumed>) = ? [pid 5065] newfstatat(3, "", [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8660] <... munmap resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] close(3 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] <... close resumed>) = 0 [pid 8660] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] umount2("./353/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./360" [pid 8660] <... openat resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./353/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./353/binderfs") = 0 [pid 5065] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8663] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8660] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... rmdir resumed>) = 0 [pid 8660] <... ioctl resumed>) = 0 [pid 8657] +++ exited with 0 +++ [pid 5065] <... umount2 resumed>) = 0 [pid 5064] mkdir("./361", 0777 [pid 8660] close(3 [pid 5065] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8657, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 8660] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 8660] close(4 [pid 5065] newfstatat(AT_FDCWD, "./353/file0", [pid 5063] <... restart_syscall resumed>) = 0 [pid 8660] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 8660] mkdir("./file0", 0777 [pid 5065] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./356", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8660] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./353/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] <... openat resumed>) = 4 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] newfstatat(3, "", [pid 8660] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] newfstatat(4, "", [pid 5064] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] getdents64(3, [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] umount2("./356/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(4, [pid 5063] newfstatat(AT_FDCWD, "./356/binderfs", [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] close(4 [pid 5063] unlink("./356/binderfs" [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./353/file0" [pid 5063] <... unlink resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5063] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./353") = 0 [pid 5065] mkdir("./354", 0777 [pid 5063] <... umount2 resumed>) = 0 [ 324.001171][ T8660] loop1: detected capacity change from 0 to 4096 [pid 5065] <... mkdir resumed>) = 0 [pid 5063] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 3 [pid 5063] newfstatat(AT_FDCWD, "./356/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8660] <... mount resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./356/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8663] <... write resumed>) = 2097152 [pid 8660] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] newfstatat(4, "", [pid 8663] munmap(0x7f41e0600000, 138412032 [pid 8660] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8660] chdir("./file0") = 0 [pid 5063] getdents64(4, [pid 8660] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8660] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] getdents64(4, [pid 8663] <... munmap resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8663] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] close(4) = 0 [pid 8663] <... openat resumed>) = 4 [pid 5063] rmdir("./356/file0" [pid 8663] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... rmdir resumed>) = 0 [pid 8660] <... open resumed>) = 4 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./356") = 0 [pid 8660] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8663] <... ioctl resumed>) = 0 [pid 8660] <... open resumed>) = 5 [pid 5064] <... ioctl resumed>) = 0 [pid 5063] mkdir("./357", 0777 [pid 8663] close(3 [pid 8660] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] close(3 [pid 5063] <... mkdir resumed>) = 0 [pid 8663] <... close resumed>) = 0 [pid 8660] <... mmap resumed>) = 0x20000000 [pid 5064] <... close resumed>) = 0 [pid 8663] close(4 [pid 8660] ftruncate(4, 33587195 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8663] <... close resumed>) = 0 ./strace-static-x86_64: Process 8665 attached [pid 8663] mkdir("./file0", 0777 [pid 8660] <... ftruncate resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8665 [pid 5063] <... openat resumed>) = 3 [pid 8665] set_robust_list(0x55555745a660, 24 [pid 8663] <... mkdir resumed>) = 0 [pid 8660] unlink("./bus" [pid 8665] <... set_robust_list resumed>) = 0 [pid 8665] chdir("./361" [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8663] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8665] <... chdir resumed>) = 0 [pid 8665] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 324.048762][ T8664] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 324.087329][ T8663] loop0: detected capacity change from 0 to 4096 [pid 8665] setpgid(0, 0 [pid 8660] <... unlink resumed>) = 0 [pid 8660] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8660] exit_group(0) = ? [pid 8660] +++ exited with 0 +++ [pid 8665] <... setpgid resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8660, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 8665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] umount2("./355", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8665] write(3, "1000", 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8665] <... write resumed>) = 4 [pid 5062] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8665] close(3) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8665] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8665] memfd_create("syzkaller", 0 [pid 5062] newfstatat(3, "", [pid 5065] <... ioctl resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] close(3) = 0 [pid 8663] <... mount resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8663] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8663] chdir("./file0"./strace-static-x86_64: Process 8667 attached ) = 0 [pid 8667] set_robust_list(0x55555745a660, 24 [pid 8663] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8667] <... set_robust_list resumed>) = 0 [pid 8663] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8667] chdir("./354" [pid 5062] umount2("./355/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8667 [pid 8665] <... memfd_create resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] newfstatat(AT_FDCWD, "./355/binderfs", [pid 8665] <... mmap resumed>) = 0x7f41e0600000 [pid 8667] <... chdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8667] setpgid(0, 0) = 0 [pid 8667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... ioctl resumed>) = 0 [pid 8667] <... openat resumed>) = 3 [pid 5062] unlink("./355/binderfs" [pid 8667] write(3, "1000", 4 [pid 5062] <... unlink resumed>) = 0 [pid 8667] <... write resumed>) = 4 [pid 8667] close(3) = 0 [pid 5062] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8667] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8667] memfd_create("syzkaller", 0) = 3 [pid 8667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5063] close(3) = 0 [pid 8663] <... open resumed>) = 4 [pid 8663] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8663] <... open resumed>) = 5 [pid 8663] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<, child_tidptr=0x55555745a650) = 8668 [ 324.160878][ T8666] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8663] ftruncate(4, 33587195./strace-static-x86_64: Process 8668 attached [pid 8668] set_robust_list(0x55555745a660, 24) = 0 [pid 8663] <... ftruncate resumed>) = 0 [pid 8668] chdir("./357" [pid 8663] unlink("./bus" [pid 5062] <... umount2 resumed>) = 0 [pid 8668] <... chdir resumed>) = 0 [pid 8668] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8668] setpgid(0, 0 [pid 5062] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8668] <... setpgid resumed>) = 0 [pid 8668] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8665] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8663] <... unlink resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8668] <... openat resumed>) = 3 [pid 8663] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] newfstatat(AT_FDCWD, "./355/file0", [pid 8668] write(3, "1000", 4 [pid 8663] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8668] <... write resumed>) = 4 [pid 8663] exit_group(0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8668] close(3 [pid 8667] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8663] <... exit_group resumed>) = ? [pid 5062] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8668] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8668] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] openat(AT_FDCWD, "./355/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8668] memfd_create("syzkaller", 0 [pid 5062] newfstatat(4, "", [pid 8668] <... memfd_create resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./355/file0") = 0 [pid 5062] getdents64(3, [pid 8663] +++ exited with 0 +++ [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8663, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5062] close(3 [pid 8665] <... write resumed>) = 2097152 [pid 5062] <... close resumed>) = 0 [pid 5061] umount2("./362", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8665] munmap(0x7f41e0600000, 138412032 [pid 5062] rmdir("./355" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] umount2("./362/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./362/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] mkdir("./356", 0777 [pid 5061] unlink("./362/binderfs") = 0 [pid 5061] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8665] <... munmap resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8665] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] <... openat resumed>) = 3 [pid 8665] <... openat resumed>) = 4 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8665] ioctl(4, LOOP_SET_FD, 3 [pid 8668] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8667] <... write resumed>) = 2097152 [pid 5061] <... umount2 resumed>) = 0 [pid 8665] <... ioctl resumed>) = 0 [pid 5061] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8665] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8665] <... close resumed>) = 0 [pid 8665] close(4 [pid 5061] newfstatat(AT_FDCWD, "./362/file0", [pid 8665] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8667] munmap(0x7f41e0600000, 138412032) = 0 [pid 8665] mkdir("./file0", 0777 [pid 5061] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8667] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8665] <... mkdir resumed>) = 0 [ 324.320965][ T8665] loop3: detected capacity change from 0 to 4096 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8667] ioctl(4, LOOP_SET_FD, 3 [pid 8665] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] openat(AT_FDCWD, "./362/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8668] <... write resumed>) = 2097152 [pid 8667] <... ioctl resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", [pid 8668] munmap(0x7f41e0600000, 138412032 [pid 8667] close(3 [pid 8668] <... munmap resumed>) = 0 [pid 8667] <... close resumed>) = 0 [pid 8667] close(4) = 0 [pid 8667] mkdir("./file0", 0777) = 0 [pid 8667] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8665] <... mount resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8668] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 324.374835][ T8667] loop4: detected capacity change from 0 to 4096 [ 324.396691][ T8669] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] getdents64(4, [pid 8668] <... openat resumed>) = 4 [pid 8668] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8665] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8665] <... openat resumed>) = 3 [pid 8665] chdir("./file0") = 0 [pid 8665] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8665] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8668] close(3 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] getdents64(4, [pid 5062] close(3 [pid 8668] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [ 324.420656][ T8668] loop2: detected capacity change from 0 to 4096 [pid 8668] close(4 [pid 5062] <... close resumed>) = 0 [pid 5061] close(4 [pid 8668] <... close resumed>) = 0 [pid 8668] mkdir("./file0", 0777 [pid 8667] <... mount resumed>) = 0 [pid 8668] <... mkdir resumed>) = 0 [pid 8665] <... open resumed>) = 4 [pid 8665] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8667] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8665] <... open resumed>) = 5 [pid 8667] <... openat resumed>) = 3 [pid 8668] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8667] chdir("./file0") = 0 [pid 8665] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8667] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8665] <... mmap resumed>) = 0x20000000 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... close resumed>) = 0 [pid 8667] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8667] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] rmdir("./362/file0" [pid 8665] ftruncate(4, 33587195 [pid 5061] <... rmdir resumed>) = 0 [pid 8665] <... ftruncate resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8671 [pid 5061] getdents64(3, ./strace-static-x86_64: Process 8671 attached 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8671] set_robust_list(0x55555745a660, 24) = 0 [pid 5061] close(3 [pid 8671] chdir("./356" [pid 5061] <... close resumed>) = 0 [pid 8671] <... chdir resumed>) = 0 [pid 5061] rmdir("./362" [pid 8671] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... rmdir resumed>) = 0 [pid 8671] <... prctl resumed>) = 0 [pid 5061] mkdir("./363", 0777 [pid 8671] setpgid(0, 0) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 8671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8671] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 3 [ 324.449732][ T8670] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8671] write(3, "1000", 4 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8671] <... write resumed>) = 4 [pid 8665] unlink("./bus" [pid 8671] close(3) = 0 [pid 8667] <... open resumed>) = 4 [pid 8671] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8671] memfd_create("syzkaller", 0 [pid 8668] <... mount resumed>) = 0 [pid 8671] <... memfd_create resumed>) = 3 [pid 8668] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8667] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8668] <... openat resumed>) = 3 [pid 8667] <... open resumed>) = 5 [pid 8665] <... unlink resumed>) = 0 [pid 8671] <... mmap resumed>) = 0x7f41e0600000 [pid 8668] chdir("./file0" [pid 8667] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8665] sendfile(-1, -1, NULL, 281474978811909 [pid 8668] <... chdir resumed>) = 0 [pid 8665] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8668] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8665] exit_group(0 [pid 8668] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8667] <... mmap resumed>) = 0x20000000 [pid 8665] <... exit_group resumed>) = ? [pid 8668] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8667] ftruncate(4, 33587195) = 0 [pid 8668] <... open resumed>) = 4 [pid 8667] unlink("./bus" [pid 8665] +++ exited with 0 +++ [pid 8668] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8665, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./361", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8668] <... open resumed>) = 5 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8668] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... openat resumed>) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 324.491377][ T8672] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8668] <... mmap resumed>) = 0x20000000 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8667] <... unlink resumed>) = 0 [pid 5064] umount2("./361/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8668] ftruncate(4, 33587195 [pid 8667] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8667] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] newfstatat(AT_FDCWD, "./361/binderfs", [pid 8667] exit_group(0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8667] <... exit_group resumed>) = ? [pid 5064] unlink("./361/binderfs") = 0 [pid 5064] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8668] <... ftruncate resumed>) = 0 [pid 8668] unlink("./bus" [pid 5061] <... ioctl resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 8671] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./361/file0", [pid 8668] <... unlink resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8668] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8668] exit_group(0) = ? [pid 8667] +++ exited with 0 +++ [pid 5061] close(3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8667, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5064] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./354", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] openat(AT_FDCWD, "./361/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... close resumed>) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./354/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./354/binderfs", [pid 5064] newfstatat(4, "", [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] unlink("./354/binderfs" [pid 5064] getdents64(4, [pid 5065] <... unlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] close(4) = 0 [pid 5064] rmdir("./361/file0") = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 ./strace-static-x86_64: Process 8673 attached [pid 8668] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8668, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8673 [pid 8673] set_robust_list(0x55555745a660, 24) = 0 [pid 5063] umount2("./357", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8673] chdir("./363" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8673] <... chdir resumed>) = 0 [pid 5064] rmdir("./361" [pid 5063] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8673] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... umount2 resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 8673] <... prctl resumed>) = 0 [pid 8673] setpgid(0, 0 [pid 5063] <... openat resumed>) = 3 [pid 8673] <... setpgid resumed>) = 0 [pid 5065] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(3, "", [pid 8673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] mkdir("./362", 0777 [pid 8673] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8671] <... write resumed>) = 2097152 [pid 5065] newfstatat(AT_FDCWD, "./354/file0", [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] getdents64(3, [pid 8673] write(3, "1000", 4 [pid 8671] munmap(0x7f41e0600000, 138412032 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... openat resumed>) = 3 [pid 8673] <... write resumed>) = 4 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8673] close(3 [pid 5065] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./357/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8673] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8673] symlink("/dev/binderfs", "./binderfs" [pid 8671] <... munmap resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./354/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] newfstatat(AT_FDCWD, "./357/binderfs", [pid 8673] <... symlink resumed>) = 0 [pid 8671] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... openat resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8673] memfd_create("syzkaller", 0 [pid 8671] <... openat resumed>) = 4 [pid 5065] newfstatat(4, "", [pid 5063] unlink("./357/binderfs" [pid 8673] <... memfd_create resumed>) = 3 [pid 8671] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5065] getdents64(4, [pid 5063] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./354/file0") = 0 [pid 5065] getdents64(3, [pid 8673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8671] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8671] close(3 [pid 8673] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8671] <... close resumed>) = 0 [pid 5065] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... close resumed>) = 0 [pid 8671] close(4) = 0 [pid 8671] mkdir("./file0", 0777) = 0 [pid 5065] rmdir("./354" [pid 5063] newfstatat(AT_FDCWD, "./357/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8671] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... rmdir resumed>) = 0 [pid 5063] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] mkdir("./355", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./357/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... mkdir resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5065] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [ 324.648275][ T8671] loop1: detected capacity change from 0 to 4096 [pid 5063] close(4 [pid 8673] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... close resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5063] rmdir("./357/file0") = 0 [pid 5063] getdents64(3, [pid 8671] <... mount resumed>) = 0 [pid 5064] close(3 [pid 8671] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 8671] <... openat resumed>) = 3 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] close(3 [pid 8671] chdir("./file0") = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./357") = 0 [pid 8671] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 8675 attached ) = -1 EBUSY (Device or resource busy) [pid 5063] mkdir("./358", 0777 [pid 8675] set_robust_list(0x55555745a660, 24 [pid 8671] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8675 [pid 8675] <... set_robust_list resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 8675] chdir("./362" [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8671] <... open resumed>) = 4 [pid 8671] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [ 324.690592][ T8674] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8675] <... chdir resumed>) = 0 [pid 8675] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8671] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8675] setpgid(0, 0 [pid 8671] <... mmap resumed>) = 0x20000000 [pid 8675] <... setpgid resumed>) = 0 [pid 8673] <... write resumed>) = 2097152 [pid 8671] ftruncate(4, 33587195 [pid 8675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8673] munmap(0x7f41e0600000, 138412032 [pid 8675] write(3, "1000", 4 [pid 8673] <... munmap resumed>) = 0 [pid 8671] <... ftruncate resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 8675] <... write resumed>) = 4 [pid 8675] close(3) = 0 [pid 8675] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8673] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8671] unlink("./bus" [pid 8675] memfd_create("syzkaller", 0 [pid 8673] <... openat resumed>) = 4 [pid 5065] close(3 [pid 8673] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5065] <... close resumed>) = 0 [pid 8671] <... unlink resumed>) = 0 [pid 8675] <... memfd_create resumed>) = 3 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8671] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 8676 attached [pid 8671] exit_group(0 [pid 8676] set_robust_list(0x55555745a660, 24 [pid 8671] <... exit_group resumed>) = ? [pid 8676] <... set_robust_list resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8676 [pid 8676] chdir("./355" [pid 8673] close(3 [pid 8676] <... chdir resumed>) = 0 [pid 8673] <... close resumed>) = 0 [pid 8676] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8673] close(4 [pid 8676] <... prctl resumed>) = 0 [pid 8673] <... close resumed>) = 0 [pid 8676] setpgid(0, 0 [pid 8673] mkdir("./file0", 0777 [pid 8676] <... setpgid resumed>) = 0 [pid 8673] <... mkdir resumed>) = 0 [pid 8676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8673] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8676] <... openat resumed>) = 3 [pid 8676] write(3, "1000", 4) = 4 [pid 8676] close(3 [pid 8671] +++ exited with 0 +++ [pid 5063] <... ioctl resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8671, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 8676] <... close resumed>) = 0 [pid 8676] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... restart_syscall resumed>) = 0 [pid 8676] <... symlink resumed>) = 0 [pid 8676] memfd_create("syzkaller", 0) = 3 [pid 5063] close(3 [pid 5062] umount2("./356", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8676] <... mmap resumed>) = 0x7f41e0600000 [ 324.789967][ T8673] loop0: detected capacity change from 0 to 4096 [pid 5062] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8675] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", ./strace-static-x86_64: Process 8677 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8677] set_robust_list(0x55555745a660, 24 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8677 [pid 5062] getdents64(3, [pid 8673] <... mount resumed>) = 0 [pid 8673] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8673] chdir("./file0") = 0 [pid 8673] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8673] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8677] <... set_robust_list resumed>) = 0 [pid 8676] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8677] chdir("./358" [pid 5062] umount2("./356/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8677] <... chdir resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./356/binderfs", [pid 8677] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8677] <... prctl resumed>) = 0 [pid 5062] unlink("./356/binderfs" [pid 8677] setpgid(0, 0) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5062] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8677] write(3, "1000", 4 [pid 8673] <... open resumed>) = 4 [pid 8677] <... write resumed>) = 4 [pid 8677] close(3) = 0 [pid 8677] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8673] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8673] <... open resumed>) = 5 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8677] memfd_create("syzkaller", 0 [ 324.861745][ T8678] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] newfstatat(AT_FDCWD, "./356/file0", [pid 8673] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8677] <... memfd_create resumed>) = 3 [pid 5062] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8677] <... mmap resumed>) = 0x7f41e0600000 [pid 8673] <... mmap resumed>) = 0x20000000 [pid 5062] openat(AT_FDCWD, "./356/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", [pid 8673] ftruncate(4, 33587195 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 8673] <... ftruncate resumed>) = 0 [pid 8673] unlink("./bus" [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./356/file0") = 0 [pid 5062] getdents64(3, [pid 8673] <... unlink resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8673] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] close(3 [pid 8675] <... write resumed>) = 2097152 [pid 8673] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./356" [pid 8673] exit_group(0) = ? [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./357", 0777) = 0 [pid 8675] munmap(0x7f41e0600000, 138412032 [pid 8677] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8676] <... write resumed>) = 2097152 [pid 8673] +++ exited with 0 +++ [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8673, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 8676] munmap(0x7f41e0600000, 138412032 [pid 8675] <... munmap resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8677] <... write resumed>) = 2097152 [pid 8676] <... munmap resumed>) = 0 [pid 8675] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8677] munmap(0x7f41e0600000, 138412032 [pid 8675] <... openat resumed>) = 4 [pid 5061] umount2("./363", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8676] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8676] <... openat resumed>) = 4 [pid 5061] openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8677] <... munmap resumed>) = 0 [pid 8676] ioctl(4, LOOP_SET_FD, 3 [pid 8675] ioctl(4, LOOP_SET_FD, 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8677] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8675] <... ioctl resumed>) = 0 [pid 5061] getdents64(3, [pid 8677] <... openat resumed>) = 4 [pid 8675] close(3 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8675] <... close resumed>) = 0 [pid 5061] umount2("./363/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8677] ioctl(4, LOOP_SET_FD, 3 [pid 8675] close(4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8675] <... close resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./363/binderfs", [pid 8677] <... ioctl resumed>) = 0 [pid 8675] mkdir("./file0", 0777 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8677] close(3 [pid 8675] <... mkdir resumed>) = 0 [pid 5061] unlink("./363/binderfs" [pid 8677] <... close resumed>) = 0 [pid 8675] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... unlink resumed>) = 0 [pid 8677] close(4 [pid 8676] <... ioctl resumed>) = 0 [pid 5061] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8677] <... close resumed>) = 0 [pid 8677] mkdir("./file0", 0777) = 0 [pid 8676] close(3) = 0 [pid 8676] close(4 [pid 8677] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8676] <... close resumed>) = 0 [pid 8676] mkdir("./file0", 0777) = 0 [ 324.997409][ T8675] loop3: detected capacity change from 0 to 4096 [ 324.997549][ T8676] loop4: detected capacity change from 0 to 4096 [ 325.007818][ T8677] loop2: detected capacity change from 0 to 4096 [pid 8676] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8675] <... mount resumed>) = 0 [pid 8675] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8676] <... mount resumed>) = 0 [pid 8675] <... openat resumed>) = 3 [pid 8676] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8675] chdir("./file0") = 0 [pid 8675] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8676] <... openat resumed>) = 3 [pid 8675] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8676] chdir("./file0") = 0 [pid 8676] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8676] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3 [pid 8675] <... open resumed>) = 4 [ 325.049250][ T8680] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.060189][ T8679] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8675] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8676] <... open resumed>) = 4 [pid 8675] <... open resumed>) = 5 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8676] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000./strace-static-x86_64: Process 8682 attached [pid 8675] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8682 [pid 8682] set_robust_list(0x55555745a660, 24 [pid 8676] <... open resumed>) = 5 [pid 8675] <... mmap resumed>) = 0x20000000 [pid 8682] <... set_robust_list resumed>) = 0 [pid 8682] chdir("./357" [pid 8675] ftruncate(4, 33587195 [pid 8682] <... chdir resumed>) = 0 [pid 8682] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8682] setpgid(0, 0) = 0 [pid 8682] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... umount2 resumed>) = 0 [pid 8682] <... openat resumed>) = 3 [pid 8682] write(3, "1000", 4) = 4 [pid 8682] close(3) = 0 [pid 8682] symlink("/dev/binderfs", "./binderfs" [pid 5061] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8682] <... symlink resumed>) = 0 [pid 8677] <... mount resumed>) = 0 [pid 8676] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8675] <... ftruncate resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8682] memfd_create("syzkaller", 0 [pid 8677] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8675] unlink("./bus" [pid 5061] newfstatat(AT_FDCWD, "./363/file0", [pid 8676] <... mmap resumed>) = 0x20000000 [pid 8677] <... openat resumed>) = 3 [pid 8682] <... memfd_create resumed>) = 3 [pid 8677] chdir("./file0" [pid 8682] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8677] <... chdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8682] <... mmap resumed>) = 0x7f41e0600000 [pid 8677] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8676] ftruncate(4, 33587195) = 0 [pid 8675] <... unlink resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8675] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5061] openat(AT_FDCWD, "./363/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8677] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... openat resumed>) = 4 [pid 8675] exit_group(0 [pid 8677] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8676] unlink("./bus" [pid 5061] newfstatat(4, "", [pid 8675] <... exit_group resumed>) = ? [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./363/file0") = 0 [pid 8676] <... unlink resumed>) = 0 [pid 8676] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] getdents64(3, [pid 8676] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8676] exit_group(0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8676] <... exit_group resumed>) = ? [pid 8675] +++ exited with 0 +++ [ 325.118995][ T8681] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] close(3 [pid 8676] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8675, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8676, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5061] <... close resumed>) = 0 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5061] rmdir("./363") = 0 [pid 5065] umount2("./355", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8677] <... open resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", [pid 5064] umount2("./362", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] mkdir("./364", 0777 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... mkdir resumed>) = 0 [pid 8677] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./355/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./355/binderfs", [pid 5064] newfstatat(3, "", [pid 8677] <... open resumed>) = 5 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8677] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] unlink("./355/binderfs" [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8677] <... mmap resumed>) = 0x20000000 [pid 5065] <... unlink resumed>) = 0 [pid 5064] getdents64(3, [pid 5065] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... openat resumed>) = 3 [pid 5064] umount2("./362/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8677] ftruncate(4, 33587195 [pid 5064] newfstatat(AT_FDCWD, "./362/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./362/binderfs") = 0 [pid 5064] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5065] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8677] <... ftruncate resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./355/file0", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8682] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] newfstatat(AT_FDCWD, "./362/file0", [pid 5065] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8677] unlink("./bus" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] openat(AT_FDCWD, "./355/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", [pid 5064] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8677] <... unlink resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(4, [pid 5064] openat(AT_FDCWD, "./362/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8677] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5064] <... openat resumed>) = 4 [pid 8677] exit_group(0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] newfstatat(4, "", [pid 8677] <... exit_group resumed>) = ? [pid 5065] getdents64(4, [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5065] close(4) = 0 [pid 5065] rmdir("./355/file0" [pid 5064] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] rmdir("./362/file0" [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5065] close(3 [pid 5064] getdents64(3, [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./355" [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] close(3 [pid 5065] mkdir("./356", 0777 [pid 5064] <... close resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5064] rmdir("./362" [pid 8677] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8677, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5064] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... restart_syscall resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5064] mkdir("./363", 0777 [pid 5063] umount2("./358", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./358/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./358/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./358/binderfs") = 0 [pid 5063] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5063] <... umount2 resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5063] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8682] <... write resumed>) = 2097152 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5061] close(3 [pid 8682] munmap(0x7f41e0600000, 138412032 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] newfstatat(AT_FDCWD, "./358/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8683 attached [pid 8682] <... munmap resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./358/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8682] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8682] <... openat resumed>) = 4 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8682] ioctl(4, LOOP_SET_FD, 3 [pid 8683] set_robust_list(0x55555745a660, 24 [pid 5063] getdents64(4, [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8683 [pid 8683] <... set_robust_list resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8683] chdir("./364" [pid 5063] close(4 [pid 8683] <... chdir resumed>) = 0 [pid 8683] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./358/file0" [pid 8683] <... prctl resumed>) = 0 [pid 8683] setpgid(0, 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8683] <... setpgid resumed>) = 0 [pid 8683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] getdents64(3, [pid 8682] <... ioctl resumed>) = 0 [pid 8683] <... openat resumed>) = 3 [pid 5065] <... ioctl resumed>) = 0 [pid 8682] close(3 [pid 5065] close(3 [pid 8682] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 8682] close(4 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8682] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8682] mkdir("./file0", 0777 [pid 5063] close(3 [pid 8683] write(3, "1000", 4 [pid 8682] <... mkdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8683] <... write resumed>) = 4 [pid 5063] rmdir("./358" [pid 8683] close(3 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8684 [pid 5063] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 8684 attached [pid 8682] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] mkdir("./359", 0777 [pid 8683] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 8683] symlink("/dev/binderfs", "./binderfs" [pid 8684] set_robust_list(0x55555745a660, 24 [pid 8683] <... symlink resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8684] <... set_robust_list resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 8684] chdir("./356") = 0 [pid 8684] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8684] setpgid(0, 0 [pid 8683] memfd_create("syzkaller", 0 [pid 8684] <... setpgid resumed>) = 0 [pid 8683] <... memfd_create resumed>) = 3 [pid 5064] <... ioctl resumed>) = 0 [pid 8684] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 325.316625][ T8682] loop1: detected capacity change from 0 to 4096 [pid 8684] write(3, "1000", 4) = 4 [pid 8684] close(3) = 0 [pid 8684] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8683] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8684] memfd_create("syzkaller", 0) = 3 [pid 5064] close(3 [pid 8683] <... mmap resumed>) = 0x7f41e0600000 [pid 8684] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... close resumed>) = 0 [pid 8684] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8685 attached [pid 8685] set_robust_list(0x55555745a660, 24) = 0 [pid 8685] chdir("./363" [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8685 [pid 8685] <... chdir resumed>) = 0 [pid 8685] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8685] setpgid(0, 0) = 0 [pid 8685] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8685] write(3, "1000", 4) = 4 [pid 8685] close(3) = 0 [pid 8685] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8685] memfd_create("syzkaller", 0) = 3 [pid 8685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8682] <... mount resumed>) = 0 [pid 8682] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8682] chdir("./file0") = 0 [pid 8682] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8682] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... ioctl resumed>) = 0 [ 325.408652][ T8686] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] close(3 [pid 8683] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... close resumed>) = 0 [pid 8682] <... open resumed>) = 4 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8687 attached [pid 8682] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8687] set_robust_list(0x55555745a660, 24 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8687 [pid 8687] <... set_robust_list resumed>) = 0 [pid 8682] <... open resumed>) = 5 [pid 8687] chdir("./359") = 0 [pid 8687] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8684] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8682] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8687] <... prctl resumed>) = 0 [pid 8687] setpgid(0, 0) = 0 [pid 8682] <... mmap resumed>) = 0x20000000 [pid 8687] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8682] ftruncate(4, 33587195 [pid 8687] <... openat resumed>) = 3 [pid 8687] write(3, "1000", 4) = 4 [pid 8687] close(3) = 0 [pid 8687] symlink("/dev/binderfs", "./binderfs" [pid 8682] <... ftruncate resumed>) = 0 [pid 8682] unlink("./bus" [pid 8687] <... symlink resumed>) = 0 [pid 8687] memfd_create("syzkaller", 0) = 3 [pid 8684] <... write resumed>) = 2097152 [pid 8687] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8684] munmap(0x7f41e0600000, 138412032 [pid 8687] <... mmap resumed>) = 0x7f41e0600000 [pid 8682] <... unlink resumed>) = 0 [pid 8682] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8684] <... munmap resumed>) = 0 [pid 8682] exit_group(0 [pid 8684] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8682] <... exit_group resumed>) = ? [pid 8684] ioctl(4, LOOP_SET_FD, 3 [pid 8683] <... write resumed>) = 2097152 [pid 8687] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8685] <... write resumed>) = 2097152 [pid 8684] <... ioctl resumed>) = 0 [pid 8682] +++ exited with 0 +++ [pid 8685] munmap(0x7f41e0600000, 138412032 [pid 8684] close(3 [pid 8683] munmap(0x7f41e0600000, 138412032 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8682, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 8685] <... munmap resumed>) = 0 [pid 8684] <... close resumed>) = 0 [pid 8683] <... munmap resumed>) = 0 [pid 5062] umount2("./357", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8684] close(4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8684] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8684] mkdir("./file0", 0777 [pid 8683] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] newfstatat(3, "", [pid 8685] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8684] <... mkdir resumed>) = 0 [pid 8687] <... write resumed>) = 2097152 [pid 8687] munmap(0x7f41e0600000, 138412032 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./357/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8687] <... munmap resumed>) = 0 [ 325.543494][ T8684] loop4: detected capacity change from 0 to 4096 [pid 8687] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8685] <... openat resumed>) = 4 [pid 8684] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8683] <... openat resumed>) = 4 [pid 5062] newfstatat(AT_FDCWD, "./357/binderfs", [pid 8687] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./357/binderfs" [pid 8685] ioctl(4, LOOP_SET_FD, 3 [pid 8687] <... ioctl resumed>) = 0 [pid 8683] ioctl(4, LOOP_SET_FD, 3 [pid 8687] close(3 [pid 8683] <... ioctl resumed>) = 0 [pid 8687] <... close resumed>) = 0 [pid 8683] close(3 [pid 5062] <... unlink resumed>) = 0 [pid 8687] close(4) = 0 [pid 8683] <... close resumed>) = 0 [pid 5062] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8687] mkdir("./file0", 0777 [pid 8683] close(4 [pid 8687] <... mkdir resumed>) = 0 [pid 8683] <... close resumed>) = 0 [pid 8683] mkdir("./file0", 0777) = 0 [pid 8687] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8683] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8685] <... ioctl resumed>) = 0 [pid 8685] close(3) = 0 [pid 8685] close(4) = 0 [pid 8685] mkdir("./file0", 0777) = 0 [ 325.612755][ T8687] loop2: detected capacity change from 0 to 4096 [ 325.620605][ T8683] loop0: detected capacity change from 0 to 4096 [ 325.628684][ T8685] loop3: detected capacity change from 0 to 4096 [pid 8685] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8683] <... mount resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8683] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8687] <... mount resumed>) = 0 [pid 8685] <... mount resumed>) = 0 [pid 8684] <... mount resumed>) = 0 [pid 8683] <... openat resumed>) = 3 [pid 5062] newfstatat(AT_FDCWD, "./357/file0", [pid 8683] chdir("./file0" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8687] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8685] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8684] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8687] <... openat resumed>) = 3 [pid 8685] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8687] chdir("./file0" [pid 8685] chdir("./file0" [pid 8684] <... openat resumed>) = 3 [pid 8683] <... chdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./357/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8687] <... chdir resumed>) = 0 [pid 8685] <... chdir resumed>) = 0 [pid 8684] chdir("./file0" [pid 8683] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... openat resumed>) = 4 [pid 8687] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8685] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8684] <... chdir resumed>) = 0 [pid 8683] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] newfstatat(4, "", [pid 8685] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8684] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8683] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8687] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8684] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8687] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8685] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8684] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [ 325.687607][ T8688] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.698883][ T8689] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.699112][ T8690] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.721321][ T8691] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] close(4) = 0 [pid 5062] rmdir("./357/file0") = 0 [pid 5062] getdents64(3, [pid 8687] <... open resumed>) = 4 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8687] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8683] <... open resumed>) = 4 [pid 5062] close(3 [pid 8687] <... open resumed>) = 5 [pid 8683] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... close resumed>) = 0 [pid 8687] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8684] <... open resumed>) = 4 [pid 5062] rmdir("./357") = 0 [pid 5062] mkdir("./358", 0777 [pid 8683] <... open resumed>) = 5 [pid 5062] <... mkdir resumed>) = 0 [pid 8684] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8683] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8684] <... open resumed>) = 5 [pid 8683] <... mmap resumed>) = 0x20000000 [pid 8683] ftruncate(4, 33587195 [pid 8687] <... mmap resumed>) = 0x20000000 [pid 8684] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8683] <... ftruncate resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8683] unlink("./bus" [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8685] <... open resumed>) = 4 [pid 8684] <... mmap resumed>) = 0x20000000 [pid 8687] ftruncate(4, 33587195 [pid 8685] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8683] <... unlink resumed>) = 0 [pid 8683] sendfile(-1, -1, NULL, 281474978811909 [pid 8685] <... open resumed>) = 5 [pid 8684] ftruncate(4, 33587195 [pid 8683] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8683] exit_group(0) = ? [pid 8685] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8684] <... ftruncate resumed>) = 0 [pid 8687] <... ftruncate resumed>) = 0 [pid 8687] unlink("./bus" [pid 8685] <... mmap resumed>) = 0x20000000 [pid 8683] +++ exited with 0 +++ [pid 8685] ftruncate(4, 33587195 [pid 8684] unlink("./bus" [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8683, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8687] <... unlink resumed>) = 0 [pid 8685] <... ftruncate resumed>) = 0 [pid 8687] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] umount2("./364", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8687] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8687] exit_group(0 [pid 8685] unlink("./bus" [pid 8684] <... unlink resumed>) = 0 [pid 8687] <... exit_group resumed>) = ? [pid 5061] openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8684] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] <... openat resumed>) = 3 [pid 8684] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8684] exit_group(0 [pid 5061] newfstatat(3, "", [pid 8684] <... exit_group resumed>) = ? [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 8687] +++ exited with 0 +++ [pid 8685] <... unlink resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./364/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8685] sendfile(-1, -1, NULL, 281474978811909 [pid 8684] +++ exited with 0 +++ [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8684, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 8685] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8687, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5061] newfstatat(AT_FDCWD, "./364/binderfs", [pid 5063] umount2("./359", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8685] exit_group(0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./356", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8685] <... exit_group resumed>) = ? [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5061] unlink("./364/binderfs" [pid 5065] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] newfstatat(3, "", [pid 5065] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] newfstatat(3, "", [pid 5063] getdents64(3, [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] getdents64(3, [pid 5063] umount2("./359/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] newfstatat(AT_FDCWD, "./359/binderfs", [pid 5065] umount2("./356/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] unlink("./359/binderfs" [pid 5065] newfstatat(AT_FDCWD, "./356/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8685] +++ exited with 0 +++ [pid 5065] unlink("./356/binderfs" [pid 5063] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = 0 [pid 5062] close(3 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8685, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5065] <... unlink resumed>) = 0 [pid 5064] umount2("./363", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... openat resumed>) = 3 [pid 5061] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] newfstatat(3, "", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(AT_FDCWD, "./364/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] getdents64(3, [pid 5063] <... umount2 resumed>) = 0 [pid 5061] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./363/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8692 [pid 5061] openat(AT_FDCWD, "./364/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] newfstatat(AT_FDCWD, "./363/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5064] unlink("./363/binderfs"./strace-static-x86_64: Process 8692 attached ) = 0 [pid 5061] newfstatat(4, "", [pid 5064] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8692] set_robust_list(0x55555745a660, 24 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8692] <... set_robust_list resumed>) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8692] chdir("./358" [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./364/file0") = 0 [pid 8692] <... chdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(3, [pid 8692] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8692] <... prctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8692] setpgid(0, 0 [pid 5061] close(3 [pid 8692] <... setpgid resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./356/file0", [pid 5064] newfstatat(AT_FDCWD, "./363/file0", [pid 5061] <... close resumed>) = 0 [pid 8692] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] newfstatat(AT_FDCWD, "./359/file0", [pid 8692] <... openat resumed>) = 3 [pid 5065] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./364" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8692] write(3, "1000", 4 [pid 5065] openat(AT_FDCWD, "./356/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8692] <... write resumed>) = 4 [pid 5065] <... openat resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./363/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... rmdir resumed>) = 0 [pid 8692] close(3 [pid 5065] newfstatat(4, "", [pid 5064] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8692] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8692] symlink("/dev/binderfs", "./binderfs" [pid 5065] getdents64(4, [pid 5064] newfstatat(4, "", [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] openat(AT_FDCWD, "./359/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] mkdir("./365", 0777 [pid 8692] <... symlink resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 8692] memfd_create("syzkaller", 0 [pid 5065] getdents64(4, [pid 5064] getdents64(4, [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] close(4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 8692] <... memfd_create resumed>) = 3 [pid 8692] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... close resumed>) = 0 [pid 5064] getdents64(4, [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8692] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] rmdir("./356/file0" [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(4, [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... rmdir resumed>) = 0 [pid 5064] close(4 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] close(4) = 0 [pid 5064] rmdir("./363/file0" [pid 5063] rmdir("./359/file0" [pid 5065] getdents64(3, [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 8692] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... close resumed>) = 0 [pid 5064] getdents64(3, [pid 5063] getdents64(3, [pid 5061] <... openat resumed>) = 3 [pid 5065] rmdir("./356" [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5065] <... rmdir resumed>) = 0 [pid 5064] close(3 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] mkdir("./357", 0777 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./363" [pid 5063] close(3) = 0 [pid 5063] rmdir("./359" [pid 5064] <... rmdir resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5064] mkdir("./364", 0777 [pid 5063] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] mkdir("./360", 0777 [pid 5065] <... openat resumed>) = 3 [pid 5064] <... mkdir resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8692] <... write resumed>) = 2097152 [pid 5064] <... openat resumed>) = 3 [pid 8692] munmap(0x7f41e0600000, 138412032 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8692] <... munmap resumed>) = 0 [pid 8692] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8692] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8692] close(3) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8692] close(4 [pid 5061] close(3 [pid 8692] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8692] mkdir("./file0", 0777 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8692] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8693 attached [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8693 [pid 8693] set_robust_list(0x55555745a660, 24) = 0 [pid 8692] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 326.000552][ T8692] loop1: detected capacity change from 0 to 4096 [pid 8693] chdir("./365" [pid 5065] <... ioctl resumed>) = 0 [pid 8693] <... chdir resumed>) = 0 [pid 8693] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8693] setpgid(0, 0) = 0 [pid 8693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] close(3 [pid 8693] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8693] write(3, "1000", 4 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] close(3 [pid 8693] <... write resumed>) = 4 [pid 5064] <... close resumed>) = 0 ./strace-static-x86_64: Process 8694 attached [pid 8693] close(3 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8693] <... close resumed>) = 0 [pid 8694] set_robust_list(0x55555745a660, 24./strace-static-x86_64: Process 8696 attached [pid 8693] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8694 [pid 5063] close(3 [pid 8696] set_robust_list(0x55555745a660, 24 [pid 8694] <... set_robust_list resumed>) = 0 [pid 8693] <... symlink resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8696 [pid 5063] <... close resumed>) = 0 [pid 8696] <... set_robust_list resumed>) = 0 [pid 8694] chdir("./357" [pid 8693] memfd_create("syzkaller", 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8696] chdir("./364" [pid 8693] <... memfd_create resumed>) = 3 [pid 8694] <... chdir resumed>) = 0 [pid 8696] <... chdir resumed>) = 0 [pid 8696] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8696] setpgid(0, 0 [pid 8693] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8696] <... setpgid resumed>) = 0 [pid 8693] <... mmap resumed>) = 0x7f41e0600000 ./strace-static-x86_64: Process 8697 attached [pid 8696] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8694] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8692] <... mount resumed>) = 0 [pid 8692] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8694] <... prctl resumed>) = 0 [pid 8692] <... openat resumed>) = 3 [pid 8692] chdir("./file0" [pid 8697] set_robust_list(0x55555745a660, 24 [pid 8692] <... chdir resumed>) = 0 [pid 8697] <... set_robust_list resumed>) = 0 [pid 8692] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8697] chdir("./360" [pid 8694] setpgid(0, 0 [pid 8692] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8694] <... setpgid resumed>) = 0 [pid 8692] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8696] <... openat resumed>) = 3 [pid 8694] <... openat resumed>) = 3 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8697 [pid 8697] <... chdir resumed>) = 0 [pid 8696] write(3, "1000", 4 [pid 8694] write(3, "1000", 4 [pid 8692] <... open resumed>) = 4 [pid 8696] <... write resumed>) = 4 [pid 8694] <... write resumed>) = 4 [pid 8696] close(3) = 0 [pid 8694] close(3 [pid 8696] symlink("/dev/binderfs", "./binderfs" [pid 8694] <... close resumed>) = 0 [pid 8697] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8696] <... symlink resumed>) = 0 [pid 8694] symlink("/dev/binderfs", "./binderfs" [pid 8692] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8697] <... prctl resumed>) = 0 [pid 8696] memfd_create("syzkaller", 0 [pid 8694] <... symlink resumed>) = 0 [pid 8692] <... open resumed>) = 5 [pid 8697] setpgid(0, 0 [pid 8696] <... memfd_create resumed>) = 3 [pid 8694] memfd_create("syzkaller", 0 [pid 8692] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8697] <... setpgid resumed>) = 0 [pid 8694] <... memfd_create resumed>) = 3 [pid 8692] <... mmap resumed>) = 0x20000000 [ 326.098450][ T8695] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8696] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8694] <... mmap resumed>) = 0x7f41e0600000 [pid 8696] <... mmap resumed>) = 0x7f41e0600000 [pid 8697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8692] ftruncate(4, 33587195 [pid 8697] <... openat resumed>) = 3 [pid 8697] write(3, "1000", 4 [pid 8692] <... ftruncate resumed>) = 0 [pid 8697] <... write resumed>) = 4 [pid 8692] unlink("./bus" [pid 8697] close(3 [pid 8693] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8697] <... close resumed>) = 0 [pid 8697] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8692] <... unlink resumed>) = 0 [pid 8692] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8692] exit_group(0) = ? [pid 8697] memfd_create("syzkaller", 0) = 3 [pid 8697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8694] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8692] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8692, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8696] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] umount2("./358", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8693] <... write resumed>) = 2097152 [pid 5062] umount2("./358/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8693] munmap(0x7f41e0600000, 138412032 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./358/binderfs", [pid 8693] <... munmap resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./358/binderfs") = 0 [pid 5062] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8693] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8693] ioctl(4, LOOP_SET_FD, 3 [pid 8697] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8693] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8694] <... write resumed>) = 2097152 [pid 8693] close(3 [pid 5062] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8693] <... close resumed>) = 0 [pid 8693] close(4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8693] <... close resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./358/file0", [pid 8693] mkdir("./file0", 0777) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8693] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8694] munmap(0x7f41e0600000, 138412032 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8694] <... munmap resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./358/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8694] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] close(4 [pid 8694] <... openat resumed>) = 4 [ 326.257258][ T8693] loop0: detected capacity change from 0 to 4096 [pid 5062] <... close resumed>) = 0 [pid 8694] ioctl(4, LOOP_SET_FD, 3 [pid 5062] rmdir("./358/file0" [pid 8694] <... ioctl resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 8697] <... write resumed>) = 2097152 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8697] munmap(0x7f41e0600000, 138412032 [pid 8694] close(3 [pid 5062] close(3) = 0 [pid 8697] <... munmap resumed>) = 0 [pid 8694] <... close resumed>) = 0 [pid 5062] rmdir("./358" [pid 8697] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8696] <... write resumed>) = 2097152 [pid 8694] close(4 [pid 8693] <... mount resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8694] <... close resumed>) = 0 [pid 8693] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8694] mkdir("./file0", 0777 [pid 8693] <... openat resumed>) = 3 [pid 5062] mkdir("./359", 0777 [pid 8697] <... openat resumed>) = 4 [pid 8696] munmap(0x7f41e0600000, 138412032 [pid 8694] <... mkdir resumed>) = 0 [pid 8693] chdir("./file0" [pid 5062] <... mkdir resumed>) = 0 [pid 8696] <... munmap resumed>) = 0 [pid 8693] <... chdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8697] ioctl(4, LOOP_SET_FD, 3 [pid 8693] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... openat resumed>) = 3 [pid 8694] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8693] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8696] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8693] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8696] <... openat resumed>) = 4 [ 326.319273][ T8694] loop4: detected capacity change from 0 to 4096 [ 326.336540][ T8698] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 326.357362][ T8697] loop2: detected capacity change from 0 to 4096 [pid 8696] ioctl(4, LOOP_SET_FD, 3 [pid 8697] <... ioctl resumed>) = 0 [pid 8696] <... ioctl resumed>) = 0 [pid 8697] close(3 [pid 8696] close(3 [pid 8697] <... close resumed>) = 0 [pid 8696] <... close resumed>) = 0 [pid 8697] close(4 [pid 8696] close(4 [pid 8697] <... close resumed>) = 0 [pid 8696] <... close resumed>) = 0 [pid 8697] mkdir("./file0", 0777) = 0 [pid 8696] mkdir("./file0", 0777) = 0 [pid 8697] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8696] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8693] <... open resumed>) = 4 [ 326.367755][ T8696] loop3: detected capacity change from 0 to 4096 [pid 8693] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8693] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8694] <... mount resumed>) = 0 [pid 8694] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8694] chdir("./file0" [pid 8693] <... ftruncate resumed>) = 0 [pid 8694] <... chdir resumed>) = 0 [pid 8693] unlink("./bus" [pid 8694] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... ioctl resumed>) = 0 [pid 8694] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 326.406351][ T8699] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] close(3 [pid 8694] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8697] <... mount resumed>) = 0 [pid 8693] <... unlink resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8697] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8702 [pid 8697] chdir("./file0") = 0 [pid 8697] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 8702 attached ) = -1 EBUSY (Device or resource busy) [pid 8697] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8696] <... mount resumed>) = 0 [pid 8693] sendfile(-1, -1, NULL, 281474978811909 [pid 8702] set_robust_list(0x55555745a660, 24 [pid 8696] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8693] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8696] <... openat resumed>) = 3 [pid 8696] chdir("./file0") = 0 [pid 8693] exit_group(0 [pid 8696] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8693] <... exit_group resumed>) = ? [pid 8696] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8697] <... open resumed>) = 4 [pid 8696] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8697] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8694] <... open resumed>) = 4 [pid 8694] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8697] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8702] chdir("./359" [pid 8697] ftruncate(4, 33587195 [pid 8694] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8702] <... chdir resumed>) = 0 [pid 8694] <... mmap resumed>) = 0x20000000 [pid 8702] prctl(PR_SET_PDEATHSIG, SIGKILL [ 326.452918][ T8700] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 326.454317][ T8701] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8696] <... open resumed>) = 4 [pid 8702] <... prctl resumed>) = 0 [pid 8693] +++ exited with 0 +++ [pid 8702] setpgid(0, 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8693, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 8702] <... setpgid resumed>) = 0 [pid 8696] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 8694] ftruncate(4, 33587195 [pid 5061] <... restart_syscall resumed>) = 0 [pid 8702] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8696] <... open resumed>) = 5 [pid 8702] <... openat resumed>) = 3 [pid 8702] write(3, "1000", 4 [pid 8696] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8694] <... ftruncate resumed>) = 0 [pid 8702] <... write resumed>) = 4 [pid 8696] <... mmap resumed>) = 0x20000000 [pid 5061] umount2("./365", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8702] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8702] <... close resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8702] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5061] <... openat resumed>) = 3 [pid 8694] unlink("./bus" [pid 5061] newfstatat(3, "", [pid 8702] memfd_create("syzkaller", 0 [pid 8696] ftruncate(4, 33587195 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 8702] <... memfd_create resumed>) = 3 [pid 8702] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8697] <... ftruncate resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8697] unlink("./bus" [pid 8694] <... unlink resumed>) = 0 [pid 5061] umount2("./365/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8694] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] newfstatat(AT_FDCWD, "./365/binderfs", [pid 8694] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8694] exit_group(0 [pid 5061] unlink("./365/binderfs") = 0 [pid 8696] <... ftruncate resumed>) = 0 [pid 8696] unlink("./bus" [pid 8694] <... exit_group resumed>) = ? [pid 5061] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8702] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8697] <... unlink resumed>) = 0 [pid 8697] sendfile(-1, -1, NULL, 281474978811909 [pid 8694] +++ exited with 0 +++ [pid 8697] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8697] exit_group(0 [pid 8696] <... unlink resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8694, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 8697] <... exit_group resumed>) = ? [pid 8696] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8696] exit_group(0 [pid 5065] umount2("./357", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8696] <... exit_group resumed>) = ? [pid 5065] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", [pid 5061] <... umount2 resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./357/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./357/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./357/binderfs") = 0 [pid 5065] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./365/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8697] +++ exited with 0 +++ [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8697, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] openat(AT_FDCWD, "./365/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8696] +++ exited with 0 +++ [pid 5063] umount2("./360", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(4, "", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8696, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5063] openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(4, [pid 5064] <... restart_syscall resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 5064] umount2("./364", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(3, "", [pid 5064] openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./360/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] newfstatat(3, "", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] close(4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] newfstatat(AT_FDCWD, "./360/binderfs", [pid 5061] <... close resumed>) = 0 [pid 5064] getdents64(3, [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] rmdir("./365/file0" [pid 5063] unlink("./360/binderfs" [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./364/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... unlink resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./364/binderfs", [pid 5063] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(3, [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./364/binderfs" [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./365" [pid 8702] <... write resumed>) = 2097152 [pid 5061] <... rmdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 8702] munmap(0x7f41e0600000, 138412032 [pid 5065] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] mkdir("./366", 0777 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... mkdir resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./357/file0", [pid 5063] <... umount2 resumed>) = 0 [pid 8702] <... munmap resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8702] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 3 [pid 8702] <... openat resumed>) = 4 [pid 5065] openat(AT_FDCWD, "./357/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] newfstatat(AT_FDCWD, "./364/file0", [pid 5063] newfstatat(AT_FDCWD, "./360/file0", [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5065] <... openat resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8702] ioctl(4, LOOP_SET_FD, 3 [pid 5065] newfstatat(4, "", [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(4, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8702] <... ioctl resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] openat(AT_FDCWD, "./364/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./360/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8702] close(3 [pid 5065] getdents64(4, [pid 5064] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 4 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8702] <... close resumed>) = 0 [pid 5065] close(4 [pid 5064] newfstatat(4, "", [pid 5063] newfstatat(4, "", [pid 8702] close(4) = 0 [pid 8702] mkdir("./file0", 0777 [pid 5065] <... close resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8702] <... mkdir resumed>) = 0 [pid 5065] rmdir("./357/file0" [pid 5064] getdents64(4, [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./360/file0" [pid 5064] getdents64(4, [pid 5063] <... rmdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 8702] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] getdents64(3, [pid 5063] getdents64(3, [pid 5061] <... ioctl resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] rmdir("./364/file0" [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, [pid 5063] close(3 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] <... close resumed>) = 0 [pid 5064] close(3 [pid 5063] rmdir("./360") = 0 [pid 5061] close(3 [pid 5065] close(3 [pid 5064] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] rmdir("./364" [pid 5061] <... close resumed>) = 0 [pid 5065] rmdir("./357" [pid 5064] <... rmdir resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... rmdir resumed>) = 0 [pid 5063] mkdir("./361", 0777) = 0 [pid 5065] mkdir("./358", 0777./strace-static-x86_64: Process 8703 attached ) = 0 [pid 5064] mkdir("./365", 0777 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8703] set_robust_list(0x55555745a660, 24 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8703 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8703] <... set_robust_list resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 326.654263][ T8702] loop1: detected capacity change from 0 to 4096 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8703] chdir("./366" [pid 5065] <... openat resumed>) = 3 [pid 5064] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8703] <... chdir resumed>) = 0 [pid 8703] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8703] setpgid(0, 0) = 0 [pid 8703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8703] write(3, "1000", 4 [pid 8702] <... mount resumed>) = 0 [pid 8702] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8702] chdir("./file0") = 0 [pid 8703] <... write resumed>) = 4 [pid 8702] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8703] close(3 [pid 8702] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8702] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8703] <... close resumed>) = 0 [pid 8703] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8703] memfd_create("syzkaller", 0) = 3 [pid 8703] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8702] <... open resumed>) = 4 [ 326.722449][ T8704] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8702] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8702] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8703] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8702] ftruncate(4, 33587195) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8702] unlink("./bus" [pid 5065] close(3 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8702] <... unlink resumed>) = 0 [pid 8702] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8702] exit_group(0 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] close(3 [pid 8702] <... exit_group resumed>) = ? [pid 5063] <... close resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8705 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8705 attached [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8706 ./strace-static-x86_64: Process 8707 attached [pid 8705] set_robust_list(0x55555745a660, 24./strace-static-x86_64: Process 8706 attached ) = 0 [pid 8706] set_robust_list(0x55555745a660, 24 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8707 [pid 8707] set_robust_list(0x55555745a660, 24 [pid 8706] <... set_robust_list resumed>) = 0 [pid 8705] chdir("./365" [pid 8706] chdir("./358") = 0 [pid 8707] <... set_robust_list resumed>) = 0 [pid 8706] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8707] chdir("./361" [pid 8705] <... chdir resumed>) = 0 [pid 8707] <... chdir resumed>) = 0 [pid 8707] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8706] setpgid(0, 0 [pid 8705] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8707] setpgid(0, 0 [pid 8706] <... setpgid resumed>) = 0 [pid 8705] <... prctl resumed>) = 0 [pid 8707] <... setpgid resumed>) = 0 [pid 8706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8705] setpgid(0, 0 [pid 8707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8706] <... openat resumed>) = 3 [pid 8705] <... setpgid resumed>) = 0 [pid 8702] +++ exited with 0 +++ [pid 8706] write(3, "1000", 4 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8702, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8707] <... openat resumed>) = 3 [pid 8706] <... write resumed>) = 4 [pid 8706] close(3 [pid 8707] write(3, "1000", 4 [pid 8706] <... close resumed>) = 0 [pid 8705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8707] <... write resumed>) = 4 [pid 8706] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8707] close(3 [pid 8705] <... openat resumed>) = 3 [pid 8707] <... close resumed>) = 0 [pid 8705] write(3, "1000", 4 [pid 8707] symlink("/dev/binderfs", "./binderfs" [pid 8706] memfd_create("syzkaller", 0 [pid 5062] umount2("./359", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8707] <... symlink resumed>) = 0 [pid 8706] <... memfd_create resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8706] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8706] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 8707] memfd_create("syzkaller", 0 [pid 8705] <... write resumed>) = 4 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8707] <... memfd_create resumed>) = 3 [pid 8705] close(3 [pid 5062] umount2("./359/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8707] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8705] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./359/binderfs", [pid 8705] symlink("/dev/binderfs", "./binderfs" [pid 8707] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./359/binderfs") = 0 [pid 8705] <... symlink resumed>) = 0 [pid 5062] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8705] memfd_create("syzkaller", 0 [pid 8703] <... write resumed>) = 2097152 [pid 8705] <... memfd_create resumed>) = 3 [pid 8705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8703] munmap(0x7f41e0600000, 138412032 [pid 8706] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8703] <... munmap resumed>) = 0 [pid 8707] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... umount2 resumed>) = 0 [pid 8703] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8703] <... openat resumed>) = 4 [pid 8703] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8703] <... ioctl resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./359/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./359/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", [pid 8705] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 8703] close(3 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8703] <... close resumed>) = 0 [pid 5062] getdents64(4, [pid 8703] close(4 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 8703] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8703] mkdir("./file0", 0777 [pid 5062] rmdir("./359/file0" [pid 8703] <... mkdir resumed>) = 0 [pid 8703] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8706] <... write resumed>) = 2097152 [pid 5062] close(3) = 0 [ 326.949434][ T8703] loop0: detected capacity change from 0 to 4096 [pid 5062] rmdir("./359") = 0 [pid 5062] mkdir("./360", 0777 [pid 8706] munmap(0x7f41e0600000, 138412032) = 0 [pid 8706] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8707] <... write resumed>) = 2097152 [pid 8706] <... openat resumed>) = 4 [pid 5062] <... mkdir resumed>) = 0 [pid 8706] ioctl(4, LOOP_SET_FD, 3 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8707] munmap(0x7f41e0600000, 138412032 [pid 8705] <... write resumed>) = 2097152 [pid 8706] <... ioctl resumed>) = 0 [pid 8707] <... munmap resumed>) = 0 [pid 8705] munmap(0x7f41e0600000, 138412032 [pid 8703] <... mount resumed>) = 0 [pid 8706] close(3 [pid 8703] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8707] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8706] <... close resumed>) = 0 [pid 8703] <... openat resumed>) = 3 [pid 8707] <... openat resumed>) = 4 [pid 8706] close(4) = 0 [pid 8703] chdir("./file0") = 0 [pid 8706] mkdir("./file0", 0777 [pid 8703] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8707] ioctl(4, LOOP_SET_FD, 3 [pid 8706] <... mkdir resumed>) = 0 [pid 8705] <... munmap resumed>) = 0 [pid 8703] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8703] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8706] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8705] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 327.019105][ T8706] loop4: detected capacity change from 0 to 4096 [ 327.029248][ T8708] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.048162][ T8707] loop2: detected capacity change from 0 to 4096 [pid 8705] ioctl(4, LOOP_SET_FD, 3 [pid 8707] <... ioctl resumed>) = 0 [pid 8707] close(3 [pid 8705] <... ioctl resumed>) = 0 [pid 8707] <... close resumed>) = 0 [pid 8705] close(3 [pid 8707] close(4 [pid 8705] <... close resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8705] close(4 [pid 8707] <... close resumed>) = 0 [pid 8705] <... close resumed>) = 0 [pid 8705] mkdir("./file0", 0777) = 0 [pid 8703] <... open resumed>) = 4 [pid 5062] close(3 [pid 8707] mkdir("./file0", 0777 [pid 8705] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... close resumed>) = 0 [pid 8703] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8707] <... mkdir resumed>) = 0 [pid 8703] <... open resumed>) = 5 [pid 8706] <... mount resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8703] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8707] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, ""./strace-static-x86_64: Process 8710 attached [pid 8706] <... openat resumed>) = 3 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8710 [pid 8703] ftruncate(4, 33587195 [pid 8706] chdir("./file0" [pid 8710] set_robust_list(0x55555745a660, 24 [pid 8706] <... chdir resumed>) = 0 [pid 8710] <... set_robust_list resumed>) = 0 [pid 8706] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8710] chdir("./360" [pid 8706] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8706] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8710] <... chdir resumed>) = 0 [pid 8710] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8710] setpgid(0, 0) = 0 [pid 8710] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8703] <... ftruncate resumed>) = 0 [pid 8710] <... openat resumed>) = 3 [pid 8703] unlink("./bus" [pid 8710] write(3, "1000", 4) = 4 [pid 8710] close(3) = 0 [pid 8710] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8703] <... unlink resumed>) = 0 [pid 8703] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8703] exit_group(0) = ? [ 327.072433][ T8705] loop3: detected capacity change from 0 to 4096 [ 327.102879][ T8709] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8710] memfd_create("syzkaller", 0) = 3 [pid 8710] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8703] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8703, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=2 /* 0.02 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./366", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8710] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 8707] <... mount resumed>) = 0 [pid 8706] <... open resumed>) = 4 [pid 8705] <... mount resumed>) = 0 [pid 8705] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8706] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8705] <... openat resumed>) = 3 [pid 8707] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8706] <... open resumed>) = 5 [pid 8705] chdir("./file0" [pid 8706] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8707] chdir("./file0") = 0 [pid 8707] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8707] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8706] <... mmap resumed>) = 0x20000000 [pid 8705] <... chdir resumed>) = 0 [pid 8705] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8706] ftruncate(4, 33587195 [pid 8705] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./366/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./366/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8707] <... open resumed>) = 4 [pid 8705] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] unlink("./366/binderfs" [pid 8707] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... unlink resumed>) = 0 [pid 8707] <... open resumed>) = 5 [pid 8706] <... ftruncate resumed>) = 0 [pid 5061] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8707] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8707] ftruncate(4, 33587195 [pid 8710] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8707] <... ftruncate resumed>) = 0 [pid 8706] <... unlink resumed>) = 0 [pid 8706] sendfile(-1, -1, NULL, 281474978811909 [pid 8707] unlink("./bus" [pid 8706] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8705] <... open resumed>) = 4 [ 327.156191][ T8711] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.178506][ T8712] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8706] exit_group(0 [pid 8705] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8706] <... exit_group resumed>) = ? [pid 8705] <... open resumed>) = 5 [pid 8707] <... unlink resumed>) = 0 [pid 8707] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8707] exit_group(0) = ? [pid 8705] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8706] +++ exited with 0 +++ [pid 8705] <... ftruncate resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8706, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 8707] +++ exited with 0 +++ [pid 5061] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./358", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8707, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5065] <... openat resumed>) = 3 [pid 5063] <... restart_syscall resumed>) = 0 [pid 8705] unlink("./bus" [pid 5065] newfstatat(3, "", [pid 5061] newfstatat(AT_FDCWD, "./366/file0", [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 5063] umount2("./361", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./358/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./358/binderfs", [pid 5063] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "./366/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] newfstatat(3, "", [pid 8705] <... unlink resumed>) = 0 [pid 5065] unlink("./358/binderfs" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5065] <... unlink resumed>) = 0 [pid 5063] getdents64(3, [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8705] sendfile(-1, -1, NULL, 281474978811909 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8705] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] getdents64(4, [pid 8705] exit_group(0 [pid 5065] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./361/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8705] <... exit_group resumed>) = ? [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] newfstatat(AT_FDCWD, "./361/binderfs", [pid 5061] close(4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5063] unlink("./361/binderfs" [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./366/file0" [pid 5063] <... unlink resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 5063] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./366" [pid 5065] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... rmdir resumed>) = 0 [pid 8705] +++ exited with 0 +++ [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] mkdir("./367", 0777 [pid 5065] newfstatat(AT_FDCWD, "./358/file0", [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8705, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=11 /* 0.11 s */} --- [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5065] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... restart_syscall resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... mkdir resumed>) = 0 [pid 8710] <... write resumed>) = 2097152 [pid 5065] openat(AT_FDCWD, "./358/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8710] munmap(0x7f41e0600000, 138412032 [pid 5061] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 4 [pid 5064] umount2("./365", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8710] <... munmap resumed>) = 0 [pid 5065] newfstatat(4, "", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8710] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = 0 [pid 8710] <... openat resumed>) = 4 [pid 5065] getdents64(4, [pid 5064] <... openat resumed>) = 3 [pid 5063] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8710] ioctl(4, LOOP_SET_FD, 3 [pid 5064] newfstatat(3, "", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] close(4) = 0 [pid 5065] rmdir("./358/file0" [pid 5064] umount2("./365/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./365/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8710] <... ioctl resumed>) = 0 [pid 5065] getdents64(3, [pid 5063] newfstatat(AT_FDCWD, "./361/file0", [pid 8710] close(3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] unlink("./365/binderfs" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8710] <... close resumed>) = 0 [pid 5065] close(3 [pid 5064] <... unlink resumed>) = 0 [pid 8710] close(4 [pid 5064] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./358" [pid 5063] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8710] <... close resumed>) = 0 [pid 8710] mkdir("./file0", 0777 [pid 5065] <... rmdir resumed>) = 0 [pid 8710] <... mkdir resumed>) = 0 [pid 5065] mkdir("./359", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8710] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./361/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... openat resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 5063] newfstatat(4, "", [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./361/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./361") = 0 [pid 5064] <... umount2 resumed>) = 0 [ 327.322128][ T8710] loop1: detected capacity change from 0 to 4096 [pid 5064] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] mkdir("./362", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5064] newfstatat(AT_FDCWD, "./365/file0", [pid 8710] <... mount resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5064] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8710] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5064] openat(AT_FDCWD, "./365/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8710] chdir("./file0" [pid 5064] <... openat resumed>) = 4 [pid 5064] newfstatat(4, "", [pid 8710] <... chdir resumed>) = 0 [ 327.367211][ T8713] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] close(3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8710] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... ioctl resumed>) = 0 [pid 5064] getdents64(4, [pid 5061] <... close resumed>) = 0 [pid 8710] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] close(3 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8710] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... close resumed>) = 0 [pid 5064] getdents64(4, [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8714 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./365/file0"./strace-static-x86_64: Process 8714 attached [pid 8714] set_robust_list(0x55555745a660, 24) = 0 [pid 8714] chdir("./367" [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, [pid 8714] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 8715 attached [pid 8714] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 8715] set_robust_list(0x55555745a660, 24 [pid 8714] <... prctl resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8715 [pid 5064] <... close resumed>) = 0 [pid 5063] close(3 [pid 8714] setpgid(0, 0) = 0 [pid 8715] <... set_robust_list resumed>) = 0 [pid 8714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8715] chdir("./359" [pid 8714] <... openat resumed>) = 3 [pid 8715] <... chdir resumed>) = 0 [pid 8714] write(3, "1000", 4 [pid 8715] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8714] <... write resumed>) = 4 [pid 8710] <... open resumed>) = 4 [pid 5064] rmdir("./365" [pid 8715] <... prctl resumed>) = 0 [pid 8714] close(3 [pid 8710] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8715] setpgid(0, 0 [pid 8714] <... close resumed>) = 0 [pid 8715] <... setpgid resumed>) = 0 [pid 8714] symlink("/dev/binderfs", "./binderfs" [pid 8715] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... rmdir resumed>) = 0 [pid 8715] <... openat resumed>) = 3 [pid 8714] <... symlink resumed>) = 0 [pid 8710] <... open resumed>) = 5 [pid 5063] <... close resumed>) = 0 [pid 8715] write(3, "1000", 4 [pid 8710] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] mkdir("./366", 0777 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8715] <... write resumed>) = 4 [pid 8714] memfd_create("syzkaller", 0 [pid 8715] close(3 [pid 8714] <... memfd_create resumed>) = 3 [pid 8715] <... close resumed>) = 0 [pid 8714] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8715] symlink("/dev/binderfs", "./binderfs" [pid 8714] <... mmap resumed>) = 0x7f41e0600000 [pid 8715] <... symlink resumed>) = 0 [pid 8710] <... mmap resumed>) = 0x20000000 [pid 5064] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8716 attached [pid 8715] memfd_create("syzkaller", 0 [pid 8710] ftruncate(4, 33587195 [pid 8716] set_robust_list(0x55555745a660, 24 [pid 8715] <... memfd_create resumed>) = 3 [pid 8716] <... set_robust_list resumed>) = 0 [pid 8715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8716] chdir("./362" [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8716 [pid 5064] <... openat resumed>) = 3 [pid 8716] <... chdir resumed>) = 0 [pid 8710] <... ftruncate resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8716] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8716] setpgid(0, 0) = 0 [pid 8716] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8716] write(3, "1000", 4 [pid 8710] unlink("./bus" [pid 8716] <... write resumed>) = 4 [pid 8716] close(3) = 0 [pid 8716] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8716] memfd_create("syzkaller", 0) = 3 [pid 8716] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8710] <... unlink resumed>) = 0 [pid 8710] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8714] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8710] exit_group(0 [pid 8715] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8710] <... exit_group resumed>) = ? [pid 8716] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8710] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8710, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] umount2("./360", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8715] <... write resumed>) = 2097152 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./360/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./360/binderfs", [pid 5064] <... ioctl resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./360/binderfs") = 0 [pid 5062] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8715] munmap(0x7f41e0600000, 138412032 [pid 8714] <... write resumed>) = 2097152 [pid 5064] close(3 [pid 8715] <... munmap resumed>) = 0 [pid 8714] munmap(0x7f41e0600000, 138412032 [pid 5062] <... umount2 resumed>) = 0 [pid 8716] <... write resumed>) = 2097152 [pid 8715] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8714] <... munmap resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8717 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./360/file0", ./strace-static-x86_64: Process 8717 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8717] set_robust_list(0x55555745a660, 24 [pid 5062] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8717] <... set_robust_list resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8716] munmap(0x7f41e0600000, 138412032 [pid 8715] <... openat resumed>) = 4 [pid 8714] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] openat(AT_FDCWD, "./360/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8717] chdir("./366" [pid 8715] ioctl(4, LOOP_SET_FD, 3 [pid 8714] <... openat resumed>) = 4 [pid 5062] <... openat resumed>) = 4 [pid 8717] <... chdir resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 8717] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8717] <... prctl resumed>) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8717] setpgid(0, 0 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8717] <... setpgid resumed>) = 0 [pid 5062] close(4 [pid 8717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./360/file0") = 0 [pid 8714] ioctl(4, LOOP_SET_FD, 3 [pid 8717] <... openat resumed>) = 3 [pid 8717] write(3, "1000", 4) = 4 [pid 5062] getdents64(3, [pid 8717] close(3 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8717] <... close resumed>) = 0 [pid 5062] close(3 [pid 8717] symlink("/dev/binderfs", "./binderfs" [pid 8716] <... munmap resumed>) = 0 [pid 8715] <... ioctl resumed>) = 0 [pid 8714] <... ioctl resumed>) = 0 [pid 8716] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8715] close(3 [pid 8714] close(3 [pid 8716] <... openat resumed>) = 4 [pid 8715] <... close resumed>) = 0 [pid 8714] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8715] close(4 [pid 8714] close(4 [pid 8717] <... symlink resumed>) = 0 [pid 8716] ioctl(4, LOOP_SET_FD, 3 [pid 8715] <... close resumed>) = 0 [pid 8714] <... close resumed>) = 0 [pid 5062] rmdir("./360" [pid 8717] memfd_create("syzkaller", 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8717] <... memfd_create resumed>) = 3 [pid 5062] mkdir("./361", 0777 [pid 8717] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... mkdir resumed>) = 0 [pid 8717] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8715] mkdir("./file0", 0777 [pid 8714] mkdir("./file0", 0777 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8714] <... mkdir resumed>) = 0 [pid 8715] <... mkdir resumed>) = 0 [pid 8714] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8716] <... ioctl resumed>) = 0 [pid 8716] close(3 [pid 8715] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8716] <... close resumed>) = 0 [pid 8716] close(4) = 0 [pid 8716] mkdir("./file0", 0777) = 0 [ 327.621628][ T8715] loop4: detected capacity change from 0 to 4096 [ 327.629320][ T8714] loop0: detected capacity change from 0 to 4096 [ 327.645652][ T8716] loop2: detected capacity change from 0 to 4096 [pid 8716] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8717] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8714] <... mount resumed>) = 0 [pid 8714] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8714] chdir("./file0" [pid 8716] <... mount resumed>) = 0 [pid 8714] <... chdir resumed>) = 0 [pid 8714] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 327.692608][ T8718] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.731392][ T8719] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8716] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... ioctl resumed>) = 0 [pid 8717] <... write resumed>) = 2097152 [pid 8716] <... openat resumed>) = 3 [pid 8715] <... mount resumed>) = 0 [pid 8714] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8716] chdir("./file0" [pid 8714] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8716] <... chdir resumed>) = 0 [pid 8716] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8715] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] close(3 [pid 8716] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8715] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 8715] chdir("./file0" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8717] munmap(0x7f41e0600000, 138412032 [pid 8715] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 8721 attached [pid 8717] <... munmap resumed>) = 0 [pid 8715] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8721 [pid 8721] set_robust_list(0x55555745a660, 24 [pid 8715] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8715] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8721] <... set_robust_list resumed>) = 0 [pid 8717] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8714] <... open resumed>) = 4 [ 327.748194][ T8720] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8717] <... openat resumed>) = 4 [pid 8717] ioctl(4, LOOP_SET_FD, 3 [pid 8721] chdir("./361" [pid 8716] <... open resumed>) = 4 [pid 8714] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8721] <... chdir resumed>) = 0 [pid 8716] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8714] <... open resumed>) = 5 [pid 8721] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8716] <... open resumed>) = 5 [pid 8714] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8715] <... open resumed>) = 4 [pid 8715] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8721] setpgid(0, 0 [pid 8715] <... open resumed>) = 5 [pid 8721] <... setpgid resumed>) = 0 [pid 8716] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8715] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8714] <... mmap resumed>) = 0x20000000 [pid 8721] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8716] <... mmap resumed>) = 0x20000000 [pid 8715] <... mmap resumed>) = 0x20000000 [pid 8721] <... openat resumed>) = 3 [pid 8721] write(3, "1000", 4 [pid 8715] ftruncate(4, 33587195 [pid 8717] <... ioctl resumed>) = 0 [pid 8716] ftruncate(4, 33587195 [pid 8714] ftruncate(4, 33587195 [pid 8721] <... write resumed>) = 4 [pid 8715] <... ftruncate resumed>) = 0 [pid 8721] close(3 [pid 8717] close(3 [pid 8716] <... ftruncate resumed>) = 0 [pid 8714] <... ftruncate resumed>) = 0 [pid 8721] <... close resumed>) = 0 [pid 8717] <... close resumed>) = 0 [pid 8717] close(4 [pid 8721] symlink("/dev/binderfs", "./binderfs" [pid 8717] <... close resumed>) = 0 [pid 8721] <... symlink resumed>) = 0 [pid 8717] mkdir("./file0", 0777 [pid 8715] unlink("./bus" [pid 8717] <... mkdir resumed>) = 0 [pid 8721] memfd_create("syzkaller", 0 [pid 8717] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8716] unlink("./bus" [pid 8721] <... memfd_create resumed>) = 3 [pid 8715] <... unlink resumed>) = 0 [pid 8721] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8715] sendfile(-1, -1, NULL, 281474978811909 [pid 8714] unlink("./bus" [pid 8716] <... unlink resumed>) = 0 [pid 8715] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8721] <... mmap resumed>) = 0x7f41e0600000 [pid 8716] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [ 327.792711][ T8717] loop3: detected capacity change from 0 to 4096 [pid 8715] exit_group(0 [pid 8716] exit_group(0 [pid 8715] <... exit_group resumed>) = ? [pid 8716] <... exit_group resumed>) = ? [pid 8714] <... unlink resumed>) = 0 [pid 8714] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8714] exit_group(0 [pid 8715] +++ exited with 0 +++ [pid 8717] <... mount resumed>) = 0 [pid 8717] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8717] chdir("./file0") = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8715, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 8717] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 8717] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... restart_syscall resumed>) = 0 [pid 8717] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8714] <... exit_group resumed>) = ? [pid 5065] umount2("./359", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8716] +++ exited with 0 +++ [pid 5065] openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8716, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5065] <... openat resumed>) = 3 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5065] newfstatat(3, "", [pid 5063] <... restart_syscall resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./359/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./362", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./359/binderfs", [pid 5063] openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5065] unlink("./359/binderfs" [pid 5063] newfstatat(3, "", [pid 8714] +++ exited with 0 +++ [pid 5065] <... unlink resumed>) = 0 [pid 8721] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8714, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5063] getdents64(3, [pid 8717] <... open resumed>) = 4 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [ 327.881929][ T8722] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] umount2("./362/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8717] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] umount2("./367", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8717] <... open resumed>) = 5 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./362/binderfs", [pid 5061] openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./362/binderfs" [pid 5061] <... openat resumed>) = 3 [pid 8717] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... unlink resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 5063] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8717] <... mmap resumed>) = 0x20000000 [pid 5061] getdents64(3, [pid 8717] ftruncate(4, 33587195 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8717] <... ftruncate resumed>) = 0 [pid 5061] umount2("./367/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8717] unlink("./bus" [pid 5063] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./367/binderfs", [pid 5065] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./359/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./359/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] unlink("./367/binderfs" [pid 5063] newfstatat(AT_FDCWD, "./362/file0", [pid 8717] <... unlink resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 8717] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] rmdir("./359/file0" [pid 5063] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8717] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] <... rmdir resumed>) = 0 [pid 8717] exit_group(0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8717] <... exit_group resumed>) = ? [pid 5065] getdents64(3, [pid 5063] openat(AT_FDCWD, "./362/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8721] <... write resumed>) = 2097152 [pid 5063] <... openat resumed>) = 4 [pid 8717] +++ exited with 0 +++ [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] newfstatat(4, "", [pid 8721] munmap(0x7f41e0600000, 138412032 [pid 5065] close(3 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8717, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8721] <... munmap resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 5065] rmdir("./359" [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] umount2("./366", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5065] mkdir("./360", 0777 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5064] openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] rmdir("./362/file0" [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] newfstatat(3, "", [pid 8721] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... openat resumed>) = 3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 8721] <... openat resumed>) = 4 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8721] ioctl(4, LOOP_SET_FD, 3 [pid 5064] getdents64(3, [pid 8721] <... ioctl resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] close(3 [pid 5061] <... umount2 resumed>) = 0 [pid 5064] umount2("./366/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./366/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] unlink("./366/binderfs") = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./362" [pid 5061] newfstatat(AT_FDCWD, "./367/file0", [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] mkdir("./363", 0777) = 0 [pid 5061] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "./367/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./367/file0") = 0 [pid 8721] close(3 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 8721] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8721] close(4) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5061] rmdir("./367" [ 328.000618][ T8721] loop1: detected capacity change from 0 to 4096 [pid 8721] mkdir("./file0", 0777) = 0 [pid 5065] close(3 [pid 5064] <... umount2 resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8721] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] mkdir("./368", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8723 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 8723 attached [pid 8723] set_robust_list(0x55555745a660, 24 [pid 5064] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./366/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8721] <... mount resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./366/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8723] <... set_robust_list resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 8723] chdir("./360" [pid 5064] newfstatat(4, "", [pid 8723] <... chdir resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8723] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] getdents64(4, [pid 8723] <... prctl resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8723] setpgid(0, 0 [pid 5064] getdents64(4, [pid 8723] <... setpgid resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8723] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] close(4 [pid 8723] <... openat resumed>) = 3 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./366/file0" [pid 8723] write(3, "1000", 4 [pid 5064] <... rmdir resumed>) = 0 [pid 8723] <... write resumed>) = 4 [pid 5064] getdents64(3, [pid 8723] close(3 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8723] <... close resumed>) = 0 [pid 5064] close(3 [pid 8723] symlink("/dev/binderfs", "./binderfs" [pid 8721] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... close resumed>) = 0 [pid 8723] <... symlink resumed>) = 0 [pid 8721] <... openat resumed>) = 3 [pid 5064] rmdir("./366" [pid 8723] memfd_create("syzkaller", 0 [pid 5064] <... rmdir resumed>) = 0 [pid 8723] <... memfd_create resumed>) = 3 [pid 5064] mkdir("./367", 0777 [pid 8723] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8721] chdir("./file0" [pid 5064] <... mkdir resumed>) = 0 [pid 8723] <... mmap resumed>) = 0x7f41e0600000 [pid 8721] <... chdir resumed>) = 0 [ 328.087617][ T8724] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] <... ioctl resumed>) = 0 [pid 8721] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... ioctl resumed>) = 0 [pid 8721] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] <... openat resumed>) = 3 [pid 5063] close(3 [pid 5061] close(3 [pid 8721] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... close resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8725 attached ./strace-static-x86_64: Process 8726 attached [pid 8725] set_robust_list(0x55555745a660, 24 [pid 8726] set_robust_list(0x55555745a660, 24 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8726 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8725 [pid 8726] <... set_robust_list resumed>) = 0 [pid 8726] chdir("./363") = 0 [pid 8725] <... set_robust_list resumed>) = 0 [pid 8726] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8725] chdir("./368") = 0 [pid 8726] setpgid(0, 0) = 0 [pid 8725] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8726] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8723] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8721] <... open resumed>) = 4 [pid 8725] setpgid(0, 0 [pid 8726] <... openat resumed>) = 3 [pid 8725] <... setpgid resumed>) = 0 [pid 8726] write(3, "1000", 4 [pid 8725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8726] <... write resumed>) = 4 [pid 8725] <... openat resumed>) = 3 [pid 8726] close(3 [pid 8721] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8725] write(3, "1000", 4 [pid 8726] <... close resumed>) = 0 [pid 8726] symlink("/dev/binderfs", "./binderfs" [pid 8725] <... write resumed>) = 4 [pid 8725] close(3 [pid 8726] <... symlink resumed>) = 0 [pid 8721] <... open resumed>) = 5 [pid 8725] <... close resumed>) = 0 [pid 8725] symlink("/dev/binderfs", "./binderfs" [pid 8726] memfd_create("syzkaller", 0 [pid 8721] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8725] <... symlink resumed>) = 0 [pid 8726] <... memfd_create resumed>) = 3 [pid 8721] <... mmap resumed>) = 0x20000000 [pid 8725] memfd_create("syzkaller", 0 [pid 8721] ftruncate(4, 33587195 [pid 8726] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8725] <... memfd_create resumed>) = 3 [pid 8725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8726] <... mmap resumed>) = 0x7f41e0600000 [pid 8721] <... ftruncate resumed>) = 0 [pid 8725] <... mmap resumed>) = 0x7f41e0600000 [pid 8721] unlink("./bus" [pid 5064] <... ioctl resumed>) = 0 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8727 ./strace-static-x86_64: Process 8727 attached [pid 8727] set_robust_list(0x55555745a660, 24) = 0 [pid 8727] chdir("./367") = 0 [pid 8721] <... unlink resumed>) = 0 [pid 8727] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8721] sendfile(-1, -1, NULL, 281474978811909 [pid 8727] setpgid(0, 0 [pid 8721] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8727] <... setpgid resumed>) = 0 [pid 8727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8721] exit_group(0 [pid 8727] <... openat resumed>) = 3 [pid 8727] write(3, "1000", 4) = 4 [pid 8727] close(3) = 0 [pid 8727] symlink("/dev/binderfs", "./binderfs" [pid 8726] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8721] <... exit_group resumed>) = ? [pid 8727] <... symlink resumed>) = 0 [pid 8727] memfd_create("syzkaller", 0) = 3 [pid 8727] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8721] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8721, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 8725] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] umount2("./361", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8723] <... write resumed>) = 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8723] munmap(0x7f41e0600000, 138412032 [pid 5062] <... openat resumed>) = 3 [pid 8723] <... munmap resumed>) = 0 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8723] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] umount2("./361/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8723] <... openat resumed>) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8723] ioctl(4, LOOP_SET_FD, 3 [pid 5062] newfstatat(AT_FDCWD, "./361/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./361/binderfs") = 0 [pid 5062] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8727] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8723] <... ioctl resumed>) = 0 [pid 8723] close(3) = 0 [pid 8723] close(4) = 0 [pid 8723] mkdir("./file0", 0777) = 0 [ 328.333706][ T8723] loop4: detected capacity change from 0 to 4096 [pid 8723] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8725] <... write resumed>) = 2097152 [pid 8726] <... write resumed>) = 2097152 [pid 5062] <... umount2 resumed>) = 0 [pid 8726] munmap(0x7f41e0600000, 138412032 [pid 5062] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./361/file0", [pid 8723] <... mount resumed>) = 0 [pid 8723] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8723] chdir("./file0") = 0 [pid 8723] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8723] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8726] <... munmap resumed>) = 0 [pid 8725] munmap(0x7f41e0600000, 138412032 [pid 8726] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] openat(AT_FDCWD, "./361/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8725] <... munmap resumed>) = 0 [pid 8726] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", [pid 8726] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8726] <... ioctl resumed>) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 8723] <... open resumed>) = 4 [ 328.411833][ T8728] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.439078][ T8726] loop2: detected capacity change from 0 to 4096 [ 328.451180][ T28] kauditd_printk_skb: 98 callbacks suppressed [pid 8723] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8727] <... write resumed>) = 2097152 [pid 8723] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8727] munmap(0x7f41e0600000, 138412032 [pid 8723] <... mmap resumed>) = 0x20000000 [pid 8727] <... munmap resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8725] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8723] ftruncate(4, 33587195 [pid 5062] close(4 [pid 8725] <... openat resumed>) = 4 [pid 5062] <... close resumed>) = 0 [pid 8726] close(3 [pid 8725] ioctl(4, LOOP_SET_FD, 3 [pid 8726] <... close resumed>) = 0 [pid 5062] rmdir("./361/file0" [pid 8726] close(4 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 8726] <... close resumed>) = 0 [pid 8727] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8726] mkdir("./file0", 0777 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8727] <... openat resumed>) = 4 [pid 8726] <... mkdir resumed>) = 0 [pid 5062] close(3 [pid 8727] ioctl(4, LOOP_SET_FD, 3 [pid 8723] <... ftruncate resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./361" [pid 8726] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8723] unlink("./bus" [pid 5062] <... rmdir resumed>) = 0 [pid 8725] <... ioctl resumed>) = 0 [ 328.451198][ T28] audit: type=1800 audit(1708423480.980:5462): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 328.481299][ T8725] loop0: detected capacity change from 0 to 4096 [ 328.494313][ T8727] loop3: detected capacity change from 0 to 4096 [pid 8725] close(3) = 0 [pid 8725] close(4) = 0 [pid 8725] mkdir("./file0", 0777) = 0 [pid 8727] <... ioctl resumed>) = 0 [pid 8725] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8727] close(3) = 0 [pid 8727] close(4) = 0 [pid 8727] mkdir("./file0", 0777) = 0 [pid 8723] <... unlink resumed>) = 0 [pid 5062] mkdir("./362", 0777 [pid 8723] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8723] exit_group(0) = ? [pid 8723] +++ exited with 0 +++ [pid 5062] <... mkdir resumed>) = 0 [pid 8727] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8723, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5065] umount2("./360", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 328.508217][ T28] audit: type=1800 audit(1708423480.980:5463): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8727] <... mount resumed>) = 0 [pid 8727] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8726] <... mount resumed>) = 0 [pid 5065] umount2("./360/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8727] <... openat resumed>) = 3 [pid 8727] chdir("./file0") = 0 [pid 8727] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8727] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8726] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8726] <... openat resumed>) = 3 [pid 5065] newfstatat(AT_FDCWD, "./360/binderfs", [pid 8726] chdir("./file0") = 0 [pid 8726] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8726] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 328.573244][ T8729] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.585667][ T8730] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.596597][ T28] audit: type=1800 audit(1708423480.980:5464): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [pid 5065] unlink("./360/binderfs" [pid 8726] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... unlink resumed>) = 0 [pid 8725] <... mount resumed>) = 0 [pid 8725] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8725] chdir("./file0") = 0 [pid 8725] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5065] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... ioctl resumed>) = 0 [pid 8725] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8727] <... open resumed>) = 4 [pid 8727] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8727] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] close(3 [pid 8727] <... ftruncate resumed>) = 0 [pid 5062] <... close resumed>) = 0 [ 328.632103][ T8731] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8727] unlink("./bus" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8726] <... open resumed>) = 4 [pid 8727] <... unlink resumed>) = 0 [pid 8725] <... open resumed>) = 4 [pid 8726] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8727] sendfile(-1, -1, NULL, 281474978811909 [pid 8725] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8727] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8725] <... open resumed>) = 5 [pid 8727] exit_group(0 [pid 8725] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = ? [pid 8726] <... open resumed>) = 5 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8732 ./strace-static-x86_64: Process 8732 attached [pid 8726] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8725] ftruncate(4, 33587195 [pid 8726] <... mmap resumed>) = 0x20000000 [ 328.673016][ T28] audit: type=1800 audit(1708423481.190:5465): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 8726] ftruncate(4, 33587195 [pid 8732] set_robust_list(0x55555745a660, 24 [pid 8725] <... ftruncate resumed>) = 0 [pid 8726] <... ftruncate resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 8725] unlink("./bus" [pid 8727] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8727, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./367", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 5065] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./367/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] newfstatat(AT_FDCWD, "./360/file0", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] newfstatat(AT_FDCWD, "./367/binderfs", [pid 5065] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] unlink("./367/binderfs" [pid 5065] openat(AT_FDCWD, "./360/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... unlink resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5064] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8732] <... set_robust_list resumed>) = 0 [pid 8725] <... unlink resumed>) = 0 [pid 8726] unlink("./bus" [pid 5065] getdents64(4, [pid 8725] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8725] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] getdents64(4, [pid 8725] exit_group(0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8725] <... exit_group resumed>) = ? [pid 5065] close(4 [pid 8732] chdir("./362" [pid 5065] <... close resumed>) = 0 [pid 8732] <... chdir resumed>) = 0 [pid 8726] <... unlink resumed>) = 0 [pid 5065] rmdir("./360/file0" [pid 8732] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8726] sendfile(-1, -1, NULL, 281474978811909 [pid 8732] <... prctl resumed>) = 0 [pid 8726] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8732] setpgid(0, 0) = 0 [pid 8725] +++ exited with 0 +++ [ 328.728419][ T28] audit: type=1800 audit(1708423481.190:5466): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 8726] exit_group(0 [pid 8732] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8726] <... exit_group resumed>) = ? [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8725, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 8732] <... openat resumed>) = 3 [pid 5065] getdents64(3, [pid 8726] +++ exited with 0 +++ [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8726, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8732] write(3, "1000", 4 [pid 5065] <... close resumed>) = 0 [pid 5063] umount2("./363", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8732] <... write resumed>) = 4 [pid 5065] rmdir("./360" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8732] close(3 [pid 5065] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] umount2("./368", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8732] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] mkdir("./361", 0777 [pid 5064] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 3 [pid 8732] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(3, "", [pid 5061] newfstatat(3, "", [pid 5064] newfstatat(AT_FDCWD, "./367/file0", [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] getdents64(3, [pid 8732] <... symlink resumed>) = 0 [pid 5064] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./363/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "./367/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] <... openat resumed>) = 4 [pid 5063] newfstatat(AT_FDCWD, "./363/binderfs", [pid 5064] newfstatat(4, "", [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] unlink("./363/binderfs" [pid 5064] getdents64(4, [pid 5063] <... unlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5061] getdents64(3, [pid 5064] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] rmdir("./367/file0" [pid 8732] memfd_create("syzkaller", 0 [pid 5061] umount2("./368/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 8732] <... memfd_create resumed>) = 3 [pid 5064] rmdir("./367" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8732] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] newfstatat(AT_FDCWD, "./368/binderfs", [pid 8732] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./368/binderfs" [ 328.803394][ T28] audit: type=1800 audit(1708423481.190:5467): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 5064] mkdir("./368", 0777 [pid 5063] <... umount2 resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 3 [pid 5063] newfstatat(AT_FDCWD, "./363/file0", [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./363/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 328.857018][ T28] audit: type=1800 audit(1708423481.230:5468): pid=8726 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [pid 8732] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] newfstatat(4, "", [pid 5061] <... umount2 resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5061] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] close(4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./368/file0", [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8733 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8733 attached [pid 8733] set_robust_list(0x55555745a660, 24) = 0 [pid 8733] chdir("./361") = 0 [pid 8733] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8733] setpgid(0, 0) = 0 [pid 8733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8733] write(3, "1000", 4) = 4 [pid 8733] close(3) = 0 [pid 8733] symlink("/dev/binderfs", "./binderfs") = 0 [ 328.890919][ T28] audit: type=1800 audit(1708423481.230:5469): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [pid 8733] memfd_create("syzkaller", 0) = 3 [pid 5061] openat(AT_FDCWD, "./368/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8733] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5061] <... openat resumed>) = 4 [pid 5063] rmdir("./363/file0" [pid 5061] newfstatat(4, "", [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] close(3 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 8733] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8732] <... write resumed>) = 2097152 [pid 5063] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5063] rmdir("./363" [pid 5061] rmdir("./368/file0" [pid 8732] munmap(0x7f41e0600000, 138412032 [pid 5063] <... rmdir resumed>) = 0 [pid 5064] close(3 [pid 5061] <... rmdir resumed>) = 0 [pid 5063] mkdir("./364", 0777 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 8732] <... munmap resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8732] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] rmdir("./368" [pid 8732] <... openat resumed>) = 4 [ 328.959557][ T28] audit: type=1800 audit(1708423481.230:5470): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 ./strace-static-x86_64: Process 8734 attached [pid 8732] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... openat resumed>) = 3 [pid 5061] <... rmdir resumed>) = 0 [pid 8734] set_robust_list(0x55555745a660, 24 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8734 [pid 5061] mkdir("./369", 0777 [pid 8734] <... set_robust_list resumed>) = 0 [pid 8732] <... ioctl resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... mkdir resumed>) = 0 [pid 8734] chdir("./368") = 0 [pid 8732] close(3 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8734] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8732] <... close resumed>) = 0 [pid 8734] <... prctl resumed>) = 0 [pid 8732] close(4 [pid 5061] <... openat resumed>) = 3 [pid 8734] setpgid(0, 0 [pid 8732] <... close resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8734] <... setpgid resumed>) = 0 [pid 8732] mkdir("./file0", 0777 [pid 8734] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8732] <... mkdir resumed>) = 0 [pid 8734] write(3, "1000", 4 [pid 8732] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8734] <... write resumed>) = 4 [pid 8734] close(3) = 0 [pid 8733] <... write resumed>) = 2097152 [pid 8734] symlink("/dev/binderfs", "./binderfs" [pid 8733] munmap(0x7f41e0600000, 138412032 [pid 8734] <... symlink resumed>) = 0 [pid 8733] <... munmap resumed>) = 0 [pid 8733] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 329.029133][ T8732] loop1: detected capacity change from 0 to 4096 [ 329.035743][ T28] audit: type=1800 audit(1708423481.230:5471): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [pid 8733] ioctl(4, LOOP_SET_FD, 3 [pid 8734] memfd_create("syzkaller", 0) = 3 [pid 8734] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8733] <... ioctl resumed>) = 0 [pid 8733] close(3) = 0 [pid 8733] close(4 [pid 5061] <... ioctl resumed>) = 0 [pid 8732] <... mount resumed>) = 0 [ 329.095310][ T8733] loop4: detected capacity change from 0 to 4096 [ 329.117004][ T8735] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8732] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8733] <... close resumed>) = 0 [pid 8732] <... openat resumed>) = 3 [pid 8732] chdir("./file0") = 0 [pid 8732] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8733] mkdir("./file0", 0777 [pid 8732] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... ioctl resumed>) = 0 [pid 8732] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8733] <... mkdir resumed>) = 0 [pid 5063] close(3 [pid 5061] close(3 [pid 5063] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8736 attached ./strace-static-x86_64: Process 8737 attached [pid 8736] set_robust_list(0x55555745a660, 24 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8737 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8736 [pid 8737] set_robust_list(0x55555745a660, 24 [pid 8736] <... set_robust_list resumed>) = 0 [pid 8737] <... set_robust_list resumed>) = 0 [pid 8736] chdir("./369" [pid 8737] chdir("./364" [pid 8736] <... chdir resumed>) = 0 [pid 8737] <... chdir resumed>) = 0 [pid 8736] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8737] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8736] <... prctl resumed>) = 0 [pid 8737] <... prctl resumed>) = 0 [pid 8736] setpgid(0, 0 [pid 8737] setpgid(0, 0 [pid 8733] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8737] <... setpgid resumed>) = 0 [pid 8736] <... setpgid resumed>) = 0 [pid 8737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8736] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8737] <... openat resumed>) = 3 [pid 8736] <... openat resumed>) = 3 [pid 8737] write(3, "1000", 4 [pid 8736] write(3, "1000", 4 [pid 8732] <... open resumed>) = 4 [pid 8737] <... write resumed>) = 4 [pid 8736] <... write resumed>) = 4 [pid 8732] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8737] close(3 [pid 8736] close(3 [pid 8737] <... close resumed>) = 0 [pid 8736] <... close resumed>) = 0 [pid 8737] symlink("/dev/binderfs", "./binderfs" [pid 8736] symlink("/dev/binderfs", "./binderfs" [pid 8734] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8732] <... open resumed>) = 5 [pid 8737] <... symlink resumed>) = 0 [pid 8736] <... symlink resumed>) = 0 [pid 8737] memfd_create("syzkaller", 0 [pid 8736] memfd_create("syzkaller", 0 [pid 8732] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8737] <... memfd_create resumed>) = 3 [pid 8736] <... memfd_create resumed>) = 3 [pid 8737] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8736] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8732] <... mmap resumed>) = 0x20000000 [pid 8737] <... mmap resumed>) = 0x7f41e0600000 [pid 8736] <... mmap resumed>) = 0x7f41e0600000 [pid 8732] ftruncate(4, 33587195 [pid 8733] <... mount resumed>) = 0 [pid 8733] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8733] chdir("./file0") = 0 [pid 8733] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8733] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 4 [pid 8732] <... ftruncate resumed>) = 0 [ 329.236878][ T8738] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8733] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8732] unlink("./bus" [pid 8734] <... write resumed>) = 2097152 [pid 8733] <... open resumed>) = 5 [pid 8732] <... unlink resumed>) = 0 [pid 8737] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8734] munmap(0x7f41e0600000, 138412032 [pid 8733] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8732] sendfile(-1, -1, NULL, 281474978811909 [pid 8736] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8734] <... munmap resumed>) = 0 [pid 8732] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8734] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8733] <... mmap resumed>) = 0x20000000 [pid 8732] exit_group(0 [pid 8733] ftruncate(4, 33587195 [pid 8732] <... exit_group resumed>) = ? [pid 8734] <... openat resumed>) = 4 [pid 8733] <... ftruncate resumed>) = 0 [pid 8734] ioctl(4, LOOP_SET_FD, 3 [pid 8733] unlink("./bus" [pid 8732] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8732, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5062] umount2("./362", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8734] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8734] close(3 [pid 8733] <... unlink resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8734] <... close resumed>) = 0 [pid 8733] sendfile(-1, -1, NULL, 281474978811909 [pid 8737] <... write resumed>) = 2097152 [pid 8734] close(4 [pid 8733] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5062] <... openat resumed>) = 3 [pid 8737] munmap(0x7f41e0600000, 138412032 [pid 8734] <... close resumed>) = 0 [pid 8733] exit_group(0 [pid 5062] newfstatat(3, "", [pid 8734] mkdir("./file0", 0777 [pid 8733] <... exit_group resumed>) = ? [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8734] <... mkdir resumed>) = 0 [pid 5062] getdents64(3, [pid 8734] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./362/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./362/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8733] +++ exited with 0 +++ [pid 5062] unlink("./362/binderfs" [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8733, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5062] <... unlink resumed>) = 0 [pid 8737] <... munmap resumed>) = 0 [ 329.350653][ T8734] loop3: detected capacity change from 0 to 4096 [pid 5062] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8734] <... mount resumed>) = 0 [pid 8734] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] umount2("./361", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8737] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8734] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8737] <... openat resumed>) = 4 [pid 8734] chdir("./file0" [pid 5065] openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = 0 [pid 8737] ioctl(4, LOOP_SET_FD, 3 [pid 8734] <... chdir resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8734] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] getdents64(3, [pid 8734] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8734] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] umount2("./361/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./361/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./361/binderfs") = 0 [pid 5065] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8737] <... ioctl resumed>) = 0 [pid 8736] <... write resumed>) = 2097152 [pid 5062] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8737] close(3 [pid 8736] munmap(0x7f41e0600000, 138412032 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8737] <... close resumed>) = 0 [pid 8736] <... munmap resumed>) = 0 [pid 8734] <... open resumed>) = 4 [ 329.403968][ T8739] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 329.421798][ T8737] loop2: detected capacity change from 0 to 4096 [pid 8737] close(4 [pid 8734] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] newfstatat(AT_FDCWD, "./362/file0", [pid 8737] <... close resumed>) = 0 [pid 8737] mkdir("./file0", 0777) = 0 [pid 8736] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8734] <... open resumed>) = 5 [pid 8734] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... umount2 resumed>) = 0 [pid 8737] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8734] <... mmap resumed>) = 0x20000000 [pid 8736] <... openat resumed>) = 4 [pid 8734] ftruncate(4, 33587195 [pid 5065] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8736] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./361/file0", [pid 5062] openat(AT_FDCWD, "./362/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8734] <... ftruncate resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] getdents64(4, [pid 8736] <... ioctl resumed>) = 0 [pid 8734] unlink("./bus" [pid 5065] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8736] close(3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8736] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./361/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8736] close(4) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5062] close(4) = 0 [pid 8736] mkdir("./file0", 0777 [pid 5065] newfstatat(4, "", [pid 5062] rmdir("./362/file0" [pid 8736] <... mkdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8736] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5065] getdents64(4, [pid 5062] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] rmdir("./362" [pid 8734] <... unlink resumed>) = 0 [pid 5065] getdents64(4, [pid 5062] <... rmdir resumed>) = 0 [pid 8734] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] mkdir("./363", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8734] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] close(4 [pid 5062] <... openat resumed>) = 3 [pid 8734] exit_group(0 [pid 5065] <... close resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8734] <... exit_group resumed>) = ? [ 329.455130][ T8736] loop0: detected capacity change from 0 to 4096 [pid 5065] rmdir("./361/file0" [pid 8737] <... mount resumed>) = 0 [pid 8737] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8737] chdir("./file0") = 0 [pid 8737] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8737] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8734] +++ exited with 0 +++ [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8734, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5064] umount2("./368", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] rmdir("./361" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 8736] <... mount resumed>) = 0 [pid 5065] mkdir("./362", 0777 [pid 8736] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... mkdir resumed>) = 0 [pid 8736] <... openat resumed>) = 3 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8736] chdir("./file0" [pid 5065] <... openat resumed>) = 3 [pid 8736] <... chdir resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8736] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8736] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8737] <... open resumed>) = 4 [pid 8737] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5064] newfstatat(3, "", [pid 8737] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8736] <... open resumed>) = 4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8737] <... mmap resumed>) = 0x20000000 [pid 8736] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8736] <... open resumed>) = 5 [pid 5064] umount2("./368/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8737] ftruncate(4, 33587195 [pid 8736] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./368/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./368/binderfs") = 0 [pid 5064] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8736] <... mmap resumed>) = 0x20000000 [pid 5062] <... ioctl resumed>) = 0 [pid 8737] <... ftruncate resumed>) = 0 [pid 8737] unlink("./bus" [pid 8736] ftruncate(4, 33587195 [ 329.500391][ T8740] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 329.525533][ T8741] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] close(3) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8736] <... ftruncate resumed>) = 0 [pid 8736] unlink("./bus"./strace-static-x86_64: Process 8742 attached [pid 5064] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8742] set_robust_list(0x55555745a660, 24 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8742] <... set_robust_list resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./368/file0", [pid 8742] chdir("./363" [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8742 [pid 8742] <... chdir resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8742] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8737] <... unlink resumed>) = 0 [pid 8737] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8737] exit_group(0) = ? [pid 8742] setpgid(0, 0 [pid 8736] <... unlink resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./368/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8742] <... setpgid resumed>) = 0 [pid 8736] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... openat resumed>) = 4 [pid 8736] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8742] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8736] exit_group(0 [pid 5064] newfstatat(4, "", [pid 8736] <... exit_group resumed>) = ? [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8742] <... openat resumed>) = 3 [pid 5064] getdents64(4, [pid 8742] write(3, "1000", 4 [pid 5065] <... ioctl resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8742] <... write resumed>) = 4 [pid 5065] close(3 [pid 5064] getdents64(4, [pid 8742] close(3 [pid 5065] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8742] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] close(4 [pid 8737] +++ exited with 0 +++ ./strace-static-x86_64: Process 8743 attached [pid 8742] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8743 [pid 5064] <... close resumed>) = 0 [pid 8743] set_robust_list(0x55555745a660, 24 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8737, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8743] <... set_robust_list resumed>) = 0 [pid 8742] <... symlink resumed>) = 0 [pid 5064] rmdir("./368/file0" [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 8743] chdir("./362" [pid 8736] +++ exited with 0 +++ [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 8743] <... chdir resumed>) = 0 [pid 8743] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8736, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 8743] setpgid(0, 0 [pid 8742] memfd_create("syzkaller", 0 [pid 5063] umount2("./364", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./369", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(3, [pid 8743] <... setpgid resumed>) = 0 [pid 8742] <... memfd_create resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8743] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8742] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8743] <... openat resumed>) = 3 [pid 8742] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... close resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 8743] write(3, "1000", 4 [pid 5064] rmdir("./368" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8743] <... write resumed>) = 4 [pid 8743] close(3 [pid 5064] <... rmdir resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 5063] getdents64(3, [pid 8743] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8743] symlink("/dev/binderfs", "./binderfs" [pid 5063] umount2("./364/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8743] <... symlink resumed>) = 0 [pid 5061] getdents64(3, [pid 8743] memfd_create("syzkaller", 0 [pid 8742] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] mkdir("./369", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] newfstatat(AT_FDCWD, "./364/binderfs", [pid 5061] umount2("./369/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8743] <... memfd_create resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] unlink("./364/binderfs" [pid 5061] newfstatat(AT_FDCWD, "./369/binderfs", [pid 8743] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8743] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] unlink("./369/binderfs" [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5061] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8743] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8742] <... write resumed>) = 2097152 [pid 5063] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... ioctl resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./369/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8742] munmap(0x7f41e0600000, 138412032 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] close(3 [pid 8742] <... munmap resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./364/file0", [pid 5061] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8742] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "./369/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8742] <... openat resumed>) = 4 [pid 5064] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... openat resumed>) = 4 [pid 5063] openat(AT_FDCWD, "./364/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8742] ioctl(4, LOOP_SET_FD, 3 [pid 5061] newfstatat(4, "", [pid 5063] <... openat resumed>) = 4 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8744 ./strace-static-x86_64: Process 8744 attached [pid 8743] <... write resumed>) = 2097152 [pid 8742] <... ioctl resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8744] set_robust_list(0x55555745a660, 24) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 8744] chdir("./369") = 0 [pid 8743] munmap(0x7f41e0600000, 138412032 [pid 8742] close(3 [pid 5063] getdents64(4, [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8744] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8742] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 8744] <... prctl resumed>) = 0 [pid 8743] <... munmap resumed>) = 0 [pid 8742] close(4 [pid 5063] getdents64(4, [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8744] setpgid(0, 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 5063] close(4 [pid 8744] <... setpgid resumed>) = 0 [pid 8743] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... close resumed>) = 0 [pid 8744] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8743] <... openat resumed>) = 4 [pid 8742] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] rmdir("./369/file0" [pid 8744] <... openat resumed>) = 3 [pid 8743] ioctl(4, LOOP_SET_FD, 3 [pid 5063] rmdir("./364/file0" [pid 8742] mkdir("./file0", 0777 [pid 5061] <... rmdir resumed>) = 0 [pid 8744] write(3, "1000", 4) = 4 [pid 8744] close(3) = 0 [pid 8744] symlink("/dev/binderfs", "./binderfs" [pid 8742] <... mkdir resumed>) = 0 [pid 8744] <... symlink resumed>) = 0 [pid 8742] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 8744] memfd_create("syzkaller", 0) = 3 [pid 8744] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5061] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5061] rmdir("./369" [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5061] <... rmdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] mkdir("./370", 0777 [pid 8743] <... ioctl resumed>) = 0 [pid 8743] close(3) = 0 [pid 8743] close(4) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 8743] mkdir("./file0", 0777 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8743] <... mkdir resumed>) = 0 [pid 5063] rmdir("./364" [pid 5061] <... openat resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [ 329.734266][ T8742] loop1: detected capacity change from 0 to 4096 [ 329.766795][ T8743] loop4: detected capacity change from 0 to 4096 [pid 8743] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] mkdir("./365", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8742] <... mount resumed>) = 0 [pid 8742] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8742] chdir("./file0") = 0 [pid 8742] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8744] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 329.795919][ T8745] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8742] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 4 [pid 8742] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8742] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8743] <... mount resumed>) = 0 [pid 8743] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8742] <... mmap resumed>) = 0x20000000 [pid 8742] ftruncate(4, 33587195 [pid 8743] chdir("./file0") = 0 [pid 8743] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8743] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8742] <... ftruncate resumed>) = 0 [pid 8742] unlink("./bus" [pid 5061] <... ioctl resumed>) = 0 [pid 8742] <... unlink resumed>) = 0 [pid 8742] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8742] exit_group(0) = ? [pid 5061] close(3 [pid 8743] <... open resumed>) = 4 [pid 8742] +++ exited with 0 +++ [pid 5061] <... close resumed>) = 0 [pid 8743] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8743] <... open resumed>) = 5 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8742, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [ 329.851152][ T8746] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8743] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8747] set_robust_list(0x55555745a660, 24 [pid 8744] <... write resumed>) = 2097152 [pid 8743] ftruncate(4, 33587195 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8747 [pid 8747] <... set_robust_list resumed>) = 0 [pid 8744] munmap(0x7f41e0600000, 138412032 [pid 8743] <... ftruncate resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8747] chdir("./370" [pid 8744] <... munmap resumed>) = 0 [pid 8743] unlink("./bus" [pid 8747] <... chdir resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8747] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] newfstatat(3, "", [pid 8747] <... prctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8747] setpgid(0, 0 [pid 5062] getdents64(3, [pid 8747] <... setpgid resumed>) = 0 [pid 8747] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8747] write(3, "1000", 4 [pid 5062] umount2("./363/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8747] <... write resumed>) = 4 [pid 8744] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8743] <... unlink resumed>) = 0 [pid 5063] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8747] close(3 [pid 8744] <... openat resumed>) = 4 [pid 5062] newfstatat(AT_FDCWD, "./363/binderfs", [pid 8747] <... close resumed>) = 0 [pid 8743] sendfile(-1, -1, NULL, 281474978811909 [pid 5063] <... close resumed>) = 0 [pid 8747] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8747] <... symlink resumed>) = 0 [pid 8743] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5062] unlink("./363/binderfs" [pid 8743] exit_group(0 [pid 5062] <... unlink resumed>) = 0 [pid 8747] memfd_create("syzkaller", 0 [pid 8744] ioctl(4, LOOP_SET_FD, 3 [pid 8743] <... exit_group resumed>) = ? [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8747] <... memfd_create resumed>) = 3 [pid 8747] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8743] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8743, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8748 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8744] <... ioctl resumed>) = 0 [pid 5065] umount2("./362", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8744] close(3 [pid 5065] openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8748 attached [pid 8744] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 8748] set_robust_list(0x55555745a660, 24 [pid 8744] close(4 [pid 5065] newfstatat(3, "", [pid 8748] <... set_robust_list resumed>) = 0 [pid 8744] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8748] chdir("./365" [pid 8744] mkdir("./file0", 0777 [pid 5065] getdents64(3, [pid 8748] <... chdir resumed>) = 0 [pid 8744] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] newfstatat(AT_FDCWD, "./363/file0", [pid 8748] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] umount2("./362/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8748] <... prctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8748] setpgid(0, 0 [pid 5065] newfstatat(AT_FDCWD, "./362/binderfs", [pid 8748] <... setpgid resumed>) = 0 [pid 8744] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8748] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8748] <... openat resumed>) = 3 [pid 5065] unlink("./362/binderfs" [pid 8748] write(3, "1000", 4 [pid 5065] <... unlink resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./363/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8748] <... write resumed>) = 4 [pid 5065] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8748] close(3 [pid 5062] <... openat resumed>) = 4 [pid 8748] <... close resumed>) = 0 [pid 8748] symlink("/dev/binderfs", "./binderfs" [pid 5062] newfstatat(4, "", [pid 8748] <... symlink resumed>) = 0 [ 329.945941][ T8744] loop3: detected capacity change from 0 to 4096 [pid 8748] memfd_create("syzkaller", 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8748] <... memfd_create resumed>) = 3 [pid 5065] newfstatat(AT_FDCWD, "./362/file0", [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 8748] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... close resumed>) = 0 [pid 8748] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] rmdir("./363/file0" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./362/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] getdents64(3, [pid 5065] newfstatat(4, "", [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] close(3 [pid 5065] getdents64(4, [pid 5062] <... close resumed>) = 0 [pid 8748] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8747] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] rmdir("./363" [pid 5065] close(4) = 0 [pid 5065] rmdir("./362/file0") = 0 [pid 5065] getdents64(3, [pid 5062] <... rmdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] mkdir("./364", 0777 [pid 5065] close(3 [pid 5062] <... mkdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] rmdir("./362") = 0 [pid 5062] <... openat resumed>) = 3 [pid 5065] mkdir("./363", 0777 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5065] <... mkdir resumed>) = 0 [pid 8744] <... mount resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8744] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... openat resumed>) = 3 [pid 8744] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8744] chdir("./file0") = 0 [pid 8744] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8744] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 4 [pid 8744] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8744] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8748] <... write resumed>) = 2097152 [pid 8744] <... mmap resumed>) = 0x20000000 [ 330.053011][ T8749] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8748] munmap(0x7f41e0600000, 138412032 [pid 8744] ftruncate(4, 33587195 [pid 8748] <... munmap resumed>) = 0 [pid 8747] <... write resumed>) = 2097152 [pid 8748] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8748] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8747] munmap(0x7f41e0600000, 138412032 [pid 8744] <... ftruncate resumed>) = 0 [pid 8748] close(3 [pid 8747] <... munmap resumed>) = 0 [pid 8744] unlink("./bus" [pid 8748] <... close resumed>) = 0 [pid 8747] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8748] close(4) = 0 [pid 8748] mkdir("./file0", 0777 [pid 8747] <... openat resumed>) = 4 [pid 8748] <... mkdir resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 8744] <... unlink resumed>) = 0 [ 330.123197][ T8748] loop2: detected capacity change from 0 to 4096 [pid 8744] sendfile(-1, -1, NULL, 281474978811909 [pid 8748] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8747] ioctl(4, LOOP_SET_FD, 3 [pid 8744] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8744] exit_group(0 [pid 5062] close(3 [pid 8744] <... exit_group resumed>) = ? [pid 5062] <... close resumed>) = 0 [pid 5065] close(3 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8751 attached ./strace-static-x86_64: Process 8750 attached [pid 8747] <... ioctl resumed>) = 0 [pid 8744] +++ exited with 0 +++ [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8750 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8751 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8744, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=2 /* 0.02 s */} --- [pid 8751] set_robust_list(0x55555745a660, 24) = 0 [pid 8751] chdir("./363" [pid 8747] close(3 [pid 8751] <... chdir resumed>) = 0 [pid 8750] set_robust_list(0x55555745a660, 24 [pid 8747] <... close resumed>) = 0 [pid 8751] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8750] <... set_robust_list resumed>) = 0 [pid 8747] close(4 [pid 8751] <... prctl resumed>) = 0 [pid 8750] chdir("./364" [pid 8747] <... close resumed>) = 0 [pid 5064] umount2("./369", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8751] setpgid(0, 0 [pid 8750] <... chdir resumed>) = 0 [pid 8747] mkdir("./file0", 0777 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8751] <... setpgid resumed>) = 0 [pid 8750] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8747] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8751] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8750] <... prctl resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 8750] setpgid(0, 0 [pid 5064] newfstatat(3, "", [pid 8751] <... openat resumed>) = 3 [pid 8750] <... setpgid resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 330.173467][ T8747] loop0: detected capacity change from 0 to 4096 [pid 8750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8747] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8751] write(3, "1000", 4 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./369/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./369/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8751] <... write resumed>) = 4 [pid 5064] unlink("./369/binderfs" [pid 8751] close(3 [pid 5064] <... unlink resumed>) = 0 [pid 8751] <... close resumed>) = 0 [pid 5064] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8751] symlink("/dev/binderfs", "./binderfs" [pid 8750] <... openat resumed>) = 3 [pid 8748] <... mount resumed>) = 0 [pid 8751] <... symlink resumed>) = 0 [pid 8748] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8751] memfd_create("syzkaller", 0 [pid 8750] write(3, "1000", 4 [pid 8748] <... openat resumed>) = 3 [pid 8751] <... memfd_create resumed>) = 3 [pid 8750] <... write resumed>) = 4 [pid 8748] chdir("./file0" [pid 8751] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8750] close(3 [pid 8748] <... chdir resumed>) = 0 [pid 8751] <... mmap resumed>) = 0x7f41e0600000 [pid 8750] <... close resumed>) = 0 [pid 8748] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8750] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... umount2 resumed>) = 0 [pid 8750] <... symlink resumed>) = 0 [pid 8748] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8748] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [ 330.228416][ T8752] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8751] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8750] memfd_create("syzkaller", 0 [pid 5064] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8750] <... memfd_create resumed>) = 3 [pid 8747] <... mount resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8750] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] newfstatat(AT_FDCWD, "./369/file0", [pid 8750] <... mmap resumed>) = 0x7f41e0600000 [pid 8747] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8747] <... openat resumed>) = 3 [pid 8747] chdir("./file0") = 0 [pid 5064] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./369/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8747] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] newfstatat(4, "", [pid 8747] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, [pid 8747] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./369/file0") = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./369") = 0 [pid 5064] mkdir("./370", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 8748] <... open resumed>) = 4 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8748] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8748] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8751] <... write resumed>) = 2097152 [pid 8748] unlink("./bus" [pid 8747] <... open resumed>) = 4 [pid 8751] munmap(0x7f41e0600000, 138412032 [pid 8747] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8751] <... munmap resumed>) = 0 [pid 8747] <... open resumed>) = 5 [pid 8751] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8748] <... unlink resumed>) = 0 [pid 8748] sendfile(-1, -1, NULL, 281474978811909 [pid 8747] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8748] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8747] <... mmap resumed>) = 0x20000000 [pid 8748] exit_group(0 [pid 8751] <... openat resumed>) = 4 [pid 5064] <... ioctl resumed>) = 0 [pid 8751] ioctl(4, LOOP_SET_FD, 3 [pid 8747] ftruncate(4, 33587195) = 0 [pid 8748] <... exit_group resumed>) = ? [pid 8747] unlink("./bus" [pid 5064] close(3 [pid 8751] <... ioctl resumed>) = 0 [pid 8750] <... write resumed>) = 2097152 [pid 8748] +++ exited with 0 +++ [pid 8747] <... unlink resumed>) = 0 [pid 8751] close(3 [pid 8750] munmap(0x7f41e0600000, 138412032 [pid 8747] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... close resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8748, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8751] <... close resumed>) = 0 [pid 8750] <... munmap resumed>) = 0 [pid 8747] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8751] close(4 [pid 8747] exit_group(0) = ? [pid 5063] umount2("./365", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8754 attached [pid 8751] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8751] mkdir("./file0", 0777 [pid 5063] openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8754] set_robust_list(0x55555745a660, 24 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8754 [pid 5063] <... openat resumed>) = 3 [pid 8754] <... set_robust_list resumed>) = 0 [pid 8751] <... mkdir resumed>) = 0 [pid 8750] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] newfstatat(3, "", [pid 8754] chdir("./370" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8754] <... chdir resumed>) = 0 [pid 8751] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] getdents64(3, [pid 8754] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8750] <... openat resumed>) = 4 [ 330.379838][ T8751] loop4: detected capacity change from 0 to 4096 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8754] <... prctl resumed>) = 0 [pid 8750] ioctl(4, LOOP_SET_FD, 3 [pid 8747] +++ exited with 0 +++ [pid 5063] umount2("./365/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8754] setpgid(0, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./365/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./365/binderfs") = 0 [pid 5063] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8747, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 8754] <... setpgid resumed>) = 0 [pid 5061] umount2("./370", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8754] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 8754] <... openat resumed>) = 3 [pid 8754] write(3, "1000", 4 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./370/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./370/binderfs", [pid 8754] <... write resumed>) = 4 [pid 8754] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8754] <... close resumed>) = 0 [pid 5061] unlink("./370/binderfs" [pid 8754] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... unlink resumed>) = 0 [pid 8754] <... symlink resumed>) = 0 [pid 5061] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8750] <... ioctl resumed>) = 0 [pid 8754] memfd_create("syzkaller", 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8750] close(3) = 0 [pid 8750] close(4) = 0 [pid 8750] mkdir("./file0", 0777) = 0 [pid 5063] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./365/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8750] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8754] <... memfd_create resumed>) = 3 [pid 8751] <... mount resumed>) = 0 [pid 5063] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8754] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8751] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8751] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "./365/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8754] <... mmap resumed>) = 0x7f41e0600000 [pid 8751] chdir("./file0" [pid 5063] <... openat resumed>) = 4 [pid 5061] newfstatat(AT_FDCWD, "./370/file0", [pid 8751] <... chdir resumed>) = 0 [pid 8751] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] newfstatat(4, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8751] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8751] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] getdents64(4, [pid 5061] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./365/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5061] openat(AT_FDCWD, "./370/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./365" [pid 5061] <... openat resumed>) = 4 [pid 8751] <... open resumed>) = 4 [pid 5063] <... rmdir resumed>) = 0 [ 330.424334][ T8750] loop1: detected capacity change from 0 to 4096 [ 330.459563][ T8755] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8751] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5061] newfstatat(4, "", [pid 8751] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] mkdir("./366", 0777 [pid 5061] getdents64(4, [pid 8751] ftruncate(4, 33587195 [pid 5063] <... mkdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] getdents64(4, [pid 5063] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./370/file0") = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./370") = 0 [pid 5061] mkdir("./371", 0777) = 0 [pid 8754] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8751] <... ftruncate resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8751] unlink("./bus" [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8750] <... mount resumed>) = 0 [pid 8750] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8750] chdir("./file0") = 0 [pid 8750] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8751] <... unlink resumed>) = 0 [pid 8751] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8751] exit_group(0) = ? [ 330.521825][ T8756] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8750] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8754] <... write resumed>) = 2097152 [pid 8754] munmap(0x7f41e0600000, 138412032 [pid 8750] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... ioctl resumed>) = 0 [pid 8754] <... munmap resumed>) = 0 [pid 8751] +++ exited with 0 +++ [pid 5063] close(3 [pid 8754] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8751, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8754] <... openat resumed>) = 4 [pid 8754] ioctl(4, LOOP_SET_FD, 3 [pid 5065] umount2("./363", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8757 [pid 8750] <... open resumed>) = 4 [pid 5065] getdents64(3, [pid 8750] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8750] <... open resumed>) = 5 [pid 5065] umount2("./363/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8750] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8750] <... mmap resumed>) = 0x20000000 [pid 5065] newfstatat(AT_FDCWD, "./363/binderfs", ./strace-static-x86_64: Process 8757 attached [pid 8754] <... ioctl resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8754] close(3 [pid 5065] unlink("./363/binderfs" [pid 8757] set_robust_list(0x55555745a660, 24 [pid 8750] ftruncate(4, 33587195 [pid 5065] <... unlink resumed>) = 0 [pid 8757] <... set_robust_list resumed>) = 0 [pid 5065] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8757] chdir("./366") = 0 [pid 8757] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8757] setpgid(0, 0 [pid 8754] <... close resumed>) = 0 [pid 5061] close(3 [pid 8757] <... setpgid resumed>) = 0 [pid 8754] close(4 [pid 8757] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... close resumed>) = 0 [pid 8757] <... openat resumed>) = 3 [pid 8750] <... ftruncate resumed>) = 0 [pid 8757] write(3, "1000", 4 [pid 8754] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8757] <... write resumed>) = 4 [pid 8750] unlink("./bus"./strace-static-x86_64: Process 8758 attached [pid 8757] close(3 [pid 8754] mkdir("./file0", 0777 [pid 8758] set_robust_list(0x55555745a660, 24 [pid 8757] <... close resumed>) = 0 [pid 8754] <... mkdir resumed>) = 0 [pid 8750] <... unlink resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8758 [pid 8758] <... set_robust_list resumed>) = 0 [pid 8757] symlink("/dev/binderfs", "./binderfs" [pid 8750] sendfile(-1, -1, NULL, 281474978811909 [pid 8758] chdir("./371" [pid 8757] <... symlink resumed>) = 0 [pid 8750] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [ 330.603239][ T8754] loop3: detected capacity change from 0 to 4096 [pid 8758] <... chdir resumed>) = 0 [pid 8757] memfd_create("syzkaller", 0 [pid 8754] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8750] exit_group(0 [pid 5065] <... umount2 resumed>) = 0 [pid 8758] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8750] <... exit_group resumed>) = ? [pid 8758] <... prctl resumed>) = 0 [pid 8757] <... memfd_create resumed>) = 3 [pid 8758] setpgid(0, 0) = 0 [pid 8758] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8757] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8758] <... openat resumed>) = 3 [pid 8757] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8758] write(3, "1000", 4) = 4 [pid 8758] close(3) = 0 [pid 8758] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./363/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./363/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8758] memfd_create("syzkaller", 0 [pid 8750] +++ exited with 0 +++ [pid 8758] <... memfd_create resumed>) = 3 [pid 5065] newfstatat(4, "", [pid 8758] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8750, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 8758] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] getdents64(4, [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] umount2("./364", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./364/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./364/binderfs", [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8754] <... mount resumed>) = 0 [pid 8754] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8754] chdir("./file0") = 0 [pid 8754] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8754] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8757] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] close(4) = 0 [pid 5065] rmdir("./363/file0") = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./364/binderfs") = 0 [pid 5065] getdents64(3, [pid 5062] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./363") = 0 [pid 5065] mkdir("./364", 0777 [pid 8754] <... open resumed>) = 4 [pid 5065] <... mkdir resumed>) = 0 [pid 8754] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... umount2 resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 8754] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [ 330.691611][ T8759] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5062] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8758] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8757] <... write resumed>) = 2097152 [pid 8754] <... mmap resumed>) = 0x20000000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8757] munmap(0x7f41e0600000, 138412032 [pid 8754] ftruncate(4, 33587195 [pid 5062] newfstatat(AT_FDCWD, "./364/file0", [pid 8757] <... munmap resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./364/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8754] <... ftruncate resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 8754] unlink("./bus" [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 8757] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./364/file0" [pid 8757] <... openat resumed>) = 4 [pid 8757] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./364") = 0 [pid 8757] <... ioctl resumed>) = 0 [pid 8758] <... write resumed>) = 2097152 [pid 8754] <... unlink resumed>) = 0 [pid 5062] mkdir("./365", 0777 [pid 8754] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8754] exit_group(0 [pid 8758] munmap(0x7f41e0600000, 138412032 [pid 8757] close(3 [pid 8754] <... exit_group resumed>) = ? [pid 8758] <... munmap resumed>) = 0 [pid 8757] <... close resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 8757] close(4 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8757] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8757] mkdir("./file0", 0777) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8758] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8757] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8754] +++ exited with 0 +++ [pid 5065] close(3 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8754, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 8758] <... openat resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 5064] restart_syscall(<... resuming interrupted clone ...> [ 330.775605][ T8757] loop2: detected capacity change from 0 to 4096 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... restart_syscall resumed>) = 0 [pid 8758] ioctl(4, LOOP_SET_FD, 3 [pid 5064] umount2("./370", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 8760 attached [pid 5064] newfstatat(3, "", [pid 8760] set_robust_list(0x55555745a660, 24 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8760] <... set_robust_list resumed>) = 0 [pid 5064] getdents64(3, [pid 8760] chdir("./364" [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8760] <... chdir resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8760 [pid 5064] umount2("./370/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8760] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8760] <... prctl resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./370/binderfs", [pid 8760] setpgid(0, 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./370/binderfs" [pid 8760] <... setpgid resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 8760] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8760] <... openat resumed>) = 3 [pid 8760] write(3, "1000", 4 [pid 8758] <... ioctl resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 8760] <... write resumed>) = 4 [pid 8758] close(3 [pid 8760] close(3 [pid 8758] <... close resumed>) = 0 [pid 8760] <... close resumed>) = 0 [pid 8758] close(4 [pid 8760] symlink("/dev/binderfs", "./binderfs" [pid 8758] <... close resumed>) = 0 [pid 8760] <... symlink resumed>) = 0 [pid 8758] mkdir("./file0", 0777 [pid 8760] memfd_create("syzkaller", 0 [pid 8758] <... mkdir resumed>) = 0 [pid 8758] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8760] <... memfd_create resumed>) = 3 [pid 8760] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [ 330.823548][ T8758] loop0: detected capacity change from 0 to 4096 [pid 5064] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... ioctl resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./370/file0", [pid 5062] close(3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... close resumed>) = 0 [pid 5064] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] openat(AT_FDCWD, "./370/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8760] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8757] <... mount resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 8757] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] newfstatat(4, "", [pid 8758] <... mount resumed>) = 0 [pid 8757] <... openat resumed>) = 3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8758] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8757] chdir("./file0" [pid 5064] getdents64(4, [pid 8758] <... openat resumed>) = 3 [pid 8757] <... chdir resumed>) = 0 [pid 8758] chdir("./file0" [pid 8757] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8758] <... chdir resumed>) = 0 [pid 8757] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] getdents64(4, [pid 8758] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8757] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8758] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 330.872918][ T8761] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8760] <... write resumed>) = 2097152 [pid 8758] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] close(4) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8763 ./strace-static-x86_64: Process 8763 attached [pid 8760] munmap(0x7f41e0600000, 138412032 [pid 5064] rmdir("./370/file0" [pid 8763] set_robust_list(0x55555745a660, 24 [pid 8760] <... munmap resumed>) = 0 [pid 8763] <... set_robust_list resumed>) = 0 [pid 8760] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8763] chdir("./365" [pid 8760] <... openat resumed>) = 4 [pid 5064] <... rmdir resumed>) = 0 [pid 8763] <... chdir resumed>) = 0 [pid 8760] ioctl(4, LOOP_SET_FD, 3 [pid 8763] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8757] <... open resumed>) = 4 [pid 5064] getdents64(3, [pid 8763] <... prctl resumed>) = 0 [pid 8758] <... open resumed>) = 4 [pid 8763] setpgid(0, 0 [pid 8757] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8763] <... setpgid resumed>) = 0 [pid 8760] <... ioctl resumed>) = 0 [pid 8758] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] close(3 [pid 8763] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8760] close(3 [pid 8757] <... open resumed>) = 5 [pid 5064] <... close resumed>) = 0 [pid 8763] <... openat resumed>) = 3 [pid 8760] <... close resumed>) = 0 [pid 8758] <... open resumed>) = 5 [pid 8757] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] rmdir("./370" [pid 8763] write(3, "1000", 4 [pid 8760] close(4 [pid 8758] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8763] <... write resumed>) = 4 [pid 8760] <... close resumed>) = 0 [pid 8763] close(3) = 0 [pid 8763] symlink("/dev/binderfs", "./binderfs" [pid 8758] <... mmap resumed>) = 0x20000000 [pid 8757] <... mmap resumed>) = 0x20000000 [pid 8763] <... symlink resumed>) = 0 [pid 8763] memfd_create("syzkaller", 0) = 3 [pid 8763] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5064] <... rmdir resumed>) = 0 [pid 8760] mkdir("./file0", 0777 [pid 8758] ftruncate(4, 33587195 [pid 8757] ftruncate(4, 33587195 [pid 5064] mkdir("./371", 0777 [pid 8760] <... mkdir resumed>) = 0 [pid 8760] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... mkdir resumed>) = 0 [pid 8758] <... ftruncate resumed>) = 0 [pid 8757] <... ftruncate resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8758] unlink("./bus" [pid 8757] unlink("./bus" [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8758] <... unlink resumed>) = 0 [pid 8758] sendfile(-1, -1, NULL, 281474978811909 [ 330.931361][ T8762] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 330.952187][ T8760] loop4: detected capacity change from 0 to 4096 [pid 8763] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8758] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8757] <... unlink resumed>) = 0 [pid 8757] sendfile(-1, -1, NULL, 281474978811909 [pid 8758] exit_group(0 [pid 8757] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8757] exit_group(0 [pid 8758] <... exit_group resumed>) = ? [pid 8757] <... exit_group resumed>) = ? [pid 8757] +++ exited with 0 +++ [pid 8758] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8757, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8758, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5063] umount2("./366", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... restart_syscall resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8763] <... write resumed>) = 2097152 [pid 5063] <... openat resumed>) = 3 [pid 8763] munmap(0x7f41e0600000, 138412032 [pid 8760] <... mount resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5061] umount2("./371", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8760] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8763] <... munmap resumed>) = 0 [pid 5063] getdents64(3, [pid 5061] openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8760] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... openat resumed>) = 3 [pid 8760] chdir("./file0" [pid 5063] umount2("./366/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(3, "", [pid 8760] <... chdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] newfstatat(AT_FDCWD, "./366/binderfs", [pid 5061] getdents64(3, [pid 8763] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 331.039710][ T8764] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8763] <... openat resumed>) = 4 [pid 8760] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] unlink("./366/binderfs" [pid 5061] umount2("./371/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... unlink resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(AT_FDCWD, "./371/binderfs", [pid 8763] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8760] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] unlink("./371/binderfs") = 0 [pid 5061] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8760] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8763] <... ioctl resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5064] close(3 [pid 8763] close(3 [pid 5064] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8763] <... close resumed>) = 0 [pid 8763] close(4) = 0 [pid 8763] mkdir("./file0", 0777) = 0 [pid 8763] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8760] <... open resumed>) = 4 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... umount2 resumed>) = 0 [pid 8760] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000./strace-static-x86_64: Process 8765 attached ) = 5 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8765] set_robust_list(0x55555745a660, 24 [pid 5061] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8765] <... set_robust_list resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8765 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8765] chdir("./371" [pid 8760] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8765] <... chdir resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./371/file0", [pid 8765] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8765] <... prctl resumed>) = 0 [pid 5061] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 331.081193][ T8763] loop1: detected capacity change from 0 to 4096 [pid 8765] setpgid(0, 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8765] <... setpgid resumed>) = 0 [pid 8760] <... mmap resumed>) = 0x20000000 [pid 5063] newfstatat(AT_FDCWD, "./366/file0", [pid 8765] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] openat(AT_FDCWD, "./371/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8760] ftruncate(4, 33587195 [pid 5063] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8765] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "./366/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8765] write(3, "1000", 4 [pid 5063] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", [pid 8765] <... write resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8765] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 8765] <... close resumed>) = 0 [pid 8760] <... ftruncate resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8765] symlink("/dev/binderfs", "./binderfs" [pid 5061] getdents64(4, [pid 8765] <... symlink resumed>) = 0 [pid 8760] unlink("./bus" [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(4, [pid 5061] close(4 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] <... close resumed>) = 0 [pid 8765] memfd_create("syzkaller", 0 [pid 5061] rmdir("./371/file0") = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(4, [pid 5061] close(3) = 0 [pid 8765] <... memfd_create resumed>) = 3 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] rmdir("./371" [pid 8765] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8763] <... mount resumed>) = 0 [pid 5063] close(4 [pid 5061] <... rmdir resumed>) = 0 [pid 8765] <... mmap resumed>) = 0x7f41e0600000 [pid 8763] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 8763] <... openat resumed>) = 3 [pid 5061] mkdir("./372", 0777 [pid 8763] chdir("./file0" [pid 5061] <... mkdir resumed>) = 0 [pid 8763] <... chdir resumed>) = 0 [pid 5063] rmdir("./366/file0" [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8763] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8760] <... unlink resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8763] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] getdents64(3, [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8760] sendfile(-1, -1, NULL, 281474978811909 [pid 8763] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8760] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 8760] exit_group(0 [pid 5063] <... close resumed>) = 0 [pid 8760] <... exit_group resumed>) = ? [pid 5063] rmdir("./366" [pid 8763] <... open resumed>) = 4 [pid 5063] <... rmdir resumed>) = 0 [pid 8763] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] mkdir("./367", 0777 [pid 8763] <... open resumed>) = 5 [ 331.149627][ T8766] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8765] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8763] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8760] +++ exited with 0 +++ [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8763] <... mmap resumed>) = 0x20000000 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8760, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8763] ftruncate(4, 33587195 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3 [pid 8765] <... write resumed>) = 2097152 [pid 8763] <... ftruncate resumed>) = 0 [pid 5065] umount2("./364", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 8765] munmap(0x7f41e0600000, 138412032 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8765] <... munmap resumed>) = 0 [pid 8763] unlink("./bus" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8767 attached [pid 8767] set_robust_list(0x55555745a660, 24) = 0 [pid 8767] chdir("./372") = 0 [pid 5065] openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8767] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8767 [pid 8767] <... prctl resumed>) = 0 [pid 8765] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... openat resumed>) = 3 [pid 8767] setpgid(0, 0 [pid 8765] <... openat resumed>) = 4 [pid 5065] newfstatat(3, "", [pid 8767] <... setpgid resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8767] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8765] ioctl(4, LOOP_SET_FD, 3 [pid 8767] <... openat resumed>) = 3 [pid 5065] getdents64(3, [pid 8767] write(3, "1000", 4 [pid 8763] <... unlink resumed>) = 0 [pid 8767] <... write resumed>) = 4 [pid 8763] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8763] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8767] close(3 [pid 8763] exit_group(0 [pid 5065] umount2("./364/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8763] <... exit_group resumed>) = ? [pid 8767] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8767] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8767] memfd_create("syzkaller", 0) = 3 [pid 8767] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8765] <... ioctl resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./364/binderfs", [pid 8765] close(3) = 0 [pid 8765] close(4) = 0 [pid 8765] mkdir("./file0", 0777) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8763] +++ exited with 0 +++ [pid 5065] unlink("./364/binderfs" [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8763, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5065] <... unlink resumed>) = 0 [pid 5062] umount2("./365", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8767] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8765] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./365/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./365/binderfs", [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./365/binderfs") = 0 [ 331.266625][ T8765] loop3: detected capacity change from 0 to 4096 [pid 5062] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = 0 [pid 5063] close(3 [pid 5062] <... umount2 resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8768 [pid 5065] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8768 attached [pid 8768] set_robust_list(0x55555745a660, 24) = 0 [pid 5065] newfstatat(AT_FDCWD, "./364/file0", [pid 8768] chdir("./367" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8768] <... chdir resumed>) = 0 [pid 5065] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8768] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./364/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8768] <... prctl resumed>) = 0 [pid 8768] setpgid(0, 0 [pid 5065] newfstatat(4, "", [pid 8768] <... setpgid resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8768] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8768] <... openat resumed>) = 3 [pid 5062] newfstatat(AT_FDCWD, "./365/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./365/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8768] write(3, "1000", 4 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 8768] <... write resumed>) = 4 [pid 8765] <... mount resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] getdents64(4, [pid 5065] close(4 [pid 8765] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8765] <... openat resumed>) = 3 [pid 5062] close(4 [pid 5065] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5065] rmdir("./364/file0" [pid 5062] rmdir("./365/file0") = 0 [pid 8768] close(3 [pid 8765] chdir("./file0" [pid 5062] getdents64(3, [pid 8768] <... close resumed>) = 0 [pid 8765] <... chdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8768] symlink("/dev/binderfs", "./binderfs" [pid 8765] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... rmdir resumed>) = 0 [pid 5062] close(3 [pid 8768] <... symlink resumed>) = 0 [pid 8765] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] getdents64(3, [pid 8768] memfd_create("syzkaller", 0 [pid 8765] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] <... close resumed>) = 0 [pid 5065] close(3 [pid 5062] rmdir("./365" [pid 8768] <... memfd_create resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8768] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] rmdir("./364" [pid 8768] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] <... rmdir resumed>) = 0 [pid 5062] mkdir("./366", 0777 [pid 8767] <... write resumed>) = 2097152 [pid 5062] <... mkdir resumed>) = 0 [ 331.347203][ T8769] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] mkdir("./365", 0777 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8767] munmap(0x7f41e0600000, 138412032 [pid 8768] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8765] <... open resumed>) = 4 [pid 5065] <... mkdir resumed>) = 0 [pid 8765] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8765] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... openat resumed>) = 3 [pid 8765] <... mmap resumed>) = 0x20000000 [pid 8765] ftruncate(4, 33587195 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8765] <... ftruncate resumed>) = 0 [pid 8767] <... munmap resumed>) = 0 [pid 8767] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8765] unlink("./bus" [pid 8767] ioctl(4, LOOP_SET_FD, 3 [pid 8765] <... unlink resumed>) = 0 [pid 8765] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8765] exit_group(0) = ? [pid 8765] +++ exited with 0 +++ [pid 8767] <... ioctl resumed>) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8765, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5062] <... ioctl resumed>) = 0 [pid 8767] close(3) = 0 [pid 8767] close(4) = 0 [pid 8767] mkdir("./file0", 0777) = 0 [pid 8767] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8768] <... write resumed>) = 2097152 [pid 5064] umount2("./371", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(3 [pid 8768] munmap(0x7f41e0600000, 138412032 [pid 5065] <... ioctl resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 331.429476][ T8767] loop0: detected capacity change from 0 to 4096 [pid 5062] <... close resumed>) = 0 [pid 8768] <... munmap resumed>) = 0 [pid 5065] close(3 [pid 5064] openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... openat resumed>) = 3 [pid 5064] newfstatat(3, "", ./strace-static-x86_64: Process 8770 attached [pid 8770] set_robust_list(0x55555745a660, 24 [pid 5065] <... close resumed>) = 0 [pid 8770] <... set_robust_list resumed>) = 0 [pid 8770] chdir("./366" [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8770] <... chdir resumed>) = 0 [pid 8768] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8768] ioctl(4, LOOP_SET_FD, 3 [pid 8770] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8770] setpgid(0, 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8770] <... setpgid resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8770 [pid 8770] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8771 [pid 5064] umount2("./371/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8771 attached [pid 8770] <... openat resumed>) = 3 [pid 8767] <... mount resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8770] write(3, "1000", 4 [pid 5064] newfstatat(AT_FDCWD, "./371/binderfs", [pid 8767] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8770] <... write resumed>) = 4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8770] close(3 [pid 8767] <... openat resumed>) = 3 [pid 5064] unlink("./371/binderfs" [pid 8770] <... close resumed>) = 0 [pid 8770] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8767] chdir("./file0" [pid 5064] <... unlink resumed>) = 0 [pid 8770] memfd_create("syzkaller", 0 [pid 8767] <... chdir resumed>) = 0 [pid 5064] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8771] set_robust_list(0x55555745a660, 24) = 0 [pid 8767] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8770] <... memfd_create resumed>) = 3 [pid 8770] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8767] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8771] chdir("./365" [pid 8768] <... ioctl resumed>) = 0 [pid 8767] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8771] <... chdir resumed>) = 0 [pid 8771] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 8771] setpgid(0, 0) = 0 [pid 8771] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8768] close(3 [pid 8771] <... openat resumed>) = 3 [pid 8768] <... close resumed>) = 0 [pid 8771] write(3, "1000", 4) = 4 [pid 8768] close(4 [pid 8771] close(3 [pid 8768] <... close resumed>) = 0 [pid 8771] <... close resumed>) = 0 [pid 8768] mkdir("./file0", 0777 [pid 8771] symlink("/dev/binderfs", "./binderfs" [pid 8768] <... mkdir resumed>) = 0 [pid 8768] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8771] <... symlink resumed>) = 0 [pid 8771] memfd_create("syzkaller", 0) = 3 [pid 8771] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8767] <... open resumed>) = 4 [pid 8771] <... mmap resumed>) = 0x7f41e0600000 [pid 8767] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./371/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8767] <... open resumed>) = 5 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./371/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", [ 331.511680][ T8772] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.538288][ T8768] loop2: detected capacity change from 0 to 4096 [pid 8767] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8767] <... mmap resumed>) = 0x20000000 [pid 5064] getdents64(4, [pid 8767] ftruncate(4, 33587195 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8770] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8767] <... ftruncate resumed>) = 0 [pid 8771] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8768] <... mount resumed>) = 0 [pid 8767] unlink("./bus" [pid 8768] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./371/file0") = 0 [pid 5064] getdents64(3, [pid 8768] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8768] chdir("./file0" [pid 5064] close(3 [pid 8768] <... chdir resumed>) = 0 [pid 8768] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8767] <... unlink resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./371" [pid 8768] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8767] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... rmdir resumed>) = 0 [pid 8768] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8767] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] mkdir("./372", 0777 [pid 8767] exit_group(0 [pid 5064] <... mkdir resumed>) = 0 [pid 8767] <... exit_group resumed>) = ? [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8768] <... open resumed>) = 4 [pid 8768] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [ 331.602847][ T8773] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8768] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8767] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8767, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 8768] <... mmap resumed>) = 0x20000000 [pid 5061] <... restart_syscall resumed>) = 0 [pid 8768] ftruncate(4, 33587195 [pid 5061] umount2("./372", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./372/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8768] <... ftruncate resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./372/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./372/binderfs" [pid 8768] unlink("./bus" [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8768] <... unlink resumed>) = 0 [pid 8768] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8768] exit_group(0) = ? [pid 8771] <... write resumed>) = 2097152 [pid 8770] <... write resumed>) = 2097152 [pid 8771] munmap(0x7f41e0600000, 138412032 [pid 5061] <... umount2 resumed>) = 0 [pid 8770] munmap(0x7f41e0600000, 138412032) = 0 [pid 8771] <... munmap resumed>) = 0 [pid 8770] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8768] +++ exited with 0 +++ [pid 5064] <... ioctl resumed>) = 0 [pid 5061] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8770] <... openat resumed>) = 4 [pid 5064] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8770] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... close resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8768, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5061] newfstatat(AT_FDCWD, "./372/file0", [pid 8771] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8771] ioctl(4, LOOP_SET_FD, 3 [pid 8770] <... ioctl resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] umount2("./367", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8770] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8770] <... close resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8774 [pid 5063] openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8770] close(4 [pid 5063] <... openat resumed>) = 3 [pid 5061] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8770] <... close resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8770] mkdir("./file0", 0777 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5061] openat(AT_FDCWD, "./372/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 8774 attached [pid 8770] <... mkdir resumed>) = 0 [pid 5063] umount2("./367/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./367/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./367/binderfs") = 0 [pid 5063] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(4, "", [pid 8774] set_robust_list(0x55555745a660, 24 [pid 8770] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8774] <... set_robust_list resumed>) = 0 [pid 8771] <... ioctl resumed>) = 0 [pid 8774] chdir("./372" [pid 8771] close(3 [pid 5061] getdents64(4, [pid 8774] <... chdir resumed>) = 0 [pid 8771] <... close resumed>) = 0 [pid 8774] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8771] close(4 [pid 8774] <... prctl resumed>) = 0 [pid 8771] <... close resumed>) = 0 [pid 8774] setpgid(0, 0 [pid 8771] mkdir("./file0", 0777 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8774] <... setpgid resumed>) = 0 [pid 8771] <... mkdir resumed>) = 0 [pid 5061] getdents64(4, [pid 8774] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8771] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8774] <... openat resumed>) = 3 [pid 8774] write(3, "1000", 4) = 4 [pid 5063] <... umount2 resumed>) = 0 [pid 8774] close(3 [pid 5061] close(4 [pid 8774] <... close resumed>) = 0 [ 331.728477][ T8770] loop1: detected capacity change from 0 to 4096 [ 331.734235][ T8771] loop4: detected capacity change from 0 to 4096 [pid 8774] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... close resumed>) = 0 [pid 8774] <... symlink resumed>) = 0 [pid 5063] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8774] memfd_create("syzkaller", 0 [pid 5061] rmdir("./372/file0" [pid 8774] <... memfd_create resumed>) = 3 [pid 8774] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8771] <... mount resumed>) = 0 [pid 8771] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8771] chdir("./file0") = 0 [pid 8771] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8771] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... rmdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./367/file0", [pid 5061] getdents64(3, [pid 8771] <... open resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 5063] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8771] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] rmdir("./372" [pid 5063] openat(AT_FDCWD, "./367/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8770] <... mount resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 8770] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... rmdir resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 8770] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] mkdir("./373", 0777 [pid 8770] chdir("./file0" [pid 5063] getdents64(4, [pid 8771] <... open resumed>) = 5 [pid 8770] <... chdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] <... mkdir resumed>) = 0 [pid 8771] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8770] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] getdents64(4, [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8771] <... mmap resumed>) = 0x20000000 [pid 8770] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] close(4 [pid 5061] <... openat resumed>) = 3 [pid 8770] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... close resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5063] rmdir("./367/file0" [pid 8771] ftruncate(4, 33587195 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [ 331.779232][ T8775] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.791995][ T8776] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] rmdir("./367" [pid 8774] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8771] <... ftruncate resumed>) = 0 [pid 8770] <... open resumed>) = 4 [pid 5063] <... rmdir resumed>) = 0 [pid 8771] unlink("./bus" [pid 8770] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] mkdir("./368", 0777) = 0 [pid 8770] <... open resumed>) = 5 [pid 8771] <... unlink resumed>) = 0 [pid 8770] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] <... ioctl resumed>) = 0 [pid 8771] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5063] <... openat resumed>) = 3 [pid 5061] close(3 [pid 8774] <... write resumed>) = 2097152 [pid 8771] exit_group(0 [pid 8770] <... mmap resumed>) = 0x20000000 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... close resumed>) = 0 [pid 8770] ftruncate(4, 33587195 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8777 ./strace-static-x86_64: Process 8777 attached [pid 8777] set_robust_list(0x55555745a660, 24 [pid 8774] munmap(0x7f41e0600000, 138412032 [pid 8771] <... exit_group resumed>) = ? [pid 8770] <... ftruncate resumed>) = 0 [pid 8777] <... set_robust_list resumed>) = 0 [pid 8770] unlink("./bus" [pid 8777] chdir("./373") = 0 [pid 8777] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8777] setpgid(0, 0 [pid 8774] <... munmap resumed>) = 0 [pid 8771] +++ exited with 0 +++ [pid 8770] <... unlink resumed>) = 0 [pid 8770] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8771, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 8777] <... setpgid resumed>) = 0 [pid 8774] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8777] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8774] <... openat resumed>) = 4 [pid 8770] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8777] <... openat resumed>) = 3 [pid 8774] ioctl(4, LOOP_SET_FD, 3 [pid 8777] write(3, "1000", 4 [pid 8770] exit_group(0) = ? [pid 5065] umount2("./365", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8777] <... write resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 8777] close(3 [pid 8774] <... ioctl resumed>) = 0 [pid 5065] newfstatat(3, "", [pid 8777] <... close resumed>) = 0 [pid 8777] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8777] memfd_create("syzkaller", 0 [pid 8774] close(3 [pid 5065] getdents64(3, [pid 8777] <... memfd_create resumed>) = 3 [pid 8777] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8774] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8777] <... mmap resumed>) = 0x7f41e0600000 [pid 8774] close(4 [pid 5065] umount2("./365/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8770] +++ exited with 0 +++ [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8770, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5065] newfstatat(AT_FDCWD, "./365/binderfs", [pid 5062] umount2("./366", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8774] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8774] mkdir("./file0", 0777) = 0 [pid 5065] unlink("./365/binderfs" [pid 5063] <... ioctl resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8774] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... openat resumed>) = 3 [pid 5065] <... unlink resumed>) = 0 [pid 5063] close(3 [pid 5062] newfstatat(3, "", [pid 5065] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8778 attached [pid 8778] set_robust_list(0x55555745a660, 24) = 0 [pid 8778] chdir("./368") = 0 [pid 8778] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8778] setpgid(0, 0) = 0 [pid 8778] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8778 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8778] write(3, "1000", 4 [pid 5062] getdents64(3, [pid 8778] <... write resumed>) = 4 [pid 8778] close(3 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [ 331.923677][ T8774] loop3: detected capacity change from 0 to 4096 [pid 5062] umount2("./366/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8778] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8778] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] newfstatat(AT_FDCWD, "./366/binderfs", [pid 8778] memfd_create("syzkaller", 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./366/binderfs" [pid 8778] <... memfd_create resumed>) = 3 [pid 5065] <... umount2 resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 8778] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8777] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8774] <... mount resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./365/file0", [pid 8774] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8774] chdir("./file0" [pid 5065] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8774] <... chdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8778] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8774] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] openat(AT_FDCWD, "./365/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8777] <... write resumed>) = 2097152 [pid 8774] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... openat resumed>) = 4 [pid 8777] munmap(0x7f41e0600000, 138412032 [pid 8774] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8777] <... munmap resumed>) = 0 [pid 5065] newfstatat(4, "", [pid 5062] <... umount2 resumed>) = 0 [pid 8777] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8777] <... openat resumed>) = 4 [pid 8774] <... open resumed>) = 4 [ 332.015559][ T8779] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] getdents64(4, [pid 5062] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8777] ioctl(4, LOOP_SET_FD, 3 [pid 8774] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(4, [pid 8777] <... ioctl resumed>) = 0 [pid 8774] <... open resumed>) = 5 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] newfstatat(AT_FDCWD, "./366/file0", [pid 8777] close(3 [pid 8774] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] close(4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8777] <... close resumed>) = 0 [pid 8774] <... mmap resumed>) = 0x20000000 [pid 5065] <... close resumed>) = 0 [pid 5062] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8777] close(4 [pid 8774] ftruncate(4, 33587195 [pid 5065] rmdir("./365/file0" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8777] <... close resumed>) = 0 [pid 8774] <... ftruncate resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./366/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8777] mkdir("./file0", 0777 [pid 8774] unlink("./bus" [pid 5065] getdents64(3, [pid 5062] <... openat resumed>) = 4 [pid 8777] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] newfstatat(4, "", [pid 5065] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8778] <... write resumed>) = 2097152 [pid 5065] <... close resumed>) = 0 [pid 5062] getdents64(4, [pid 8777] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] rmdir("./365" [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8778] munmap(0x7f41e0600000, 138412032 [pid 8774] <... unlink resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5062] getdents64(4, [pid 8774] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] mkdir("./366", 0777 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8774] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8774] exit_group(0) = ? [pid 5062] close(4) = 0 [pid 8778] <... munmap resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5062] rmdir("./366/file0" [pid 8778] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8778] <... openat resumed>) = 4 [pid 5062] <... rmdir resumed>) = 0 [ 332.076835][ T8777] loop0: detected capacity change from 0 to 4096 [pid 8778] ioctl(4, LOOP_SET_FD, 3 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./366") = 0 [pid 5062] mkdir("./367", 0777) = 0 [pid 8778] <... ioctl resumed>) = 0 [pid 8774] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8774, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8778] close(3 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8778] <... close resumed>) = 0 [pid 8777] <... mount resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8777] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8778] close(4 [pid 8777] chdir("./file0" [pid 5064] umount2("./372", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8778] <... close resumed>) = 0 [pid 8777] <... chdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8777] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8778] mkdir("./file0", 0777 [pid 8777] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8777] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... openat resumed>) = 3 [pid 8778] <... mkdir resumed>) = 0 [pid 5064] newfstatat(3, "", [pid 8778] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8777] <... open resumed>) = 4 [pid 8777] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5064] getdents64(3, [pid 8777] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8777] <... mmap resumed>) = 0x20000000 [pid 8777] ftruncate(4, 33587195 [ 332.121249][ T8778] loop2: detected capacity change from 0 to 4096 [ 332.130227][ T8780] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] umount2("./372/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8777] <... ftruncate resumed>) = 0 [pid 8777] unlink("./bus" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./372/binderfs", [pid 5065] <... ioctl resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./372/binderfs") = 0 [pid 5064] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] close(3 [pid 8778] <... mount resumed>) = 0 [pid 8777] <... unlink resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 8778] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5065] <... close resumed>) = 0 [pid 8778] chdir("./file0") = 0 [pid 8777] sendfile(-1, -1, NULL, 281474978811909 [pid 8778] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8777] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8777] exit_group(0 [pid 8778] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8777] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 8782 attached [pid 8778] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8782] set_robust_list(0x55555745a660, 24 [pid 5064] newfstatat(AT_FDCWD, "./372/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8782] <... set_robust_list resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8782 [pid 8782] chdir("./366" [pid 5064] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./372/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... ioctl resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 8777] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8777, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5064] newfstatat(4, "", [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 8778] <... open resumed>) = 4 [pid 8782] <... chdir resumed>) = 0 [pid 8778] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] close(3 [pid 5061] <... restart_syscall resumed>) = 0 [pid 8782] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8778] <... open resumed>) = 5 [pid 8782] <... prctl resumed>) = 0 [pid 8778] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... close resumed>) = 0 [ 332.197582][ T8781] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8783 attached [pid 8782] setpgid(0, 0 [pid 8778] <... mmap resumed>) = 0x20000000 [pid 5064] getdents64(4, [pid 5061] umount2("./373", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8783] set_robust_list(0x55555745a660, 24 [pid 8782] <... setpgid resumed>) = 0 [pid 8778] ftruncate(4, 33587195 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8783 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8783] <... set_robust_list resumed>) = 0 [pid 5064] getdents64(4, [pid 5061] openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8783] chdir("./367" [pid 8782] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8783] <... chdir resumed>) = 0 [pid 5064] close(4 [pid 5061] newfstatat(3, "", [pid 5064] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] rmdir("./372/file0" [pid 8778] <... ftruncate resumed>) = 0 [pid 8778] unlink("./bus" [pid 5061] getdents64(3, [pid 8782] <... openat resumed>) = 3 [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8783] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] umount2("./373/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8783] setpgid(0, 0 [pid 8782] write(3, "1000", 4 [pid 5064] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8783] <... setpgid resumed>) = 0 [pid 8782] <... write resumed>) = 4 [pid 8778] <... unlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] newfstatat(AT_FDCWD, "./373/binderfs", [pid 8783] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8782] close(3 [pid 8778] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8782] <... close resumed>) = 0 [pid 8778] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] <... close resumed>) = 0 [pid 5061] unlink("./373/binderfs" [pid 8782] symlink("/dev/binderfs", "./binderfs" [pid 5064] rmdir("./372" [pid 8782] <... symlink resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 8783] <... openat resumed>) = 3 [pid 8782] memfd_create("syzkaller", 0 [pid 8778] exit_group(0 [pid 5064] mkdir("./373", 0777 [pid 5061] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8783] write(3, "1000", 4 [pid 8778] <... exit_group resumed>) = ? [pid 5064] <... mkdir resumed>) = 0 [pid 8783] <... write resumed>) = 4 [pid 8783] close(3) = 0 [pid 8782] <... memfd_create resumed>) = 3 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8783] symlink("/dev/binderfs", "./binderfs" [pid 8782] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5064] <... openat resumed>) = 3 [pid 8783] <... symlink resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8783] memfd_create("syzkaller", 0) = 3 [pid 5061] <... umount2 resumed>) = 0 [pid 8783] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8778] +++ exited with 0 +++ [pid 8783] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8778, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... restart_syscall resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./373/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./368", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "./373/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8782] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8783] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./373/file0" [pid 5063] openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... rmdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./368/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./373") = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] mkdir("./374", 0777) = 0 [pid 5063] newfstatat(AT_FDCWD, "./368/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5063] unlink("./368/binderfs") = 0 [pid 5063] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8782] <... write resumed>) = 2097152 [pid 5064] <... ioctl resumed>) = 0 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 8784 attached [pid 8783] <... write resumed>) = 2097152 [pid 8782] munmap(0x7f41e0600000, 138412032 [pid 5063] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8784 [pid 8784] set_robust_list(0x55555745a660, 24) = 0 [pid 8784] chdir("./373") = 0 [pid 8784] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8782] <... munmap resumed>) = 0 [pid 8784] setpgid(0, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8784] <... setpgid resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./368/file0", [pid 8782] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8784] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8784] <... openat resumed>) = 3 [pid 8783] munmap(0x7f41e0600000, 138412032 [pid 8782] <... openat resumed>) = 4 [pid 5063] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8782] ioctl(4, LOOP_SET_FD, 3 [pid 8784] write(3, "1000", 4) = 4 [pid 8784] close(3) = 0 [pid 8784] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8784] <... symlink resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./368/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8784] memfd_create("syzkaller", 0 [pid 8783] <... munmap resumed>) = 0 [pid 8782] <... ioctl resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5061] <... ioctl resumed>) = 0 [pid 8784] <... memfd_create resumed>) = 3 [pid 8783] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8784] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8783] <... openat resumed>) = 4 [pid 8782] close(3 [pid 5063] getdents64(4, [pid 5061] close(3 [pid 8784] <... mmap resumed>) = 0x7f41e0600000 [pid 8783] ioctl(4, LOOP_SET_FD, 3 [pid 8782] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] <... close resumed>) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8782] close(4 [pid 5063] close(4 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./368/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./368") = 0 [pid 5063] mkdir("./369", 0777./strace-static-x86_64: Process 8785 attached [pid 8782] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 8785] set_robust_list(0x55555745a660, 24) = 0 [pid 8785] chdir("./374" [pid 8782] mkdir("./file0", 0777 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8785 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 8785] <... chdir resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8785] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8785] setpgid(0, 0) = 0 [pid 8785] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8785] write(3, "1000", 4) = 4 [pid 8785] close(3) = 0 [pid 8785] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8783] <... ioctl resumed>) = 0 [pid 8782] <... mkdir resumed>) = 0 [pid 8783] close(3 [pid 8782] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8783] <... close resumed>) = 0 [pid 8785] memfd_create("syzkaller", 0 [pid 8783] close(4 [pid 8785] <... memfd_create resumed>) = 3 [pid 8783] <... close resumed>) = 0 [pid 8785] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8783] mkdir("./file0", 0777 [pid 8785] <... mmap resumed>) = 0x7f41e0600000 [pid 8783] <... mkdir resumed>) = 0 [ 332.437939][ T8782] loop4: detected capacity change from 0 to 4096 [ 332.459589][ T8783] loop1: detected capacity change from 0 to 4096 [pid 8783] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8785] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8784] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5063] <... ioctl resumed>) = 0 [pid 8783] <... mount resumed>) = 0 [pid 8782] <... mount resumed>) = 0 [pid 8783] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8782] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8783] <... openat resumed>) = 3 [pid 8784] munmap(0x7f41e0600000, 138412032 [pid 8783] chdir("./file0" [pid 8782] chdir("./file0" [pid 8783] <... chdir resumed>) = 0 [pid 8782] <... chdir resumed>) = 0 [pid 8783] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8782] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8784] <... munmap resumed>) = 0 [pid 8783] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8782] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8783] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8782] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] close(3 [pid 8784] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... close resumed>) = 0 [ 332.566683][ T8786] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 332.577374][ T8787] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8785] <... write resumed>) = 2097152 [pid 8784] <... openat resumed>) = 4 [pid 8783] <... open resumed>) = 4 [pid 8784] ioctl(4, LOOP_SET_FD, 3 [pid 8783] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000./strace-static-x86_64: Process 8788 attached [pid 8785] munmap(0x7f41e0600000, 138412032 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8788 [pid 8788] set_robust_list(0x55555745a660, 24) = 0 [pid 8785] <... munmap resumed>) = 0 [pid 8783] <... open resumed>) = 5 [pid 8782] <... open resumed>) = 4 [pid 8788] chdir("./369" [pid 8782] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8788] <... chdir resumed>) = 0 [pid 8783] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8782] <... open resumed>) = 5 [pid 8788] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8785] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8784] <... ioctl resumed>) = 0 [pid 8783] <... mmap resumed>) = 0x20000000 [pid 8782] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8788] setpgid(0, 0 [pid 8785] <... openat resumed>) = 4 [pid 8784] close(3 [pid 8783] ftruncate(4, 33587195 [pid 8782] <... mmap resumed>) = 0x20000000 [pid 8788] <... setpgid resumed>) = 0 [pid 8785] ioctl(4, LOOP_SET_FD, 3 [pid 8784] <... close resumed>) = 0 [pid 8788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8784] close(4 [pid 8782] ftruncate(4, 33587195 [pid 8788] <... openat resumed>) = 3 [pid 8784] <... close resumed>) = 0 [pid 8788] write(3, "1000", 4 [pid 8784] mkdir("./file0", 0777 [pid 8783] <... ftruncate resumed>) = 0 [pid 8788] <... write resumed>) = 4 [pid 8784] <... mkdir resumed>) = 0 [pid 8783] unlink("./bus" [pid 8782] <... ftruncate resumed>) = 0 [pid 8788] close(3 [pid 8782] unlink("./bus" [pid 8788] <... close resumed>) = 0 [pid 8788] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8784] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8788] memfd_create("syzkaller", 0) = 3 [pid 8788] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8785] <... ioctl resumed>) = 0 [pid 8788] <... mmap resumed>) = 0x7f41e0600000 [pid 8785] close(3) = 0 [pid 8785] close(4) = 0 [pid 8785] mkdir("./file0", 0777) = 0 [pid 8783] <... unlink resumed>) = 0 [pid 8783] sendfile(-1, -1, NULL, 281474978811909 [pid 8782] <... unlink resumed>) = 0 [pid 8783] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8782] sendfile(-1, -1, NULL, 281474978811909 [pid 8783] exit_group(0 [pid 8782] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8785] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8783] <... exit_group resumed>) = ? [pid 8782] exit_group(0) = ? [ 332.632934][ T8784] loop3: detected capacity change from 0 to 4096 [ 332.656139][ T8785] loop0: detected capacity change from 0 to 4096 [pid 8783] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8783, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] umount2("./367", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", [pid 8782] +++ exited with 0 +++ [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8782, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./367/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./366", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] newfstatat(AT_FDCWD, "./367/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./367/binderfs") = 0 [pid 5065] <... openat resumed>) = 3 [pid 5062] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./366/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./366/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./366/binderfs") = 0 [pid 5065] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8788] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8784] <... mount resumed>) = 0 [pid 8784] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8784] chdir("./file0") = 0 [pid 8784] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8784] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] newfstatat(AT_FDCWD, "./366/file0", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./367/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./367/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./367/file0" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5065] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./367") = 0 [pid 5062] mkdir("./368", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8785] <... mount resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./366/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8785] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... openat resumed>) = 4 [pid 8785] <... openat resumed>) = 3 [pid 8785] chdir("./file0" [pid 8784] <... open resumed>) = 4 [pid 5065] newfstatat(4, "", [pid 8785] <... chdir resumed>) = 0 [pid 8784] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8785] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8784] <... open resumed>) = 5 [pid 8785] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] getdents64(4, [pid 8785] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8784] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] close(4 [pid 8784] <... mmap resumed>) = 0x20000000 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./366/file0") = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 8784] ftruncate(4, 33587195 [pid 5065] <... close resumed>) = 0 [pid 8784] <... ftruncate resumed>) = 0 [pid 5065] rmdir("./366" [pid 8784] unlink("./bus" [pid 8785] <... open resumed>) = 4 [pid 5065] <... rmdir resumed>) = 0 [ 332.748593][ T8789] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 332.779828][ T8790] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] mkdir("./367", 0777 [pid 8785] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8785] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8784] <... unlink resumed>) = 0 [pid 8784] sendfile(-1, -1, NULL, 281474978811909 [pid 8785] <... mmap resumed>) = 0x20000000 [pid 8784] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8785] ftruncate(4, 33587195 [pid 8784] exit_group(0) = ? [pid 8788] <... write resumed>) = 2097152 [pid 8788] munmap(0x7f41e0600000, 138412032 [pid 8785] <... ftruncate resumed>) = 0 [pid 8788] <... munmap resumed>) = 0 [pid 8785] unlink("./bus" [pid 8788] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8788] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... ioctl resumed>) = 0 [pid 8788] <... ioctl resumed>) = 0 [pid 5062] close(3 [pid 8785] <... unlink resumed>) = 0 [pid 8785] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8785] exit_group(0) = ? [pid 8788] close(3 [pid 5062] <... close resumed>) = 0 [pid 8784] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8784, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./373", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./373/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./373/binderfs", ./strace-static-x86_64: Process 8791 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8791] set_robust_list(0x55555745a660, 24 [pid 5064] unlink("./373/binderfs") = 0 [pid 8791] <... set_robust_list resumed>) = 0 [pid 5064] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8791] chdir("./368" [pid 8785] +++ exited with 0 +++ [pid 8791] <... chdir resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8785, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8791] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8791] <... prctl resumed>) = 0 [pid 8791] setpgid(0, 0 [pid 5061] umount2("./374", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8791] <... setpgid resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8791] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8791 [pid 5061] newfstatat(3, "", [pid 8788] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8791] <... openat resumed>) = 3 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./374/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./374/binderfs", [pid 8791] write(3, "1000", 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8791] <... write resumed>) = 4 [pid 8788] close(4 [pid 8791] close(3 [pid 8788] <... close resumed>) = 0 [pid 5061] unlink("./374/binderfs" [pid 8788] mkdir("./file0", 0777 [pid 8791] <... close resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 8791] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8788] <... mkdir resumed>) = 0 [pid 5061] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8788] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8791] memfd_create("syzkaller", 0) = 3 [pid 8791] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5065] <... ioctl resumed>) = 0 [ 332.863629][ T8788] loop2: detected capacity change from 0 to 4096 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8792 attached , child_tidptr=0x55555745a650) = 8792 [pid 8792] set_robust_list(0x55555745a660, 24) = 0 [pid 8792] chdir("./367") = 0 [pid 8792] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... umount2 resumed>) = 0 [pid 8792] <... prctl resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./373/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8788] <... mount resumed>) = 0 [pid 5064] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8788] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8788] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "./373/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8788] chdir("./file0" [pid 5064] <... openat resumed>) = 4 [pid 8788] <... chdir resumed>) = 0 [pid 5064] newfstatat(4, "", [pid 8791] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8788] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8792] setpgid(0, 0 [pid 5061] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8788] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] getdents64(4, [pid 8788] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 8792] <... setpgid resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] rmdir("./373/file0" [pid 8792] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... rmdir resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./374/file0", [pid 5064] getdents64(3, [pid 8792] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8792] write(3, "1000", 4 [pid 5064] close(3) = 0 [pid 5064] rmdir("./373" [pid 8792] <... write resumed>) = 4 [pid 5064] <... rmdir resumed>) = 0 [pid 5061] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8792] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] mkdir("./374", 0777 [pid 8792] <... close resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./374/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8792] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... openat resumed>) = 4 [pid 8792] memfd_create("syzkaller", 0 [pid 5064] <... openat resumed>) = 3 [pid 5061] newfstatat(4, "", [pid 8792] <... memfd_create resumed>) = 3 [pid 8792] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8792] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./374/file0") = 0 [pid 8788] <... open resumed>) = 4 [pid 5061] getdents64(3, [pid 8788] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [ 332.960082][ T8793] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] close(3 [pid 8788] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./374" [pid 8788] <... mmap resumed>) = 0x20000000 [pid 5061] <... rmdir resumed>) = 0 [pid 8788] ftruncate(4, 33587195 [pid 5061] mkdir("./375", 0777 [pid 8788] <... ftruncate resumed>) = 0 [pid 8788] unlink("./bus" [pid 5061] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8792] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8788] <... unlink resumed>) = 0 [pid 8788] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8788] exit_group(0) = ? [pid 8791] <... write resumed>) = 2097152 [pid 8791] munmap(0x7f41e0600000, 138412032 [pid 8788] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8788, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./369", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./369/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./369/binderfs", [pid 8791] <... munmap resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8791] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] unlink("./369/binderfs" [pid 8791] <... openat resumed>) = 4 [pid 5064] <... ioctl resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 8791] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8794 attached , child_tidptr=0x55555745a650) = 8794 [pid 8794] set_robust_list(0x55555745a660, 24) = 0 [pid 8791] <... ioctl resumed>) = 0 [pid 8791] close(3) = 0 [pid 8794] chdir("./374" [pid 8792] <... write resumed>) = 2097152 [pid 8791] close(4 [pid 8794] <... chdir resumed>) = 0 [pid 8792] munmap(0x7f41e0600000, 138412032 [pid 8794] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8791] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8794] <... prctl resumed>) = 0 [pid 8791] mkdir("./file0", 0777 [pid 5063] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8794] setpgid(0, 0) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./369/file0", [pid 8791] <... mkdir resumed>) = 0 [pid 8794] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8792] <... munmap resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8791] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8792] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 333.089836][ T8791] loop1: detected capacity change from 0 to 4096 [pid 5063] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(3 [pid 8792] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8794] <... openat resumed>) = 3 [pid 8792] ioctl(4, LOOP_SET_FD, 3 [pid 5063] openat(AT_FDCWD, "./369/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... close resumed>) = 0 [pid 8794] write(3, "1000", 4) = 4 [pid 8794] close(3) = 0 [pid 8792] <... ioctl resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8794] symlink("/dev/binderfs", "./binderfs" [pid 8792] close(3 [pid 5063] newfstatat(4, "", [pid 8792] <... close resumed>) = 0 [pid 8794] <... symlink resumed>) = 0 [pid 8792] close(4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 8795 attached [pid 8795] set_robust_list(0x55555745a660, 24 [pid 8792] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8795 [pid 8795] <... set_robust_list resumed>) = 0 [pid 8792] mkdir("./file0", 0777 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8795] chdir("./375" [pid 8794] memfd_create("syzkaller", 0 [pid 5063] getdents64(4, [pid 8795] <... chdir resumed>) = 0 [pid 8794] <... memfd_create resumed>) = 3 [pid 8792] <... mkdir resumed>) = 0 [pid 8795] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8795] setpgid(0, 0 [pid 8794] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8795] <... setpgid resumed>) = 0 [pid 8794] <... mmap resumed>) = 0x7f41e0600000 [pid 8792] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] close(4 [pid 8795] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./369/file0" [pid 8795] <... openat resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./369") = 0 [pid 8795] write(3, "1000", 4 [pid 8791] <... mount resumed>) = 0 [pid 5063] mkdir("./370", 0777 [pid 8795] <... write resumed>) = 4 [pid 8791] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... mkdir resumed>) = 0 [pid 8795] close(3 [pid 8791] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8795] <... close resumed>) = 0 [pid 8791] chdir("./file0" [pid 5063] <... openat resumed>) = 3 [pid 8795] symlink("/dev/binderfs", "./binderfs" [pid 8791] <... chdir resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8795] <... symlink resumed>) = 0 [pid 8791] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8791] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8795] memfd_create("syzkaller", 0) = 3 [ 333.154649][ T8792] loop4: detected capacity change from 0 to 4096 [ 333.189862][ T8796] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8795] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8791] <... open resumed>) = 4 [pid 8791] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8791] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8794] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8791] <... mmap resumed>) = 0x20000000 [pid 8791] ftruncate(4, 33587195 [pid 8795] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8792] <... mount resumed>) = 0 [pid 8791] <... ftruncate resumed>) = 0 [pid 8792] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8791] unlink("./bus" [pid 8792] chdir("./file0") = 0 [pid 8792] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8792] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8791] <... unlink resumed>) = 0 [pid 8791] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8791] exit_group(0) = ? [pid 8792] <... open resumed>) = 4 [ 333.252971][ T8797] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8792] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5063] <... ioctl resumed>) = 0 [pid 8791] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8791, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 8792] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] close(3 [pid 8792] <... mmap resumed>) = 0x20000000 [pid 5062] <... restart_syscall resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8792] ftruncate(4, 33587195 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] umount2("./368", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8798 attached [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8798 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8798] set_robust_list(0x55555745a660, 24 [pid 8792] <... ftruncate resumed>) = 0 [pid 8798] <... set_robust_list resumed>) = 0 [pid 8792] unlink("./bus" [pid 5062] openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", [pid 8798] chdir("./370" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8798] <... chdir resumed>) = 0 [pid 5062] getdents64(3, [pid 8798] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8798] <... prctl resumed>) = 0 [pid 5062] umount2("./368/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8798] setpgid(0, 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8798] <... setpgid resumed>) = 0 [pid 8792] <... unlink resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./368/binderfs", [pid 8798] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8792] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8798] <... openat resumed>) = 3 [pid 8792] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5062] unlink("./368/binderfs" [pid 8798] write(3, "1000", 4 [pid 8795] <... write resumed>) = 2097152 [pid 8792] exit_group(0 [pid 5062] <... unlink resumed>) = 0 [pid 8798] <... write resumed>) = 4 [pid 8792] <... exit_group resumed>) = ? [pid 5062] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8798] close(3 [pid 8795] munmap(0x7f41e0600000, 138412032 [pid 8794] <... write resumed>) = 2097152 [pid 8798] <... close resumed>) = 0 [pid 8794] munmap(0x7f41e0600000, 138412032 [pid 8798] symlink("/dev/binderfs", "./binderfs" [pid 8794] <... munmap resumed>) = 0 [pid 8798] <... symlink resumed>) = 0 [pid 8798] memfd_create("syzkaller", 0) = 3 [pid 8795] <... munmap resumed>) = 0 [pid 8794] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8792] +++ exited with 0 +++ [pid 8798] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8795] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8794] <... openat resumed>) = 4 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8792, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8798] <... mmap resumed>) = 0x7f41e0600000 [pid 8794] ioctl(4, LOOP_SET_FD, 3 [pid 8795] <... openat resumed>) = 4 [pid 8795] ioctl(4, LOOP_SET_FD, 3 [pid 5065] umount2("./367", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./367/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./367/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./367/binderfs") = 0 [pid 5065] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./368/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./368/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 5065] newfstatat(AT_FDCWD, "./367/file0", [pid 5062] <... close resumed>) = 0 [pid 8795] <... ioctl resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] rmdir("./368/file0" [pid 5065] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8795] close(3 [pid 8794] <... ioctl resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./367/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] getdents64(3, [pid 8795] <... close resumed>) = 0 [pid 8794] close(3 [pid 5065] <... openat resumed>) = 4 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8795] close(4 [pid 8794] <... close resumed>) = 0 [pid 8795] <... close resumed>) = 0 [pid 8794] close(4 [pid 5065] newfstatat(4, "", [pid 5062] close(3 [pid 8795] mkdir("./file0", 0777 [pid 8794] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 8794] mkdir("./file0", 0777 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] rmdir("./368" [pid 8794] <... mkdir resumed>) = 0 [pid 5065] getdents64(4, [pid 5062] <... rmdir resumed>) = 0 [pid 8794] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./367/file0" [pid 8795] <... mkdir resumed>) = 0 [pid 5062] mkdir("./369", 0777 [pid 8795] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5062] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] rmdir("./367" [pid 5062] <... openat resumed>) = 3 [pid 5065] <... rmdir resumed>) = 0 [ 333.374659][ T8794] loop3: detected capacity change from 0 to 4096 [ 333.381462][ T8795] loop0: detected capacity change from 0 to 4096 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5065] mkdir("./368", 0777 [pid 8798] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8795] <... mount resumed>) = 0 [pid 8795] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8794] <... mount resumed>) = 0 [pid 8794] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8794] chdir("./file0") = 0 [pid 8794] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8794] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8795] <... openat resumed>) = 3 [pid 8795] chdir("./file0") = 0 [pid 8795] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 333.452545][ T8799] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 333.464932][ T8800] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8795] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8798] <... write resumed>) = 2097152 [pid 8795] <... open resumed>) = 4 [pid 8794] <... open resumed>) = 4 [pid 5065] <... ioctl resumed>) = 0 [pid 8794] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8795] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8794] <... open resumed>) = 5 [pid 8794] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8795] <... open resumed>) = 5 [pid 8794] <... mmap resumed>) = 0x20000000 [pid 8795] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8794] ftruncate(4, 33587195 [pid 8795] <... mmap resumed>) = 0x20000000 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8798] munmap(0x7f41e0600000, 138412032 [pid 8794] <... ftruncate resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8798] <... munmap resumed>) = 0 [pid 8795] ftruncate(4, 33587195 [pid 8794] unlink("./bus" [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8798] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 333.520735][ T28] kauditd_printk_skb: 98 callbacks suppressed [ 333.520753][ T28] audit: type=1800 audit(1708423486.050:5570): pid=8795 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [pid 8798] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8802 attached [pid 8795] <... ftruncate resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8801 [pid 8794] <... unlink resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8802 [pid 8798] <... ioctl resumed>) = 0 [pid 8794] sendfile(-1, -1, NULL, 281474978811909 [pid 8798] close(3 [pid 8794] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8798] <... close resumed>) = 0 [pid 8794] exit_group(0 [pid 8802] set_robust_list(0x55555745a660, 24 [pid 8798] close(4 [pid 8794] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 8801 attached [pid 8802] <... set_robust_list resumed>) = 0 [pid 8798] <... close resumed>) = 0 [pid 8795] unlink("./bus" [pid 8802] chdir("./368" [pid 8801] set_robust_list(0x55555745a660, 24 [pid 8798] mkdir("./file0", 0777 [pid 8802] <... chdir resumed>) = 0 [pid 8801] <... set_robust_list resumed>) = 0 [pid 8798] <... mkdir resumed>) = 0 [pid 8802] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8801] chdir("./369" [pid 8802] <... prctl resumed>) = 0 [pid 8801] <... chdir resumed>) = 0 [pid 8798] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8801] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8802] setpgid(0, 0) = 0 [pid 8801] <... prctl resumed>) = 0 [pid 8795] <... unlink resumed>) = 0 [pid 8801] setpgid(0, 0) = 0 [pid 8795] sendfile(-1, -1, NULL, 281474978811909 [pid 8802] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8801] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8795] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8794] +++ exited with 0 +++ [ 333.571369][ T8798] loop2: detected capacity change from 0 to 4096 [pid 8802] <... openat resumed>) = 3 [pid 8801] <... openat resumed>) = 3 [pid 8795] exit_group(0 [pid 8801] write(3, "1000", 4) = 4 [pid 8801] close(3) = 0 [pid 8801] symlink("/dev/binderfs", "./binderfs" [pid 8802] write(3, "1000", 4 [pid 8801] <... symlink resumed>) = 0 [pid 8795] <... exit_group resumed>) = ? [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8794, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 8802] <... write resumed>) = 4 [pid 8802] close(3) = 0 [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 8802] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... restart_syscall resumed>) = 0 [pid 8801] memfd_create("syzkaller", 0 [pid 8802] <... symlink resumed>) = 0 [pid 8801] <... memfd_create resumed>) = 3 [ 333.609462][ T28] audit: type=1800 audit(1708423486.070:5571): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 333.636018][ T8803] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8801] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] umount2("./374", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8802] memfd_create("syzkaller", 0 [pid 8801] <... mmap resumed>) = 0x7f41e0600000 [pid 8798] <... mount resumed>) = 0 [pid 8795] +++ exited with 0 +++ [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8802] <... memfd_create resumed>) = 3 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8795, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5064] openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8798] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8798] chdir("./file0") = 0 [pid 8798] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8798] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 4 [pid 8802] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... openat resumed>) = 3 [pid 8798] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8802] <... mmap resumed>) = 0x7f41e0600000 [ 333.654222][ T28] audit: type=1800 audit(1708423486.080:5572): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 333.678249][ T28] audit: type=1800 audit(1708423486.080:5573): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 333.699240][ T28] audit: type=1800 audit(1708423486.080:5574): pid=8795 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [pid 8801] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8798] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] newfstatat(3, "", [pid 5061] umount2("./375", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8798] <... mmap resumed>) = 0x20000000 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(3, "", [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] umount2("./374/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(3, [pid 8798] ftruncate(4, 33587195 [pid 5064] newfstatat(AT_FDCWD, "./374/binderfs", [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8798] <... ftruncate resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./375/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] unlink("./374/binderfs") = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(AT_FDCWD, "./375/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8798] unlink("./bus" [ 333.720446][ T28] audit: type=1800 audit(1708423486.080:5575): pid=8795 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 333.740963][ T28] audit: type=1800 audit(1708423486.210:5576): pid=8798 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [pid 5061] unlink("./375/binderfs" [pid 8798] <... unlink resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 8798] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8798] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8798] exit_group(0) = ? [pid 8798] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8798, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 8802] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8801] <... write resumed>) = 2097152 [pid 5064] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5064] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8801] munmap(0x7f41e0600000, 138412032 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./370", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./374/file0", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./375/file0", [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5061] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8801] <... munmap resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(3, "", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] openat(AT_FDCWD, "./375/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(3, [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8801] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] umount2("./370/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 8801] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [ 333.768186][ T28] audit: type=1800 audit(1708423486.230:5577): pid=8798 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 333.792368][ T28] audit: type=1800 audit(1708423486.250:5578): pid=8798 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [pid 8801] ioctl(4, LOOP_SET_FD, 3 [pid 5064] openat(AT_FDCWD, "./374/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] newfstatat(AT_FDCWD, "./370/binderfs", [pid 5061] getdents64(4, [pid 5064] <... openat resumed>) = 4 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5064] newfstatat(4, "", [pid 5061] rmdir("./375/file0" [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 5061] getdents64(3, [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5061] close(3 [pid 5064] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5064] rmdir("./374/file0" [pid 5061] rmdir("./375" [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] unlink("./370/binderfs" [pid 5064] getdents64(3, [pid 5063] <... unlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8802] <... write resumed>) = 2097152 [pid 8801] <... ioctl resumed>) = 0 [pid 5064] close(3 [pid 5063] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] mkdir("./376", 0777 [pid 8802] munmap(0x7f41e0600000, 138412032 [pid 8801] close(3 [pid 5064] <... close resumed>) = 0 [pid 8802] <... munmap resumed>) = 0 [pid 8801] <... close resumed>) = 0 [pid 5064] rmdir("./374" [pid 5061] <... mkdir resumed>) = 0 [pid 8801] close(4 [pid 8802] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8801] <... close resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8801] mkdir("./file0", 0777 [pid 5064] mkdir("./375", 0777 [pid 8802] <... openat resumed>) = 4 [pid 5063] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8802] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8801] <... mkdir resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./370/file0", [pid 5061] <... openat resumed>) = 3 [pid 8801] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5064] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./370/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./370/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [ 333.837824][ T8801] loop1: detected capacity change from 0 to 4096 [ 333.874347][ T8802] loop4: detected capacity change from 0 to 4096 [pid 5063] rmdir("./370") = 0 [pid 8802] <... ioctl resumed>) = 0 [pid 5063] mkdir("./371", 0777) = 0 [pid 8802] close(3) = 0 [pid 8802] close(4 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8801] <... mount resumed>) = 0 [pid 8801] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8802] <... close resumed>) = 0 [pid 8801] <... openat resumed>) = 3 [pid 8801] chdir("./file0") = 0 [pid 8801] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8802] mkdir("./file0", 0777 [pid 8801] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8801] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8802] <... mkdir resumed>) = 0 [pid 8802] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8801] <... open resumed>) = 4 [pid 8801] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [ 333.899503][ T8804] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8801] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... ioctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8805 ./strace-static-x86_64: Process 8805 attached [pid 8805] set_robust_list(0x55555745a660, 24) = 0 [pid 8805] chdir("./376") = 0 [pid 8805] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8805] setpgid(0, 0) = 0 [pid 8805] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8805] write(3, "1000", 4) = 4 [pid 8805] close(3) = 0 [pid 5064] close(3 [pid 8805] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8805] memfd_create("syzkaller", 0) = 3 [pid 8805] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5064] <... close resumed>) = 0 [pid 8801] <... mmap resumed>) = 0x20000000 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8806 attached , child_tidptr=0x55555745a650) = 8806 [pid 8806] set_robust_list(0x55555745a660, 24) = 0 [ 333.945877][ T28] audit: type=1800 audit(1708423486.470:5579): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [pid 8806] chdir("./375" [pid 8801] ftruncate(4, 33587195 [pid 8806] <... chdir resumed>) = 0 [pid 8801] <... ftruncate resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8802] <... mount resumed>) = 0 [pid 8801] unlink("./bus" [pid 8802] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8802] chdir("./file0") = 0 [pid 8802] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8806] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8806] setpgid(0, 0 [pid 8802] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8806] <... setpgid resumed>) = 0 [pid 8802] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8806] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] close(3 [pid 8806] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8801] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 8808 attached [pid 8806] write(3, "1000", 4 [pid 8801] sendfile(-1, -1, NULL, 281474978811909 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8808 [pid 8808] set_robust_list(0x55555745a660, 24 [pid 8806] <... write resumed>) = 4 [pid 8801] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8806] close(3 [pid 8801] exit_group(0 [pid 8806] <... close resumed>) = 0 [pid 8801] <... exit_group resumed>) = ? [pid 8808] <... set_robust_list resumed>) = 0 [pid 8806] symlink("/dev/binderfs", "./binderfs" [pid 8808] chdir("./371" [pid 8806] <... symlink resumed>) = 0 [pid 8802] <... open resumed>) = 4 [pid 8808] <... chdir resumed>) = 0 [pid 8806] memfd_create("syzkaller", 0 [pid 8802] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8808] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8806] <... memfd_create resumed>) = 3 [pid 8802] <... open resumed>) = 5 [pid 8808] <... prctl resumed>) = 0 [pid 8806] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 334.011627][ T8807] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8802] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8808] setpgid(0, 0 [pid 8806] <... mmap resumed>) = 0x7f41e0600000 [pid 8802] <... mmap resumed>) = 0x20000000 [pid 8808] <... setpgid resumed>) = 0 [pid 8801] +++ exited with 0 +++ [pid 8808] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8801, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5062] umount2("./369", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8808] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8805] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] getdents64(3, [pid 8808] write(3, "1000", 4 [pid 8802] ftruncate(4, 33587195 [pid 8808] <... write resumed>) = 4 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8808] close(3 [pid 5062] umount2("./369/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8808] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8808] symlink("/dev/binderfs", "./binderfs" [pid 5062] newfstatat(AT_FDCWD, "./369/binderfs", [pid 8808] <... symlink resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8808] memfd_create("syzkaller", 0 [pid 5062] unlink("./369/binderfs" [pid 8808] <... memfd_create resumed>) = 3 [pid 8802] <... ftruncate resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 8808] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8808] <... mmap resumed>) = 0x7f41e0600000 [pid 8802] unlink("./bus") = 0 [pid 8802] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8802] exit_group(0) = ? [pid 8802] +++ exited with 0 +++ [pid 8805] <... write resumed>) = 2097152 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8802, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8805] munmap(0x7f41e0600000, 138412032 [pid 5062] <... umount2 resumed>) = 0 [pid 5065] umount2("./368", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] newfstatat(AT_FDCWD, "./369/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 3 [pid 5062] openat(AT_FDCWD, "./369/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] newfstatat(3, "", [pid 5062] <... openat resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] newfstatat(4, "", [pid 8805] <... munmap resumed>) = 0 [pid 5065] getdents64(3, [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8805] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] getdents64(4, [pid 5065] umount2("./368/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(4, [pid 8808] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8805] <... openat resumed>) = 4 [pid 5065] newfstatat(AT_FDCWD, "./368/binderfs", [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] close(4 [pid 5065] unlink("./368/binderfs" [pid 8806] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8805] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... unlink resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./369/file0" [pid 5065] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./369") = 0 [pid 8808] <... write resumed>) = 2097152 [pid 8805] <... ioctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5062] mkdir("./370", 0777 [pid 8808] munmap(0x7f41e0600000, 138412032 [pid 8805] close(3) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8805] close(4 [pid 5062] <... openat resumed>) = 3 [pid 8805] <... close resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5065] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8808] <... munmap resumed>) = 0 [pid 8806] <... write resumed>) = 2097152 [pid 8805] mkdir("./file0", 0777 [pid 8806] munmap(0x7f41e0600000, 138412032 [pid 5065] newfstatat(AT_FDCWD, "./368/file0", [pid 8808] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8806] <... munmap resumed>) = 0 [pid 8805] <... mkdir resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 334.172008][ T8805] loop0: detected capacity change from 0 to 4096 [pid 8808] <... openat resumed>) = 4 [pid 8806] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8805] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8808] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8808] <... ioctl resumed>) = 0 [pid 8806] <... openat resumed>) = 4 [pid 8806] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8808] close(3 [pid 5065] openat(AT_FDCWD, "./368/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8808] <... close resumed>) = 0 [pid 8808] close(4 [pid 5065] <... openat resumed>) = 4 [pid 8808] <... close resumed>) = 0 [pid 5065] newfstatat(4, "", [pid 5062] <... ioctl resumed>) = 0 [pid 8808] mkdir("./file0", 0777 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8806] close(3) = 0 [pid 8806] close(4) = 0 [pid 8806] mkdir("./file0", 0777 [pid 8808] <... mkdir resumed>) = 0 [pid 5065] getdents64(4, [pid 5062] close(3) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 8806] <... mkdir resumed>) = 0 [pid 5065] rmdir("./368/file0" [pid 8806] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 8809 attached [pid 5065] getdents64(3, [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8809 [pid 8809] set_robust_list(0x55555745a660, 24) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 8809] chdir("./370" [pid 8808] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... close resumed>) = 0 [ 334.235412][ T8808] loop2: detected capacity change from 0 to 4096 [ 334.249091][ T8806] loop3: detected capacity change from 0 to 4096 [pid 8809] <... chdir resumed>) = 0 [pid 5065] rmdir("./368" [pid 8809] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... rmdir resumed>) = 0 [pid 8809] <... prctl resumed>) = 0 [pid 8809] setpgid(0, 0 [pid 5065] mkdir("./369", 0777 [pid 8809] <... setpgid resumed>) = 0 [pid 8809] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... mkdir resumed>) = 0 [pid 8809] <... openat resumed>) = 3 [pid 8809] write(3, "1000", 4 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8809] <... write resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 8809] close(3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8809] <... close resumed>) = 0 [pid 8809] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8809] memfd_create("syzkaller", 0) = 3 [pid 8809] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8806] <... mount resumed>) = 0 [pid 8805] <... mount resumed>) = 0 [pid 8809] <... mmap resumed>) = 0x7f41e0600000 [pid 8806] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8805] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8808] <... mount resumed>) = 0 [pid 8806] <... openat resumed>) = 3 [pid 8808] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8806] chdir("./file0" [pid 8805] <... openat resumed>) = 3 [pid 8808] <... openat resumed>) = 3 [pid 8806] <... chdir resumed>) = 0 [pid 8805] chdir("./file0" [pid 8808] chdir("./file0") = 0 [pid 8808] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8808] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8806] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8805] <... chdir resumed>) = 0 [pid 8806] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8805] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8806] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [ 334.337297][ T8811] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 334.337648][ T8810] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 334.364707][ T8812] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8805] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... ioctl resumed>) = 0 [pid 8806] <... open resumed>) = 4 [pid 8806] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5065] close(3 [pid 8806] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8808] <... open resumed>) = 4 [pid 8806] <... mmap resumed>) = 0x20000000 [pid 5065] <... close resumed>) = 0 [pid 8805] <... open resumed>) = 4 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8808] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8806] ftruncate(4, 33587195 [pid 8805] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8808] <... open resumed>) = 5 [pid 8806] <... ftruncate resumed>) = 0 [pid 8809] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8806] unlink("./bus" [pid 8805] <... open resumed>) = 5 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8813 ./strace-static-x86_64: Process 8813 attached [pid 8808] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8805] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8813] set_robust_list(0x55555745a660, 24 [pid 8808] <... mmap resumed>) = 0x20000000 [pid 8805] <... mmap resumed>) = 0x20000000 [pid 8813] <... set_robust_list resumed>) = 0 [pid 8813] chdir("./369" [pid 8806] <... unlink resumed>) = 0 [pid 8813] <... chdir resumed>) = 0 [pid 8806] sendfile(-1, -1, NULL, 281474978811909 [pid 8813] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8808] ftruncate(4, 33587195 [pid 8806] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8813] <... prctl resumed>) = 0 [pid 8806] exit_group(0 [pid 8813] setpgid(0, 0 [pid 8806] <... exit_group resumed>) = ? [pid 8805] ftruncate(4, 33587195 [pid 8813] <... setpgid resumed>) = 0 [pid 8808] <... ftruncate resumed>) = 0 [pid 8813] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8809] <... write resumed>) = 2097152 [pid 8808] unlink("./bus" [pid 8806] +++ exited with 0 +++ [pid 8805] <... ftruncate resumed>) = 0 [pid 8813] <... openat resumed>) = 3 [pid 8809] munmap(0x7f41e0600000, 138412032 [pid 8805] unlink("./bus" [pid 8813] write(3, "1000", 4) = 4 [pid 8813] close(3) = 0 [pid 8813] symlink("/dev/binderfs", "./binderfs" [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8806, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 8813] <... symlink resumed>) = 0 [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 8813] memfd_create("syzkaller", 0) = 3 [pid 8813] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5064] <... restart_syscall resumed>) = 0 [pid 5064] umount2("./375", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8809] <... munmap resumed>) = 0 [pid 8808] <... unlink resumed>) = 0 [pid 8805] <... unlink resumed>) = 0 [pid 8805] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8808] sendfile(-1, -1, NULL, 281474978811909 [pid 8805] exit_group(0 [pid 8808] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8805] <... exit_group resumed>) = ? [pid 8809] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8809] <... openat resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8809] ioctl(4, LOOP_SET_FD, 3 [pid 8808] exit_group(0 [pid 5064] <... openat resumed>) = 3 [pid 8808] <... exit_group resumed>) = ? [pid 8813] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] newfstatat(3, "", [pid 8809] <... ioctl resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8809] close(3 [pid 8808] +++ exited with 0 +++ [pid 8805] +++ exited with 0 +++ [pid 5064] getdents64(3, [pid 8809] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8808, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8805, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 8809] close(4 [pid 5064] umount2("./375/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 8813] <... write resumed>) = 2097152 [pid 8809] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... restart_syscall resumed>) = 0 [pid 8813] munmap(0x7f41e0600000, 138412032 [pid 8809] mkdir("./file0", 0777 [pid 5064] newfstatat(AT_FDCWD, "./375/binderfs", [pid 8813] <... munmap resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... restart_syscall resumed>) = 0 [pid 8813] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8809] <... mkdir resumed>) = 0 [pid 5064] unlink("./375/binderfs" [pid 5063] umount2("./371", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8813] <... openat resumed>) = 4 [pid 8809] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... unlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 334.503826][ T8809] loop1: detected capacity change from 0 to 4096 [pid 5061] umount2("./376", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8813] ioctl(4, LOOP_SET_FD, 3 [pid 5064] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] newfstatat(3, "", [pid 5061] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(3, "", [pid 5063] getdents64(3, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] getdents64(3, [pid 5063] umount2("./371/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./376/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(AT_FDCWD, "./371/binderfs", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] newfstatat(AT_FDCWD, "./376/binderfs", [pid 5063] unlink("./371/binderfs" [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5061] unlink("./376/binderfs" [pid 5063] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8813] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8813] close(3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8813] <... close resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./375/file0", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./376/file0", [pid 8813] close(4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] newfstatat(AT_FDCWD, "./371/file0", [pid 8813] <... close resumed>) = 0 [pid 5064] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8813] mkdir("./file0", 0777 [pid 5063] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8813] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./375/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./371/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8809] <... mount resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 4 [pid 5064] newfstatat(4, "", [pid 5063] newfstatat(4, "", [pid 5061] openat(AT_FDCWD, "./376/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8809] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... openat resumed>) = 4 [pid 8813] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8809] <... openat resumed>) = 3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 334.544297][ T8813] loop4: detected capacity change from 0 to 4096 [ 334.578834][ T8814] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] newfstatat(4, "", [pid 8809] chdir("./file0" [pid 5064] getdents64(4, [pid 5063] getdents64(4, [pid 8809] <... chdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8809] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5063] getdents64(4, [pid 5061] getdents64(4, [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8809] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] getdents64(4, [pid 5063] close(4 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] <... close resumed>) = 0 [pid 5064] close(4 [pid 5063] rmdir("./371/file0" [pid 5064] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5064] rmdir("./375/file0" [pid 5063] getdents64(3, [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] getdents64(3, [pid 5063] close(3 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] rmdir("./376/file0" [pid 5064] close(3 [pid 5063] rmdir("./371" [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 5064] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8809] <... open resumed>) = 4 [pid 5064] rmdir("./375" [pid 5063] mkdir("./372", 0777 [pid 5061] close(3 [pid 8809] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./376") = 0 [pid 5061] mkdir("./377", 0777 [pid 8813] <... mount resumed>) = 0 [pid 8809] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 8813] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... mkdir resumed>) = 0 [pid 8813] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8813] chdir("./file0") = 0 [pid 8809] <... mmap resumed>) = 0x20000000 [pid 5061] <... openat resumed>) = 3 [pid 8813] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] mkdir("./376", 0777 [pid 8809] ftruncate(4, 33587195 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8813] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8809] <... ftruncate resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8813] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5064] <... openat resumed>) = 3 [pid 8809] unlink("./bus" [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8813] <... open resumed>) = 4 [pid 8813] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8809] <... unlink resumed>) = 0 [pid 8813] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8809] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8809] exit_group(0) = ? [pid 8813] <... mmap resumed>) = 0x20000000 [ 334.653651][ T8815] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8813] ftruncate(4, 33587195) = 0 [pid 8809] +++ exited with 0 +++ [pid 8813] unlink("./bus" [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8809, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8813] <... unlink resumed>) = 0 [pid 5062] umount2("./370", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8813] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8813] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5062] openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8813] exit_group(0 [pid 5062] <... openat resumed>) = 3 [pid 8813] <... exit_group resumed>) = ? [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./370/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./370/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./370/binderfs") = 0 [pid 5062] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... ioctl resumed>) = 0 [pid 8813] +++ exited with 0 +++ [pid 5064] <... ioctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8813, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5065] umount2("./369", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./369/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./369/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./369/binderfs") = 0 [pid 5065] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3) = 0 [pid 5061] close(3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8816 attached ./strace-static-x86_64: Process 8817 attached [pid 5065] <... umount2 resumed>) = 0 [pid 5064] close(3 [pid 8817] set_robust_list(0x55555745a660, 24) = 0 [pid 5065] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8816 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8817 [pid 8817] chdir("./377" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8817] <... chdir resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./369/file0", [pid 8816] set_robust_list(0x55555745a660, 24 [pid 8817] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... close resumed>) = 0 [pid 8817] <... prctl resumed>) = 0 [pid 8817] setpgid(0, 0 [pid 5065] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8817] <... setpgid resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./369/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8817] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] newfstatat(4, "", [pid 8817] <... openat resumed>) = 3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8817] write(3, "1000", 4) = 4 [pid 5065] getdents64(4, [pid 8817] close(3 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8817] <... close resumed>) = 0 [pid 5065] close(4 [pid 8817] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... close resumed>) = 0 [pid 8817] <... symlink resumed>) = 0 [pid 5065] rmdir("./369/file0") = 0 [pid 8816] <... set_robust_list resumed>) = 0 [pid 8817] memfd_create("syzkaller", 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... umount2 resumed>) = 0 [pid 5065] getdents64(3, [pid 8817] <... memfd_create resumed>) = 3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8817] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] close(3 [pid 8817] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] <... close resumed>) = 0 [pid 8816] chdir("./372" [pid 5065] rmdir("./369"./strace-static-x86_64: Process 8818 attached [pid 8816] <... chdir resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8818 [pid 5062] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8818] set_robust_list(0x55555745a660, 24 [pid 8816] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8816] <... prctl resumed>) = 0 [pid 8818] <... set_robust_list resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./370/file0", [pid 8816] setpgid(0, 0 [pid 8818] chdir("./376" [pid 8816] <... setpgid resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8816] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] mkdir("./370", 0777 [pid 8816] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8818] <... chdir resumed>) = 0 [pid 8816] write(3, "1000", 4 [pid 5065] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./370/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8818] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8816] <... write resumed>) = 4 [pid 5062] <... openat resumed>) = 4 [pid 8816] close(3 [pid 5062] newfstatat(4, "", [pid 8818] <... prctl resumed>) = 0 [pid 8816] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8818] setpgid(0, 0 [pid 8816] symlink("/dev/binderfs", "./binderfs" [pid 8818] <... setpgid resumed>) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8818] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] getdents64(4, [pid 5065] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8816] <... symlink resumed>) = 0 [pid 5062] close(4 [pid 8818] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./370/file0" [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8816] memfd_create("syzkaller", 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8818] write(3, "1000", 4 [pid 8817] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8816] <... memfd_create resumed>) = 3 [pid 8818] <... write resumed>) = 4 [pid 8816] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] getdents64(3, [pid 8818] close(3 [pid 8816] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8818] <... close resumed>) = 0 [pid 5062] close(3 [pid 8818] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... close resumed>) = 0 [pid 8818] <... symlink resumed>) = 0 [pid 5062] rmdir("./370") = 0 [pid 8818] memfd_create("syzkaller", 0 [pid 5062] mkdir("./371", 0777 [pid 8818] <... memfd_create resumed>) = 3 [pid 8818] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... mkdir resumed>) = 0 [pid 8818] <... mmap resumed>) = 0x7f41e0600000 [pid 8816] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8817] <... write resumed>) = 2097152 [pid 8818] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... ioctl resumed>) = 0 [pid 8817] munmap(0x7f41e0600000, 138412032 [pid 5065] close(3) = 0 [pid 8817] <... munmap resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8819 ./strace-static-x86_64: Process 8819 attached [pid 8819] set_robust_list(0x55555745a660, 24) = 0 [pid 8819] chdir("./370") = 0 [pid 8817] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8819] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8817] <... openat resumed>) = 4 [pid 8819] <... prctl resumed>) = 0 [pid 8819] setpgid(0, 0 [pid 8817] ioctl(4, LOOP_SET_FD, 3 [pid 8819] <... setpgid resumed>) = 0 [pid 8819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8819] write(3, "1000", 4) = 4 [pid 8819] close(3) = 0 [pid 8819] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8819] memfd_create("syzkaller", 0) = 3 [pid 8819] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8817] <... ioctl resumed>) = 0 [pid 8817] close(3) = 0 [pid 8817] close(4) = 0 [pid 8817] mkdir("./file0", 0777) = 0 [pid 8816] <... write resumed>) = 2097152 [pid 8817] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8816] munmap(0x7f41e0600000, 138412032) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8818] <... write resumed>) = 2097152 [pid 8816] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] close(3 [pid 8816] <... openat resumed>) = 4 [pid 5062] <... close resumed>) = 0 [ 334.974207][ T8817] loop0: detected capacity change from 0 to 4096 [pid 8816] ioctl(4, LOOP_SET_FD, 3 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8817] <... mount resumed>) = 0 [pid 8817] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8817] chdir("./file0") = 0 [pid 8817] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8817] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8819] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 8821 attached [pid 8818] munmap(0x7f41e0600000, 138412032 [pid 8816] <... ioctl resumed>) = 0 [pid 8821] set_robust_list(0x55555745a660, 24) = 0 [pid 8818] <... munmap resumed>) = 0 [pid 8816] close(3 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8821 [pid 8821] chdir("./371" [pid 8816] <... close resumed>) = 0 [pid 8818] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8821] <... chdir resumed>) = 0 [pid 8818] <... openat resumed>) = 4 [pid 8816] close(4 [pid 8818] ioctl(4, LOOP_SET_FD, 3 [pid 8816] <... close resumed>) = 0 [pid 8817] <... open resumed>) = 4 [pid 8821] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8816] mkdir("./file0", 0777 [pid 8817] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8816] <... mkdir resumed>) = 0 [pid 8817] <... open resumed>) = 5 [pid 8821] <... prctl resumed>) = 0 [pid 8821] setpgid(0, 0 [pid 8817] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8821] <... setpgid resumed>) = 0 [pid 8817] <... mmap resumed>) = 0x20000000 [pid 8821] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8816] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8817] ftruncate(4, 33587195 [pid 8821] <... openat resumed>) = 3 [pid 8821] write(3, "1000", 4 [pid 8818] <... ioctl resumed>) = 0 [pid 8817] <... ftruncate resumed>) = 0 [pid 8821] <... write resumed>) = 4 [pid 8818] close(3 [pid 8817] unlink("./bus" [pid 8821] close(3 [pid 8818] <... close resumed>) = 0 [pid 8821] <... close resumed>) = 0 [pid 8818] close(4 [pid 8821] symlink("/dev/binderfs", "./binderfs" [pid 8818] <... close resumed>) = 0 [ 335.036142][ T8820] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 335.051010][ T8816] loop2: detected capacity change from 0 to 4096 [ 335.067093][ T8818] loop3: detected capacity change from 0 to 4096 [pid 8818] mkdir("./file0", 0777 [pid 8821] <... symlink resumed>) = 0 [pid 8818] <... mkdir resumed>) = 0 [pid 8816] <... mount resumed>) = 0 [pid 8816] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8819] <... write resumed>) = 2097152 [pid 8816] chdir("./file0") = 0 [pid 8816] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8821] memfd_create("syzkaller", 0 [pid 8818] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8816] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8816] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8821] <... memfd_create resumed>) = 3 [pid 8821] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8817] <... unlink resumed>) = 0 [pid 8821] <... mmap resumed>) = 0x7f41e0600000 [pid 8817] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8817] exit_group(0) = ? [pid 8819] munmap(0x7f41e0600000, 138412032) = 0 [ 335.103385][ T8822] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8819] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8819] ioctl(4, LOOP_SET_FD, 3 [pid 8821] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8817] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8817, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8816] <... open resumed>) = 4 [pid 8816] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] umount2("./377", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8816] <... open resumed>) = 5 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", [pid 8816] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8816] <... mmap resumed>) = 0x20000000 [pid 5061] getdents64(3, [pid 8816] ftruncate(4, 33587195 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./377/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8819] <... ioctl resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8819] close(3 [pid 8818] <... mount resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./377/binderfs", [pid 8819] <... close resumed>) = 0 [pid 8818] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8819] close(4 [pid 8818] <... openat resumed>) = 3 [pid 8819] <... close resumed>) = 0 [pid 8818] chdir("./file0" [pid 5061] unlink("./377/binderfs" [pid 8819] mkdir("./file0", 0777 [pid 8818] <... chdir resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 8819] <... mkdir resumed>) = 0 [pid 8818] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8818] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8819] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8818] <... open resumed>) = 4 [pid 8816] <... ftruncate resumed>) = 0 [pid 8818] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8816] unlink("./bus" [pid 5061] <... umount2 resumed>) = 0 [pid 8818] <... open resumed>) = 5 [pid 8818] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./377/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8818] <... ftruncate resumed>) = 0 [pid 8818] unlink("./bus" [pid 8816] <... unlink resumed>) = 0 [pid 8816] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [ 335.153416][ T8819] loop4: detected capacity change from 0 to 4096 [ 335.172004][ T8823] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8816] exit_group(0) = ? [pid 8816] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8816, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=2 /* 0.02 s */} --- [pid 5063] umount2("./372", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] openat(AT_FDCWD, "./377/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] umount2("./372/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8818] <... unlink resumed>) = 0 [pid 5061] getdents64(4, [pid 8818] sendfile(-1, -1, NULL, 281474978811909 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] newfstatat(AT_FDCWD, "./372/binderfs", [pid 5061] close(4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./377/file0" [pid 8818] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5063] unlink("./372/binderfs" [pid 8818] exit_group(0 [pid 5063] <... unlink resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 8818] <... exit_group resumed>) = ? [pid 5063] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 8821] <... write resumed>) = 2097152 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./377" [pid 8821] munmap(0x7f41e0600000, 138412032 [pid 8818] +++ exited with 0 +++ [pid 5061] <... rmdir resumed>) = 0 [pid 8821] <... munmap resumed>) = 0 [pid 8819] <... mount resumed>) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8818, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./376", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", [pid 5061] mkdir("./378", 0777 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 5061] <... mkdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./376/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./376/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./376/binderfs" [pid 8819] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... unlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8821] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8821] <... openat resumed>) = 4 [pid 8819] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 3 [pid 8821] ioctl(4, LOOP_SET_FD, 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8819] chdir("./file0" [pid 5063] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8819] <... chdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8821] <... ioctl resumed>) = 0 [pid 8821] close(3 [pid 5063] newfstatat(AT_FDCWD, "./372/file0", [pid 8821] <... close resumed>) = 0 [pid 8819] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8821] close(4 [pid 8819] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8819] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8821] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8821] mkdir("./file0", 0777 [pid 5064] newfstatat(AT_FDCWD, "./376/file0", [pid 5063] openat(AT_FDCWD, "./372/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8821] <... mkdir resumed>) = 0 [pid 5064] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 4 [pid 8821] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./376/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] newfstatat(4, "", [pid 5064] <... openat resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] newfstatat(4, "", [ 335.267767][ T8824] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 335.307097][ T8821] loop1: detected capacity change from 0 to 4096 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8819] <... open resumed>) = 4 [pid 8819] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5064] getdents64(4, [pid 8819] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8819] <... mmap resumed>) = 0x20000000 [pid 5064] getdents64(4, [pid 5063] close(4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5063] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] rmdir("./372/file0") = 0 [pid 5064] rmdir("./376/file0") = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] rmdir("./376") = 0 [pid 8821] <... mount resumed>) = 0 [pid 8819] ftruncate(4, 33587195 [pid 5063] close(3 [pid 5061] <... ioctl resumed>) = 0 [pid 8821] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5061] close(3 [pid 5064] mkdir("./377", 0777 [pid 5063] rmdir("./372" [pid 5061] <... close resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8821] <... openat resumed>) = 3 [pid 5063] mkdir("./373", 0777 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8826 attached [pid 8821] chdir("./file0" [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8821] <... chdir resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8826 [pid 8821] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8826] set_robust_list(0x55555745a660, 24) = 0 [pid 8821] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8826] chdir("./378" [pid 8821] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8826] <... chdir resumed>) = 0 [pid 8826] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8819] <... ftruncate resumed>) = 0 [pid 8826] <... prctl resumed>) = 0 [pid 8826] setpgid(0, 0 [pid 8819] unlink("./bus" [pid 8826] <... setpgid resumed>) = 0 [pid 8826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8826] write(3, "1000", 4 [pid 8821] <... open resumed>) = 4 [pid 8819] <... unlink resumed>) = 0 [pid 8826] <... write resumed>) = 4 [pid 8821] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8819] sendfile(-1, -1, NULL, 281474978811909 [pid 8826] close(3 [pid 8821] <... open resumed>) = 5 [pid 8819] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8819] exit_group(0 [pid 8826] <... close resumed>) = 0 [pid 8826] symlink("/dev/binderfs", "./binderfs" [pid 8819] <... exit_group resumed>) = ? [pid 8821] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8826] <... symlink resumed>) = 0 [ 335.377618][ T8825] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8826] memfd_create("syzkaller", 0) = 3 [pid 8821] <... mmap resumed>) = 0x20000000 [pid 8819] +++ exited with 0 +++ [pid 8826] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8821] ftruncate(4, 33587195 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8819, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8826] <... mmap resumed>) = 0x7f41e0600000 [pid 8821] <... ftruncate resumed>) = 0 [pid 8821] unlink("./bus" [pid 5065] umount2("./370", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./370/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./370/binderfs", [pid 8821] <... unlink resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8821] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8821] exit_group(0) = ? [pid 5065] unlink("./370/binderfs") = 0 [pid 5065] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... ioctl resumed>) = 0 [pid 8821] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8821, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 8826] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] close(3 [pid 5062] <... restart_syscall resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] umount2("./371", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8827 [pid 5062] umount2("./371/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8827 attached ) = -1 EINVAL (Invalid argument) [pid 8827] set_robust_list(0x55555745a660, 24 [pid 5062] newfstatat(AT_FDCWD, "./371/binderfs", [pid 8827] <... set_robust_list resumed>) = 0 [pid 8827] chdir("./377") = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8827] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] unlink("./371/binderfs" [pid 8827] <... prctl resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 8827] setpgid(0, 0 [pid 5062] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8827] <... setpgid resumed>) = 0 [pid 8827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8827] write(3, "1000", 4 [pid 5065] <... umount2 resumed>) = 0 [pid 5063] close(3 [pid 8827] <... write resumed>) = 4 [pid 8826] <... write resumed>) = 2097152 [pid 5065] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 8826] munmap(0x7f41e0600000, 138412032 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8826] <... munmap resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./370/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 8828 attached [pid 8827] close(3 [pid 8826] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8828 [pid 5062] <... umount2 resumed>) = 0 [pid 8828] set_robust_list(0x55555745a660, 24 [pid 8827] <... close resumed>) = 0 [pid 8826] <... openat resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8828] <... set_robust_list resumed>) = 0 [pid 8827] symlink("/dev/binderfs", "./binderfs" [pid 8826] ioctl(4, LOOP_SET_FD, 3 [pid 5065] openat(AT_FDCWD, "./370/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8828] chdir("./373" [pid 8827] <... symlink resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8827] memfd_create("syzkaller", 0) = 3 [pid 8827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] newfstatat(AT_FDCWD, "./371/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8828] <... chdir resumed>) = 0 [pid 8827] <... mmap resumed>) = 0x7f41e0600000 [pid 8826] <... ioctl resumed>) = 0 [pid 5065] newfstatat(4, "", [pid 5062] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8828] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8828] <... prctl resumed>) = 0 [pid 8826] close(3 [pid 5065] getdents64(4, [pid 5062] openat(AT_FDCWD, "./371/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8828] setpgid(0, 0 [pid 8826] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... openat resumed>) = 4 [pid 5065] getdents64(4, [pid 5062] newfstatat(4, "", [pid 8826] close(4 [pid 8828] <... setpgid resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8826] <... close resumed>) = 0 [pid 5065] close(4 [pid 5062] getdents64(4, [pid 8828] <... openat resumed>) = 3 [pid 8826] mkdir("./file0", 0777 [pid 5065] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8828] write(3, "1000", 4 [pid 5065] rmdir("./370/file0" [pid 5062] getdents64(4, [pid 8828] <... write resumed>) = 4 [pid 5065] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8828] close(3 [pid 5065] getdents64(3, [pid 5062] close(4 [pid 8828] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] <... close resumed>) = 0 [pid 8828] symlink("/dev/binderfs", "./binderfs" [pid 5065] close(3 [pid 5062] rmdir("./371/file0" [pid 8828] <... symlink resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8826] <... mkdir resumed>) = 0 [pid 5065] rmdir("./370") = 0 [pid 8828] memfd_create("syzkaller", 0 [pid 8826] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] mkdir("./371", 0777 [pid 5062] getdents64(3, [pid 8828] <... memfd_create resumed>) = 3 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5065] <... mkdir resumed>) = 0 [pid 5062] close(3 [pid 8827] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] rmdir("./371" [pid 5065] <... openat resumed>) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5062] mkdir("./372", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 335.573804][ T8826] loop0: detected capacity change from 0 to 4096 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8826] <... mount resumed>) = 0 [pid 8828] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8826] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8826] chdir("./file0" [pid 8827] <... write resumed>) = 2097152 [pid 8826] <... chdir resumed>) = 0 [pid 8826] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8827] munmap(0x7f41e0600000, 138412032 [pid 8826] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 335.644508][ T8829] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8827] <... munmap resumed>) = 0 [pid 8826] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8827] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8827] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8827] close(3) = 0 [pid 8827] close(4 [pid 8826] <... open resumed>) = 4 [pid 8827] <... close resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5065] close(3 [pid 8827] mkdir("./file0", 0777 [pid 8826] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8827] <... mkdir resumed>) = 0 [pid 8826] <... open resumed>) = 5 [pid 5062] close(3 [pid 8826] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8827] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, ""./strace-static-x86_64: Process 8830 attached [pid 8828] <... write resumed>) = 2097152 [pid 8826] <... mmap resumed>) = 0x20000000 [pid 5062] <... close resumed>) = 0 [pid 8830] set_robust_list(0x55555745a660, 24) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8830 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8830] chdir("./371" [pid 8826] ftruncate(4, 33587195 [pid 8830] <... chdir resumed>) = 0 [pid 8830] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8830] setpgid(0, 0 [pid 8828] munmap(0x7f41e0600000, 138412032 [pid 8830] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 8831 attached [pid 8830] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8831] set_robust_list(0x55555745a660, 24 [pid 8830] <... openat resumed>) = 3 [pid 8828] <... munmap resumed>) = 0 [pid 8826] <... ftruncate resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8831 [pid 8831] <... set_robust_list resumed>) = 0 [pid 8831] chdir("./372" [pid 8830] write(3, "1000", 4) = 4 [pid 8830] close(3) = 0 [pid 8830] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8831] <... chdir resumed>) = 0 [pid 8831] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8830] memfd_create("syzkaller", 0 [pid 8828] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8826] unlink("./bus" [pid 8831] setpgid(0, 0 [pid 8830] <... memfd_create resumed>) = 3 [pid 8828] <... openat resumed>) = 4 [pid 8831] <... setpgid resumed>) = 0 [ 335.711321][ T8827] loop3: detected capacity change from 0 to 4096 [pid 8831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8828] ioctl(4, LOOP_SET_FD, 3 [pid 8830] <... mmap resumed>) = 0x7f41e0600000 [pid 8831] <... openat resumed>) = 3 [pid 8826] <... unlink resumed>) = 0 [pid 8828] <... ioctl resumed>) = 0 [pid 8828] close(3) = 0 [pid 8828] close(4 [pid 8831] write(3, "1000", 4 [pid 8826] sendfile(-1, -1, NULL, 281474978811909 [pid 8828] <... close resumed>) = 0 [pid 8828] mkdir("./file0", 0777 [pid 8831] <... write resumed>) = 4 [pid 8826] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8828] <... mkdir resumed>) = 0 [pid 8828] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8831] close(3 [pid 8826] exit_group(0 [pid 8831] <... close resumed>) = 0 [pid 8826] <... exit_group resumed>) = ? [pid 8831] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8831] memfd_create("syzkaller", 0) = 3 [pid 8831] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8827] <... mount resumed>) = 0 [pid 8827] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8827] chdir("./file0") = 0 [pid 8827] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 335.770129][ T8828] loop2: detected capacity change from 0 to 4096 [ 335.779296][ T8832] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8827] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8830] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8826] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8826, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5061] umount2("./378", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8831] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./378/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8828] <... mount resumed>) = 0 [pid 8828] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8828] chdir("./file0") = 0 [pid 8828] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8828] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8827] <... open resumed>) = 4 [pid 8827] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] newfstatat(AT_FDCWD, "./378/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8827] <... open resumed>) = 5 [pid 5061] unlink("./378/binderfs" [pid 8828] <... open resumed>) = 4 [pid 8827] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... unlink resumed>) = 0 [pid 8828] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8827] <... mmap resumed>) = 0x20000000 [pid 5061] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8827] ftruncate(4, 33587195 [pid 8828] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8828] ftruncate(4, 33587195 [pid 8827] unlink("./bus" [pid 8828] <... ftruncate resumed>) = 0 [pid 8828] unlink("./bus" [pid 8827] <... unlink resumed>) = 0 [pid 8827] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [ 335.869626][ T8833] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8831] <... write resumed>) = 2097152 [pid 8830] <... write resumed>) = 2097152 [pid 8827] exit_group(0 [pid 5061] <... umount2 resumed>) = 0 [pid 8831] munmap(0x7f41e0600000, 138412032 [pid 8830] munmap(0x7f41e0600000, 138412032 [pid 8827] <... exit_group resumed>) = ? [pid 8828] <... unlink resumed>) = 0 [pid 8830] <... munmap resumed>) = 0 [pid 8828] sendfile(-1, -1, NULL, 281474978811909 [pid 8831] <... munmap resumed>) = 0 [pid 8828] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8828] exit_group(0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8828] <... exit_group resumed>) = ? [pid 5061] newfstatat(AT_FDCWD, "./378/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8831] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] openat(AT_FDCWD, "./378/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8830] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8827] +++ exited with 0 +++ [pid 8831] <... openat resumed>) = 4 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8827, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5061] <... openat resumed>) = 4 [pid 8830] <... openat resumed>) = 4 [pid 8831] ioctl(4, LOOP_SET_FD, 3 [pid 8830] ioctl(4, LOOP_SET_FD, 3 [pid 5061] newfstatat(4, "", [pid 8830] <... ioctl resumed>) = 0 [pid 8828] +++ exited with 0 +++ [pid 5064] umount2("./377", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8830] close(3) = 0 [pid 8830] close(4) = 0 [pid 8830] mkdir("./file0", 0777) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8828, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=2 /* 0.02 s */} --- [pid 8831] <... ioctl resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(4, [pid 8830] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8831] close(3 [pid 5064] openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./373", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8831] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(4, [pid 5063] openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] close(4 [pid 5063] getdents64(3, [pid 5061] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] rmdir("./378/file0" [pid 5063] umount2("./373/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8831] close(4 [pid 5061] getdents64(3, [pid 5063] newfstatat(AT_FDCWD, "./373/binderfs", [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] unlink("./373/binderfs" [pid 5064] getdents64(3, [pid 5061] close(3 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] <... unlink resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5063] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./377/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./378" [pid 8831] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... rmdir resumed>) = 0 [pid 8831] mkdir("./file0", 0777 [pid 5064] newfstatat(AT_FDCWD, "./377/binderfs", [pid 5061] mkdir("./379", 0777 [pid 8831] <... mkdir resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5064] unlink("./377/binderfs" [ 335.958624][ T8830] loop4: detected capacity change from 0 to 4096 [ 335.965312][ T8831] loop1: detected capacity change from 0 to 4096 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8831] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... unlink resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5064] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8830] <... mount resumed>) = 0 [pid 8830] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./373/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8830] chdir("./file0") = 0 [pid 8830] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5064] <... umount2 resumed>) = 0 [pid 8830] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./373/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] newfstatat(AT_FDCWD, "./377/file0", [pid 5063] getdents64(4, [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8830] <... open resumed>) = 4 [pid 5064] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./373/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8830] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [ 336.027930][ T8834] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] openat(AT_FDCWD, "./377/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8831] <... mount resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 8831] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] rmdir("./373" [pid 8831] <... openat resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 8831] chdir("./file0" [pid 5063] mkdir("./374", 0777 [pid 8831] <... chdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 8831] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8831] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8830] <... open resumed>) = 5 [pid 5064] newfstatat(4, "", [pid 5063] <... openat resumed>) = 3 [pid 8830] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8830] <... mmap resumed>) = 0x20000000 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8830] ftruncate(4, 33587195 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8831] <... open resumed>) = 4 [pid 8831] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8830] <... ftruncate resumed>) = 0 [pid 5064] getdents64(4, [pid 5061] <... ioctl resumed>) = 0 [pid 8831] <... open resumed>) = 5 [pid 8830] unlink("./bus" [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 8831] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] close(4 [pid 8831] <... mmap resumed>) = 0x20000000 [pid 8830] <... unlink resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8830] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] rmdir("./377/file0" [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8831] ftruncate(4, 33587195 [pid 8830] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [ 336.074728][ T8835] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 8836 attached [pid 8831] <... ftruncate resumed>) = 0 [pid 8830] exit_group(0 [pid 8836] set_robust_list(0x55555745a660, 24 [pid 8830] <... exit_group resumed>) = ? [pid 8836] <... set_robust_list resumed>) = 0 [pid 8831] unlink("./bus" [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8836] chdir("./379" [pid 5064] close(3 [pid 8836] <... chdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 8836] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8831] <... unlink resumed>) = 0 [pid 5064] rmdir("./377" [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8836 [pid 8831] sendfile(-1, -1, NULL, 281474978811909 [pid 8836] <... prctl resumed>) = 0 [pid 8831] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8831] exit_group(0 [pid 8836] setpgid(0, 0) = 0 [pid 8831] <... exit_group resumed>) = ? [pid 8836] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./378", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8830] +++ exited with 0 +++ [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8830, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8836] <... openat resumed>) = 3 [pid 5065] umount2("./371", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8836] write(3, "1000", 4 [pid 5065] openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8836] <... write resumed>) = 4 [pid 8836] close(3) = 0 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8836] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] getdents64(3, [pid 8836] memfd_create("syzkaller", 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8836] <... memfd_create resumed>) = 3 [pid 5065] umount2("./371/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8831] +++ exited with 0 +++ [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./371/binderfs", [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8831, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 8836] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./371/binderfs" [pid 5062] umount2("./372", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... unlink resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./372/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./372/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./372/binderfs") = 0 [pid 5065] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8837 attached [pid 8837] set_robust_list(0x55555745a660, 24) = 0 [pid 8837] chdir("./374") = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8837 [pid 8837] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8837] setpgid(0, 0) = 0 [pid 8837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8837] write(3, "1000", 4) = 4 [pid 5065] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8837] close(3) = 0 [pid 8837] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8837] memfd_create("syzkaller", 0) = 3 [pid 8837] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5065] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./371/file0", [pid 5062] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8836] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./372/file0", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... ioctl resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./371/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5062] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] openat(AT_FDCWD, "./372/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] getdents64(4, [pid 5062] <... openat resumed>) = 4 [pid 5064] close(3 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] close(4 [pid 5062] getdents64(4, [pid 5065] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] rmdir("./371/file0" [pid 5062] getdents64(4, ./strace-static-x86_64: Process 8838 attached [pid 5065] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./372/file0") = 0 [pid 8838] set_robust_list(0x55555745a660, 24 [pid 5065] getdents64(3, [pid 8838] <... set_robust_list resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8838 [pid 8838] chdir("./378" [pid 5065] close(3 [pid 5062] getdents64(3, [pid 8838] <... chdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8838] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] rmdir("./371" [pid 5062] close(3 [pid 8838] <... prctl resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8838] setpgid(0, 0 [pid 5065] mkdir("./372", 0777 [pid 8838] <... setpgid resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5062] rmdir("./372" [pid 8838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... rmdir resumed>) = 0 [pid 8838] <... openat resumed>) = 3 [pid 8838] write(3, "1000", 4 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] mkdir("./373", 0777 [pid 5065] <... openat resumed>) = 3 [pid 5062] <... mkdir resumed>) = 0 [pid 8838] <... write resumed>) = 4 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8838] close(3) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8838] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... openat resumed>) = 3 [pid 8838] <... symlink resumed>) = 0 [pid 8838] memfd_create("syzkaller", 0 [pid 8837] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8838] <... memfd_create resumed>) = 3 [pid 8838] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8836] <... write resumed>) = 2097152 [pid 8836] munmap(0x7f41e0600000, 138412032) = 0 [pid 8836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8836] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8836] close(3) = 0 [pid 8836] close(4) = 0 [pid 8836] mkdir("./file0", 0777) = 0 [pid 8836] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8838] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8837] <... write resumed>) = 2097152 [pid 8837] munmap(0x7f41e0600000, 138412032 [pid 5065] <... ioctl resumed>) = 0 [pid 8837] <... munmap resumed>) = 0 [pid 5065] close(3) = 0 [ 336.312699][ T8836] loop0: detected capacity change from 0 to 4096 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8839 attached [pid 8837] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8839 [pid 8839] set_robust_list(0x55555745a660, 24) = 0 [pid 8839] chdir("./372") = 0 [pid 8839] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8839] setpgid(0, 0) = 0 [pid 8839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8839] write(3, "1000", 4) = 4 [pid 8839] close(3 [pid 8837] <... openat resumed>) = 4 [pid 8839] <... close resumed>) = 0 [pid 8837] ioctl(4, LOOP_SET_FD, 3 [pid 8839] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8837] <... ioctl resumed>) = 0 [pid 8839] memfd_create("syzkaller", 0) = 3 [pid 8839] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8839] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8840 attached , child_tidptr=0x55555745a650) = 8840 [pid 8840] set_robust_list(0x55555745a660, 24 [pid 8838] <... write resumed>) = 2097152 [pid 8840] <... set_robust_list resumed>) = 0 [pid 8840] chdir("./373") = 0 [ 336.391059][ T8837] loop2: detected capacity change from 0 to 4096 [pid 8840] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8840] setpgid(0, 0) = 0 [pid 8840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8840] write(3, "1000", 4) = 4 [pid 8840] close(3) = 0 [pid 8840] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8840] memfd_create("syzkaller", 0) = 3 [pid 8840] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8838] munmap(0x7f41e0600000, 138412032) = 0 [pid 8840] <... mmap resumed>) = 0x7f41e0600000 [pid 8837] close(3) = 0 [pid 8836] <... mount resumed>) = 0 [pid 8839] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8838] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8837] close(4 [pid 8836] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8838] <... openat resumed>) = 4 [pid 8837] <... close resumed>) = 0 [pid 8836] <... openat resumed>) = 3 [pid 8838] ioctl(4, LOOP_SET_FD, 3 [pid 8837] mkdir("./file0", 0777 [pid 8836] chdir("./file0" [pid 8838] <... ioctl resumed>) = 0 [pid 8836] <... chdir resumed>) = 0 [pid 8837] <... mkdir resumed>) = 0 [pid 8836] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8840] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8838] close(3 [pid 8836] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8838] <... close resumed>) = 0 [pid 8836] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8838] close(4) = 0 [pid 8838] mkdir("./file0", 0777) = 0 [pid 8838] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8836] <... open resumed>) = 4 [pid 8837] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8836] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [ 336.434907][ T8841] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 336.469038][ T8838] loop3: detected capacity change from 0 to 4096 [pid 8840] <... write resumed>) = 2097152 [pid 8836] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8836] ftruncate(4, 33587195 [pid 8838] <... mount resumed>) = 0 [pid 8838] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8838] chdir("./file0") = 0 [pid 8838] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8839] <... write resumed>) = 2097152 [pid 8838] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8840] <... munmap resumed>) = 0 [pid 8839] munmap(0x7f41e0600000, 138412032 [pid 8838] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8837] <... mount resumed>) = 0 [pid 8837] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8836] <... ftruncate resumed>) = 0 [pid 8837] <... openat resumed>) = 3 [pid 8836] unlink("./bus" [pid 8837] chdir("./file0" [pid 8840] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8837] <... chdir resumed>) = 0 [pid 8839] <... munmap resumed>) = 0 [pid 8840] <... openat resumed>) = 4 [pid 8837] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8840] ioctl(4, LOOP_SET_FD, 3 [pid 8839] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8837] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8840] <... ioctl resumed>) = 0 [pid 8839] <... openat resumed>) = 4 [pid 8838] <... open resumed>) = 4 [pid 8837] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8839] ioctl(4, LOOP_SET_FD, 3 [ 336.526875][ T8842] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 336.545537][ T8843] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 336.568443][ T8840] loop1: detected capacity change from 0 to 4096 [pid 8838] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8836] <... unlink resumed>) = 0 [pid 8838] <... open resumed>) = 5 [pid 8836] sendfile(-1, -1, NULL, 281474978811909 [pid 8840] close(3 [pid 8838] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8836] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8840] <... close resumed>) = 0 [pid 8838] <... mmap resumed>) = 0x20000000 [pid 8836] exit_group(0 [pid 8840] close(4 [pid 8836] <... exit_group resumed>) = ? [pid 8840] <... close resumed>) = 0 [pid 8839] <... ioctl resumed>) = 0 [pid 8840] mkdir("./file0", 0777 [pid 8838] ftruncate(4, 33587195 [pid 8840] <... mkdir resumed>) = 0 [pid 8839] close(3) = 0 [pid 8838] <... ftruncate resumed>) = 0 [pid 8840] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8839] close(4 [pid 8837] <... open resumed>) = 4 [pid 8839] <... close resumed>) = 0 [pid 8837] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8836] +++ exited with 0 +++ [pid 8838] unlink("./bus" [pid 8837] <... open resumed>) = 5 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8836, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 8839] mkdir("./file0", 0777 [pid 8837] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8839] <... mkdir resumed>) = 0 [pid 8838] <... unlink resumed>) = 0 [pid 8837] <... mmap resumed>) = 0x20000000 [pid 8839] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8838] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8837] ftruncate(4, 33587195 [pid 8838] exit_group(0 [pid 5061] umount2("./379", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8838] <... exit_group resumed>) = ? [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8837] <... ftruncate resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 8837] unlink("./bus" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./379/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./379/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 336.582033][ T8839] loop4: detected capacity change from 0 to 4096 [pid 5061] unlink("./379/binderfs") = 0 [pid 5061] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8838] +++ exited with 0 +++ [pid 8837] <... unlink resumed>) = 0 [pid 8837] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8838, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 8837] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8837] exit_group(0) = ? [pid 5064] umount2("./378", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8839] <... mount resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8840] <... mount resumed>) = 0 [pid 8840] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... openat resumed>) = 3 [pid 8840] <... openat resumed>) = 3 [pid 5064] newfstatat(3, "", [pid 8840] chdir("./file0") = 0 [pid 8839] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8837] +++ exited with 0 +++ [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8840] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8839] <... openat resumed>) = 3 [pid 5064] getdents64(3, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8837, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 8840] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8839] chdir("./file0" [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5061] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8840] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8839] <... chdir resumed>) = 0 [pid 5064] umount2("./378/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... restart_syscall resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8839] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8839] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] newfstatat(AT_FDCWD, "./378/binderfs", [pid 5061] newfstatat(AT_FDCWD, "./379/file0", [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8839] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] unlink("./378/binderfs" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5063] umount2("./374", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8840] <... open resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8840] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 336.661974][ T8845] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 336.676331][ T8846] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8840] <... open resumed>) = 5 [pid 5063] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "./379/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8839] <... open resumed>) = 4 [pid 5063] newfstatat(3, "", [pid 5061] <... openat resumed>) = 4 [pid 8840] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8839] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(4, "", [pid 5063] getdents64(3, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./374/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./374/binderfs", [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8840] <... mmap resumed>) = 0x20000000 [pid 8839] <... open resumed>) = 5 [pid 5064] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] unlink("./374/binderfs" [pid 5061] getdents64(4, [pid 8840] ftruncate(4, 33587195 [pid 8839] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... unlink resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] newfstatat(AT_FDCWD, "./378/file0", [pid 8839] <... mmap resumed>) = 0x20000000 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(4 [pid 8840] <... ftruncate resumed>) = 0 [pid 8839] ftruncate(4, 33587195 [pid 5064] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./379/file0") = 0 [pid 8840] unlink("./bus" [pid 5061] getdents64(3, [pid 8840] <... unlink resumed>) = 0 [pid 8839] <... ftruncate resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8840] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] openat(AT_FDCWD, "./378/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8840] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8839] unlink("./bus" [pid 5064] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./374/file0", [pid 8840] exit_group(0 [pid 5064] newfstatat(4, "", [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] close(3 [pid 8840] <... exit_group resumed>) = ? [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 8839] <... unlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] rmdir("./379" [pid 8839] sendfile(-1, -1, NULL, 281474978811909 [pid 5063] openat(AT_FDCWD, "./374/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8839] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5063] <... openat resumed>) = 4 [pid 8839] exit_group(0 [pid 5064] getdents64(4, [pid 5061] <... rmdir resumed>) = 0 [pid 8839] <... exit_group resumed>) = ? [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, [pid 5061] mkdir("./380", 0777 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./374/file0" [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] close(4) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5064] rmdir("./378/file0" [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./374" [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5064] getdents64(3, [pid 5063] <... rmdir resumed>) = 0 [pid 8840] +++ exited with 0 +++ [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] mkdir("./375", 0777 [pid 5064] close(3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8840, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... restart_syscall resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] rmdir("./378" [pid 5063] <... openat resumed>) = 3 [pid 5062] umount2("./373", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8839] +++ exited with 0 +++ [pid 5064] <... rmdir resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8839, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5064] mkdir("./379", 0777 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", [pid 5065] umount2("./372", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... mkdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", [pid 5062] getdents64(3, [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./373/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./372/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./373/binderfs", [pid 5065] newfstatat(AT_FDCWD, "./372/binderfs", [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./373/binderfs" [pid 5065] unlink("./372/binderfs" [pid 5062] <... unlink resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5065] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./372/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./372/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5065] getdents64(4, [pid 5062] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] close(3 [pid 5065] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./372/file0") = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./372") = 0 [pid 5065] mkdir("./373", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 8847 attached [pid 5062] newfstatat(AT_FDCWD, "./373/file0", [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8848 attached [pid 8847] set_robust_list(0x55555745a660, 24 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8847 [pid 8847] <... set_robust_list resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8848 [pid 5062] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8848] set_robust_list(0x55555745a660, 24 [pid 8847] chdir("./380" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8847] <... chdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./373/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8848] <... set_robust_list resumed>) = 0 [pid 8847] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... openat resumed>) = 4 [pid 8847] <... prctl resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 8847] setpgid(0, 0 [pid 8848] chdir("./375" [pid 8847] <... setpgid resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8847] write(3, "1000", 4) = 4 [pid 8847] close(3 [pid 5062] getdents64(4, [pid 8847] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8848] <... chdir resumed>) = 0 [pid 5064] close(3 [pid 5062] getdents64(4, [pid 8848] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... close resumed>) = 0 [pid 8848] <... prctl resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 8849 attached [pid 8848] setpgid(0, 0 [pid 8847] symlink("/dev/binderfs", "./binderfs" [pid 5062] close(4 [pid 8849] set_robust_list(0x55555745a660, 24 [pid 8848] <... setpgid resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8849 [pid 8849] <... set_robust_list resumed>) = 0 [pid 8849] chdir("./379" [pid 8848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8847] <... symlink resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8849] <... chdir resumed>) = 0 [pid 5062] rmdir("./373/file0" [pid 8849] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... rmdir resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 8849] <... prctl resumed>) = 0 [pid 8848] <... openat resumed>) = 3 [pid 8847] memfd_create("syzkaller", 0 [pid 5062] getdents64(3, [pid 8849] setpgid(0, 0 [pid 8848] write(3, "1000", 4 [pid 5065] close(3 [pid 8849] <... setpgid resumed>) = 0 [pid 8848] <... write resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 8848] close(3 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8847] <... memfd_create resumed>) = 3 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8848] <... close resumed>) = 0 [pid 8848] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 8850 attached [pid 8849] <... openat resumed>) = 3 [pid 8848] <... symlink resumed>) = 0 [pid 8847] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] close(3 [pid 8850] set_robust_list(0x55555745a660, 24 [pid 8848] memfd_create("syzkaller", 0 [pid 8847] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8850 [pid 5062] <... close resumed>) = 0 [pid 8850] <... set_robust_list resumed>) = 0 [pid 8849] write(3, "1000", 4 [pid 8848] <... memfd_create resumed>) = 3 [pid 8849] <... write resumed>) = 4 [pid 8848] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8849] close(3) = 0 [pid 8848] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] rmdir("./373" [pid 8849] symlink("/dev/binderfs", "./binderfs" [pid 8850] chdir("./373" [pid 8849] <... symlink resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8850] <... chdir resumed>) = 0 [pid 5062] mkdir("./374", 0777) = 0 [pid 8850] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8850] setpgid(0, 0) = 0 [pid 8849] memfd_create("syzkaller", 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8850] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8849] <... memfd_create resumed>) = 3 [pid 8849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8850] <... openat resumed>) = 3 [pid 8849] <... mmap resumed>) = 0x7f41e0600000 [pid 8850] write(3, "1000", 4) = 4 [pid 8850] close(3) = 0 [pid 8850] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8850] memfd_create("syzkaller", 0) = 3 [pid 8850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8847] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8848] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8849] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... ioctl resumed>) = 0 [pid 8850] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8851 attached [pid 8851] set_robust_list(0x55555745a660, 24 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8851 [pid 8851] <... set_robust_list resumed>) = 0 [pid 8851] chdir("./374") = 0 [pid 8851] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8851] setpgid(0, 0) = 0 [pid 8851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8851] write(3, "1000", 4) = 4 [pid 8851] close(3) = 0 [pid 8851] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8851] memfd_create("syzkaller", 0) = 3 [pid 8851] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8847] <... write resumed>) = 2097152 [pid 8847] munmap(0x7f41e0600000, 138412032) = 0 [pid 8851] <... mmap resumed>) = 0x7f41e0600000 [pid 8847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8849] <... write resumed>) = 2097152 [pid 8849] munmap(0x7f41e0600000, 138412032 [pid 8847] ioctl(4, LOOP_SET_FD, 3 [pid 8849] <... munmap resumed>) = 0 [pid 8848] <... write resumed>) = 2097152 [pid 8849] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8848] munmap(0x7f41e0600000, 138412032) = 0 [pid 8849] <... openat resumed>) = 4 [pid 8849] ioctl(4, LOOP_SET_FD, 3 [pid 8848] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8850] <... write resumed>) = 2097152 [pid 8849] <... ioctl resumed>) = 0 [pid 8850] munmap(0x7f41e0600000, 138412032 [pid 8849] close(3 [pid 8848] <... openat resumed>) = 4 [pid 8847] <... ioctl resumed>) = 0 [pid 8850] <... munmap resumed>) = 0 [pid 8849] <... close resumed>) = 0 [pid 8848] ioctl(4, LOOP_SET_FD, 3 [pid 8847] close(3 [pid 8850] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8849] close(4) = 0 [pid 8850] <... openat resumed>) = 4 [pid 8849] mkdir("./file0", 0777 [pid 8847] <... close resumed>) = 0 [pid 8851] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8850] ioctl(4, LOOP_SET_FD, 3 [pid 8849] <... mkdir resumed>) = 0 [pid 8848] <... ioctl resumed>) = 0 [pid 8847] close(4 [pid 8849] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8848] close(3 [pid 8847] <... close resumed>) = 0 [pid 8848] <... close resumed>) = 0 [pid 8848] close(4) = 0 [pid 8848] mkdir("./file0", 0777) = 0 [pid 8847] mkdir("./file0", 0777) = 0 [pid 8847] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8848] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8850] <... ioctl resumed>) = 0 [pid 8850] close(3) = 0 [ 337.113068][ T8847] loop0: detected capacity change from 0 to 4096 [ 337.123729][ T8849] loop3: detected capacity change from 0 to 4096 [ 337.136551][ T8848] loop2: detected capacity change from 0 to 4096 [ 337.156404][ T8850] loop4: detected capacity change from 0 to 4096 [pid 8850] close(4) = 0 [pid 8850] mkdir("./file0", 0777) = 0 [pid 8847] <... mount resumed>) = 0 [pid 8850] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8847] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8851] <... write resumed>) = 2097152 [pid 8849] <... mount resumed>) = 0 [pid 8848] <... mount resumed>) = 0 [pid 8847] <... openat resumed>) = 3 [pid 8849] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8848] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8847] chdir("./file0" [pid 8851] munmap(0x7f41e0600000, 138412032) = 0 [pid 8849] <... openat resumed>) = 3 [pid 8848] <... openat resumed>) = 3 [pid 8847] <... chdir resumed>) = 0 [pid 8849] chdir("./file0" [pid 8848] chdir("./file0" [pid 8847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8849] <... chdir resumed>) = 0 [pid 8848] <... chdir resumed>) = 0 [pid 8847] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8849] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8848] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8847] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8849] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8848] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8849] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8848] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8847] <... open resumed>) = 4 [pid 8851] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8848] <... open resumed>) = 4 [ 337.190237][ T8852] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 337.216323][ T8853] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 337.227736][ T8854] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8847] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8851] <... openat resumed>) = 4 [pid 8851] ioctl(4, LOOP_SET_FD, 3 [pid 8847] <... open resumed>) = 5 [pid 8849] <... open resumed>) = 4 [pid 8848] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8847] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8849] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8851] <... ioctl resumed>) = 0 [pid 8850] <... mount resumed>) = 0 [pid 8848] <... open resumed>) = 5 [pid 8847] <... mmap resumed>) = 0x20000000 [pid 8850] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8851] close(3 [pid 8849] <... open resumed>) = 5 [pid 8848] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8847] ftruncate(4, 33587195 [pid 8850] <... openat resumed>) = 3 [pid 8848] <... mmap resumed>) = 0x20000000 [pid 8851] <... close resumed>) = 0 [pid 8850] chdir("./file0" [pid 8849] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8847] <... ftruncate resumed>) = 0 [pid 8851] close(4 [pid 8850] <... chdir resumed>) = 0 [pid 8848] ftruncate(4, 33587195 [pid 8851] <... close resumed>) = 0 [pid 8850] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8849] <... mmap resumed>) = 0x20000000 [pid 8851] mkdir("./file0", 0777 [pid 8850] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8850] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8849] ftruncate(4, 33587195 [pid 8847] unlink("./bus" [pid 8851] <... mkdir resumed>) = 0 [pid 8851] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8849] <... ftruncate resumed>) = 0 [pid 8848] <... ftruncate resumed>) = 0 [pid 8847] <... unlink resumed>) = 0 [ 337.269055][ T8855] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 337.281759][ T8851] loop1: detected capacity change from 0 to 4096 [pid 8848] unlink("./bus" [pid 8849] unlink("./bus" [pid 8847] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8847] exit_group(0) = ? [pid 8848] <... unlink resumed>) = 0 [pid 8849] <... unlink resumed>) = 0 [pid 8849] sendfile(-1, -1, NULL, 281474978811909 [pid 8848] sendfile(-1, -1, NULL, 281474978811909 [pid 8849] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8848] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8848] exit_group(0 [pid 8849] exit_group(0 [pid 8848] <... exit_group resumed>) = ? [pid 8849] <... exit_group resumed>) = ? [pid 8850] <... open resumed>) = 4 [pid 8850] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8850] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8847] +++ exited with 0 +++ [pid 8848] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8847, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 8849] +++ exited with 0 +++ [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8848, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5061] <... restart_syscall resumed>) = 0 [pid 8850] <... ftruncate resumed>) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8849, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5063] umount2("./375", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] umount2("./379", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5061] umount2("./380", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] newfstatat(3, "", [pid 5064] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./380/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./380/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./380/binderfs") = 0 [pid 5061] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] umount2("./375/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8851] <... mount resumed>) = 0 [pid 8850] unlink("./bus" [pid 5064] getdents64(3, [pid 8851] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8851] <... openat resumed>) = 3 [pid 5064] umount2("./379/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(AT_FDCWD, "./375/binderfs", [pid 8851] chdir("./file0" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8851] <... chdir resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./379/binderfs", [pid 5063] unlink("./375/binderfs" [pid 8851] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 8851] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8850] <... unlink resumed>) = 0 [pid 5064] unlink("./379/binderfs" [pid 5063] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = 0 [pid 8851] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8850] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... unlink resumed>) = 0 [pid 8850] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8850] exit_group(0 [pid 5061] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8851] <... open resumed>) = 4 [pid 8850] <... exit_group resumed>) = ? [pid 8851] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8851] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8850] +++ exited with 0 +++ [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5061] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8850, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5064] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8851] <... ftruncate resumed>) = 0 [pid 5065] umount2("./373", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] newfstatat(AT_FDCWD, "./379/file0", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./380/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8851] unlink("./bus" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 337.391811][ T8856] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] newfstatat(AT_FDCWD, "./375/file0", [pid 5061] <... openat resumed>) = 4 [pid 5065] openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] newfstatat(4, "", [pid 5065] <... openat resumed>) = 3 [pid 5064] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] newfstatat(3, "", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] openat(AT_FDCWD, "./379/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(3, [pid 5064] <... openat resumed>) = 4 [pid 5063] openat(AT_FDCWD, "./375/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(4, [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] <... openat resumed>) = 4 [pid 5064] newfstatat(4, "", [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] umount2("./373/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] close(4 [pid 8851] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(4, [pid 5063] newfstatat(4, "", [pid 5061] <... close resumed>) = 0 [pid 8851] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] newfstatat(AT_FDCWD, "./373/binderfs", [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] rmdir("./380/file0" [pid 8851] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] getdents64(4, [pid 8851] exit_group(0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5061] <... rmdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 8851] <... exit_group resumed>) = ? [pid 5064] rmdir("./379/file0" [pid 5065] unlink("./373/binderfs" [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(3, [pid 5065] <... unlink resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] getdents64(4, [pid 5065] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(3, [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5064] close(3) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] close(3 [pid 5063] rmdir("./375/file0" [pid 5064] rmdir("./379" [pid 5061] <... close resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] rmdir("./380" [pid 5064] mkdir("./380", 0777 [pid 5061] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8851] +++ exited with 0 +++ [pid 5065] <... umount2 resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] close(3 [pid 5061] mkdir("./381", 0777 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5065] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./375" [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8851, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5061] <... mkdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./374", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 3 [pid 5065] newfstatat(AT_FDCWD, "./373/file0", [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] mkdir("./376", 0777 [pid 5062] openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... mkdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 5065] openat(AT_FDCWD, "./373/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] newfstatat(3, "", [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(3, [pid 5065] getdents64(4, [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] umount2("./374/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] close(4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... close resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./374/binderfs", [pid 5065] rmdir("./373/file0" [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5062] unlink("./374/binderfs" [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5062] <... unlink resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./373" [pid 5062] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./374", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... umount2 resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5062] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./374/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./374/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./374/file0") = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./374") = 0 [pid 5064] close(3 [pid 5061] close(3 [pid 5064] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] mkdir("./375", 0777./strace-static-x86_64: Process 8857 attached ./strace-static-x86_64: Process 8858 attached [pid 8857] set_robust_list(0x55555745a660, 24 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8857 [pid 8858] set_robust_list(0x55555745a660, 24 [pid 8857] <... set_robust_list resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8858 [pid 8858] <... set_robust_list resumed>) = 0 [pid 8857] chdir("./381" [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8857] <... chdir resumed>) = 0 [pid 8858] chdir("./380" [pid 8857] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... openat resumed>) = 3 [pid 8858] <... chdir resumed>) = 0 [pid 8857] <... prctl resumed>) = 0 [pid 8857] setpgid(0, 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8858] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8857] <... setpgid resumed>) = 0 [pid 8857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8858] <... prctl resumed>) = 0 [pid 8858] setpgid(0, 0 [pid 8857] <... openat resumed>) = 3 [pid 8858] <... setpgid resumed>) = 0 [pid 8857] write(3, "1000", 4) = 4 [pid 8857] close(3 [pid 8858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8857] <... close resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 8857] symlink("/dev/binderfs", "./binderfs" [pid 8858] <... openat resumed>) = 3 [pid 8857] <... symlink resumed>) = 0 [pid 8858] write(3, "1000", 4 [pid 8857] memfd_create("syzkaller", 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8858] <... write resumed>) = 4 [pid 8857] <... memfd_create resumed>) = 3 [pid 8857] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8858] close(3 [pid 5065] close(3 [pid 5063] close(3 [pid 8858] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8858] symlink("/dev/binderfs", "./binderfs" [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8858] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 8859 attached [pid 8859] set_robust_list(0x55555745a660, 24./strace-static-x86_64: Process 8860 attached ) = 0 [pid 8858] memfd_create("syzkaller", 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8860 [pid 8859] chdir("./376" [pid 8860] set_robust_list(0x55555745a660, 24 [pid 8859] <... chdir resumed>) = 0 [pid 8858] <... memfd_create resumed>) = 3 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8859 [pid 8859] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8858] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8860] <... set_robust_list resumed>) = 0 [pid 8859] <... prctl resumed>) = 0 [pid 8858] <... mmap resumed>) = 0x7f41e0600000 [pid 8860] chdir("./374" [pid 8859] setpgid(0, 0) = 0 [pid 8860] <... chdir resumed>) = 0 [pid 8859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8860] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8860] setpgid(0, 0) = 0 [pid 8860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8859] <... openat resumed>) = 3 [pid 8860] <... openat resumed>) = 3 [pid 8859] write(3, "1000", 4) = 4 [pid 8860] write(3, "1000", 4 [pid 8859] close(3 [pid 8860] <... write resumed>) = 4 [pid 8859] <... close resumed>) = 0 [pid 8860] close(3 [pid 8859] symlink("/dev/binderfs", "./binderfs" [pid 8860] <... close resumed>) = 0 [pid 8860] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8859] <... symlink resumed>) = 0 [pid 8860] memfd_create("syzkaller", 0 [pid 8859] memfd_create("syzkaller", 0 [pid 8860] <... memfd_create resumed>) = 3 [pid 8859] <... memfd_create resumed>) = 3 [pid 8860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8857] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8859] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8858] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 8861 attached [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8861 [pid 8861] set_robust_list(0x55555745a660, 24) = 0 [pid 8861] chdir("./375") = 0 [pid 8861] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8861] setpgid(0, 0) = 0 [pid 8861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8861] write(3, "1000", 4) = 4 [pid 8861] close(3) = 0 [pid 8861] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8861] memfd_create("syzkaller", 0) = 3 [pid 8860] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8859] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8861] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8857] <... write resumed>) = 2097152 [pid 8857] munmap(0x7f41e0600000, 138412032 [pid 8861] <... mmap resumed>) = 0x7f41e0600000 [pid 8858] <... write resumed>) = 2097152 [pid 8857] <... munmap resumed>) = 0 [pid 8858] munmap(0x7f41e0600000, 138412032) = 0 [pid 8857] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8857] ioctl(4, LOOP_SET_FD, 3 [pid 8858] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8858] ioctl(4, LOOP_SET_FD, 3 [pid 8857] <... ioctl resumed>) = 0 [pid 8857] close(3) = 0 [pid 8857] close(4) = 0 [pid 8861] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8858] <... ioctl resumed>) = 0 [pid 8857] mkdir("./file0", 0777) = 0 [pid 8858] close(3) = 0 [pid 8858] close(4) = 0 [pid 8857] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8858] mkdir("./file0", 0777) = 0 [pid 8858] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8860] <... write resumed>) = 2097152 [pid 8859] <... write resumed>) = 2097152 [ 337.786501][ T8857] loop0: detected capacity change from 0 to 4096 [ 337.796476][ T8858] loop3: detected capacity change from 0 to 4096 [pid 8859] munmap(0x7f41e0600000, 138412032 [pid 8860] munmap(0x7f41e0600000, 138412032) = 0 [pid 8859] <... munmap resumed>) = 0 [pid 8860] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8860] ioctl(4, LOOP_SET_FD, 3 [pid 8859] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8859] ioctl(4, LOOP_SET_FD, 3 [pid 8861] <... write resumed>) = 2097152 [pid 8860] <... ioctl resumed>) = 0 [pid 8861] munmap(0x7f41e0600000, 138412032 [pid 8860] close(3 [pid 8861] <... munmap resumed>) = 0 [pid 8860] <... close resumed>) = 0 [pid 8861] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8860] close(4 [ 337.864764][ T8860] loop4: detected capacity change from 0 to 4096 [ 337.879099][ T8863] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 337.879734][ T8862] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 337.890917][ T8859] loop2: detected capacity change from 0 to 4096 [pid 8858] <... mount resumed>) = 0 [pid 8857] <... mount resumed>) = 0 [pid 8861] <... openat resumed>) = 4 [pid 8858] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8861] ioctl(4, LOOP_SET_FD, 3 [pid 8858] <... openat resumed>) = 3 [pid 8858] chdir("./file0") = 0 [pid 8858] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8860] <... close resumed>) = 0 [pid 8858] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8857] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8860] mkdir("./file0", 0777) = 0 [pid 8857] <... openat resumed>) = 3 [pid 8860] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8857] chdir("./file0") = 0 [pid 8857] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8857] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8861] <... ioctl resumed>) = 0 [pid 8861] close(3) = 0 [pid 8861] close(4) = 0 [pid 8861] mkdir("./file0", 0777 [pid 8859] <... ioctl resumed>) = 0 [pid 8858] <... open resumed>) = 4 [pid 8861] <... mkdir resumed>) = 0 [pid 8858] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8861] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8858] <... open resumed>) = 5 [pid 8859] close(3 [ 337.929593][ T8861] loop1: detected capacity change from 0 to 4096 [pid 8858] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8859] <... close resumed>) = 0 [pid 8858] <... mmap resumed>) = 0x20000000 [pid 8857] <... open resumed>) = 4 [pid 8859] close(4 [pid 8857] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8860] <... mount resumed>) = 0 [pid 8858] ftruncate(4, 33587195 [pid 8857] <... open resumed>) = 5 [pid 8860] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8859] <... close resumed>) = 0 [pid 8858] <... ftruncate resumed>) = 0 [pid 8857] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8858] unlink("./bus" [pid 8860] <... chdir resumed>) = 0 [pid 8860] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8859] mkdir("./file0", 0777 [pid 8857] ftruncate(4, 33587195 [pid 8860] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8860] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8859] <... mkdir resumed>) = 0 [pid 8861] <... mount resumed>) = 0 [pid 8859] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8857] <... ftruncate resumed>) = 0 [pid 8861] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8858] <... unlink resumed>) = 0 [pid 8861] <... openat resumed>) = 3 [pid 8858] sendfile(-1, -1, NULL, 281474978811909 [pid 8861] chdir("./file0" [pid 8858] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8861] <... chdir resumed>) = 0 [pid 8858] exit_group(0 [pid 8857] unlink("./bus" [pid 8861] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8858] <... exit_group resumed>) = ? [pid 8861] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8861] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8857] <... unlink resumed>) = 0 [pid 8857] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8857] exit_group(0 [pid 8858] +++ exited with 0 +++ [ 337.977506][ T8864] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 338.013582][ T8865] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8857] <... exit_group resumed>) = ? [pid 8860] <... open resumed>) = 4 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8858, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8860] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 8860] <... open resumed>) = 5 [pid 5064] <... restart_syscall resumed>) = 0 [pid 5064] umount2("./380", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8860] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8860] <... mmap resumed>) = 0x20000000 [pid 5064] openat(AT_FDCWD, "./380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8859] <... mount resumed>) = 0 [pid 8861] <... open resumed>) = 4 [pid 8859] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8857] +++ exited with 0 +++ [pid 5064] <... openat resumed>) = 3 [pid 8859] <... openat resumed>) = 3 [pid 8861] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8859] chdir("./file0" [pid 5064] newfstatat(3, "", [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8857, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8859] <... chdir resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8861] <... open resumed>) = 5 [pid 8859] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] getdents64(3, [pid 8861] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8860] ftruncate(4, 33587195 [pid 8859] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8859] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8861] <... mmap resumed>) = 0x20000000 [pid 8860] <... ftruncate resumed>) = 0 [pid 5064] umount2("./380/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./381", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8861] ftruncate(4, 33587195 [pid 8859] <... open resumed>) = 4 [pid 5064] newfstatat(AT_FDCWD, "./380/binderfs", [pid 5061] umount2("./381/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8860] unlink("./bus" [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./380/binderfs" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8859] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... unlink resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./381/binderfs", [pid 8860] <... unlink resumed>) = 0 [pid 8859] <... open resumed>) = 5 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8860] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] unlink("./381/binderfs" [pid 8860] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8859] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8860] exit_group(0 [pid 8859] <... mmap resumed>) = 0x20000000 [pid 8860] <... exit_group resumed>) = ? [ 338.051671][ T8866] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8859] ftruncate(4, 33587195 [pid 8861] <... ftruncate resumed>) = 0 [pid 8860] +++ exited with 0 +++ [pid 5061] <... unlink resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8860, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5061] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./374", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8861] unlink("./bus" [pid 8859] <... ftruncate resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", [pid 8861] <... unlink resumed>) = 0 [pid 8859] unlink("./bus" [pid 5064] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8861] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8861] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] getdents64(3, [pid 8861] exit_group(0 [pid 5064] newfstatat(AT_FDCWD, "./380/file0", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8861] <... exit_group resumed>) = ? [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] newfstatat(AT_FDCWD, "./381/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8861] +++ exited with 0 +++ [pid 8859] <... unlink resumed>) = 0 [pid 5065] umount2("./374/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8859] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8859] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8859] exit_group(0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8861, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8859] <... exit_group resumed>) = ? [pid 5065] newfstatat(AT_FDCWD, "./374/binderfs", [pid 5064] openat(AT_FDCWD, "./380/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] openat(AT_FDCWD, "./381/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... openat resumed>) = 4 [pid 5061] <... openat resumed>) = 4 [pid 5064] newfstatat(4, "", [pid 5061] newfstatat(4, "", [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./375", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] getdents64(4, [pid 5061] getdents64(4, [pid 5065] unlink("./374/binderfs" [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] <... unlink resumed>) = 0 [pid 5064] close(4 [pid 5062] newfstatat(3, "", [pid 5061] getdents64(4, [pid 5065] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] rmdir("./380/file0" [pid 5061] close(4) = 0 [pid 5062] getdents64(3, [pid 5061] rmdir("./381/file0" [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 8859] +++ exited with 0 +++ [pid 5065] <... umount2 resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] getdents64(3, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8859, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5062] umount2("./375/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./380" [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] close(3 [pid 5065] newfstatat(AT_FDCWD, "./374/file0", [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] mkdir("./381", 0777 [pid 5062] newfstatat(AT_FDCWD, "./375/binderfs", [pid 5061] rmdir("./381" [pid 5065] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./376", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] unlink("./375/binderfs" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... unlink resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./374/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", [pid 5061] mkdir("./382", 0777 [pid 5065] <... openat resumed>) = 4 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5061] <... mkdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, [pid 5063] getdents64(3, [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5065] close(4) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5065] rmdir("./374/file0" [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./374") = 0 [pid 5065] mkdir("./375", 0777 [pid 5063] umount2("./376/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(AT_FDCWD, "./376/binderfs", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] newfstatat(AT_FDCWD, "./375/file0", [pid 5063] unlink("./376/binderfs" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5062] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./375/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] newfstatat(4, "", [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] getdents64(4, [pid 5061] <... ioctl resumed>) = 0 [pid 5064] close(3 [pid 5063] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] close(3 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] newfstatat(AT_FDCWD, "./376/file0", [pid 5062] getdents64(4, [pid 5061] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8868 attached ./strace-static-x86_64: Process 8867 attached [pid 5062] <... close resumed>) = 0 [pid 8868] set_robust_list(0x55555745a660, 24 [pid 8867] set_robust_list(0x55555745a660, 24 [pid 5063] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] rmdir("./375/file0" [pid 8868] <... set_robust_list resumed>) = 0 [pid 8867] <... set_robust_list resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... rmdir resumed>) = 0 [pid 8868] chdir("./382" [pid 5063] openat(AT_FDCWD, "./376/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8868] <... chdir resumed>) = 0 [pid 8867] chdir("./381" [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8867 [pid 5063] <... openat resumed>) = 4 [pid 8868] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8867] <... chdir resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5062] getdents64(3, [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8868 [pid 8868] <... prctl resumed>) = 0 [pid 8867] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8868] setpgid(0, 0 [pid 8867] <... prctl resumed>) = 0 [pid 5063] getdents64(4, [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8867] setpgid(0, 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] close(3 [pid 8868] <... setpgid resumed>) = 0 [pid 8867] <... setpgid resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] getdents64(4, [pid 8867] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] rmdir("./375" [pid 8868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8867] write(3, "1000", 4) = 4 [pid 5063] close(4 [pid 5062] <... rmdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8868] <... openat resumed>) = 3 [pid 8867] close(3 [pid 8868] write(3, "1000", 4 [pid 8867] <... close resumed>) = 0 [pid 8868] <... write resumed>) = 4 [pid 8867] symlink("/dev/binderfs", "./binderfs" [pid 8868] close(3 [pid 5063] rmdir("./376/file0" [pid 5062] mkdir("./376", 0777 [pid 8868] <... close resumed>) = 0 [pid 8867] <... symlink resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8868] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 8868] memfd_create("syzkaller", 0 [pid 8867] memfd_create("syzkaller", 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5063] getdents64(3, [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8868] <... memfd_create resumed>) = 3 [pid 8867] <... memfd_create resumed>) = 3 [pid 5065] close(3 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8868] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... close resumed>) = 0 [pid 5063] close(3 [pid 5062] <... openat resumed>) = 3 [pid 8868] <... mmap resumed>) = 0x7f41e0600000 [pid 8867] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] <... close resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] rmdir("./376"./strace-static-x86_64: Process 8869 attached ) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8869 [pid 8869] set_robust_list(0x55555745a660, 24) = 0 [pid 8869] chdir("./375" [pid 5063] mkdir("./377", 0777 [pid 8869] <... chdir resumed>) = 0 [pid 8869] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8869] setpgid(0, 0) = 0 [pid 8869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... mkdir resumed>) = 0 [pid 8869] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8869] write(3, "1000", 4) = 4 [pid 8869] close(3) = 0 [pid 5063] <... openat resumed>) = 3 [pid 8869] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8869] memfd_create("syzkaller", 0) = 3 [pid 8869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8867] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8868] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... ioctl resumed>) = 0 [pid 8869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8870 attached [pid 8870] set_robust_list(0x55555745a660, 24 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8870 [pid 8870] <... set_robust_list resumed>) = 0 [pid 8870] chdir("./376") = 0 [pid 8870] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8870] setpgid(0, 0) = 0 [pid 8870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8870] write(3, "1000", 4) = 4 [pid 8870] close(3) = 0 [pid 8867] <... write resumed>) = 2097152 [pid 8870] symlink("/dev/binderfs", "./binderfs" [pid 8867] munmap(0x7f41e0600000, 138412032 [pid 8870] <... symlink resumed>) = 0 [pid 8870] memfd_create("syzkaller", 0) = 3 [pid 8870] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8868] <... write resumed>) = 2097152 [pid 8867] <... munmap resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8868] munmap(0x7f41e0600000, 138412032 [pid 8867] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] close(3 [pid 8868] <... munmap resumed>) = 0 [pid 8867] <... openat resumed>) = 4 [pid 8869] <... write resumed>) = 2097152 [pid 8868] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8867] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8871 ./strace-static-x86_64: Process 8871 attached [pid 8869] munmap(0x7f41e0600000, 138412032 [pid 8868] <... openat resumed>) = 4 [pid 8867] <... ioctl resumed>) = 0 [pid 8871] set_robust_list(0x55555745a660, 24 [pid 8869] <... munmap resumed>) = 0 [pid 8868] ioctl(4, LOOP_SET_FD, 3 [pid 8867] close(3 [pid 8871] <... set_robust_list resumed>) = 0 [pid 8869] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8871] chdir("./377" [pid 8869] <... openat resumed>) = 4 [pid 8871] <... chdir resumed>) = 0 [pid 8869] ioctl(4, LOOP_SET_FD, 3 [pid 8871] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8871] setpgid(0, 0 [pid 8867] <... close resumed>) = 0 [pid 8867] close(4 [pid 8871] <... setpgid resumed>) = 0 [pid 8867] <... close resumed>) = 0 [pid 8871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8867] mkdir("./file0", 0777 [pid 8871] <... openat resumed>) = 3 [pid 8870] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8867] <... mkdir resumed>) = 0 [pid 8871] write(3, "1000", 4) = 4 [pid 8868] <... ioctl resumed>) = 0 [pid 8867] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8871] close(3 [pid 8868] close(3 [pid 8871] <... close resumed>) = 0 [pid 8868] <... close resumed>) = 0 [pid 8871] symlink("/dev/binderfs", "./binderfs" [pid 8868] close(4) = 0 [pid 8868] mkdir("./file0", 0777 [pid 8871] <... symlink resumed>) = 0 [pid 8869] <... ioctl resumed>) = 0 [pid 8868] <... mkdir resumed>) = 0 [pid 8869] close(3 [pid 8868] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8869] <... close resumed>) = 0 [pid 8871] memfd_create("syzkaller", 0 [pid 8869] close(4) = 0 [pid 8869] mkdir("./file0", 0777 [pid 8871] <... memfd_create resumed>) = 3 [pid 8869] <... mkdir resumed>) = 0 [pid 8871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [ 338.472288][ T8867] loop3: detected capacity change from 0 to 4096 [ 338.484365][ T8868] loop0: detected capacity change from 0 to 4096 [ 338.493472][ T8869] loop4: detected capacity change from 0 to 4096 [pid 8869] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8867] <... mount resumed>) = 0 [pid 8867] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8867] chdir("./file0") = 0 [ 338.542885][ T8872] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8867] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8867] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8869] <... mount resumed>) = 0 [pid 8869] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8869] chdir("./file0" [pid 8871] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8869] <... chdir resumed>) = 0 [pid 8868] <... mount resumed>) = 0 [pid 8869] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8868] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8870] <... write resumed>) = 2097152 [pid 8869] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8868] <... openat resumed>) = 3 [pid 8869] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8868] chdir("./file0") = 0 [ 338.593888][ T8873] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 338.605193][ T8874] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 338.629070][ T28] kauditd_printk_skb: 95 callbacks suppressed [pid 8870] munmap(0x7f41e0600000, 138412032 [pid 8868] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8867] <... open resumed>) = 4 [pid 8867] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8867] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8868] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8868] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8867] <... ftruncate resumed>) = 0 [pid 8867] unlink("./bus" [pid 8870] <... munmap resumed>) = 0 [pid 8869] <... open resumed>) = 4 [pid 8869] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8870] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8869] <... open resumed>) = 5 [pid 8869] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8870] <... openat resumed>) = 4 [pid 8869] <... mmap resumed>) = 0x20000000 [pid 8869] ftruncate(4, 33587195 [ 338.629086][ T28] audit: type=1800 audit(1708423491.160:5675): pid=8867 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 338.663844][ T28] audit: type=1800 audit(1708423491.190:5676): pid=8867 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 8870] ioctl(4, LOOP_SET_FD, 3 [pid 8869] <... ftruncate resumed>) = 0 [pid 8869] unlink("./bus" [pid 8871] <... write resumed>) = 2097152 [pid 8870] <... ioctl resumed>) = 0 [pid 8868] <... open resumed>) = 4 [pid 8867] <... unlink resumed>) = 0 [pid 8870] close(3) = 0 [pid 8870] close(4) = 0 [pid 8868] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8867] sendfile(-1, -1, NULL, 281474978811909 [pid 8868] <... open resumed>) = 5 [pid 8867] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8868] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8867] exit_group(0 [pid 8871] munmap(0x7f41e0600000, 138412032 [pid 8870] mkdir("./file0", 0777 [pid 8869] <... unlink resumed>) = 0 [pid 8868] <... mmap resumed>) = 0x20000000 [pid 8867] <... exit_group resumed>) = ? [pid 8870] <... mkdir resumed>) = 0 [pid 8869] sendfile(-1, -1, NULL, 281474978811909 [pid 8868] ftruncate(4, 33587195 [pid 8867] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8867, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=2 /* 0.02 s */} --- [pid 8871] <... munmap resumed>) = 0 [pid 8869] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8871] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8869] exit_group(0 [pid 5064] umount2("./381", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8871] <... openat resumed>) = 4 [pid 8869] <... exit_group resumed>) = ? [pid 8868] <... ftruncate resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8870] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8871] ioctl(4, LOOP_SET_FD, 3 [pid 8868] unlink("./bus" [pid 5064] <... openat resumed>) = 3 [ 338.698975][ T8870] loop1: detected capacity change from 0 to 4096 [ 338.706661][ T28] audit: type=1800 audit(1708423491.190:5677): pid=8867 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 5064] newfstatat(3, "", [pid 8871] <... ioctl resumed>) = 0 [pid 8871] close(3) = 0 [pid 8871] close(4) = 0 [pid 8871] mkdir("./file0", 0777) = 0 [pid 8871] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8868] <... unlink resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8869] +++ exited with 0 +++ [pid 8868] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] getdents64(3, [pid 8868] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8868] exit_group(0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8869, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5064] umount2("./381/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./375", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8868] <... exit_group resumed>) = ? [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] newfstatat(AT_FDCWD, "./381/binderfs", [pid 5065] <... openat resumed>) = 3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 338.754415][ T8871] loop2: detected capacity change from 0 to 4096 [ 338.774873][ T8875] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] unlink("./381/binderfs" [pid 5065] getdents64(3, [pid 5064] <... unlink resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./375/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./375/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8868] +++ exited with 0 +++ [pid 5065] unlink("./375/binderfs") = 0 [pid 5065] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8868, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5061] umount2("./382", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 338.782138][ T28] audit: type=1800 audit(1708423491.220:5678): pid=8869 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 338.814936][ T8876] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 338.829068][ T28] audit: type=1800 audit(1708423491.220:5679): pid=8869 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8870] <... mount resumed>) = 0 [pid 8870] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... umount2 resumed>) = 0 [pid 5061] umount2("./382/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8871] <... mount resumed>) = 0 [pid 8870] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8871] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8870] chdir("./file0" [pid 5061] newfstatat(AT_FDCWD, "./382/binderfs", [pid 5064] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./381/file0", [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8870] <... chdir resumed>) = 0 [pid 5061] unlink("./382/binderfs" [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8870] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... unlink resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8870] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "./381/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8871] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] getdents64(4, [pid 8871] chdir("./file0" [pid 8870] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8871] <... chdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./381/file0") = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./381" [pid 8871] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8871] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] mkdir("./382", 0777 [pid 8871] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5065] newfstatat(AT_FDCWD, "./375/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./375/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 338.849952][ T28] audit: type=1800 audit(1708423491.220:5680): pid=8869 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [pid 5065] newfstatat(4, "", [pid 8871] <... open resumed>) = 4 [pid 8870] <... open resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./375/file0") = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./382/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./382/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", [pid 5065] getdents64(3, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] close(3 [pid 5061] getdents64(4, [pid 5065] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] rmdir("./375" [pid 5061] close(4) = 0 [pid 5061] rmdir("./382/file0" [pid 5065] <... rmdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5065] mkdir("./376", 0777 [pid 5061] getdents64(3, [pid 8871] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8870] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... mkdir resumed>) = 0 [ 338.900949][ T28] audit: type=1800 audit(1708423491.260:5681): pid=8868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 338.926856][ T28] audit: type=1800 audit(1708423491.260:5682): pid=8868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [pid 5064] <... ioctl resumed>) = 0 [pid 8871] <... open resumed>) = 5 [pid 8870] <... open resumed>) = 5 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5061] close(3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./382") = 0 [pid 5061] mkdir("./383", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8877 attached [pid 8877] set_robust_list(0x55555745a660, 24) = 0 [pid 8877] chdir("./382") = 0 [pid 8877] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8877] setpgid(0, 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8877 [pid 8877] <... setpgid resumed>) = 0 [pid 8871] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8870] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8877] write(3, "1000", 4) = 4 [pid 8877] close(3) = 0 [pid 8877] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8877] memfd_create("syzkaller", 0) = 3 [pid 8877] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8871] <... mmap resumed>) = 0x20000000 [pid 8870] <... mmap resumed>) = 0x20000000 [pid 8871] ftruncate(4, 33587195 [pid 8870] ftruncate(4, 33587195) = 0 [pid 8871] <... ftruncate resumed>) = 0 [pid 8877] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8871] unlink("./bus" [pid 8870] unlink("./bus" [pid 8871] <... unlink resumed>) = 0 [pid 8870] <... unlink resumed>) = 0 [pid 8871] sendfile(-1, -1, NULL, 281474978811909 [pid 8870] sendfile(-1, -1, NULL, 281474978811909 [pid 8871] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8870] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8871] exit_group(0) = ? [ 338.948985][ T28] audit: type=1800 audit(1708423491.260:5683): pid=8868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 338.970000][ T28] audit: type=1800 audit(1708423491.430:5684): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [pid 8870] exit_group(0 [pid 8871] +++ exited with 0 +++ [pid 8870] <... exit_group resumed>) = ? [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8871, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5063] umount2("./377", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8870] +++ exited with 0 +++ [pid 5065] <... ioctl resumed>) = 0 [pid 8877] <... write resumed>) = 2097152 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... ioctl resumed>) = 0 [pid 5065] close(3 [pid 8877] munmap(0x7f41e0600000, 138412032 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8870, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 5063] openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] umount2("./376", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8878 attached [pid 8877] <... munmap resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] close(3 [pid 5062] openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8878] set_robust_list(0x55555745a660, 24 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8878 [pid 5063] getdents64(3, [pid 5062] <... openat resumed>) = 3 [pid 8878] <... set_robust_list resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 8878] chdir("./376" [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... close resumed>) = 0 [pid 5063] umount2("./377/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(3, [pid 8878] <... chdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8878] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8877] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] newfstatat(AT_FDCWD, "./377/binderfs", [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8878] <... prctl resumed>) = 0 [pid 8877] <... openat resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./376/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8878] setpgid(0, 0 [pid 8877] ioctl(4, LOOP_SET_FD, 3 [pid 5063] unlink("./377/binderfs" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8878] <... setpgid resumed>) = 0 [pid 8877] <... ioctl resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8879 ./strace-static-x86_64: Process 8879 attached [pid 8879] set_robust_list(0x55555745a660, 24) = 0 [pid 8879] chdir("./383") = 0 [pid 8879] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8879] setpgid(0, 0) = 0 [pid 5062] newfstatat(AT_FDCWD, "./376/binderfs", [pid 8878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8878] <... openat resumed>) = 3 [pid 5062] unlink("./376/binderfs" [pid 8879] <... openat resumed>) = 3 [pid 8878] write(3, "1000", 4 [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 8879] write(3, "1000", 4 [pid 8878] <... write resumed>) = 4 [pid 5062] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8879] <... write resumed>) = 4 [pid 8879] close(3 [pid 8878] close(3 [pid 5063] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8879] <... close resumed>) = 0 [pid 8878] <... close resumed>) = 0 [pid 8879] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8878] symlink("/dev/binderfs", "./binderfs" [pid 8879] memfd_create("syzkaller", 0) = 3 [pid 8879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8877] close(3 [pid 8878] <... symlink resumed>) = 0 [pid 8879] <... mmap resumed>) = 0x7f41e0600000 [pid 8877] <... close resumed>) = 0 [pid 8878] memfd_create("syzkaller", 0 [pid 8877] close(4 [pid 8878] <... memfd_create resumed>) = 3 [pid 5062] <... umount2 resumed>) = 0 [pid 8877] <... close resumed>) = 0 [pid 8877] mkdir("./file0", 0777 [pid 8878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8877] <... mkdir resumed>) = 0 [ 339.101100][ T8877] loop3: detected capacity change from 0 to 4096 [pid 5062] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8878] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8877] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] newfstatat(AT_FDCWD, "./376/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./376/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8878] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8877] <... mount resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 8877] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] newfstatat(AT_FDCWD, "./377/file0", [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8877] <... openat resumed>) = 3 [pid 5062] getdents64(4, [pid 8877] chdir("./file0" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8877] <... chdir resumed>) = 0 [pid 8877] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8877] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8877] <... open resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(4, [pid 8877] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] openat(AT_FDCWD, "./377/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8877] <... open resumed>) = 5 [pid 5063] <... openat resumed>) = 4 [pid 5062] close(4 [pid 8877] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... close resumed>) = 0 [pid 8877] ftruncate(4, 33587195 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] rmdir("./376/file0" [pid 8877] <... ftruncate resumed>) = 0 [pid 5063] getdents64(4, [pid 5062] <... rmdir resumed>) = 0 [pid 8877] unlink("./bus" [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(3, [pid 5063] getdents64(4, [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5063] close(4 [pid 5062] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] rmdir("./376" [pid 5063] rmdir("./377/file0" [pid 5062] <... rmdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] mkdir("./377", 0777 [pid 8877] <... unlink resumed>) = 0 [pid 8877] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8877] exit_group(0 [pid 5062] <... mkdir resumed>) = 0 [pid 8877] <... exit_group resumed>) = ? [ 339.152901][ T8880] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8879] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8878] <... write resumed>) = 2097152 [pid 5063] getdents64(3, [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5063] close(3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8878] munmap(0x7f41e0600000, 138412032 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./377") = 0 [pid 5063] mkdir("./378", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8878] <... munmap resumed>) = 0 [pid 8877] +++ exited with 0 +++ [pid 8878] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8877, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5063] <... openat resumed>) = 3 [pid 8878] <... openat resumed>) = 4 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8878] ioctl(4, LOOP_SET_FD, 3 [pid 8879] <... write resumed>) = 2097152 [pid 5064] umount2("./382", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8879] munmap(0x7f41e0600000, 138412032 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8879] <... munmap resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8878] <... ioctl resumed>) = 0 [pid 8879] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] getdents64(3, [pid 8879] <... openat resumed>) = 4 [pid 8878] close(3) = 0 [pid 8878] close(4) = 0 [ 339.241828][ T8878] loop4: detected capacity change from 0 to 4096 [pid 8878] mkdir("./file0", 0777) = 0 [pid 8879] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] <... ioctl resumed>) = 0 [pid 5064] umount2("./382/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./382/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./382/binderfs" [pid 5062] close(3 [pid 8878] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... unlink resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5064] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8881 ./strace-static-x86_64: Process 8881 attached [pid 8881] set_robust_list(0x55555745a660, 24 [pid 8879] <... ioctl resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 8881] <... set_robust_list resumed>) = 0 [pid 8879] close(3 [pid 8881] chdir("./377" [pid 8879] <... close resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8881] <... chdir resumed>) = 0 [pid 8879] close(4 [pid 8881] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8879] <... close resumed>) = 0 [pid 8881] <... prctl resumed>) = 0 [pid 8879] mkdir("./file0", 0777 [pid 5064] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8879] <... mkdir resumed>) = 0 [pid 8881] setpgid(0, 0 [pid 5064] newfstatat(AT_FDCWD, "./382/file0", [pid 8879] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8881] <... setpgid resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] close(3 [pid 5064] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./382/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... openat resumed>) = 4 [pid 5064] newfstatat(4, "", [pid 8881] <... openat resumed>) = 3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 8882 attached [ 339.292526][ T8879] loop0: detected capacity change from 0 to 4096 [pid 8881] write(3, "1000", 4 [pid 5064] getdents64(4, [pid 8882] set_robust_list(0x55555745a660, 24 [pid 8881] <... write resumed>) = 4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8882 [pid 8882] <... set_robust_list resumed>) = 0 [pid 8881] close(3 [pid 5064] getdents64(4, [pid 8882] chdir("./378" [pid 8881] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8882] <... chdir resumed>) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./382/file0" [pid 8882] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... rmdir resumed>) = 0 [pid 8882] <... prctl resumed>) = 0 [pid 8882] setpgid(0, 0) = 0 [pid 8882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] getdents64(3, [pid 8882] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8882] write(3, "1000", 4 [pid 5064] close(3) = 0 [pid 5064] rmdir("./382" [pid 8882] <... write resumed>) = 4 [pid 8881] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... rmdir resumed>) = 0 [pid 8882] close(3 [pid 8881] <... symlink resumed>) = 0 [pid 8882] <... close resumed>) = 0 [pid 8882] symlink("/dev/binderfs", "./binderfs" [pid 5064] mkdir("./383", 0777 [pid 8882] <... symlink resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 8882] memfd_create("syzkaller", 0) = 3 [pid 8882] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8881] memfd_create("syzkaller", 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8882] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8881] <... memfd_create resumed>) = 3 [pid 8881] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8878] <... mount resumed>) = 0 [pid 8878] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8878] chdir("./file0") = 0 [pid 8878] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8878] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8882] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8878] <... open resumed>) = 4 [pid 8878] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [ 339.378824][ T8883] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8878] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8881] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8879] <... mount resumed>) = 0 [pid 8878] <... ftruncate resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8879] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8878] unlink("./bus" [pid 8879] <... openat resumed>) = 3 [pid 8879] chdir("./file0" [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8885 [pid 8879] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 8885 attached [pid 8879] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8878] <... unlink resumed>) = 0 [pid 8885] set_robust_list(0x55555745a660, 24 [pid 8879] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8878] sendfile(-1, -1, NULL, 281474978811909 [pid 8879] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8878] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [ 339.436277][ T8884] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8878] exit_group(0) = ? [pid 8878] +++ exited with 0 +++ [pid 8885] <... set_robust_list resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8878, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 8885] chdir("./383" [pid 8882] <... write resumed>) = 2097152 [pid 8885] <... chdir resumed>) = 0 [pid 8882] munmap(0x7f41e0600000, 138412032 [pid 8885] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] umount2("./376", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8879] <... open resumed>) = 4 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8885] <... prctl resumed>) = 0 [pid 8882] <... munmap resumed>) = 0 [pid 8879] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8885] setpgid(0, 0 [pid 5065] umount2("./376/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8885] <... setpgid resumed>) = 0 [pid 8882] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8879] <... open resumed>) = 5 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8879] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] newfstatat(AT_FDCWD, "./376/binderfs", [pid 8882] <... openat resumed>) = 4 [pid 8885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8879] <... mmap resumed>) = 0x20000000 [pid 8882] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8879] ftruncate(4, 33587195 [pid 5065] unlink("./376/binderfs") = 0 [pid 5065] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8885] <... openat resumed>) = 3 [pid 8882] <... ioctl resumed>) = 0 [pid 8881] <... write resumed>) = 2097152 [pid 8879] <... ftruncate resumed>) = 0 [pid 8885] write(3, "1000", 4 [pid 8881] munmap(0x7f41e0600000, 138412032 [pid 8885] <... write resumed>) = 4 [pid 8882] close(3 [pid 8879] unlink("./bus" [pid 8885] close(3 [pid 8882] <... close resumed>) = 0 [pid 8881] <... munmap resumed>) = 0 [pid 8885] <... close resumed>) = 0 [pid 8882] close(4 [pid 8885] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8882] <... close resumed>) = 0 [pid 8885] memfd_create("syzkaller", 0) = 3 [pid 8885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8881] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8882] mkdir("./file0", 0777 [pid 8881] <... openat resumed>) = 4 [pid 5065] <... umount2 resumed>) = 0 [pid 8879] <... unlink resumed>) = 0 [pid 8882] <... mkdir resumed>) = 0 [pid 8879] sendfile(-1, -1, NULL, 281474978811909 [pid 8882] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8879] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8881] ioctl(4, LOOP_SET_FD, 3 [pid 8879] exit_group(0) = ? [pid 5065] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./376/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8881] <... ioctl resumed>) = 0 [pid 8881] close(3) = 0 [pid 8881] close(4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./376/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8879] +++ exited with 0 +++ [pid 5065] <... openat resumed>) = 4 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8879, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./383", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8881] <... close resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, [pid 5061] getdents64(3, [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] close(4) = 0 [pid 5061] umount2("./383/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] rmdir("./376/file0" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./383/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./383/binderfs" [pid 8881] mkdir("./file0", 0777 [pid 5061] <... unlink resumed>) = 0 [pid 8881] <... mkdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [ 339.524405][ T8882] loop2: detected capacity change from 0 to 4096 [ 339.562517][ T8881] loop1: detected capacity change from 0 to 4096 [pid 5061] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8885] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8881] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 8882] <... mount resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 8882] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] rmdir("./376") = 0 [pid 8882] <... openat resumed>) = 3 [pid 5065] mkdir("./377", 0777) = 0 [pid 8882] chdir("./file0") = 0 [pid 8882] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8882] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8882] <... open resumed>) = 4 [pid 8882] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8882] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... umount2 resumed>) = 0 [pid 8882] <... ftruncate resumed>) = 0 [pid 5061] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8882] unlink("./bus" [pid 5061] newfstatat(AT_FDCWD, "./383/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./383/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./383/file0") = 0 [pid 8881] <... mount resumed>) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./383") = 0 [pid 5061] mkdir("./384", 0777) = 0 [pid 8881] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8881] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 3 [pid 8881] chdir("./file0" [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8881] <... chdir resumed>) = 0 [pid 8881] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8881] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8885] <... write resumed>) = 2097152 [pid 8882] <... unlink resumed>) = 0 [pid 8881] <... open resumed>) = 4 [pid 5065] <... ioctl resumed>) = 0 [pid 8882] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8881] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8885] munmap(0x7f41e0600000, 138412032 [pid 8882] exit_group(0 [pid 8885] <... munmap resumed>) = 0 [pid 8882] <... exit_group resumed>) = ? [pid 8881] <... open resumed>) = 5 [ 339.658475][ T8887] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] close(3 [pid 8885] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8882] +++ exited with 0 +++ [pid 8881] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... close resumed>) = 0 [pid 8885] <... openat resumed>) = 4 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8882, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8881] <... mmap resumed>) = 0x20000000 [pid 8881] ftruncate(4, 33587195 [pid 5063] umount2("./378", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8885] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8888 attached [pid 8888] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8888 [pid 8888] <... set_robust_list resumed>) = 0 [pid 8888] chdir("./377") = 0 [pid 8885] <... ioctl resumed>) = 0 [pid 8881] <... ftruncate resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8885] close(3 [pid 8888] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... openat resumed>) = 3 [pid 8885] <... close resumed>) = 0 [pid 8888] <... prctl resumed>) = 0 [pid 8885] close(4 [pid 8881] unlink("./bus" [pid 5063] newfstatat(3, "", [pid 8888] setpgid(0, 0 [pid 8885] <... close resumed>) = 0 [pid 8888] <... setpgid resumed>) = 0 [pid 8885] mkdir("./file0", 0777 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] getdents64(3, [pid 8885] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] close(3 [pid 8885] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] umount2("./378/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 8888] <... openat resumed>) = 3 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8888] write(3, "1000", 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8888] <... write resumed>) = 4 [pid 5063] newfstatat(AT_FDCWD, "./378/binderfs", ./strace-static-x86_64: Process 8889 attached [pid 8888] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8889 [pid 8889] set_robust_list(0x55555745a660, 24) = 0 [pid 8881] <... unlink resumed>) = 0 [pid 8889] chdir("./384" [pid 8881] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8881] exit_group(0 [pid 5063] unlink("./378/binderfs" [pid 8889] <... chdir resumed>) = 0 [pid 8889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8889] setpgid(0, 0 [pid 8888] <... close resumed>) = 0 [pid 8881] <... exit_group resumed>) = ? [pid 5063] <... unlink resumed>) = 0 [pid 8889] <... setpgid resumed>) = 0 [pid 5063] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8888] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8888] memfd_create("syzkaller", 0) = 3 [pid 8888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [ 339.730442][ T8885] loop3: detected capacity change from 0 to 4096 [pid 8889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8881] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8881, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5062] umount2("./377", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8889] write(3, "1000", 4) = 4 [pid 5062] getdents64(3, [pid 8889] close(3) = 0 [pid 8885] <... mount resumed>) = 0 [pid 8889] symlink("/dev/binderfs", "./binderfs" [pid 8885] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8885] chdir("./file0" [pid 8889] <... symlink resumed>) = 0 [pid 8885] <... chdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./377/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./377/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8885] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] unlink("./377/binderfs" [pid 8885] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... unlink resumed>) = 0 [pid 8885] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8889] memfd_create("syzkaller", 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8889] <... memfd_create resumed>) = 3 [pid 8889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8889] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] newfstatat(AT_FDCWD, "./378/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./378/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 8885] <... open resumed>) = 4 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... umount2 resumed>) = 0 [pid 8885] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [ 339.790916][ T8890] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] getdents64(4, [pid 8885] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8885] <... mmap resumed>) = 0x20000000 [pid 5063] close(4 [pid 8885] ftruncate(4, 33587195 [pid 8888] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./378/file0" [pid 5062] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./377/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8885] <... ftruncate resumed>) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 8885] unlink("./bus" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./378" [pid 5062] openat(AT_FDCWD, "./377/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./377/file0" [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5063] mkdir("./379", 0777 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./377" [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8889] <... write resumed>) = 2097152 [pid 8888] <... write resumed>) = 2097152 [pid 8885] <... unlink resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] mkdir("./378", 0777 [pid 8889] munmap(0x7f41e0600000, 138412032 [pid 8888] munmap(0x7f41e0600000, 138412032 [pid 8885] sendfile(-1, -1, NULL, 281474978811909 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... mkdir resumed>) = 0 [pid 8888] <... munmap resumed>) = 0 [pid 8885] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8889] <... munmap resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8889] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8885] exit_group(0 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8885] <... exit_group resumed>) = ? [pid 8889] <... openat resumed>) = 4 [pid 8888] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8889] ioctl(4, LOOP_SET_FD, 3 [pid 8888] <... openat resumed>) = 4 [pid 8888] ioctl(4, LOOP_SET_FD, 3 [pid 8889] <... ioctl resumed>) = 0 [pid 8889] close(3) = 0 [pid 8889] close(4) = 0 [pid 8888] <... ioctl resumed>) = 0 [pid 8885] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8885, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 8889] mkdir("./file0", 0777) = 0 [pid 5064] umount2("./383", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8889] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] umount2("./383/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8888] close(3 [pid 5064] newfstatat(AT_FDCWD, "./383/binderfs", [pid 8888] <... close resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8888] close(4 [pid 5064] unlink("./383/binderfs" [pid 8888] <... close resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 8888] mkdir("./file0", 0777 [pid 5064] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8888] <... mkdir resumed>) = 0 [ 339.909346][ T8889] loop0: detected capacity change from 0 to 4096 [ 339.911714][ T8888] loop4: detected capacity change from 0 to 4096 [pid 8888] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./383/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./383/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, [pid 8889] <... mount resumed>) = 0 [pid 8889] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8889] chdir("./file0") = 0 [pid 8889] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8889] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8889] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./383/file0") = 0 [pid 5064] getdents64(3, [pid 5063] <... ioctl resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 8888] <... mount resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8888] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8888] chdir("./file0" [pid 5063] close(3 [pid 8888] <... chdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8888] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8888] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8889] <... open resumed>) = 4 [pid 5062] close(3 [pid 5064] rmdir("./383") = 0 [pid 8889] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5064] mkdir("./384", 0777 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8893 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8889] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... close resumed>) = 0 ./strace-static-x86_64: Process 8893 attached [pid 8889] <... mmap resumed>) = 0x20000000 [pid 8889] ftruncate(4, 33587195 [pid 8893] set_robust_list(0x55555745a660, 24 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8893] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 8894 attached [pid 8889] <... ftruncate resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8894 [ 339.972851][ T8891] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 340.000577][ T8892] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8894] set_robust_list(0x55555745a660, 24 [pid 8893] chdir("./379" [pid 8889] unlink("./bus" [pid 8894] <... set_robust_list resumed>) = 0 [pid 8893] <... chdir resumed>) = 0 [pid 8894] chdir("./378" [pid 8893] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8894] <... chdir resumed>) = 0 [pid 8893] <... prctl resumed>) = 0 [pid 8888] <... open resumed>) = 4 [pid 8894] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8893] setpgid(0, 0 [pid 8888] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8894] <... prctl resumed>) = 0 [pid 8893] <... setpgid resumed>) = 0 [pid 8888] <... open resumed>) = 5 [pid 8893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8894] setpgid(0, 0 [pid 8888] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8893] <... openat resumed>) = 3 [pid 8894] <... setpgid resumed>) = 0 [pid 8893] write(3, "1000", 4 [pid 8888] <... mmap resumed>) = 0x20000000 [pid 8894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8893] <... write resumed>) = 4 [pid 8888] ftruncate(4, 33587195 [pid 8893] close(3 [pid 8894] <... openat resumed>) = 3 [pid 8893] <... close resumed>) = 0 [pid 8894] write(3, "1000", 4 [pid 8893] symlink("/dev/binderfs", "./binderfs" [pid 8894] <... write resumed>) = 4 [pid 8894] close(3 [pid 8893] <... symlink resumed>) = 0 [pid 8889] <... unlink resumed>) = 0 [pid 8894] <... close resumed>) = 0 [pid 8894] symlink("/dev/binderfs", "./binderfs" [pid 8889] sendfile(-1, -1, NULL, 281474978811909 [pid 8894] <... symlink resumed>) = 0 [pid 8889] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8893] memfd_create("syzkaller", 0 [pid 8889] exit_group(0) = ? [pid 8894] memfd_create("syzkaller", 0 [pid 8893] <... memfd_create resumed>) = 3 [pid 8894] <... memfd_create resumed>) = 3 [pid 8893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8888] <... ftruncate resumed>) = 0 [pid 8894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8893] <... mmap resumed>) = 0x7f41e0600000 [pid 8894] <... mmap resumed>) = 0x7f41e0600000 [pid 8888] unlink("./bus" [pid 8889] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8889, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5061] umount2("./384", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./384/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./384/binderfs", [pid 8888] <... unlink resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./384/binderfs") = 0 [pid 5061] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8888] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... ioctl resumed>) = 0 [pid 8888] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8888] exit_group(0) = ? [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8895 ./strace-static-x86_64: Process 8895 attached [pid 8895] set_robust_list(0x55555745a660, 24 [pid 8888] +++ exited with 0 +++ [pid 5061] <... umount2 resumed>) = 0 [pid 8893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8888, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8895] <... set_robust_list resumed>) = 0 [pid 8895] chdir("./384" [pid 8894] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8895] <... chdir resumed>) = 0 [pid 5065] umount2("./377", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8895] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8895] <... prctl resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 8895] setpgid(0, 0 [pid 5065] newfstatat(3, "", [pid 8895] <... setpgid resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8895] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] newfstatat(AT_FDCWD, "./384/file0", [pid 8895] write(3, "1000", 4 [pid 5065] umount2("./377/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] newfstatat(AT_FDCWD, "./377/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./377/binderfs" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8895] <... write resumed>) = 4 [pid 5061] openat(AT_FDCWD, "./384/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8895] close(3 [pid 5065] <... unlink resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 8895] <... close resumed>) = 0 [pid 8895] symlink("/dev/binderfs", "./binderfs" [pid 5061] newfstatat(4, "", [pid 8895] <... symlink resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8895] memfd_create("syzkaller", 0) = 3 [pid 5065] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 8895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8895] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./384/file0") = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./384") = 0 [pid 5061] mkdir("./385", 0777) = 0 [pid 5065] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] newfstatat(AT_FDCWD, "./377/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5065] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./377/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8894] <... write resumed>) = 2097152 [pid 8893] <... write resumed>) = 2097152 [pid 5065] getdents64(4, [pid 8894] munmap(0x7f41e0600000, 138412032 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8893] munmap(0x7f41e0600000, 138412032 [pid 5065] getdents64(4, [pid 8894] <... munmap resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 8893] <... munmap resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 8894] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] rmdir("./377/file0" [pid 8894] <... openat resumed>) = 4 [pid 8893] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... rmdir resumed>) = 0 [pid 8894] ioctl(4, LOOP_SET_FD, 3 [pid 5065] getdents64(3, [pid 8893] <... openat resumed>) = 4 [pid 8895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8894] <... ioctl resumed>) = 0 [pid 8893] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8894] close(3 [pid 5065] close(3) = 0 [pid 5065] rmdir("./377") = 0 [pid 8894] <... close resumed>) = 0 [pid 8893] <... ioctl resumed>) = 0 [pid 8894] close(4) = 0 [pid 5065] mkdir("./378", 0777 [pid 8894] mkdir("./file0", 0777 [pid 8893] close(3 [pid 5065] <... mkdir resumed>) = 0 [pid 8894] <... mkdir resumed>) = 0 [pid 8894] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8893] <... close resumed>) = 0 [pid 8893] close(4) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 8893] mkdir("./file0", 0777 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8893] <... mkdir resumed>) = 0 [ 340.232020][ T8894] loop1: detected capacity change from 0 to 4096 [ 340.244031][ T8893] loop2: detected capacity change from 0 to 4096 [pid 8893] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3 [pid 8895] <... write resumed>) = 2097152 [pid 8893] <... mount resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8893] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8897 [pid 8893] <... openat resumed>) = 3 [pid 8893] chdir("./file0" [pid 8895] munmap(0x7f41e0600000, 138412032 [pid 8893] <... chdir resumed>) = 0 [pid 8893] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8895] <... munmap resumed>) = 0 [pid 8893] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 8897 attached [pid 8893] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8897] set_robust_list(0x55555745a660, 24) = 0 [pid 8897] chdir("./385") = 0 [pid 8897] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8895] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8897] setpgid(0, 0 [pid 8895] <... openat resumed>) = 4 [pid 8897] <... setpgid resumed>) = 0 [pid 8895] ioctl(4, LOOP_SET_FD, 3 [pid 8897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8897] write(3, "1000", 4) = 4 [pid 8897] close(3) = 0 [pid 8897] symlink("/dev/binderfs", "./binderfs" [pid 8894] <... mount resumed>) = 0 [pid 8897] <... symlink resumed>) = 0 [pid 8894] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8894] chdir("./file0") = 0 [pid 8894] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8897] memfd_create("syzkaller", 0 [pid 8894] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8894] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8897] <... memfd_create resumed>) = 3 [pid 8897] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8893] <... open resumed>) = 4 [ 340.298526][ T8896] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 340.330788][ T8898] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 340.331103][ T8895] loop3: detected capacity change from 0 to 4096 [pid 8893] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8894] <... open resumed>) = 4 [pid 5065] <... ioctl resumed>) = 0 [pid 5065] close(3) = 0 [pid 8894] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8893] <... open resumed>) = 5 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8894] <... open resumed>) = 5 [pid 8893] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8894] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8893] <... mmap resumed>) = 0x20000000 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8899 [pid 8897] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8894] <... mmap resumed>) = 0x20000000 [pid 8893] ftruncate(4, 33587195./strace-static-x86_64: Process 8899 attached [pid 8899] set_robust_list(0x55555745a660, 24 [pid 8894] ftruncate(4, 33587195 [pid 8899] <... set_robust_list resumed>) = 0 [pid 8899] chdir("./378") = 0 [pid 8895] <... ioctl resumed>) = 0 [pid 8899] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8895] close(3 [pid 8899] setpgid(0, 0) = 0 [pid 8895] <... close resumed>) = 0 [pid 8899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8895] close(4 [pid 8899] <... openat resumed>) = 3 [pid 8895] <... close resumed>) = 0 [pid 8899] write(3, "1000", 4 [pid 8895] mkdir("./file0", 0777 [pid 8899] <... write resumed>) = 4 [pid 8895] <... mkdir resumed>) = 0 [pid 8899] close(3) = 0 [pid 8899] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8899] memfd_create("syzkaller", 0) = 3 [pid 8899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8895] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8894] <... ftruncate resumed>) = 0 [pid 8893] <... ftruncate resumed>) = 0 [pid 8894] unlink("./bus" [pid 8893] unlink("./bus" [pid 8894] <... unlink resumed>) = 0 [pid 8893] <... unlink resumed>) = 0 [pid 8894] sendfile(-1, -1, NULL, 281474978811909 [pid 8893] sendfile(-1, -1, NULL, 281474978811909 [pid 8894] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8893] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8894] exit_group(0 [pid 8893] exit_group(0) = ? [pid 8894] <... exit_group resumed>) = ? [pid 8895] <... mount resumed>) = 0 [pid 8895] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8895] chdir("./file0") = 0 [pid 8895] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8895] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8899] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8893] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8893, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] umount2("./379", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 8894] +++ exited with 0 +++ [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./379/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./379/binderfs", [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8894, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 8897] <... write resumed>) = 2097152 [pid 5063] unlink("./379/binderfs" [pid 5062] <... restart_syscall resumed>) = 0 [pid 8895] <... open resumed>) = 4 [pid 5062] umount2("./378", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8895] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8895] <... open resumed>) = 5 [pid 5062] openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8895] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8895] ftruncate(4, 33587195 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8897] munmap(0x7f41e0600000, 138412032 [pid 5062] umount2("./378/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8897] <... munmap resumed>) = 0 [pid 8895] <... ftruncate resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 340.480297][ T8900] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8895] unlink("./bus" [pid 8897] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] newfstatat(AT_FDCWD, "./378/binderfs", [pid 8897] <... openat resumed>) = 4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8897] ioctl(4, LOOP_SET_FD, 3 [pid 5062] unlink("./378/binderfs" [pid 8899] <... write resumed>) = 2097152 [pid 8899] munmap(0x7f41e0600000, 138412032 [pid 5062] <... unlink resumed>) = 0 [pid 5062] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./379/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8899] <... munmap resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8895] <... unlink resumed>) = 0 [pid 8895] sendfile(-1, -1, NULL, 281474978811909 [pid 5063] openat(AT_FDCWD, "./379/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8895] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5063] <... openat resumed>) = 4 [pid 8899] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8897] <... ioctl resumed>) = 0 [pid 8895] exit_group(0 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8899] ioctl(4, LOOP_SET_FD, 3 [pid 8897] close(3 [pid 8895] <... exit_group resumed>) = ? [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./379/file0" [pid 8899] <... ioctl resumed>) = 0 [pid 8897] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8897] close(4 [pid 8895] +++ exited with 0 +++ [pid 8899] close(3 [pid 8897] <... close resumed>) = 0 [pid 8899] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8899] close(4 [pid 8897] mkdir("./file0", 0777 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8895, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8899] <... close resumed>) = 0 [pid 5064] umount2("./384", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8899] mkdir("./file0", 0777 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] newfstatat(AT_FDCWD, "./378/file0", [pid 8897] <... mkdir resumed>) = 0 [pid 8899] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... openat resumed>) = 3 [pid 8897] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8899] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] getdents64(3, [pid 5063] rmdir("./379" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] <... rmdir resumed>) = 0 [pid 5064] umount2("./384/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./378/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] mkdir("./380", 0777 [pid 5064] newfstatat(AT_FDCWD, "./384/binderfs", [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./384/binderfs") = 0 [pid 5062] getdents64(4, [pid 5064] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] getdents64(4, [pid 5063] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] rmdir("./378/file0") = 0 [ 340.546619][ T8897] loop0: detected capacity change from 0 to 4096 [ 340.563622][ T8899] loop4: detected capacity change from 0 to 4096 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./378") = 0 [pid 5062] mkdir("./379", 0777 [pid 8899] <... mount resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8899] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... umount2 resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8899] <... openat resumed>) = 3 [pid 5064] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8899] chdir("./file0" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8899] <... chdir resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./384/file0", [pid 8899] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8899] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8899] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./384/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./384/file0" [pid 8899] <... open resumed>) = 4 [pid 8897] <... mount resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 8899] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8897] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8899] <... open resumed>) = 5 [pid 8897] <... openat resumed>) = 3 [pid 5064] getdents64(3, [pid 5063] <... ioctl resumed>) = 0 [pid 8897] chdir("./file0") = 0 [pid 5063] close(3 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8897] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 8897] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8897] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 340.624947][ T8901] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 340.646812][ T8902] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] close(3./strace-static-x86_64: Process 8903 attached [pid 8899] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... close resumed>) = 0 [pid 8903] set_robust_list(0x55555745a660, 24 [pid 8899] <... mmap resumed>) = 0x20000000 [pid 8897] <... open resumed>) = 4 [pid 5064] rmdir("./384" [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8903 [pid 5062] <... ioctl resumed>) = 0 [pid 8903] <... set_robust_list resumed>) = 0 [pid 8897] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8903] chdir("./380" [pid 8897] <... open resumed>) = 5 [pid 5064] <... rmdir resumed>) = 0 [pid 8903] <... chdir resumed>) = 0 [pid 5062] close(3) = 0 [pid 8903] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8904 attached [pid 8903] <... prctl resumed>) = 0 [pid 8899] ftruncate(4, 33587195 [pid 8897] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] mkdir("./385", 0777 [pid 8904] set_robust_list(0x55555745a660, 24 [pid 8903] setpgid(0, 0) = 0 [pid 8897] <... mmap resumed>) = 0x20000000 [pid 5064] <... mkdir resumed>) = 0 [pid 8904] <... set_robust_list resumed>) = 0 [pid 8899] <... ftruncate resumed>) = 0 [pid 8903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8897] ftruncate(4, 33587195 [pid 8904] chdir("./379" [pid 8899] unlink("./bus" [pid 8903] write(3, "1000", 4 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8904 [pid 8904] <... chdir resumed>) = 0 [pid 8903] <... write resumed>) = 4 [pid 8903] close(3) = 0 [pid 8904] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8903] symlink("/dev/binderfs", "./binderfs" [pid 8904] <... prctl resumed>) = 0 [pid 8904] setpgid(0, 0 [pid 8903] <... symlink resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8904] <... setpgid resumed>) = 0 [pid 8897] <... ftruncate resumed>) = 0 [pid 8904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8903] memfd_create("syzkaller", 0 [pid 8897] unlink("./bus" [pid 5064] <... openat resumed>) = 3 [pid 8903] <... memfd_create resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8904] <... openat resumed>) = 3 [pid 8899] <... unlink resumed>) = 0 [pid 8903] <... mmap resumed>) = 0x7f41e0600000 [pid 8899] sendfile(-1, -1, NULL, 281474978811909 [pid 8904] write(3, "1000", 4 [pid 8899] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8904] <... write resumed>) = 4 [pid 8899] exit_group(0 [pid 8904] close(3 [pid 8899] <... exit_group resumed>) = ? [pid 8904] <... close resumed>) = 0 [pid 8904] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8897] <... unlink resumed>) = 0 [pid 8897] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8897] exit_group(0) = ? [pid 8904] memfd_create("syzkaller", 0) = 3 [pid 8904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8897] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8897, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 8904] <... mmap resumed>) = 0x7f41e0600000 [pid 8899] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8899, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8903] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] umount2("./385", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./385/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./385/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5061] unlink("./385/binderfs" [pid 5065] <... restart_syscall resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./378", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./378/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./378/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./378/binderfs") = 0 [pid 5065] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... ioctl resumed>) = 0 [pid 8904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8903] <... write resumed>) = 2097152 [pid 5065] <... umount2 resumed>) = 0 [pid 8903] munmap(0x7f41e0600000, 138412032 [pid 5064] close(3 [pid 5061] <... umount2 resumed>) = 0 [pid 5065] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8905 attached [pid 8905] set_robust_list(0x55555745a660, 24 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8905 [pid 8905] <... set_robust_list resumed>) = 0 [pid 8905] chdir("./385" [pid 5065] newfstatat(AT_FDCWD, "./378/file0", [pid 8905] <... chdir resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8905] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8905] <... prctl resumed>) = 0 [pid 8903] <... munmap resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8905] setpgid(0, 0 [pid 8904] <... write resumed>) = 2097152 [pid 8903] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] openat(AT_FDCWD, "./378/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] newfstatat(AT_FDCWD, "./385/file0", [pid 8905] <... setpgid resumed>) = 0 [pid 8904] munmap(0x7f41e0600000, 138412032 [pid 8903] <... openat resumed>) = 4 [pid 5065] <... openat resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8904] <... munmap resumed>) = 0 [pid 8905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8903] ioctl(4, LOOP_SET_FD, 3 [pid 5065] newfstatat(4, "", [pid 5061] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8905] <... openat resumed>) = 3 [pid 8904] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8903] <... ioctl resumed>) = 0 [pid 5065] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8905] write(3, "1000", 4 [pid 8904] <... openat resumed>) = 4 [pid 8903] close(3 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] openat(AT_FDCWD, "./385/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8903] <... close resumed>) = 0 [pid 8903] close(4) = 0 [pid 8903] mkdir("./file0", 0777 [pid 5061] <... openat resumed>) = 4 [pid 8903] <... mkdir resumed>) = 0 [pid 8905] <... write resumed>) = 4 [pid 8905] close(3 [pid 8904] ioctl(4, LOOP_SET_FD, 3 [pid 5061] newfstatat(4, "", [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8903] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] close(4 [pid 5061] getdents64(4, [pid 8905] <... close resumed>) = 0 [pid 8904] <... ioctl resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 8905] symlink("/dev/binderfs", "./binderfs" [pid 8904] close(3 [pid 5065] rmdir("./378/file0" [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8905] <... symlink resumed>) = 0 [pid 5061] getdents64(4, [pid 8903] <... mount resumed>) = 0 [pid 8903] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8903] chdir("./file0") = 0 [pid 8903] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8903] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8905] memfd_create("syzkaller", 0 [pid 8904] <... close resumed>) = 0 [pid 8903] <... open resumed>) = 4 [pid 5065] <... rmdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] getdents64(3, [pid 5061] close(4 [pid 8905] <... memfd_create resumed>) = 3 [pid 8904] close(4 [pid 8903] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... close resumed>) = 0 [pid 8905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8904] <... close resumed>) = 0 [pid 8903] <... open resumed>) = 5 [pid 5065] close(3 [pid 5061] rmdir("./385/file0" [pid 8904] mkdir("./file0", 0777 [pid 5061] <... rmdir resumed>) = 0 [pid 8905] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] <... close resumed>) = 0 [pid 5061] getdents64(3, [pid 8904] <... mkdir resumed>) = 0 [pid 8903] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] rmdir("./378") = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8903] <... mmap resumed>) = 0x20000000 [pid 5061] close(3 [pid 8904] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... close resumed>) = 0 [pid 8903] ftruncate(4, 33587195 [ 340.866871][ T8903] loop2: detected capacity change from 0 to 4096 [ 340.884096][ T8904] loop1: detected capacity change from 0 to 4096 [ 340.904243][ T8906] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] rmdir("./385") = 0 [pid 5061] mkdir("./386", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5065] mkdir("./379", 0777 [pid 8903] <... ftruncate resumed>) = 0 [pid 8903] unlink("./bus" [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8903] <... unlink resumed>) = 0 [pid 8903] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8903] exit_group(0) = ? [pid 8905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8904] <... mount resumed>) = 0 [pid 8904] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8904] chdir("./file0") = 0 [pid 8904] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 340.972215][ T8907] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8904] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8905] <... write resumed>) = 2097152 [pid 8904] <... open resumed>) = 4 [pid 8903] +++ exited with 0 +++ [pid 8904] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8904] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8904] ftruncate(4, 33587195 [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./380/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./380/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8905] munmap(0x7f41e0600000, 138412032 [pid 8904] <... ftruncate resumed>) = 0 [pid 5063] unlink("./380/binderfs" [pid 8905] <... munmap resumed>) = 0 [pid 8904] unlink("./bus" [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8905] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8904] <... unlink resumed>) = 0 [pid 8904] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8904] exit_group(0) = ? [pid 8905] <... openat resumed>) = 4 [pid 8905] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3 [pid 5065] <... ioctl resumed>) = 0 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8904] +++ exited with 0 +++ ./strace-static-x86_64: Process 8908 attached [pid 8905] <... ioctl resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8904, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- ./strace-static-x86_64: Process 8909 attached [pid 8908] set_robust_list(0x55555745a660, 24 [pid 8905] close(3 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8908 [pid 5062] umount2("./379", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8909] set_robust_list(0x55555745a660, 24 [pid 8908] <... set_robust_list resumed>) = 0 [pid 8905] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8909 [pid 8909] <... set_robust_list resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8909] chdir("./386" [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8909] <... chdir resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 8909] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8909] <... prctl resumed>) = 0 [pid 8905] close(4 [pid 5063] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(3, [pid 8909] setpgid(0, 0 [pid 8908] chdir("./379" [pid 8905] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8909] <... setpgid resumed>) = 0 [pid 8908] <... chdir resumed>) = 0 [pid 8905] mkdir("./file0", 0777 [pid 5063] newfstatat(AT_FDCWD, "./380/file0", [pid 5062] umount2("./379/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./379/binderfs", [pid 8905] <... mkdir resumed>) = 0 [pid 8909] <... openat resumed>) = 3 [pid 8908] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8909] write(3, "1000", 4 [pid 8908] <... prctl resumed>) = 0 [pid 8905] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] unlink("./379/binderfs" [pid 8909] <... write resumed>) = 4 [pid 8908] setpgid(0, 0 [pid 5063] openat(AT_FDCWD, "./380/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... unlink resumed>) = 0 [pid 8909] close(3 [pid 8908] <... setpgid resumed>) = 0 [ 341.054332][ T8905] loop3: detected capacity change from 0 to 4096 [pid 5062] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8909] <... close resumed>) = 0 [pid 8908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8909] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 8909] memfd_create("syzkaller", 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./380/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8909] <... memfd_create resumed>) = 3 [pid 5063] close(3 [pid 8909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... close resumed>) = 0 [pid 8909] <... mmap resumed>) = 0x7f41e0600000 [pid 8908] <... openat resumed>) = 3 [pid 8905] <... mount resumed>) = 0 [pid 5063] rmdir("./380") = 0 [pid 8905] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] mkdir("./381", 0777 [pid 8908] write(3, "1000", 4 [pid 8905] <... openat resumed>) = 3 [pid 5063] <... mkdir resumed>) = 0 [pid 8908] <... write resumed>) = 4 [pid 8908] close(3 [pid 8905] chdir("./file0") = 0 [pid 8908] <... close resumed>) = 0 [pid 8905] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8908] symlink("/dev/binderfs", "./binderfs" [pid 8905] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... umount2 resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8908] <... symlink resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8905] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8908] memfd_create("syzkaller", 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./379/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./379/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", [pid 8908] <... memfd_create resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] getdents64(4, [pid 8908] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./379/file0") = 0 [pid 8905] <... open resumed>) = 4 [pid 8905] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./379") = 0 [pid 8905] <... open resumed>) = 5 [ 341.114557][ T8910] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8905] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] mkdir("./380", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 8905] <... mmap resumed>) = 0x20000000 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8908] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8905] ftruncate(4, 33587195 [pid 8909] <... write resumed>) = 2097152 [pid 8905] <... ftruncate resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 8909] munmap(0x7f41e0600000, 138412032 [pid 5063] <... close resumed>) = 0 [pid 8909] <... munmap resumed>) = 0 [pid 8905] unlink("./bus" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8911 attached [pid 8908] <... write resumed>) = 2097152 [pid 8905] <... unlink resumed>) = 0 [pid 8905] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8909] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8911] set_robust_list(0x55555745a660, 24 [pid 8905] exit_group(0 [pid 8909] <... openat resumed>) = 4 [pid 8905] <... exit_group resumed>) = ? [pid 8911] <... set_robust_list resumed>) = 0 [pid 8909] ioctl(4, LOOP_SET_FD, 3 [pid 8911] chdir("./381" [pid 8909] <... ioctl resumed>) = 0 [pid 8905] +++ exited with 0 +++ [pid 8911] <... chdir resumed>) = 0 [pid 8911] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8905, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5064] umount2("./385", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8911] <... prctl resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8911] setpgid(0, 0 [pid 5064] <... openat resumed>) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8911 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./385/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8911] <... setpgid resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./385/binderfs", [pid 8911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./385/binderfs") = 0 [pid 5064] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8911] <... openat resumed>) = 3 [pid 8911] write(3, "1000", 4) = 4 [pid 8911] close(3) = 0 [pid 8911] symlink("/dev/binderfs", "./binderfs" [pid 8909] close(3 [pid 8908] munmap(0x7f41e0600000, 138412032 [pid 5062] <... ioctl resumed>) = 0 [pid 8911] <... symlink resumed>) = 0 [pid 8911] memfd_create("syzkaller", 0 [pid 8909] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 8911] <... memfd_create resumed>) = 3 [pid 8909] close(4 [pid 5064] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(3 [pid 8911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8909] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8911] <... mmap resumed>) = 0x7f41e0600000 [pid 8909] mkdir("./file0", 0777 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8908] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 8912 attached [ 341.260064][ T8909] loop0: detected capacity change from 0 to 4096 [pid 8912] set_robust_list(0x55555745a660, 24 [pid 8909] <... mkdir resumed>) = 0 [pid 8908] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] newfstatat(AT_FDCWD, "./385/file0", [pid 8912] <... set_robust_list resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8912] chdir("./380" [pid 8909] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8912 [pid 8908] <... openat resumed>) = 4 [pid 5064] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8912] <... chdir resumed>) = 0 [pid 8912] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8908] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8912] <... prctl resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./385/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8912] setpgid(0, 0) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5064] newfstatat(4, "", [pid 8912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8912] <... openat resumed>) = 3 [pid 5064] getdents64(4, [pid 8912] write(3, "1000", 4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8912] <... write resumed>) = 4 [pid 5064] close(4 [pid 8912] close(3 [pid 8911] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... close resumed>) = 0 [pid 8912] <... close resumed>) = 0 [pid 8908] <... ioctl resumed>) = 0 [pid 5064] rmdir("./385/file0" [pid 8912] symlink("/dev/binderfs", "./binderfs" [pid 8908] close(3) = 0 [pid 8912] <... symlink resumed>) = 0 [pid 8908] close(4 [pid 5064] <... rmdir resumed>) = 0 [pid 8908] <... close resumed>) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [ 341.303738][ T8908] loop4: detected capacity change from 0 to 4096 [pid 8912] memfd_create("syzkaller", 0 [pid 8911] <... write resumed>) = 2097152 [pid 8908] mkdir("./file0", 0777 [pid 5064] close(3 [pid 8912] <... memfd_create resumed>) = 3 [pid 8908] <... mkdir resumed>) = 0 [pid 8912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... close resumed>) = 0 [pid 8912] <... mmap resumed>) = 0x7f41e0600000 [pid 8911] munmap(0x7f41e0600000, 138412032 [pid 8908] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] rmdir("./385") = 0 [pid 5064] mkdir("./386", 0777) = 0 [pid 8911] <... munmap resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8911] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8911] ioctl(4, LOOP_SET_FD, 3 [pid 8909] <... mount resumed>) = 0 [pid 8909] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8909] chdir("./file0") = 0 [pid 8911] <... ioctl resumed>) = 0 [pid 8909] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8911] close(3) = 0 [ 341.367577][ T8913] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 341.400603][ T8911] loop2: detected capacity change from 0 to 4096 [pid 8911] close(4) = 0 [pid 8909] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8911] mkdir("./file0", 0777) = 0 [pid 8908] <... mount resumed>) = 0 [pid 8908] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8908] chdir("./file0") = 0 [pid 8908] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8908] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8912] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8911] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8908] <... open resumed>) = 4 [ 341.425248][ T8914] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8908] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8908] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8912] <... write resumed>) = 2097152 [pid 8909] <... open resumed>) = 4 [pid 5064] <... ioctl resumed>) = 0 [pid 8909] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] close(3 [pid 8912] munmap(0x7f41e0600000, 138412032 [pid 8909] <... open resumed>) = 5 [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8909] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8908] <... ftruncate resumed>) = 0 [pid 8909] <... mmap resumed>) = 0x20000000 [pid 8908] unlink("./bus"./strace-static-x86_64: Process 8915 attached [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8915 [pid 8909] ftruncate(4, 33587195 [pid 8915] set_robust_list(0x55555745a660, 24 [pid 8912] <... munmap resumed>) = 0 [pid 8915] <... set_robust_list resumed>) = 0 [pid 8915] chdir("./386") = 0 [pid 8912] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8915] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8912] <... openat resumed>) = 4 [pid 8915] <... prctl resumed>) = 0 [pid 8915] setpgid(0, 0 [pid 8912] ioctl(4, LOOP_SET_FD, 3 [pid 8915] <... setpgid resumed>) = 0 [pid 8908] <... unlink resumed>) = 0 [pid 8908] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8908] exit_group(0) = ? [pid 8915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8911] <... mount resumed>) = 0 [pid 8909] <... ftruncate resumed>) = 0 [pid 8915] <... openat resumed>) = 3 [pid 8911] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8909] unlink("./bus" [pid 8911] <... openat resumed>) = 3 [pid 8912] <... ioctl resumed>) = 0 [pid 8912] close(3) = 0 [pid 8911] chdir("./file0" [pid 8909] <... unlink resumed>) = 0 [pid 8915] write(3, "1000", 4 [pid 8912] close(4 [pid 8911] <... chdir resumed>) = 0 [pid 8909] sendfile(-1, -1, NULL, 281474978811909 [pid 8908] +++ exited with 0 +++ [pid 8915] <... write resumed>) = 4 [pid 8911] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8909] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8915] close(3 [pid 8911] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8909] exit_group(0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8908, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 8915] <... close resumed>) = 0 [pid 8911] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8909] <... exit_group resumed>) = ? [pid 5065] umount2("./379", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8915] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8915] <... symlink resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8912] <... close resumed>) = 0 [pid 5065] newfstatat(3, "", [pid 8915] memfd_create("syzkaller", 0 [pid 8912] mkdir("./file0", 0777 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8915] <... memfd_create resumed>) = 3 [pid 8915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] getdents64(3, [pid 8915] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./379/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./379/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./379/binderfs" [pid 8912] <... mkdir resumed>) = 0 [pid 8912] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... unlink resumed>) = 0 [ 341.513764][ T8916] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 341.523351][ T8912] loop1: detected capacity change from 0 to 4096 [pid 5065] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8911] <... open resumed>) = 4 [pid 8911] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8911] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8909] +++ exited with 0 +++ [pid 8911] <... mmap resumed>) = 0x20000000 [pid 8911] ftruncate(4, 33587195 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8909, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./386", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8911] <... ftruncate resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8911] unlink("./bus" [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./386/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./386/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./386/binderfs") = 0 [pid 5061] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = 0 [pid 8911] <... unlink resumed>) = 0 [pid 5065] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8911] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8911] exit_group(0) = ? [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./379/file0", [pid 8915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8912] <... mount resumed>) = 0 [pid 5065] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8912] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8912] <... openat resumed>) = 3 [pid 5065] openat(AT_FDCWD, "./379/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8912] chdir("./file0" [pid 5065] <... openat resumed>) = 4 [pid 8912] <... chdir resumed>) = 0 [pid 5065] newfstatat(4, "", [pid 8912] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8912] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] getdents64(4, [pid 8912] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 5061] <... umount2 resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5061] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./379/file0" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./386/file0", [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5061] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] rmdir("./379" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./386/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8911] +++ exited with 0 +++ [pid 5061] getdents64(4, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8911, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5061] close(4 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5061] rmdir("./386/file0" [pid 5065] mkdir("./380", 0777 [pid 5061] <... rmdir resumed>) = 0 [pid 5063] umount2("./381", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] getdents64(3, [pid 5065] <... mkdir resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [ 341.609680][ T8917] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] close(3 [pid 5063] getdents64(3, [pid 5061] <... close resumed>) = 0 [pid 8912] <... open resumed>) = 4 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] rmdir("./386" [pid 8912] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] umount2("./381/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... rmdir resumed>) = 0 [pid 8912] <... open resumed>) = 5 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] mkdir("./387", 0777 [pid 8912] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] newfstatat(AT_FDCWD, "./381/binderfs", [pid 5061] <... mkdir resumed>) = 0 [pid 8912] <... mmap resumed>) = 0x20000000 [pid 5065] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./381/binderfs" [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] <... unlink resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8912] ftruncate(4, 33587195 [pid 5061] <... openat resumed>) = 3 [pid 5063] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8912] <... ftruncate resumed>) = 0 [pid 8915] <... write resumed>) = 2097152 [pid 8912] unlink("./bus" [pid 8915] munmap(0x7f41e0600000, 138412032 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./381/file0", [pid 8912] <... unlink resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8915] <... munmap resumed>) = 0 [pid 8912] sendfile(-1, -1, NULL, 281474978811909 [pid 5063] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8915] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8912] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8912] exit_group(0 [pid 5063] openat(AT_FDCWD, "./381/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8912] <... exit_group resumed>) = ? [pid 5063] <... openat resumed>) = 4 [pid 8915] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./381/file0") = 0 [pid 8912] +++ exited with 0 +++ [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./381") = 0 [pid 5063] mkdir("./382", 0777 [pid 8915] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... ioctl resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 8915] <... ioctl resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8912, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8915] close(3 [pid 5065] close(3 [pid 5063] <... openat resumed>) = 3 [pid 8915] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] umount2("./380", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8918 attached [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8918 [pid 5062] openat(AT_FDCWD, "./380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... ioctl resumed>) = 0 [pid 8918] set_robust_list(0x55555745a660, 24 [pid 5062] <... openat resumed>) = 3 [pid 5061] close(3 [pid 5062] newfstatat(3, "", [pid 8918] <... set_robust_list resumed>) = 0 [pid 8915] close(4 [pid 8918] chdir("./380" [pid 8915] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... close resumed>) = 0 [pid 8915] mkdir("./file0", 0777 [pid 5062] getdents64(3, [pid 8918] <... chdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8915] <... mkdir resumed>) = 0 [pid 5062] umount2("./380/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8915] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8918] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8918] <... prctl resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./380/binderfs", [pid 8918] setpgid(0, 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8918] <... setpgid resumed>) = 0 [pid 8918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] unlink("./380/binderfs" [pid 8918] <... openat resumed>) = 3 ./strace-static-x86_64: Process 8919 attached [pid 8918] write(3, "1000", 4 [pid 5062] <... unlink resumed>) = 0 [pid 8919] set_robust_list(0x55555745a660, 24 [pid 8918] <... write resumed>) = 4 [pid 5062] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8919 [pid 8919] <... set_robust_list resumed>) = 0 [pid 8918] close(3 [pid 8919] chdir("./387" [pid 8918] <... close resumed>) = 0 [pid 8919] <... chdir resumed>) = 0 [pid 8918] symlink("/dev/binderfs", "./binderfs" [pid 8919] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8918] <... symlink resumed>) = 0 [pid 8919] setpgid(0, 0) = 0 [pid 8919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8918] memfd_create("syzkaller", 0 [pid 8919] <... openat resumed>) = 3 [pid 8918] <... memfd_create resumed>) = 3 [pid 8918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8919] write(3, "1000", 4 [pid 8918] <... mmap resumed>) = 0x7f41e0600000 [pid 8919] <... write resumed>) = 4 [pid 8919] close(3) = 0 [pid 8919] symlink("/dev/binderfs", "./binderfs") = 0 [ 341.740524][ T8915] loop3: detected capacity change from 0 to 4096 [pid 8919] memfd_create("syzkaller", 0) = 3 [pid 8919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5062] <... umount2 resumed>) = 0 [pid 8915] <... mount resumed>) = 0 [pid 5062] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8918] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8915] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8915] chdir("./file0") = 0 [pid 5062] newfstatat(AT_FDCWD, "./380/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8915] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8915] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8915] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] openat(AT_FDCWD, "./380/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 5063] close(3 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] <... close resumed>) = 0 [pid 5062] getdents64(4, [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8921 [ 341.816950][ T8920] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] <... close resumed>) = 0 ./strace-static-x86_64: Process 8921 attached [pid 8918] <... write resumed>) = 2097152 [pid 8915] <... open resumed>) = 4 [pid 5062] rmdir("./380/file0" [pid 8921] set_robust_list(0x55555745a660, 24) = 0 [pid 8918] munmap(0x7f41e0600000, 138412032 [pid 8915] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8921] chdir("./382" [pid 5062] <... rmdir resumed>) = 0 [pid 8921] <... chdir resumed>) = 0 [pid 8919] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8921] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8918] <... munmap resumed>) = 0 [pid 8915] <... open resumed>) = 5 [pid 5062] getdents64(3, [pid 8921] <... prctl resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8921] setpgid(0, 0) = 0 [pid 5062] close(3 [pid 8915] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8918] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8918] <... openat resumed>) = 4 [pid 8915] <... mmap resumed>) = 0x20000000 [pid 5062] <... close resumed>) = 0 [pid 8918] ioctl(4, LOOP_SET_FD, 3 [pid 8921] <... openat resumed>) = 3 [pid 5062] rmdir("./380" [pid 8921] write(3, "1000", 4 [pid 8918] <... ioctl resumed>) = 0 [pid 8915] ftruncate(4, 33587195 [pid 5062] <... rmdir resumed>) = 0 [pid 8921] <... write resumed>) = 4 [pid 8921] close(3) = 0 [pid 8918] close(3 [pid 5062] mkdir("./381", 0777 [pid 8921] symlink("/dev/binderfs", "./binderfs" [pid 8918] <... close resumed>) = 0 [pid 8915] <... ftruncate resumed>) = 0 [pid 8919] <... write resumed>) = 2097152 [pid 8921] <... symlink resumed>) = 0 [pid 8918] close(4 [pid 8915] unlink("./bus" [pid 5062] <... mkdir resumed>) = 0 [pid 8919] munmap(0x7f41e0600000, 138412032) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8918] <... close resumed>) = 0 [pid 8918] mkdir("./file0", 0777 [pid 8915] <... unlink resumed>) = 0 [pid 8921] memfd_create("syzkaller", 0 [pid 8918] <... mkdir resumed>) = 0 [pid 8915] sendfile(-1, -1, NULL, 281474978811909 [pid 8921] <... memfd_create resumed>) = 3 [pid 8918] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8915] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8915] exit_group(0) = ? [pid 8921] <... mmap resumed>) = 0x7f41e0600000 [pid 8919] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 341.910288][ T8918] loop4: detected capacity change from 0 to 4096 [pid 8919] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8918] <... mount resumed>) = 0 [pid 8915] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8915, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5064] umount2("./386", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8919] close(3 [pid 5064] getdents64(3, [pid 8919] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8919] close(4 [pid 5064] umount2("./386/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8919] <... close resumed>) = 0 [pid 8918] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8918] chdir("./file0" [pid 5064] newfstatat(AT_FDCWD, "./386/binderfs", [pid 8919] mkdir("./file0", 0777 [pid 8918] <... chdir resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8918] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8921] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8919] <... mkdir resumed>) = 0 [pid 8918] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] unlink("./386/binderfs" [pid 8919] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8918] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8918] <... open resumed>) = 4 [pid 8918] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [ 341.961470][ T8919] loop0: detected capacity change from 0 to 4096 [ 341.980065][ T8922] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8918] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8918] ftruncate(4, 33587195) = 0 [pid 8918] unlink("./bus" [pid 5064] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./386/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./386/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./386/file0") = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./386") = 0 [pid 5064] mkdir("./387", 0777) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5062] close(3) = 0 [pid 8921] <... write resumed>) = 2097152 [pid 8919] <... mount resumed>) = 0 [pid 8918] <... unlink resumed>) = 0 [pid 8919] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8918] sendfile(-1, -1, NULL, 281474978811909 [pid 8919] <... openat resumed>) = 3 [pid 8918] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8924 attached [pid 8921] munmap(0x7f41e0600000, 138412032 [pid 8919] chdir("./file0" [pid 8918] exit_group(0) = ? [pid 8919] <... chdir resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8924 [pid 8924] set_robust_list(0x55555745a660, 24 [pid 8921] <... munmap resumed>) = 0 [pid 8919] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8918] +++ exited with 0 +++ [pid 8924] <... set_robust_list resumed>) = 0 [pid 8924] chdir("./381" [pid 8919] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8918, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 8924] <... chdir resumed>) = 0 [pid 8924] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8919] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8924] <... prctl resumed>) = 0 [pid 8924] setpgid(0, 0) = 0 [pid 8924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] umount2("./380", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8924] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./380/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./380/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./380/binderfs" [pid 8924] write(3, "1000", 4 [pid 5065] <... unlink resumed>) = 0 [pid 8924] <... write resumed>) = 4 [pid 8921] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8921] <... openat resumed>) = 4 [pid 8924] close(3 [ 342.065443][ T8923] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8921] ioctl(4, LOOP_SET_FD, 3 [pid 8924] <... close resumed>) = 0 [pid 8921] <... ioctl resumed>) = 0 [pid 8919] <... open resumed>) = 4 [pid 5065] <... umount2 resumed>) = 0 [pid 8924] symlink("/dev/binderfs", "./binderfs" [pid 8921] close(3 [pid 8919] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8924] <... symlink resumed>) = 0 [pid 8921] <... close resumed>) = 0 [pid 8919] <... open resumed>) = 5 [pid 8921] close(4 [pid 8924] memfd_create("syzkaller", 0 [pid 8921] <... close resumed>) = 0 [pid 8924] <... memfd_create resumed>) = 3 [pid 8921] mkdir("./file0", 0777 [pid 8924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8921] <... mkdir resumed>) = 0 [pid 8919] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8924] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8921] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8919] <... mmap resumed>) = 0x20000000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./380/file0", [pid 8919] ftruncate(4, 33587195) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8919] unlink("./bus" [pid 5065] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./380/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8919] <... unlink resumed>) = 0 [pid 5065] newfstatat(4, "", [pid 8919] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8919] exit_group(0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8919] <... exit_group resumed>) = ? [ 342.115839][ T8921] loop2: detected capacity change from 0 to 4096 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5064] <... ioctl resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] rmdir("./380/file0" [pid 8924] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8921] <... mount resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 8926 attached [pid 8926] set_robust_list(0x55555745a660, 24 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8926 [pid 8926] <... set_robust_list resumed>) = 0 [pid 8926] chdir("./387") = 0 [pid 8919] +++ exited with 0 +++ [pid 8926] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8919, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8926] <... prctl resumed>) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 8926] setpgid(0, 0 [pid 8921] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] getdents64(3, [pid 5061] <... restart_syscall resumed>) = 0 [pid 8926] <... setpgid resumed>) = 0 [pid 8921] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8921] chdir("./file0" [pid 5065] close(3 [pid 8926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8921] <... chdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 8921] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] rmdir("./380" [pid 8926] <... openat resumed>) = 3 [pid 8921] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... rmdir resumed>) = 0 [pid 5061] umount2("./387", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8926] write(3, "1000", 4 [pid 8921] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] mkdir("./381", 0777 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8926] <... write resumed>) = 4 [pid 8926] close(3 [pid 5061] openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8926] <... close resumed>) = 0 [pid 8926] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... mkdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8926] <... symlink resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8926] memfd_create("syzkaller", 0 [pid 5065] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 8926] <... memfd_create resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] getdents64(3, [pid 8926] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./387/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8924] <... write resumed>) = 2097152 [pid 5061] newfstatat(AT_FDCWD, "./387/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./387/binderfs" [pid 8924] munmap(0x7f41e0600000, 138412032 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8924] <... munmap resumed>) = 0 [ 342.190090][ T8925] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8924] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8921] <... open resumed>) = 4 [pid 8924] <... openat resumed>) = 4 [pid 5061] <... umount2 resumed>) = 0 [pid 8921] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8924] ioctl(4, LOOP_SET_FD, 3 [pid 8921] <... open resumed>) = 5 [pid 8921] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8926] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8921] <... mmap resumed>) = 0x20000000 [pid 8921] ftruncate(4, 33587195 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./387/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8921] <... ftruncate resumed>) = 0 [pid 5061] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./387/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./387/file0") = 0 [pid 8921] unlink("./bus" [pid 5061] getdents64(3, [pid 8924] <... ioctl resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8921] <... unlink resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 8921] sendfile(-1, -1, NULL, 281474978811909 [pid 8924] close(3 [pid 8921] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8924] <... close resumed>) = 0 [pid 8921] exit_group(0 [pid 5061] close(3 [pid 8924] close(4 [pid 8921] <... exit_group resumed>) = ? [pid 5061] <... close resumed>) = 0 [pid 8924] <... close resumed>) = 0 [pid 5061] rmdir("./387" [pid 8924] mkdir("./file0", 0777 [pid 5061] <... rmdir resumed>) = 0 [pid 8924] <... mkdir resumed>) = 0 [pid 5061] mkdir("./388", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8924] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... openat resumed>) = 3 [ 342.265158][ T8924] loop1: detected capacity change from 0 to 4096 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8921] +++ exited with 0 +++ [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8921, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8927 ./strace-static-x86_64: Process 8927 attached [pid 5063] umount2("./382", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8927] set_robust_list(0x55555745a660, 24) = 0 [pid 8926] <... write resumed>) = 2097152 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8927] chdir("./381" [pid 8926] munmap(0x7f41e0600000, 138412032 [pid 5063] openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./382/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./382/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./382/binderfs") = 0 [pid 5063] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8927] <... chdir resumed>) = 0 [pid 8926] <... munmap resumed>) = 0 [pid 8927] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8926] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8927] setpgid(0, 0) = 0 [pid 8926] <... openat resumed>) = 4 [pid 8927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8926] ioctl(4, LOOP_SET_FD, 3 [pid 8924] <... mount resumed>) = 0 [pid 8927] <... openat resumed>) = 3 [pid 8924] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8924] chdir("./file0") = 0 [pid 8924] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8924] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8927] write(3, "1000", 4 [pid 5063] <... umount2 resumed>) = 0 [pid 8927] <... write resumed>) = 4 [pid 8927] close(3) = 0 [pid 8927] symlink("/dev/binderfs", "./binderfs" [pid 8926] <... ioctl resumed>) = 0 [pid 8927] <... symlink resumed>) = 0 [pid 8926] close(3) = 0 [pid 8926] close(4) = 0 [pid 8926] mkdir("./file0", 0777) = 0 [pid 5063] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./382/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./382/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8927] memfd_create("syzkaller", 0 [pid 8926] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8924] <... open resumed>) = 4 [pid 5063] <... openat resumed>) = 4 [pid 8924] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8927] <... memfd_create resumed>) = 3 [pid 8924] <... open resumed>) = 5 [pid 5063] newfstatat(4, "", [pid 8927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8924] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8927] <... mmap resumed>) = 0x7f41e0600000 [pid 8924] <... mmap resumed>) = 0x20000000 [pid 8924] ftruncate(4, 33587195) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8924] unlink("./bus" [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./382/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 8924] <... unlink resumed>) = 0 [ 342.358637][ T8928] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 342.379151][ T8926] loop3: detected capacity change from 0 to 4096 [pid 8924] sendfile(-1, -1, NULL, 281474978811909 [pid 5063] rmdir("./382" [pid 8924] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5063] <... rmdir resumed>) = 0 [pid 8924] exit_group(0) = ? [pid 5063] mkdir("./383", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3 [pid 8924] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8924, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5061] <... close resumed>) = 0 [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] umount2("./381", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./381/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./381/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./381/binderfs"./strace-static-x86_64: Process 8929 attached ) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8929 [pid 8929] set_robust_list(0x55555745a660, 24) = 0 [pid 5062] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8929] chdir("./388") = 0 [pid 8929] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8927] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8929] <... prctl resumed>) = 0 [pid 8926] <... mount resumed>) = 0 [pid 8929] setpgid(0, 0 [pid 8926] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8929] <... setpgid resumed>) = 0 [pid 8926] <... openat resumed>) = 3 [pid 8926] chdir("./file0") = 0 [pid 8926] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8926] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8929] write(3, "1000", 4) = 4 [pid 8929] close(3) = 0 [pid 8929] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8929] memfd_create("syzkaller", 0) = 3 [pid 8929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./381/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 342.470466][ T8930] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8926] <... open resumed>) = 4 [pid 5062] openat(AT_FDCWD, "./381/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 8926] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 8926] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8927] <... write resumed>) = 2097152 [pid 8926] <... mmap resumed>) = 0x20000000 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./381/file0" [pid 8926] ftruncate(4, 33587195 [pid 5062] <... rmdir resumed>) = 0 [pid 8927] munmap(0x7f41e0600000, 138412032 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5063] close(3 [pid 5062] <... close resumed>) = 0 [pid 8927] <... munmap resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] rmdir("./381" [pid 8927] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... rmdir resumed>) = 0 [pid 8927] <... openat resumed>) = 4 [pid 8926] <... ftruncate resumed>) = 0 [pid 5062] mkdir("./382", 0777 [pid 8927] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8931 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 8931 attached [pid 8926] unlink("./bus" [pid 8927] <... ioctl resumed>) = 0 [pid 8931] set_robust_list(0x55555745a660, 24) = 0 [pid 8927] close(3) = 0 [pid 8931] chdir("./383" [pid 8927] close(4 [pid 8931] <... chdir resumed>) = 0 [pid 8929] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8931] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8927] <... close resumed>) = 0 [pid 8931] <... prctl resumed>) = 0 [pid 8927] mkdir("./file0", 0777 [pid 8931] setpgid(0, 0) = 0 [pid 8931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8927] <... mkdir resumed>) = 0 [pid 8931] <... openat resumed>) = 3 [pid 8931] write(3, "1000", 4) = 4 [pid 8927] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8931] close(3) = 0 [pid 8931] symlink("/dev/binderfs", "./binderfs" [pid 8926] <... unlink resumed>) = 0 [pid 8931] <... symlink resumed>) = 0 [pid 8926] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8931] memfd_create("syzkaller", 0 [ 342.562904][ T8927] loop4: detected capacity change from 0 to 4096 [pid 8926] exit_group(0 [pid 8931] <... memfd_create resumed>) = 3 [pid 8926] <... exit_group resumed>) = ? [pid 8931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8927] <... mount resumed>) = 0 [pid 8927] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8927] chdir("./file0") = 0 [pid 8927] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8926] +++ exited with 0 +++ [pid 8927] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8926, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5064] umount2("./387", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... ioctl resumed>) = 0 [pid 8929] <... write resumed>) = 2097152 [pid 8927] <... open resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8927] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... openat resumed>) = 3 [pid 8927] <... open resumed>) = 5 [ 342.605945][ T8932] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8927] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8929] munmap(0x7f41e0600000, 138412032 [pid 5062] <... close resumed>) = 0 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] getdents64(3, [pid 8927] ftruncate(4, 33587195 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./387/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8927] <... ftruncate resumed>) = 0 [pid 8927] unlink("./bus" [pid 5064] newfstatat(AT_FDCWD, "./387/binderfs", ./strace-static-x86_64: Process 8933 attached [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8933 [pid 8929] <... munmap resumed>) = 0 [pid 8929] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8933] set_robust_list(0x55555745a660, 24 [pid 8929] <... openat resumed>) = 4 [pid 8933] <... set_robust_list resumed>) = 0 [pid 8931] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8929] ioctl(4, LOOP_SET_FD, 3 [pid 8927] <... unlink resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8933] chdir("./382") = 0 [pid 8927] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] unlink("./387/binderfs" [pid 8933] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8927] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8933] <... prctl resumed>) = 0 [pid 8927] exit_group(0 [pid 5064] <... unlink resumed>) = 0 [pid 8933] setpgid(0, 0 [pid 8927] <... exit_group resumed>) = ? [pid 5064] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8933] <... setpgid resumed>) = 0 [pid 8933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8929] <... ioctl resumed>) = 0 [pid 8933] <... openat resumed>) = 3 [pid 8933] write(3, "1000", 4) = 4 [pid 8929] close(3 [pid 8933] close(3) = 0 [pid 8929] <... close resumed>) = 0 [pid 8933] symlink("/dev/binderfs", "./binderfs" [pid 8929] close(4) = 0 [pid 8933] <... symlink resumed>) = 0 [pid 8929] mkdir("./file0", 0777 [pid 8933] memfd_create("syzkaller", 0 [pid 8929] <... mkdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8933] <... memfd_create resumed>) = 3 [pid 8929] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8927] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8927, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5065] umount2("./381", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./387/file0", [pid 8933] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5064] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./387/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] newfstatat(3, "", [pid 5064] <... openat resumed>) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, [pid 5065] getdents64(3, [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] close(4 [pid 5065] umount2("./381/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [ 342.687349][ T8929] loop0: detected capacity change from 0 to 4096 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] rmdir("./387/file0" [pid 5065] newfstatat(AT_FDCWD, "./381/binderfs", [pid 5064] <... rmdir resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./381/binderfs" [pid 5064] getdents64(3, [pid 5065] <... unlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./387" [pid 8931] <... write resumed>) = 2097152 [pid 5065] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 8931] munmap(0x7f41e0600000, 138412032 [pid 5065] <... umount2 resumed>) = 0 [pid 8933] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8931] <... munmap resumed>) = 0 [pid 5064] mkdir("./388", 0777 [pid 5065] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... mkdir resumed>) = 0 [pid 8931] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8929] <... mount resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./381/file0", [pid 5064] <... openat resumed>) = 3 [pid 8931] <... openat resumed>) = 4 [pid 8929] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8931] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8929] <... openat resumed>) = 3 [pid 5065] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8929] chdir("./file0" [pid 8931] <... ioctl resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./381/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8931] close(3 [pid 8929] <... chdir resumed>) = 0 [pid 8933] <... write resumed>) = 2097152 [pid 8931] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 8929] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8933] munmap(0x7f41e0600000, 138412032 [pid 8931] close(4 [pid 5065] newfstatat(4, "", [pid 8931] <... close resumed>) = 0 [pid 8929] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8933] <... munmap resumed>) = 0 [pid 8931] mkdir("./file0", 0777 [pid 8929] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] getdents64(4, [pid 8933] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8933] ioctl(4, LOOP_SET_FD, 3 [pid 8931] <... mkdir resumed>) = 0 [pid 8929] <... open resumed>) = 4 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [ 342.779396][ T8934] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 342.795635][ T8931] loop2: detected capacity change from 0 to 4096 [pid 8929] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8931] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8929] <... open resumed>) = 5 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8929] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8929] ftruncate(4, 33587195 [pid 5065] rmdir("./381/file0" [pid 8933] close(3) = 0 [pid 8933] close(4 [pid 5065] <... rmdir resumed>) = 0 [pid 8933] <... close resumed>) = 0 [pid 8933] mkdir("./file0", 0777 [pid 5065] getdents64(3, [pid 8933] <... mkdir resumed>) = 0 [pid 8929] <... ftruncate resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8929] unlink("./bus" [pid 5065] close(3) = 0 [pid 8933] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8929] <... unlink resumed>) = 0 [pid 5065] rmdir("./381" [pid 8929] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8929] exit_group(0) = ? [pid 5064] <... ioctl resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 8929] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8929, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [ 342.830655][ T8933] loop1: detected capacity change from 0 to 4096 [pid 5065] mkdir("./382", 0777 [pid 5061] umount2("./388", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] close(3 [pid 5061] openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... openat resumed>) = 3 [pid 5064] <... close resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... openat resumed>) = 3 ./strace-static-x86_64: Process 8936 attached [pid 8931] <... mount resumed>) = 0 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./388/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8936] set_robust_list(0x55555745a660, 24 [pid 8931] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8936 [pid 8936] <... set_robust_list resumed>) = 0 [pid 8936] chdir("./388" [pid 8931] <... openat resumed>) = 3 [pid 8936] <... chdir resumed>) = 0 [pid 8931] chdir("./file0" [pid 8936] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./388/binderfs", [pid 8936] <... prctl resumed>) = 0 [pid 8931] <... chdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8936] setpgid(0, 0) = 0 [pid 8931] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5061] unlink("./388/binderfs" [pid 8936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8931] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8936] <... openat resumed>) = 3 [ 342.901929][ T8935] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8936] write(3, "1000", 4 [pid 8931] <... open resumed>) = 4 [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./388/file0", [pid 8933] <... mount resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8933] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8933] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "./388/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8933] chdir("./file0" [pid 5061] <... openat resumed>) = 4 [pid 8933] <... chdir resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 8933] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8931] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8933] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] getdents64(4, [pid 8936] <... write resumed>) = 4 [pid 8933] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8931] <... open resumed>) = 5 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8936] close(3) = 0 [pid 8931] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] getdents64(4, [pid 8931] <... mmap resumed>) = 0x20000000 [pid 8936] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 8936] <... symlink resumed>) = 0 [pid 8931] ftruncate(4, 33587195 [pid 5061] <... close resumed>) = 0 [pid 8936] memfd_create("syzkaller", 0 [pid 5061] rmdir("./388/file0" [pid 8936] <... memfd_create resumed>) = 3 [pid 5061] <... rmdir resumed>) = 0 [pid 8936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8931] <... ftruncate resumed>) = 0 [pid 5061] getdents64(3, [pid 8936] <... mmap resumed>) = 0x7f41e0600000 [pid 8933] <... open resumed>) = 4 [pid 8931] unlink("./bus" [pid 5065] <... ioctl resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8933] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] close(3 [pid 5061] close(3 [pid 8933] <... open resumed>) = 5 [pid 5065] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8933] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] rmdir("./388"./strace-static-x86_64: Process 8938 attached [pid 8933] <... mmap resumed>) = 0x20000000 [pid 8931] <... unlink resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [ 342.950924][ T8937] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] mkdir("./389", 0777 [pid 8938] set_robust_list(0x55555745a660, 24 [pid 8933] ftruncate(4, 33587195 [pid 8931] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] <... mkdir resumed>) = 0 [pid 8938] <... set_robust_list resumed>) = 0 [pid 8933] <... ftruncate resumed>) = 0 [pid 8931] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8938] chdir("./382" [pid 8933] unlink("./bus" [pid 8931] exit_group(0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8938 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8938] <... chdir resumed>) = 0 [pid 8938] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8931] <... exit_group resumed>) = ? [pid 5061] <... openat resumed>) = 3 [pid 8938] <... prctl resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8938] setpgid(0, 0) = 0 [pid 8938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8933] <... unlink resumed>) = 0 [pid 8933] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8933] exit_group(0 [pid 8938] <... openat resumed>) = 3 [pid 8936] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8931] +++ exited with 0 +++ [pid 8938] write(3, "1000", 4 [pid 8933] <... exit_group resumed>) = ? [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8931, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8938] <... write resumed>) = 4 [pid 8938] close(3 [pid 5063] umount2("./383", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8938] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8938] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8938] memfd_create("syzkaller", 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8938] <... memfd_create resumed>) = 3 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5063] umount2("./383/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./383/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8933] +++ exited with 0 +++ [pid 5063] unlink("./383/binderfs" [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8933, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 5062] umount2("./382", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./382/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./382/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./382/binderfs") = 0 [pid 5062] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8936] <... write resumed>) = 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8936] munmap(0x7f41e0600000, 138412032 [pid 5061] close(3 [pid 8938] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8936] <... munmap resumed>) = 0 [pid 5063] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./383/file0", [pid 5062] newfstatat(AT_FDCWD, "./382/file0", [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8939 [pid 5063] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8939 attached [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./383/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] openat(AT_FDCWD, "./382/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8939] set_robust_list(0x55555745a660, 24 [pid 5062] <... openat resumed>) = 4 [pid 8939] <... set_robust_list resumed>) = 0 [pid 8936] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] newfstatat(4, "", [pid 5062] newfstatat(4, "", [pid 8939] chdir("./389" [pid 8936] <... openat resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8939] <... chdir resumed>) = 0 [pid 8936] ioctl(4, LOOP_SET_FD, 3 [pid 5063] getdents64(4, [pid 5062] getdents64(4, [pid 8939] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8939] <... prctl resumed>) = 0 [pid 5063] getdents64(4, [pid 5062] getdents64(4, [pid 8939] setpgid(0, 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8939] <... setpgid resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 8939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] close(4 [pid 5062] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] rmdir("./382/file0" [pid 5063] rmdir("./383/file0" [pid 5062] <... rmdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8939] <... openat resumed>) = 3 [pid 8939] write(3, "1000", 4) = 4 [pid 5063] getdents64(3, [pid 5062] getdents64(3, [pid 8939] close(3 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8939] <... close resumed>) = 0 [pid 5062] close(3 [pid 8939] symlink("/dev/binderfs", "./binderfs" [pid 5063] close(3 [pid 5062] <... close resumed>) = 0 [pid 8939] <... symlink resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] rmdir("./382" [pid 5063] rmdir("./383" [pid 5062] <... rmdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8939] memfd_create("syzkaller", 0 [pid 5063] mkdir("./384", 0777 [pid 5062] mkdir("./383", 0777 [pid 5063] <... mkdir resumed>) = 0 [pid 8939] <... memfd_create resumed>) = 3 [pid 8938] <... write resumed>) = 2097152 [pid 8936] <... ioctl resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 8939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8938] munmap(0x7f41e0600000, 138412032 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8939] <... mmap resumed>) = 0x7f41e0600000 [pid 8936] close(3 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8936] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 8938] <... munmap resumed>) = 0 [pid 8936] close(4 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8938] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8936] <... close resumed>) = 0 [pid 8936] mkdir("./file0", 0777) = 0 [pid 8938] <... openat resumed>) = 4 [ 343.116438][ T8936] loop3: detected capacity change from 0 to 4096 [pid 8938] ioctl(4, LOOP_SET_FD, 3 [pid 8936] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8938] <... ioctl resumed>) = 0 [pid 8938] close(3) = 0 [pid 8938] close(4) = 0 [ 343.162654][ T8938] loop4: detected capacity change from 0 to 4096 [pid 8939] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8938] mkdir("./file0", 0777) = 0 [pid 8938] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8936] <... mount resumed>) = 0 [pid 8936] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8936] chdir("./file0") = 0 [pid 8936] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8936] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5063] close(3 [ 343.210089][ T8940] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] close(3 [pid 5063] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8942 attached ./strace-static-x86_64: Process 8941 attached [pid 8939] <... write resumed>) = 2097152 [pid 8936] <... open resumed>) = 4 [pid 8939] munmap(0x7f41e0600000, 138412032 [pid 8942] set_robust_list(0x55555745a660, 24 [pid 8939] <... munmap resumed>) = 0 [pid 8936] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8941 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8942 [pid 8942] <... set_robust_list resumed>) = 0 [pid 8939] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8936] <... open resumed>) = 5 [pid 8942] chdir("./383" [pid 8941] set_robust_list(0x55555745a660, 24 [pid 8936] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8942] <... chdir resumed>) = 0 [pid 8939] <... openat resumed>) = 4 [pid 8942] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8939] ioctl(4, LOOP_SET_FD, 3 [pid 8942] <... prctl resumed>) = 0 [pid 8942] setpgid(0, 0) = 0 [pid 8942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8936] <... mmap resumed>) = 0x20000000 [pid 8942] <... openat resumed>) = 3 [pid 8941] <... set_robust_list resumed>) = 0 [pid 8942] write(3, "1000", 4 [pid 8941] chdir("./384" [pid 8939] <... ioctl resumed>) = 0 [pid 8936] ftruncate(4, 33587195 [pid 8939] close(3) = 0 [pid 8939] close(4 [pid 8942] <... write resumed>) = 4 [pid 8941] <... chdir resumed>) = 0 [pid 8939] <... close resumed>) = 0 [pid 8942] close(3 [pid 8941] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8942] <... close resumed>) = 0 [pid 8941] <... prctl resumed>) = 0 [pid 8939] mkdir("./file0", 0777 [pid 8941] setpgid(0, 0 [pid 8942] symlink("/dev/binderfs", "./binderfs" [pid 8941] <... setpgid resumed>) = 0 [pid 8941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8939] <... mkdir resumed>) = 0 [pid 8942] <... symlink resumed>) = 0 [pid 8941] <... openat resumed>) = 3 [pid 8939] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8938] <... mount resumed>) = 0 [pid 8941] write(3, "1000", 4) = 4 [pid 8942] memfd_create("syzkaller", 0 [pid 8941] close(3 [pid 8938] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8942] <... memfd_create resumed>) = 3 [pid 8941] <... close resumed>) = 0 [pid 8938] <... openat resumed>) = 3 [pid 8936] <... ftruncate resumed>) = 0 [pid 8941] symlink("/dev/binderfs", "./binderfs" [pid 8938] chdir("./file0" [pid 8936] unlink("./bus" [pid 8941] <... symlink resumed>) = 0 [pid 8938] <... chdir resumed>) = 0 [pid 8942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8941] memfd_create("syzkaller", 0 [pid 8938] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8942] <... mmap resumed>) = 0x7f41e0600000 [pid 8941] <... memfd_create resumed>) = 3 [pid 8938] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8938] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8936] <... unlink resumed>) = 0 [pid 8938] <... open resumed>) = 4 [pid 8938] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8936] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8938] <... open resumed>) = 5 [pid 8936] exit_group(0) = ? [pid 8938] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8939] <... mount resumed>) = 0 [ 343.301654][ T8939] loop0: detected capacity change from 0 to 4096 [ 343.330130][ T8943] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8939] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8938] <... mmap resumed>) = 0x20000000 [pid 8939] <... openat resumed>) = 3 [pid 8938] ftruncate(4, 33587195 [pid 8939] chdir("./file0") = 0 [pid 8939] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8938] <... ftruncate resumed>) = 0 [pid 8939] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8938] unlink("./bus" [pid 8939] <... open resumed>) = 4 [pid 8939] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8936] +++ exited with 0 +++ [pid 8942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8941] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8939] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8938] <... unlink resumed>) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8936, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 8938] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8938] exit_group(0 [pid 8939] <... mmap resumed>) = 0x20000000 [pid 8939] ftruncate(4, 33587195 [pid 5064] umount2("./388", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8939] <... ftruncate resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8938] <... exit_group resumed>) = ? [pid 5064] <... openat resumed>) = 3 [pid 8939] unlink("./bus" [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./388/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./388/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./388/binderfs") = 0 [pid 5064] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 343.379532][ T8944] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8939] <... unlink resumed>) = 0 [pid 8939] sendfile(-1, -1, NULL, 281474978811909 [pid 8938] +++ exited with 0 +++ [pid 5064] <... umount2 resumed>) = 0 [pid 8939] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8938, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8939] exit_group(0) = ? [pid 5065] umount2("./382", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 8939] +++ exited with 0 +++ [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8939, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 8941] <... write resumed>) = 2097152 [pid 5064] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... restart_syscall resumed>) = 0 [pid 5065] umount2("./382/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8941] munmap(0x7f41e0600000, 138412032 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./382/binderfs", [pid 5064] newfstatat(AT_FDCWD, "./388/file0", [pid 5061] umount2("./389", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 3 [pid 5065] unlink("./382/binderfs" [pid 5061] newfstatat(3, "", [pid 5065] <... unlink resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] openat(AT_FDCWD, "./388/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(3, [pid 8941] <... munmap resumed>) = 0 [pid 5065] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 4 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8941] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] newfstatat(4, "", [pid 5061] umount2("./389/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8942] <... write resumed>) = 2097152 [pid 8941] <... openat resumed>) = 4 [pid 5065] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8942] munmap(0x7f41e0600000, 138412032 [pid 8941] ioctl(4, LOOP_SET_FD, 3 [pid 5061] newfstatat(AT_FDCWD, "./389/binderfs", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8942] <... munmap resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./382/file0", [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8942] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8942] <... openat resumed>) = 4 [pid 5065] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] close(4 [pid 8942] ioctl(4, LOOP_SET_FD, 3 [pid 5065] openat(AT_FDCWD, "./382/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... close resumed>) = 0 [pid 8942] <... ioctl resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5064] rmdir("./388/file0" [pid 8942] close(3 [pid 5065] newfstatat(4, "", [pid 5064] <... rmdir resumed>) = 0 [pid 8942] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8942] close(4 [pid 5065] getdents64(4, [pid 8942] <... close resumed>) = 0 [pid 8941] <... ioctl resumed>) = 0 [pid 5064] getdents64(3, [pid 5061] unlink("./389/binderfs" [pid 8942] mkdir("./file0", 0777 [pid 8941] close(3 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 8941] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5064] close(3 [pid 5061] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8941] close(4 [pid 8942] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 8941] <... close resumed>) = 0 [pid 5065] close(4 [pid 5064] rmdir("./388" [pid 8942] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8941] mkdir("./file0", 0777 [pid 5065] <... close resumed>) = 0 [pid 8941] <... mkdir resumed>) = 0 [pid 5065] rmdir("./382/file0" [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./389", 0777 [pid 8941] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 343.491790][ T8941] loop2: detected capacity change from 0 to 4096 [ 343.498147][ T8942] loop1: detected capacity change from 0 to 4096 [pid 5065] close(3) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5061] newfstatat(AT_FDCWD, "./389/file0", [pid 8942] <... mount resumed>) = 0 [pid 5065] rmdir("./382" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./389/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8942] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5065] mkdir("./383", 0777 [pid 5061] <... openat resumed>) = 4 [pid 8942] chdir("./file0" [pid 5061] newfstatat(4, "", [pid 8942] <... chdir resumed>) = 0 [pid 8942] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8942] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] getdents64(4, [pid 8942] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 5065] <... mkdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./389/file0" [pid 8941] <... mount resumed>) = 0 [pid 8941] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8941] chdir("./file0") = 0 [pid 8941] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8941] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5061] getdents64(3, [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./389" [pid 8942] <... open resumed>) = 4 [pid 5061] <... rmdir resumed>) = 0 [pid 8942] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] mkdir("./390", 0777 [pid 8942] <... open resumed>) = 5 [pid 5061] <... mkdir resumed>) = 0 [pid 8942] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8942] <... mmap resumed>) = 0x20000000 [pid 8941] <... open resumed>) = 4 [pid 5061] <... openat resumed>) = 3 [pid 8941] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8941] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [ 343.541287][ T8945] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 343.575119][ T8946] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8942] ftruncate(4, 33587195 [pid 8941] <... mmap resumed>) = 0x20000000 [pid 8941] ftruncate(4, 33587195 [pid 5064] <... ioctl resumed>) = 0 [pid 8942] <... ftruncate resumed>) = 0 [pid 8941] <... ftruncate resumed>) = 0 [pid 8941] unlink("./bus" [pid 8942] unlink("./bus" [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8941] <... unlink resumed>) = 0 [pid 8941] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8941] exit_group(0) = ? [pid 5065] <... ioctl resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8947 ./strace-static-x86_64: Process 8947 attached [pid 8947] set_robust_list(0x55555745a660, 24) = 0 [pid 8947] chdir("./389" [pid 5065] close(3 [pid 8942] <... unlink resumed>) = 0 [pid 8942] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8942] exit_group(0) = ? [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8947] <... chdir resumed>) = 0 [pid 8947] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8947] setpgid(0, 0) = 0 [pid 8947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8941] +++ exited with 0 +++ [pid 8947] write(3, "1000", 4) = 4 [pid 8947] close(3) = 0 [pid 8947] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8941, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 8947] memfd_create("syzkaller", 0) = 3 [pid 8947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5063] umount2("./384", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8948 attached [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8948 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... ioctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8948] set_robust_list(0x55555745a660, 24 [pid 8942] +++ exited with 0 +++ [pid 5063] <... openat resumed>) = 3 [pid 5061] close(3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8942, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] newfstatat(3, "", [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5061] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... restart_syscall resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] getdents64(3, [pid 8948] <... set_robust_list resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./383", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8949 ./strace-static-x86_64: Process 8949 attached [pid 8948] chdir("./383" [pid 5063] umount2("./384/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8948] <... chdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8948] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... openat resumed>) = 3 [pid 8948] <... prctl resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./384/binderfs", [pid 5062] newfstatat(3, "", [pid 8948] setpgid(0, 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8948] <... setpgid resumed>) = 0 [pid 8949] set_robust_list(0x55555745a660, 24 [pid 8948] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] getdents64(3, [pid 8948] <... openat resumed>) = 3 [pid 5063] unlink("./384/binderfs" [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8948] write(3, "1000", 4 [pid 8949] <... set_robust_list resumed>) = 0 [pid 8949] chdir("./390" [pid 8948] <... write resumed>) = 4 [pid 5063] <... unlink resumed>) = 0 [pid 5062] umount2("./383/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8949] <... chdir resumed>) = 0 [pid 8948] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8949] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8948] <... close resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./383/binderfs", [pid 8949] <... prctl resumed>) = 0 [pid 8949] setpgid(0, 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8949] <... setpgid resumed>) = 0 [pid 8948] symlink("/dev/binderfs", "./binderfs" [pid 5063] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] unlink("./383/binderfs" [pid 8948] <... symlink resumed>) = 0 [pid 8947] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... unlink resumed>) = 0 [pid 8949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8949] <... openat resumed>) = 3 [pid 8948] memfd_create("syzkaller", 0 [pid 8949] write(3, "1000", 4 [pid 8948] <... memfd_create resumed>) = 3 [pid 8949] <... write resumed>) = 4 [pid 8948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8949] close(3) = 0 [pid 8949] symlink("/dev/binderfs", "./binderfs" [pid 8948] <... mmap resumed>) = 0x7f41e0600000 [pid 8949] <... symlink resumed>) = 0 [pid 8949] memfd_create("syzkaller", 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8949] <... memfd_create resumed>) = 3 [pid 8949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5063] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./384/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./384/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./383/file0", [pid 8948] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... openat resumed>) = 4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./384/file0") = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(3, [pid 5062] openat(AT_FDCWD, "./383/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5062] <... openat resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./384") = 0 [pid 5062] newfstatat(4, "", [pid 5063] mkdir("./385", 0777 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8947] <... write resumed>) = 2097152 [pid 5062] getdents64(4, [pid 8947] munmap(0x7f41e0600000, 138412032 [pid 5063] <... openat resumed>) = 3 [pid 8949] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8947] <... munmap resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8947] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] getdents64(4, [pid 8948] <... write resumed>) = 2097152 [pid 8947] <... openat resumed>) = 4 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8947] ioctl(4, LOOP_SET_FD, 3 [pid 5062] close(4 [pid 8948] munmap(0x7f41e0600000, 138412032 [pid 8947] <... ioctl resumed>) = 0 [pid 8949] <... write resumed>) = 2097152 [pid 8948] <... munmap resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8947] close(3 [pid 5062] rmdir("./383/file0" [ 343.813917][ T8947] loop3: detected capacity change from 0 to 4096 [pid 8948] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8949] munmap(0x7f41e0600000, 138412032 [pid 8948] <... openat resumed>) = 4 [pid 8947] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8948] ioctl(4, LOOP_SET_FD, 3 [pid 8947] close(4 [pid 5062] getdents64(3, [pid 8949] <... munmap resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8949] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] close(3) = 0 [pid 8949] <... openat resumed>) = 4 [pid 8949] ioctl(4, LOOP_SET_FD, 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8948] <... ioctl resumed>) = 0 [pid 8947] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8948] close(3 [pid 8947] mkdir("./file0", 0777 [pid 5062] close(3 [pid 8948] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./383" [pid 8948] close(4 [pid 8947] <... mkdir resumed>) = 0 [pid 8948] <... close resumed>) = 0 [pid 8947] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... rmdir resumed>) = 0 [pid 8948] mkdir("./file0", 0777 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8950 [pid 8948] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8950 attached [pid 5062] mkdir("./384", 0777 [pid 8950] set_robust_list(0x55555745a660, 24 [pid 8949] <... ioctl resumed>) = 0 [pid 8950] <... set_robust_list resumed>) = 0 [pid 8948] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... mkdir resumed>) = 0 [pid 8950] chdir("./385" [pid 8949] close(3 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8950] <... chdir resumed>) = 0 [pid 8950] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8949] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8950] <... prctl resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [ 343.857783][ T8948] loop4: detected capacity change from 0 to 4096 [ 343.867194][ T8949] loop0: detected capacity change from 0 to 4096 [pid 8950] setpgid(0, 0 [pid 8949] close(4 [pid 8950] <... setpgid resumed>) = 0 [pid 8949] <... close resumed>) = 0 [pid 8949] mkdir("./file0", 0777 [pid 8950] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8949] <... mkdir resumed>) = 0 [pid 8947] <... mount resumed>) = 0 [pid 8950] <... openat resumed>) = 3 [pid 8950] write(3, "1000", 4) = 4 [pid 8950] close(3) = 0 [pid 8950] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8950] memfd_create("syzkaller", 0) = 3 [pid 8950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8949] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8947] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8948] <... mount resumed>) = 0 [pid 8948] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8948] chdir("./file0" [pid 8947] <... openat resumed>) = 3 [pid 8948] <... chdir resumed>) = 0 [pid 8948] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8947] chdir("./file0" [pid 8948] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8947] <... chdir resumed>) = 0 [pid 8948] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8947] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 343.909403][ T8951] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 343.917510][ T8952] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8947] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8950] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8948] <... open resumed>) = 4 [pid 8947] <... open resumed>) = 4 [pid 5062] <... ioctl resumed>) = 0 [pid 8948] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8947] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8948] <... open resumed>) = 5 [pid 8947] <... open resumed>) = 5 [pid 5062] close(3 [pid 8947] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... close resumed>) = 0 [pid 8948] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8947] <... mmap resumed>) = 0x20000000 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8948] <... mmap resumed>) = 0x20000000 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8954 [pid 8947] ftruncate(4, 33587195./strace-static-x86_64: Process 8954 attached [pid 8949] <... mount resumed>) = 0 [pid 8949] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8949] chdir("./file0" [pid 8948] ftruncate(4, 33587195 [ 343.969810][ T28] kauditd_printk_skb: 110 callbacks suppressed [ 343.969827][ T28] audit: type=1800 audit(1708423496.500:5795): pid=8947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 344.005033][ T8953] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8954] set_robust_list(0x55555745a660, 24) = 0 [pid 8947] <... ftruncate resumed>) = 0 [pid 8949] <... chdir resumed>) = 0 [pid 8947] unlink("./bus" [pid 8949] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8948] <... ftruncate resumed>) = 0 [pid 8948] unlink("./bus" [pid 8949] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8954] chdir("./384") = 0 [pid 8949] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8948] <... unlink resumed>) = 0 [pid 8954] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8948] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8954] setpgid(0, 0 [pid 8948] exit_group(0 [pid 8947] <... unlink resumed>) = 0 [pid 8954] <... setpgid resumed>) = 0 [pid 8948] <... exit_group resumed>) = ? [pid 8947] sendfile(-1, -1, NULL, 281474978811909 [pid 8954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8949] <... open resumed>) = 4 [pid 8947] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8954] <... openat resumed>) = 3 [pid 8949] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8947] exit_group(0 [pid 8949] <... open resumed>) = 5 [pid 8947] <... exit_group resumed>) = ? [pid 8954] write(3, "1000", 4 [pid 8950] <... write resumed>) = 2097152 [pid 8949] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8948] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8948, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 8949] <... mmap resumed>) = 0x20000000 [pid 5065] umount2("./383", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8954] <... write resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8954] close(3) = 0 [pid 5065] openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8954] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 8954] <... symlink resumed>) = 0 [pid 8954] memfd_create("syzkaller", 0 [pid 8950] munmap(0x7f41e0600000, 138412032 [pid 8949] ftruncate(4, 33587195 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./383/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./383/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./383/binderfs") = 0 [pid 5065] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8954] <... memfd_create resumed>) = 3 [ 344.078685][ T28] audit: type=1800 audit(1708423496.510:5796): pid=8948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 344.102605][ T28] audit: type=1800 audit(1708423496.550:5797): pid=8947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 8954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8949] <... ftruncate resumed>) = 0 [pid 8954] <... mmap resumed>) = 0x7f41e0600000 [pid 8950] <... munmap resumed>) = 0 [pid 8949] unlink("./bus" [pid 8947] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8947, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8950] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8950] ioctl(4, LOOP_SET_FD, 3 [pid 8949] <... unlink resumed>) = 0 [pid 5064] umount2("./389", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8949] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... umount2 resumed>) = 0 [pid 8949] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8949] exit_group(0 [pid 8954] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8949] <... exit_group resumed>) = ? [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 344.137276][ T28] audit: type=1800 audit(1708423496.550:5798): pid=8948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 344.163883][ T8950] loop2: detected capacity change from 0 to 4096 [pid 5064] openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./389/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./389/binderfs", [pid 5065] newfstatat(AT_FDCWD, "./383/file0", [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./389/binderfs" [pid 8949] +++ exited with 0 +++ [pid 5065] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8949, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8950] <... ioctl resumed>) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./390", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./390/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./390/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./390/binderfs") = 0 [pid 5061] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8950] close(3) = 0 [pid 8950] close(4) = 0 [pid 8950] mkdir("./file0", 0777) = 0 [pid 8950] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] openat(AT_FDCWD, "./383/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8954] <... write resumed>) = 2097152 [pid 5065] close(4 [pid 5064] <... umount2 resumed>) = 0 [pid 5065] <... close resumed>) = 0 [ 344.164747][ T28] audit: type=1800 audit(1708423496.560:5799): pid=8947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 344.194585][ T28] audit: type=1800 audit(1708423496.570:5800): pid=8948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 344.215220][ T28] audit: type=1800 audit(1708423496.610:5801): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [pid 5065] rmdir("./383/file0" [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./390/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./390/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", [pid 5064] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(4, [pid 5064] newfstatat(AT_FDCWD, "./389/file0", [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8954] munmap(0x7f41e0600000, 138412032 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] getdents64(4, [pid 5064] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] close(4 [pid 8954] <... munmap resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./389/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... close resumed>) = 0 [pid 5065] getdents64(3, [pid 5061] rmdir("./390/file0") = 0 [pid 5064] <... openat resumed>) = 4 [pid 5061] getdents64(3, [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] getdents64(4, [pid 5061] close(3 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] <... close resumed>) = 0 [pid 8954] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] getdents64(4, [pid 5061] rmdir("./390" [pid 8954] <... openat resumed>) = 4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8954] ioctl(4, LOOP_SET_FD, 3 [pid 5064] close(4 [pid 5061] mkdir("./391", 0777 [pid 8950] <... mount resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [ 344.270681][ T28] audit: type=1800 audit(1708423496.630:5802): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 344.292280][ T28] audit: type=1800 audit(1708423496.650:5803): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 344.305565][ T8954] loop1: detected capacity change from 0 to 4096 [pid 5061] <... mkdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./389/file0" [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./389" [pid 8950] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] close(3 [pid 8954] <... ioctl resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 8950] <... openat resumed>) = 3 [pid 8954] close(3 [pid 5065] <... close resumed>) = 0 [pid 5064] mkdir("./390", 0777 [pid 8954] <... close resumed>) = 0 [pid 8950] chdir("./file0" [pid 5065] rmdir("./383" [pid 8954] close(4 [pid 8950] <... chdir resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 8954] <... close resumed>) = 0 [pid 8950] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8954] mkdir("./file0", 0777 [pid 8950] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] mkdir("./384", 0777 [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8954] <... mkdir resumed>) = 0 [pid 8950] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 4 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8950] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8954] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8950] <... open resumed>) = 5 [ 344.318032][ T8955] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 344.341464][ T28] audit: type=1800 audit(1708423496.870:5804): pid=8950 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [pid 8950] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8954] <... mount resumed>) = 0 [pid 8950] <... mmap resumed>) = 0x20000000 [pid 5061] <... ioctl resumed>) = 0 [pid 8954] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8950] ftruncate(4, 33587195 [pid 5061] close(3 [pid 8954] <... openat resumed>) = 3 [pid 5061] <... close resumed>) = 0 [pid 8954] chdir("./file0" [pid 8950] <... ftruncate resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8957 attached [pid 8957] set_robust_list(0x55555745a660, 24 [pid 8954] <... chdir resumed>) = 0 [pid 8950] unlink("./bus" [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8957 [pid 8954] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8957] <... set_robust_list resumed>) = 0 [pid 8957] chdir("./391") = 0 [ 344.379244][ T8956] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8957] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8954] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8954] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8950] <... unlink resumed>) = 0 [pid 8957] <... prctl resumed>) = 0 [pid 8957] setpgid(0, 0 [pid 8950] sendfile(-1, -1, NULL, 281474978811909 [pid 8957] <... setpgid resumed>) = 0 [pid 8950] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8950] exit_group(0 [pid 5065] <... ioctl resumed>) = 0 [pid 8950] <... exit_group resumed>) = ? [pid 8957] <... openat resumed>) = 3 [pid 5065] close(3) = 0 [pid 8957] write(3, "1000", 4 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8957] <... write resumed>) = 4 [pid 8957] close(3) = 0 [pid 8950] +++ exited with 0 +++ [pid 8954] <... open resumed>) = 4 [pid 8954] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8950, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 8957] symlink("/dev/binderfs", "./binderfs" [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 8957] <... symlink resumed>) = 0 [pid 8954] <... open resumed>) = 5 [pid 5064] <... ioctl resumed>) = 0 [pid 5063] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 8958 attached [pid 8954] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] close(3 [pid 8958] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8958 [pid 5064] <... close resumed>) = 0 [pid 8957] memfd_create("syzkaller", 0 [pid 5063] umount2("./385", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8958] <... set_robust_list resumed>) = 0 [pid 8957] <... memfd_create resumed>) = 3 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8958] chdir("./384" [pid 8957] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8958] <... chdir resumed>) = 0 [pid 8957] <... mmap resumed>) = 0x7f41e0600000 [pid 8954] <... mmap resumed>) = 0x20000000 ./strace-static-x86_64: Process 8959 attached [pid 8958] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... openat resumed>) = 3 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8959 [pid 8954] ftruncate(4, 33587195 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8958] <... prctl resumed>) = 0 [pid 8954] <... ftruncate resumed>) = 0 [pid 5063] umount2("./385/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8959] set_robust_list(0x55555745a660, 24 [pid 8958] setpgid(0, 0 [pid 8954] unlink("./bus" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8959] <... set_robust_list resumed>) = 0 [pid 8958] <... setpgid resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./385/binderfs", [pid 8958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8959] chdir("./390" [pid 5063] unlink("./385/binderfs" [pid 8959] <... chdir resumed>) = 0 [pid 8958] <... openat resumed>) = 3 [pid 8954] <... unlink resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 8959] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8958] write(3, "1000", 4 [pid 8954] sendfile(-1, -1, NULL, 281474978811909 [pid 5063] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8959] <... prctl resumed>) = 0 [pid 8958] <... write resumed>) = 4 [pid 8954] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8959] setpgid(0, 0 [pid 8958] close(3 [pid 8954] exit_group(0 [pid 8959] <... setpgid resumed>) = 0 [pid 8958] <... close resumed>) = 0 [pid 8954] <... exit_group resumed>) = ? [pid 8959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8958] symlink("/dev/binderfs", "./binderfs" [pid 8959] <... openat resumed>) = 3 [pid 8958] <... symlink resumed>) = 0 [pid 8959] write(3, "1000", 4) = 4 [pid 8959] close(3 [pid 8958] memfd_create("syzkaller", 0 [pid 8959] <... close resumed>) = 0 [pid 8958] <... memfd_create resumed>) = 3 [pid 8959] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8959] memfd_create("syzkaller", 0 [pid 8958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8957] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8954] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = 0 [pid 8959] <... memfd_create resumed>) = 3 [pid 8959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5063] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8958] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8954, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./385/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./384", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8959] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./385/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./385/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./385") = 0 [pid 5062] openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] mkdir("./386", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./384/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./384/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./384/binderfs") = 0 [pid 8957] <... write resumed>) = 2097152 [pid 5062] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8957] munmap(0x7f41e0600000, 138412032 [pid 8959] <... write resumed>) = 2097152 [pid 8958] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8957] <... munmap resumed>) = 0 [pid 8959] munmap(0x7f41e0600000, 138412032 [pid 5062] <... umount2 resumed>) = 0 [pid 8959] <... munmap resumed>) = 0 [pid 5062] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8957] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8957] <... openat resumed>) = 4 [pid 5062] newfstatat(AT_FDCWD, "./384/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8957] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./384/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8959] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8957] <... ioctl resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", [pid 8959] <... openat resumed>) = 4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 8959] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8957] close(3 [pid 8959] close(3 [pid 8958] <... write resumed>) = 2097152 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8959] <... close resumed>) = 0 [pid 8957] <... close resumed>) = 0 [pid 5063] close(3 [pid 5062] getdents64(4, [pid 8959] close(4 [pid 8957] close(4 [pid 5063] <... close resumed>) = 0 [pid 8959] <... close resumed>) = 0 [pid 8957] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8959] mkdir("./file0", 0777 [pid 8957] mkdir("./file0", 0777 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8959] <... mkdir resumed>) = 0 [pid 8958] munmap(0x7f41e0600000, 138412032 [pid 8957] <... mkdir resumed>) = 0 [pid 5062] close(4 [pid 8957] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... close resumed>) = 0 [pid 8959] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] rmdir("./384/file0" [pid 8958] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 8960 attached [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8960 [pid 5062] <... rmdir resumed>) = 0 [pid 8960] set_robust_list(0x55555745a660, 24) = 0 [pid 8958] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 344.598427][ T8957] loop0: detected capacity change from 0 to 4096 [ 344.609539][ T8959] loop3: detected capacity change from 0 to 4096 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8958] <... openat resumed>) = 4 [pid 8960] chdir("./386" [pid 8958] ioctl(4, LOOP_SET_FD, 3 [pid 5062] close(3 [pid 8960] <... chdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./384") = 0 [pid 5062] mkdir("./385", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8960] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8959] <... mount resumed>) = 0 [pid 8960] <... prctl resumed>) = 0 [pid 8959] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8959] chdir("./file0" [pid 8960] setpgid(0, 0 [pid 8959] <... chdir resumed>) = 0 [pid 8960] <... setpgid resumed>) = 0 [pid 8959] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8960] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8959] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8960] <... openat resumed>) = 3 [pid 8959] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8960] write(3, "1000", 4) = 4 [pid 8960] close(3) = 0 [pid 8960] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8960] memfd_create("syzkaller", 0 [pid 8959] <... open resumed>) = 4 [pid 8960] <... memfd_create resumed>) = 3 [pid 8958] <... ioctl resumed>) = 0 [pid 8960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8958] close(3 [pid 8960] <... mmap resumed>) = 0x7f41e0600000 [pid 8959] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8958] <... close resumed>) = 0 [pid 8958] close(4) = 0 [pid 8957] <... mount resumed>) = 0 [pid 8958] mkdir("./file0", 0777 [pid 8957] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8958] <... mkdir resumed>) = 0 [pid 8957] <... openat resumed>) = 3 [pid 8957] chdir("./file0" [pid 8958] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8957] <... chdir resumed>) = 0 [ 344.662029][ T8961] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 344.668657][ T8958] loop4: detected capacity change from 0 to 4096 [ 344.689897][ T8962] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8957] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8957] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8959] <... open resumed>) = 5 [pid 8959] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8957] <... open resumed>) = 4 [pid 8957] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8960] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8959] <... unlink resumed>) = 0 [pid 8957] <... open resumed>) = 5 [pid 8959] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8959] exit_group(0) = ? [pid 8957] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8959, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5062] <... ioctl resumed>) = 0 [pid 8958] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8957] ftruncate(4, 33587195 [pid 8958] <... openat resumed>) = 3 [pid 8958] chdir("./file0") = 0 [pid 8958] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8958] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] umount2("./390", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", [ 344.766821][ T8963] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] close(3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... close resumed>) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] umount2("./390/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8958] <... open resumed>) = 4 [pid 8957] <... ftruncate resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8958] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000./strace-static-x86_64: Process 8964 attached ) = 5 [pid 5064] newfstatat(AT_FDCWD, "./390/binderfs", [pid 8964] set_robust_list(0x55555745a660, 24 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8964] <... set_robust_list resumed>) = 0 [pid 5064] unlink("./390/binderfs" [pid 8964] chdir("./385" [pid 8958] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8957] unlink("./bus" [pid 5064] <... unlink resumed>) = 0 [pid 8964] <... chdir resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8964 [pid 5064] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8964] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8958] <... mmap resumed>) = 0x20000000 [pid 8957] <... unlink resumed>) = 0 [pid 8964] <... prctl resumed>) = 0 [pid 8958] ftruncate(4, 33587195 [pid 8957] sendfile(-1, -1, NULL, 281474978811909 [pid 8964] setpgid(0, 0 [pid 8957] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8964] <... setpgid resumed>) = 0 [pid 8957] exit_group(0) = ? [pid 8964] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8958] <... ftruncate resumed>) = 0 [pid 8958] unlink("./bus" [pid 5064] <... umount2 resumed>) = 0 [pid 8964] write(3, "1000", 4) = 4 [pid 8964] close(3) = 0 [pid 5064] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8964] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8964] <... symlink resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./390/file0", [pid 8964] memfd_create("syzkaller", 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8964] <... memfd_create resumed>) = 3 [pid 5064] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8964] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] openat(AT_FDCWD, "./390/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8957] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8957, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5061] umount2("./391", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8958] <... unlink resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8958] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] newfstatat(4, "", [pid 5061] <... openat resumed>) = 3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, [pid 8960] <... write resumed>) = 2097152 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8958] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8958] exit_group(0 [pid 5061] newfstatat(3, "", [pid 8958] <... exit_group resumed>) = ? [pid 5064] close(4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8960] munmap(0x7f41e0600000, 138412032 [pid 5064] <... close resumed>) = 0 [pid 5061] getdents64(3, [pid 5064] rmdir("./390/file0" [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] <... rmdir resumed>) = 0 [pid 8960] <... munmap resumed>) = 0 [pid 5061] umount2("./391/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] newfstatat(AT_FDCWD, "./391/binderfs", [pid 8960] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8960] <... openat resumed>) = 4 [pid 5064] close(3 [pid 8960] ioctl(4, LOOP_SET_FD, 3 [pid 8964] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8960] <... ioctl resumed>) = 0 [pid 8958] +++ exited with 0 +++ [pid 5064] <... close resumed>) = 0 [pid 5061] unlink("./391/binderfs" [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8958, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5064] rmdir("./390" [pid 5061] <... unlink resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5061] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8960] close(3 [pid 5064] mkdir("./391", 0777 [pid 8960] <... close resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 8960] close(4) = 0 [pid 5065] umount2("./384", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8964] <... write resumed>) = 2097152 [pid 8960] mkdir("./file0", 0777 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", [pid 8960] <... mkdir resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... openat resumed>) = 3 [pid 8960] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./384/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./384/binderfs", [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./384/binderfs") = 0 [pid 5065] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8964] munmap(0x7f41e0600000, 138412032) = 0 [pid 8964] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 344.910227][ T8960] loop2: detected capacity change from 0 to 4096 [pid 8964] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8964] close(3 [pid 5061] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8964] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8964] close(4 [pid 5061] newfstatat(AT_FDCWD, "./391/file0", [pid 8964] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./391/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8964] mkdir("./file0", 0777 [pid 5061] <... openat resumed>) = 4 [pid 8964] <... mkdir resumed>) = 0 [pid 8960] <... mount resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 8964] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... umount2 resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8960] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8960] chdir("./file0" [pid 5065] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(4) = 0 [pid 5061] rmdir("./391/file0" [pid 8960] <... chdir resumed>) = 0 [pid 8960] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... rmdir resumed>) = 0 [pid 8960] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] newfstatat(AT_FDCWD, "./384/file0", [pid 5061] getdents64(3, [pid 8960] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5065] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./391") = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./384/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 344.967497][ T8964] loop1: detected capacity change from 0 to 4096 [ 344.979628][ T8965] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] mkdir("./392", 0777) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5064] <... ioctl resumed>) = 0 [pid 8964] <... mount resumed>) = 0 [pid 5065] newfstatat(4, "", [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8964] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] close(3 [pid 8964] <... openat resumed>) = 3 [pid 8960] <... open resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8964] chdir("./file0" [pid 8960] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] getdents64(4, [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8964] <... chdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... close resumed>) = 0 [pid 8964] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] getdents64(4, [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8960] <... open resumed>) = 5 ./strace-static-x86_64: Process 8967 attached [pid 8964] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8967] set_robust_list(0x55555745a660, 24 [pid 8964] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8960] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] close(4 [pid 8967] <... set_robust_list resumed>) = 0 [pid 8964] <... open resumed>) = 4 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8967 [pid 8967] chdir("./391" [pid 8964] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... close resumed>) = 0 [pid 8960] <... mmap resumed>) = 0x20000000 [pid 8967] <... chdir resumed>) = 0 [pid 5065] rmdir("./384/file0" [pid 8967] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8964] <... open resumed>) = 5 [pid 8960] ftruncate(4, 33587195 [pid 8967] <... prctl resumed>) = 0 [pid 8964] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... rmdir resumed>) = 0 [pid 8967] setpgid(0, 0 [pid 8964] <... mmap resumed>) = 0x20000000 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 8967] <... setpgid resumed>) = 0 [pid 8964] ftruncate(4, 33587195 [pid 5065] <... close resumed>) = 0 [pid 8967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8960] <... ftruncate resumed>) = 0 [pid 5065] rmdir("./384" [pid 8967] <... openat resumed>) = 3 [pid 8960] unlink("./bus" [pid 5065] <... rmdir resumed>) = 0 [pid 8964] <... ftruncate resumed>) = 0 [pid 8967] write(3, "1000", 4 [pid 8964] unlink("./bus" [pid 8967] <... write resumed>) = 4 [ 345.030649][ T8966] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8967] close(3) = 0 [pid 5065] mkdir("./385", 0777 [pid 8967] symlink("/dev/binderfs", "./binderfs" [pid 8964] <... unlink resumed>) = 0 [pid 8960] <... unlink resumed>) = 0 [pid 8967] <... symlink resumed>) = 0 [pid 8964] sendfile(-1, -1, NULL, 281474978811909 [pid 8960] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... mkdir resumed>) = 0 [pid 8967] memfd_create("syzkaller", 0 [pid 8964] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8960] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8964] exit_group(0 [pid 8960] exit_group(0 [pid 5065] <... openat resumed>) = 3 [pid 8967] <... memfd_create resumed>) = 3 [pid 8964] <... exit_group resumed>) = ? [pid 8960] <... exit_group resumed>) = ? [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8964] +++ exited with 0 +++ [pid 8960] +++ exited with 0 +++ [pid 5061] <... ioctl resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8960, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5063] umount2("./386", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8964, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./385", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5062] openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", [pid 5063] getdents64(3, [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] close(3 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] getdents64(3, [pid 5061] <... close resumed>) = 0 [pid 5063] umount2("./386/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./385/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8968 attached [pid 5063] newfstatat(AT_FDCWD, "./386/binderfs", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8968 [pid 8968] set_robust_list(0x55555745a660, 24 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] newfstatat(AT_FDCWD, "./385/binderfs", [pid 8968] <... set_robust_list resumed>) = 0 [pid 5063] unlink("./386/binderfs") = 0 [pid 8968] chdir("./392" [pid 5063] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8968] <... chdir resumed>) = 0 [pid 8968] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8968] setpgid(0, 0) = 0 [pid 8968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] unlink("./385/binderfs" [pid 8968] <... openat resumed>) = 3 [pid 8968] write(3, "1000", 4) = 4 [pid 8968] close(3) = 0 [pid 8968] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8968] memfd_create("syzkaller", 0) = 3 [pid 8968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5062] <... unlink resumed>) = 0 [pid 5062] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8967] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8969 attached [pid 8968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8969] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8969 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8969] <... set_robust_list resumed>) = 0 [pid 8967] <... write resumed>) = 2097152 [pid 5063] newfstatat(AT_FDCWD, "./386/file0", [pid 5062] <... umount2 resumed>) = 0 [pid 8969] chdir("./385" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8969] <... chdir resumed>) = 0 [pid 8967] munmap(0x7f41e0600000, 138412032 [pid 5063] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8969] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8967] <... munmap resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./385/file0", [pid 8969] <... prctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8969] setpgid(0, 0 [pid 5063] openat(AT_FDCWD, "./386/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8969] <... setpgid resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 8969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] newfstatat(4, "", [pid 5062] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8969] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8969] write(3, "1000", 4 [pid 5063] getdents64(4, [pid 5062] openat(AT_FDCWD, "./385/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8969] <... write resumed>) = 4 [pid 8967] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... openat resumed>) = 4 [pid 8969] close(3 [pid 5063] getdents64(4, [pid 5062] newfstatat(4, "", [pid 8967] <... openat resumed>) = 4 [pid 8969] <... close resumed>) = 0 [pid 8967] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] close(4 [pid 5062] getdents64(4, [pid 5063] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] rmdir("./386/file0" [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./385/file0") = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 8969] symlink("/dev/binderfs", "./binderfs" [pid 8968] <... write resumed>) = 2097152 [pid 8967] <... ioctl resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8969] <... symlink resumed>) = 0 [pid 8968] munmap(0x7f41e0600000, 138412032 [pid 8967] close(3 [pid 5062] rmdir("./385" [pid 5063] getdents64(3, [pid 8967] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8969] memfd_create("syzkaller", 0) = 3 [pid 8967] close(4 [pid 8968] <... munmap resumed>) = 0 [pid 5063] close(3 [pid 5062] mkdir("./386", 0777 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./386" [pid 8969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8968] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8967] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 8967] mkdir("./file0", 0777 [pid 5063] mkdir("./387", 0777 [pid 8968] <... openat resumed>) = 4 [pid 8967] <... mkdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 8967] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8968] ioctl(4, LOOP_SET_FD, 3 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5062] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8968] <... ioctl resumed>) = 0 [pid 8968] close(3) = 0 [pid 8968] close(4) = 0 [pid 8968] mkdir("./file0", 0777) = 0 [pid 8968] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 345.252428][ T8967] loop3: detected capacity change from 0 to 4096 [ 345.284114][ T8968] loop0: detected capacity change from 0 to 4096 [pid 8969] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8967] <... mount resumed>) = 0 [pid 8967] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8967] chdir("./file0") = 0 [pid 8967] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8967] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 4 [pid 8967] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8967] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8968] <... mount resumed>) = 0 [pid 8967] <... ftruncate resumed>) = 0 [pid 8967] unlink("./bus") = 0 [pid 8967] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [ 345.323839][ T8970] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 345.335668][ T8971] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8967] exit_group(0) = ? [pid 8968] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8968] chdir("./file0") = 0 [pid 8967] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8967, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8968] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8968] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] umount2("./391", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8969] <... write resumed>) = 2097152 [pid 5064] <... openat resumed>) = 3 [pid 8969] munmap(0x7f41e0600000, 138412032 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./391/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./391/binderfs", [pid 8969] <... munmap resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8969] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8969] <... openat resumed>) = 4 [pid 5064] unlink("./391/binderfs" [pid 8969] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8968] <... open resumed>) = 4 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8968] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8968] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8973 [pid 8973] set_robust_list(0x55555745a660, 24 [pid 8972] set_robust_list(0x55555745a660, 24 [pid 8969] close(3 [pid 8968] ftruncate(4, 33587195 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8972 [pid 8973] <... set_robust_list resumed>) = 0 [pid 8972] <... set_robust_list resumed>) = 0 [pid 8969] <... close resumed>) = 0 [pid 8973] chdir("./386" [pid 8972] chdir("./387" [pid 8969] close(4 [pid 8973] <... chdir resumed>) = 0 [pid 8972] <... chdir resumed>) = 0 [pid 8969] <... close resumed>) = 0 [pid 8969] mkdir("./file0", 0777 [pid 8972] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8973] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8972] <... prctl resumed>) = 0 [pid 8968] <... ftruncate resumed>) = 0 [pid 8973] <... prctl resumed>) = 0 [pid 8972] setpgid(0, 0 [pid 8969] <... mkdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 8968] unlink("./bus" [pid 8973] setpgid(0, 0 [pid 8972] <... setpgid resumed>) = 0 [pid 5064] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8972] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] newfstatat(AT_FDCWD, "./391/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8973] <... setpgid resumed>) = 0 [pid 8969] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 345.418924][ T8969] loop4: detected capacity change from 0 to 4096 [pid 5064] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8972] <... openat resumed>) = 3 [pid 8973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8972] write(3, "1000", 4 [pid 8968] <... unlink resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8973] <... openat resumed>) = 3 [pid 8972] <... write resumed>) = 4 [pid 8968] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] openat(AT_FDCWD, "./391/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8973] write(3, "1000", 4 [pid 8972] close(3 [pid 8968] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] <... openat resumed>) = 4 [pid 8973] <... write resumed>) = 4 [pid 8972] <... close resumed>) = 0 [pid 8968] exit_group(0 [pid 8973] close(3 [pid 8972] symlink("/dev/binderfs", "./binderfs" [pid 5064] newfstatat(4, "", [pid 8973] <... close resumed>) = 0 [pid 8972] <... symlink resumed>) = 0 [pid 8968] <... exit_group resumed>) = ? [pid 8973] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8973] <... symlink resumed>) = 0 [pid 8972] memfd_create("syzkaller", 0) = 3 [pid 5064] getdents64(4, [pid 8972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8972] <... mmap resumed>) = 0x7f41e0600000 [pid 8973] memfd_create("syzkaller", 0 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8973] <... memfd_create resumed>) = 3 [pid 8969] <... mount resumed>) = 0 [pid 5064] close(4 [pid 8969] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8973] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8969] <... openat resumed>) = 3 [pid 5064] <... close resumed>) = 0 [pid 8969] chdir("./file0" [pid 8973] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] rmdir("./391/file0" [pid 8969] <... chdir resumed>) = 0 [pid 8969] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, [pid 8969] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8969] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8968] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8968, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5061] umount2("./392", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./391" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... rmdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] mkdir("./392", 0777 [pid 5061] newfstatat(3, "", [pid 5064] <... mkdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8972] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8969] <... open resumed>) = 4 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 345.493441][ T8974] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] getdents64(3, [pid 8969] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8973] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8969] <... open resumed>) = 5 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5061] umount2("./392/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./392/binderfs", [pid 8969] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8969] <... mmap resumed>) = 0x20000000 [pid 5061] unlink("./392/binderfs") = 0 [pid 8972] <... write resumed>) = 2097152 [pid 8969] ftruncate(4, 33587195 [pid 5061] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8972] munmap(0x7f41e0600000, 138412032 [pid 8973] <... write resumed>) = 2097152 [pid 8969] <... ftruncate resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8973] munmap(0x7f41e0600000, 138412032 [pid 8969] unlink("./bus" [pid 8972] <... munmap resumed>) = 0 [pid 5061] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8973] <... munmap resumed>) = 0 [pid 8972] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8969] <... unlink resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8969] sendfile(-1, -1, NULL, 281474978811909 [pid 8973] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8972] <... openat resumed>) = 4 [pid 8969] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] newfstatat(AT_FDCWD, "./392/file0", [pid 8973] <... openat resumed>) = 4 [pid 8972] ioctl(4, LOOP_SET_FD, 3 [pid 8969] exit_group(0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8969] <... exit_group resumed>) = ? [pid 8973] ioctl(4, LOOP_SET_FD, 3 [pid 5061] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./392/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 8969] +++ exited with 0 +++ [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8969, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8973] <... ioctl resumed>) = 0 [pid 8972] <... ioctl resumed>) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./392/file0" [pid 8973] close(3 [pid 8972] close(3 [pid 5065] umount2("./385", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8973] <... close resumed>) = 0 [pid 8972] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8972] close(4 [pid 5065] openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8972] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5061] <... rmdir resumed>) = 0 [pid 8973] close(4 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./385/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] newfstatat(AT_FDCWD, "./385/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] close(3 [pid 5065] unlink("./385/binderfs" [pid 8973] <... close resumed>) = 0 [pid 8972] mkdir("./file0", 0777 [pid 8973] mkdir("./file0", 0777 [pid 5065] <... unlink resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5065] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./392" [pid 8972] <... mkdir resumed>) = 0 [pid 8973] <... mkdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8973] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8972] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] mkdir("./393", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... ioctl resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8975 [ 345.607828][ T8972] loop2: detected capacity change from 0 to 4096 [ 345.617394][ T8973] loop1: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 8975 attached [pid 5065] <... umount2 resumed>) = 0 [pid 8975] set_robust_list(0x55555745a660, 24) = 0 [pid 8975] chdir("./392" [pid 8972] <... mount resumed>) = 0 [pid 8972] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8975] <... chdir resumed>) = 0 [pid 8975] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8975] setpgid(0, 0) = 0 [pid 8975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8972] chdir("./file0" [pid 8975] <... openat resumed>) = 3 [pid 8972] <... chdir resumed>) = 0 [pid 8975] write(3, "1000", 4 [pid 8972] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8975] <... write resumed>) = 4 [pid 8972] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8975] close(3) = 0 [pid 8972] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8975] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8975] memfd_create("syzkaller", 0 [pid 5065] newfstatat(AT_FDCWD, "./385/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8975] <... memfd_create resumed>) = 3 [pid 5065] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8975] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8975] <... mmap resumed>) = 0x7f41e0600000 [pid 8973] <... mount resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./385/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8973] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... openat resumed>) = 4 [pid 8973] <... openat resumed>) = 3 [pid 5065] newfstatat(4, "", [pid 8973] chdir("./file0" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8973] <... chdir resumed>) = 0 [pid 5065] getdents64(4, [pid 8973] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8972] <... open resumed>) = 4 [pid 5061] <... ioctl resumed>) = 0 [pid 8973] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8972] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8973] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8972] <... open resumed>) = 5 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] close(3 [pid 8972] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./385/file0" [pid 8972] <... mmap resumed>) = 0x20000000 [pid 5065] <... rmdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8972] ftruncate(4, 33587195 [pid 5065] getdents64(3, [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8973] <... open resumed>) = 4 [pid 8972] <... ftruncate resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8973] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000./strace-static-x86_64: Process 8978 attached ) = 5 [ 345.670149][ T8976] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 345.699122][ T8977] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8973] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8978] set_robust_list(0x55555745a660, 24 [pid 8975] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8973] <... mmap resumed>) = 0x20000000 [pid 8972] unlink("./bus" [pid 5065] close(3 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8978 [pid 8978] <... set_robust_list resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 8978] chdir("./393" [pid 5065] rmdir("./385" [pid 8978] <... chdir resumed>) = 0 [pid 8973] ftruncate(4, 33587195 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./386", 0777 [pid 8978] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... mkdir resumed>) = 0 [pid 8978] <... prctl resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8978] setpgid(0, 0 [pid 5065] <... openat resumed>) = 3 [pid 8978] <... setpgid resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8978] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8978] write(3, "1000", 4 [pid 8972] <... unlink resumed>) = 0 [pid 8978] <... write resumed>) = 4 [pid 8972] sendfile(-1, -1, NULL, 281474978811909 [pid 8978] close(3 [pid 8972] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8978] <... close resumed>) = 0 [pid 8978] symlink("/dev/binderfs", "./binderfs" [pid 8973] <... ftruncate resumed>) = 0 [pid 8978] <... symlink resumed>) = 0 [pid 8973] unlink("./bus" [pid 8972] exit_group(0 [pid 8978] memfd_create("syzkaller", 0 [pid 8972] <... exit_group resumed>) = ? [pid 8978] <... memfd_create resumed>) = 3 [pid 8978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8973] <... unlink resumed>) = 0 [pid 8973] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8975] <... write resumed>) = 2097152 [pid 8973] exit_group(0 [pid 8972] +++ exited with 0 +++ [pid 8975] munmap(0x7f41e0600000, 138412032 [pid 8973] <... exit_group resumed>) = ? [pid 8975] <... munmap resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8972, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 5063] umount2("./387", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8975] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8975] <... openat resumed>) = 4 [pid 5063] newfstatat(3, "", [pid 8975] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./387/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./387/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./387/binderfs") = 0 [pid 5063] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8973] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8973, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5065] <... ioctl resumed>) = 0 [pid 5062] umount2("./386", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8975] <... ioctl resumed>) = 0 [pid 5065] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8975] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 8979 attached [pid 8978] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8975] <... close resumed>) = 0 [pid 5062] getdents64(3, [pid 8979] set_robust_list(0x55555745a660, 24) = 0 [pid 8975] close(4 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8979] chdir("./386" [pid 8975] <... close resumed>) = 0 [pid 8975] mkdir("./file0", 0777 [pid 5062] umount2("./386/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8979] <... chdir resumed>) = 0 [pid 8979] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8975] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./386/binderfs", [pid 8979] <... prctl resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 345.830575][ T8975] loop3: detected capacity change from 0 to 4096 [pid 8979] setpgid(0, 0) = 0 [pid 8975] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8979 [pid 5062] unlink("./386/binderfs" [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 8979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./387/file0", [pid 8979] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8979] write(3, "1000", 4) = 4 [pid 5062] <... umount2 resumed>) = 0 [pid 8979] close(3) = 0 [pid 8979] symlink("/dev/binderfs", "./binderfs" [pid 5063] openat(AT_FDCWD, "./387/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8979] <... symlink resumed>) = 0 [pid 5063] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] newfstatat(AT_FDCWD, "./386/file0", [pid 5063] close(4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8979] memfd_create("syzkaller", 0 [pid 5063] rmdir("./387/file0" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8979] <... memfd_create resumed>) = 3 [pid 8979] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8978] <... write resumed>) = 2097152 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./386/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(3, [pid 5062] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] newfstatat(4, "", [pid 5063] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] getdents64(4, [pid 5063] rmdir("./387" [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5063] mkdir("./388", 0777 [pid 5062] rmdir("./386/file0" [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8978] munmap(0x7f41e0600000, 138412032 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] <... openat resumed>) = 3 [pid 8978] <... munmap resumed>) = 0 [pid 8975] <... mount resumed>) = 0 [pid 5062] close(3 [pid 8975] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... close resumed>) = 0 [pid 8979] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8978] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8975] <... openat resumed>) = 3 [pid 5062] rmdir("./386" [pid 8978] <... openat resumed>) = 4 [ 345.924141][ T8980] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8975] chdir("./file0" [pid 8978] ioctl(4, LOOP_SET_FD, 3 [pid 8975] <... chdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8975] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] mkdir("./387", 0777 [pid 8975] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... mkdir resumed>) = 0 [pid 8978] <... ioctl resumed>) = 0 [pid 8975] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 8978] close(3) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8978] close(4) = 0 [pid 8978] mkdir("./file0", 0777 [pid 8979] <... write resumed>) = 2097152 [pid 8975] <... open resumed>) = 4 [pid 8979] munmap(0x7f41e0600000, 138412032 [pid 8975] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8978] <... mkdir resumed>) = 0 [pid 8975] <... open resumed>) = 5 [pid 8975] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8979] <... munmap resumed>) = 0 [pid 8975] <... mmap resumed>) = 0x20000000 [pid 8978] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8975] ftruncate(4, 33587195 [pid 8979] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8975] <... ftruncate resumed>) = 0 [pid 8979] ioctl(4, LOOP_SET_FD, 3 [pid 8975] unlink("./bus" [pid 8979] <... ioctl resumed>) = 0 [pid 8975] <... unlink resumed>) = 0 [pid 8979] close(3 [pid 8975] sendfile(-1, -1, NULL, 281474978811909 [pid 8979] <... close resumed>) = 0 [pid 8975] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8979] close(4 [pid 8975] exit_group(0 [pid 8979] <... close resumed>) = 0 [pid 8975] <... exit_group resumed>) = ? [ 345.966156][ T8978] loop0: detected capacity change from 0 to 4096 [ 346.002295][ T8979] loop4: detected capacity change from 0 to 4096 [pid 8979] mkdir("./file0", 0777) = 0 [pid 8979] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8975] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8975, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5063] <... ioctl resumed>) = 0 [pid 5064] umount2("./392", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./392/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./392/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./392/binderfs" [pid 5063] close(3 [pid 5062] <... ioctl resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8983 attached [pid 8978] <... mount resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5062] close(3 [pid 8983] set_robust_list(0x55555745a660, 24 [pid 8978] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... close resumed>) = 0 [pid 8983] <... set_robust_list resumed>) = 0 [pid 8978] <... openat resumed>) = 3 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8983 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8983] chdir("./388" [pid 8978] chdir("./file0" [pid 8983] <... chdir resumed>) = 0 [pid 8979] <... mount resumed>) = 0 [pid 8978] <... chdir resumed>) = 0 [pid 8983] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8979] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8978] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8983] <... prctl resumed>) = 0 [pid 8979] <... openat resumed>) = 3 [pid 8978] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8983] setpgid(0, 0 [pid 8979] chdir("./file0" [pid 8978] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8983] <... setpgid resumed>) = 0 [pid 8979] <... chdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 8983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 8984 attached ) = 3 [pid 8979] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8984 [pid 8984] set_robust_list(0x55555745a660, 24 [pid 8979] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8984] <... set_robust_list resumed>) = 0 [pid 8983] write(3, "1000", 4 [pid 8979] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] newfstatat(AT_FDCWD, "./392/file0", [pid 8984] chdir("./387" [pid 8983] <... write resumed>) = 4 [pid 8984] <... chdir resumed>) = 0 [pid 8983] close(3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8984] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8983] <... close resumed>) = 0 [pid 8984] <... prctl resumed>) = 0 [pid 8983] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8983] <... symlink resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./392/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8984] setpgid(0, 0 [pid 8978] <... open resumed>) = 4 [pid 5064] <... openat resumed>) = 4 [pid 8984] <... setpgid resumed>) = 0 [pid 8983] memfd_create("syzkaller", 0 [pid 8978] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [ 346.090583][ T8981] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 346.102233][ T8982] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] newfstatat(4, "", [pid 8983] <... memfd_create resumed>) = 3 [pid 8978] <... open resumed>) = 5 [pid 8984] <... openat resumed>) = 3 [pid 8984] write(3, "1000", 4 [pid 8983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8984] <... write resumed>) = 4 [pid 8983] <... mmap resumed>) = 0x7f41e0600000 [pid 8984] close(3) = 0 [pid 8984] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8978] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8984] memfd_create("syzkaller", 0 [pid 8978] <... mmap resumed>) = 0x20000000 [pid 5064] getdents64(4, [pid 8984] <... memfd_create resumed>) = 3 [pid 8984] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8978] ftruncate(4, 33587195 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8984] <... mmap resumed>) = 0x7f41e0600000 [pid 8978] <... ftruncate resumed>) = 0 [pid 5064] getdents64(4, [pid 8978] unlink("./bus" [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 8979] <... open resumed>) = 4 [pid 5064] <... close resumed>) = 0 [pid 8979] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] rmdir("./392/file0") = 0 [pid 8979] <... open resumed>) = 5 [pid 5064] getdents64(3, [pid 8979] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 8979] <... mmap resumed>) = 0x20000000 [pid 5064] <... close resumed>) = 0 [pid 8979] ftruncate(4, 33587195) = 0 [pid 8978] <... unlink resumed>) = 0 [pid 5064] rmdir("./392" [pid 8978] sendfile(-1, -1, NULL, 281474978811909 [pid 8979] unlink("./bus" [pid 8978] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] <... rmdir resumed>) = 0 [pid 8983] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8979] <... unlink resumed>) = 0 [pid 8978] exit_group(0 [pid 5064] mkdir("./393", 0777 [pid 8979] sendfile(-1, -1, NULL, 281474978811909 [pid 8978] <... exit_group resumed>) = ? [pid 8979] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8979] exit_group(0) = ? [pid 8978] +++ exited with 0 +++ [pid 5064] <... mkdir resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8978, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./393", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 8984] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8979] +++ exited with 0 +++ [pid 5061] getdents64(3, [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8979, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./393/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./386", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(AT_FDCWD, "./393/binderfs", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] unlink("./393/binderfs" [pid 5065] <... openat resumed>) = 3 [pid 5061] <... unlink resumed>) = 0 [pid 5065] newfstatat(3, "", [pid 5061] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 5061] <... umount2 resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./386/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./386/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./386/binderfs") = 0 [pid 5065] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./393/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./393/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8983] <... write resumed>) = 2097152 [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./393/file0") = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./393" [pid 5065] <... umount2 resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8984] <... write resumed>) = 2097152 [pid 5061] mkdir("./394", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5065] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./386/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./386/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8983] munmap(0x7f41e0600000, 138412032 [pid 5065] <... openat resumed>) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./386/file0" [pid 8983] <... munmap resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 8983] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8983] ioctl(4, LOOP_SET_FD, 3 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8984] munmap(0x7f41e0600000, 138412032 [pid 8983] <... ioctl resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 8983] close(3 [pid 5065] close(3 [pid 8983] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] close(3 [pid 5065] rmdir("./386" [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 8985 attached [pid 8984] <... munmap resumed>) = 0 [pid 5065] mkdir("./387", 0777 [pid 8985] set_robust_list(0x55555745a660, 24 [pid 8984] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8983] close(4 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8985 [pid 8985] <... set_robust_list resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8985] chdir("./393" [pid 8983] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 8985] <... chdir resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8985] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8984] <... openat resumed>) = 4 [pid 8983] mkdir("./file0", 0777 [pid 8985] <... prctl resumed>) = 0 [pid 8984] ioctl(4, LOOP_SET_FD, 3 [pid 8985] setpgid(0, 0) = 0 [pid 8985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8983] <... mkdir resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8983] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8986 attached [pid 8985] <... openat resumed>) = 3 [pid 8986] set_robust_list(0x55555745a660, 24) = 0 [pid 8986] chdir("./394") = 0 [pid 8986] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8986] setpgid(0, 0) = 0 [pid 8985] write(3, "1000", 4 [pid 8986] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8985] <... write resumed>) = 4 [pid 8985] close(3 [pid 8986] <... openat resumed>) = 3 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8986 [pid 8986] write(3, "1000", 4) = 4 [pid 8986] close(3) = 0 [pid 8986] symlink("/dev/binderfs", "./binderfs" [pid 8984] <... ioctl resumed>) = 0 [pid 8986] <... symlink resumed>) = 0 [pid 8985] <... close resumed>) = 0 [pid 8985] symlink("/dev/binderfs", "./binderfs" [pid 8984] close(3 [pid 8986] memfd_create("syzkaller", 0 [pid 8985] <... symlink resumed>) = 0 [pid 8984] <... close resumed>) = 0 [pid 8986] <... memfd_create resumed>) = 3 [pid 8984] close(4 [pid 8986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8984] <... close resumed>) = 0 [pid 8986] <... mmap resumed>) = 0x7f41e0600000 [pid 8985] memfd_create("syzkaller", 0 [pid 8984] mkdir("./file0", 0777 [pid 8985] <... memfd_create resumed>) = 3 [ 346.294388][ T8983] loop2: detected capacity change from 0 to 4096 [ 346.329437][ T8984] loop1: detected capacity change from 0 to 4096 [pid 8985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8984] <... mkdir resumed>) = 0 [pid 8984] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8983] <... mount resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 8983] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 346.402074][ T8987] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8983] chdir("./file0" [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8988 ./strace-static-x86_64: Process 8988 attached [pid 8986] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8983] <... chdir resumed>) = 0 [pid 8983] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8988] set_robust_list(0x55555745a660, 24 [pid 8983] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8988] <... set_robust_list resumed>) = 0 [pid 8985] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8988] chdir("./387") = 0 [pid 8988] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8984] <... mount resumed>) = 0 [pid 8988] <... prctl resumed>) = 0 [pid 8988] setpgid(0, 0) = 0 [pid 8984] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8984] chdir("./file0" [pid 8983] <... open resumed>) = 4 [pid 8984] <... chdir resumed>) = 0 [pid 8983] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8984] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8984] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8988] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8983] <... open resumed>) = 5 [pid 8983] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8988] <... openat resumed>) = 3 [pid 8983] <... mmap resumed>) = 0x20000000 [pid 8988] write(3, "1000", 4 [pid 8983] ftruncate(4, 33587195 [pid 8988] <... write resumed>) = 4 [pid 8988] close(3 [pid 8985] <... write resumed>) = 2097152 [pid 8988] <... close resumed>) = 0 [ 346.449567][ T8989] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8988] symlink("/dev/binderfs", "./binderfs" [pid 8985] munmap(0x7f41e0600000, 138412032 [pid 8988] <... symlink resumed>) = 0 [pid 8984] <... open resumed>) = 4 [pid 8983] <... ftruncate resumed>) = 0 [pid 8984] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8984] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8983] unlink("./bus" [pid 8988] memfd_create("syzkaller", 0 [pid 8984] <... mmap resumed>) = 0x20000000 [pid 8984] ftruncate(4, 33587195) = 0 [pid 8984] unlink("./bus" [pid 8988] <... memfd_create resumed>) = 3 [pid 8986] <... write resumed>) = 2097152 [pid 8985] <... munmap resumed>) = 0 [pid 8984] <... unlink resumed>) = 0 [pid 8983] <... unlink resumed>) = 0 [pid 8988] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8986] munmap(0x7f41e0600000, 138412032 [pid 8985] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8984] sendfile(-1, -1, NULL, 281474978811909 [pid 8983] sendfile(-1, -1, NULL, 281474978811909 [pid 8988] <... mmap resumed>) = 0x7f41e0600000 [pid 8986] <... munmap resumed>) = 0 [pid 8985] <... openat resumed>) = 4 [pid 8984] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8983] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8984] exit_group(0) = ? [pid 8985] ioctl(4, LOOP_SET_FD, 3 [pid 8983] exit_group(0 [pid 8986] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8983] <... exit_group resumed>) = ? [pid 8986] <... openat resumed>) = 4 [pid 8986] ioctl(4, LOOP_SET_FD, 3 [pid 8984] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8984, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5062] umount2("./387", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 8988] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8983] +++ exited with 0 +++ [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./387/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./387/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8985] <... ioctl resumed>) = 0 [pid 5062] unlink("./387/binderfs" [pid 8985] close(3 [pid 5062] <... unlink resumed>) = 0 [pid 8985] <... close resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8983, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5062] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8985] close(4) = 0 [pid 8985] mkdir("./file0", 0777) = 0 [pid 8985] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] umount2("./388", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8986] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8986] close(3 [pid 5063] openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8986] <... close resumed>) = 0 [pid 8986] close(4) = 0 [pid 8986] mkdir("./file0", 0777 [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", [pid 8986] <... mkdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8986] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./388/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 346.558938][ T8985] loop3: detected capacity change from 0 to 4096 [ 346.576907][ T8986] loop0: detected capacity change from 0 to 4096 [pid 8988] <... write resumed>) = 2097152 [pid 5063] newfstatat(AT_FDCWD, "./388/binderfs", [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./387/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8988] munmap(0x7f41e0600000, 138412032 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./387/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] unlink("./388/binderfs" [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8988] <... munmap resumed>) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./387/file0") = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5063] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./387") = 0 [pid 8988] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8988] ioctl(4, LOOP_SET_FD, 3 [pid 5062] mkdir("./388", 0777) = 0 [pid 8986] <... mount resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 8986] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8986] <... openat resumed>) = 3 [pid 8986] chdir("./file0") = 0 [pid 8986] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8986] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 4 [pid 8986] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8986] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8986] ftruncate(4, 33587195 [pid 8985] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8985] chdir("./file0") = 0 [pid 8985] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8985] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8986] <... ftruncate resumed>) = 0 [pid 8986] unlink("./bus" [pid 8988] <... ioctl resumed>) = 0 [pid 8988] close(3 [pid 8986] <... unlink resumed>) = 0 [pid 8988] <... close resumed>) = 0 [pid 8986] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8988] close(4 [pid 8986] exit_group(0) = ? [pid 8988] <... close resumed>) = 0 [pid 8988] mkdir("./file0", 0777) = 0 [pid 8988] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8985] <... open resumed>) = 4 [ 346.652257][ T8990] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 346.667739][ T8988] loop4: detected capacity change from 0 to 4096 [ 346.679770][ T8991] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8985] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5063] newfstatat(AT_FDCWD, "./388/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8985] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8985] ftruncate(4, 33587195 [pid 5061] <... restart_syscall resumed>) = 0 [pid 5061] umount2("./394", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./394/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./394/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./394/binderfs") = 0 [pid 5061] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... ioctl resumed>) = 0 [pid 8988] <... mount resumed>) = 0 [pid 8985] <... ftruncate resumed>) = 0 [pid 5063] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8988] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8988] <... openat resumed>) = 3 [pid 8985] unlink("./bus" [pid 5063] openat(AT_FDCWD, "./388/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8988] chdir("./file0") = 0 [pid 5063] <... openat resumed>) = 4 [pid 5062] close(3 [pid 5061] <... umount2 resumed>) = 0 [pid 8988] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] newfstatat(4, "", [pid 8988] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8988] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8985] <... unlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8985] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8985] exit_group(0) = ? [pid 5063] close(4 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8993 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./388/file0"./strace-static-x86_64: Process 8993 attached ) = 0 [pid 5061] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, [pid 8993] set_robust_list(0x55555745a660, 24) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8993] chdir("./388" [pid 5063] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8993] <... chdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8993] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] rmdir("./388" [pid 8993] <... prctl resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./394/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8993] setpgid(0, 0 [pid 5063] mkdir("./389", 0777 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./394/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8985] +++ exited with 0 +++ [pid 5061] newfstatat(4, "", [pid 8993] <... setpgid resumed>) = 0 [pid 8988] <... open resumed>) = 4 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8985, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5063] <... mkdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] getdents64(4, [pid 8993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [ 346.734792][ T8992] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] <... openat resumed>) = 3 [pid 5061] getdents64(4, [pid 8993] <... openat resumed>) = 3 [pid 8988] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] umount2("./393", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8993] write(3, "1000", 4 [pid 8988] <... open resumed>) = 5 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] close(4 [pid 8993] <... write resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... close resumed>) = 0 [pid 8993] close(3 [pid 8988] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... openat resumed>) = 3 [pid 5061] rmdir("./394/file0" [pid 8993] <... close resumed>) = 0 [pid 8988] <... mmap resumed>) = 0x20000000 [pid 5064] newfstatat(3, "", [pid 8993] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, [pid 5061] getdents64(3, [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] umount2("./393/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] close(3) = 0 [pid 5061] rmdir("./394" [pid 5064] newfstatat(AT_FDCWD, "./393/binderfs", [pid 5061] <... rmdir resumed>) = 0 [pid 8993] <... symlink resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] mkdir("./395", 0777 [pid 8988] ftruncate(4, 33587195 [pid 5064] unlink("./393/binderfs" [pid 5061] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8993] memfd_create("syzkaller", 0 [pid 5064] <... unlink resumed>) = 0 [pid 8993] <... memfd_create resumed>) = 3 [pid 5064] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8988] <... ftruncate resumed>) = 0 [pid 8993] <... mmap resumed>) = 0x7f41e0600000 [pid 8988] unlink("./bus" [pid 5064] <... umount2 resumed>) = 0 [pid 8988] <... unlink resumed>) = 0 [pid 5064] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8988] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] newfstatat(AT_FDCWD, "./393/file0", [pid 8988] exit_group(0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8988] <... exit_group resumed>) = ? [pid 5064] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... ioctl resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./393/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] close(3 [pid 8988] +++ exited with 0 +++ [pid 5064] <... openat resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 5064] newfstatat(4, "", [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8988, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 8994 attached [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] <... restart_syscall resumed>) = 0 [pid 8994] set_robust_list(0x55555745a660, 24 [pid 5064] getdents64(4, [pid 8994] <... set_robust_list resumed>) = 0 [pid 8994] chdir("./389" [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8994 [pid 8994] <... chdir resumed>) = 0 [pid 5065] umount2("./387", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] close(4 [pid 8994] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8994] setpgid(0, 0 [pid 5065] openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8994] <... setpgid resumed>) = 0 [pid 5064] rmdir("./393/file0" [pid 5065] <... openat resumed>) = 3 [pid 8994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] newfstatat(3, "", [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8994] <... openat resumed>) = 3 [pid 8993] <... write resumed>) = 2097152 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 8994] write(3, "1000", 4 [pid 5065] getdents64(3, [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8994] <... write resumed>) = 4 [pid 8994] close(3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8993] munmap(0x7f41e0600000, 138412032 [pid 5064] close(3 [pid 8994] <... close resumed>) = 0 [pid 8994] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... close resumed>) = 0 [pid 8994] <... symlink resumed>) = 0 [pid 5064] rmdir("./393" [pid 5061] close(3 [pid 8994] memfd_create("syzkaller", 0 [pid 8993] <... munmap resumed>) = 0 [pid 5065] umount2("./387/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8994] <... memfd_create resumed>) = 3 [pid 8993] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] mkdir("./394", 0777 [pid 8994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] newfstatat(AT_FDCWD, "./387/binderfs", [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8994] <... mmap resumed>) = 0x7f41e0600000 [pid 8993] <... openat resumed>) = 4 [pid 5065] unlink("./387/binderfs" [pid 5064] <... mkdir resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 8993] ioctl(4, LOOP_SET_FD, 3 [pid 5065] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 8995 attached [pid 8995] set_robust_list(0x55555745a660, 24 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8995 [pid 8995] <... set_robust_list resumed>) = 0 [pid 8995] chdir("./395" [pid 5064] <... openat resumed>) = 3 [pid 8995] <... chdir resumed>) = 0 [pid 8995] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = 0 [pid 8993] <... ioctl resumed>) = 0 [pid 8993] close(3) = 0 [pid 8995] <... prctl resumed>) = 0 [pid 8995] setpgid(0, 0) = 0 [pid 8993] close(4 [pid 8995] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8994] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8993] <... close resumed>) = 0 [pid 5065] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8995] <... openat resumed>) = 3 [pid 8993] mkdir("./file0", 0777) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8995] write(3, "1000", 4 [pid 8993] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] newfstatat(AT_FDCWD, "./387/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8995] <... write resumed>) = 4 [pid 8995] close(3) = 0 [pid 8995] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./387/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, [pid 8995] memfd_create("syzkaller", 0) = 3 [pid 8995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [ 346.942170][ T8993] loop1: detected capacity change from 0 to 4096 [pid 5065] close(4) = 0 [pid 5065] rmdir("./387/file0") = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./387") = 0 [pid 8995] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8993] <... mount resumed>) = 0 [pid 5065] mkdir("./388", 0777 [pid 5064] <... ioctl resumed>) = 0 [pid 8993] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] close(3 [pid 8993] <... openat resumed>) = 3 [pid 8993] chdir("./file0" [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 8993] <... chdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8994] <... write resumed>) = 2097152 [pid 8993] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... openat resumed>) = 3 [pid 8993] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] ioctl(3, LOOP_CLR_FD [ 347.014420][ T8996] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8993] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8997 ./strace-static-x86_64: Process 8997 attached [pid 8994] munmap(0x7f41e0600000, 138412032 [pid 8993] <... open resumed>) = 4 [pid 8997] set_robust_list(0x55555745a660, 24 [pid 8993] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8997] <... set_robust_list resumed>) = 0 [pid 8993] <... open resumed>) = 5 [pid 8997] chdir("./394" [pid 8993] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8995] <... write resumed>) = 2097152 [pid 8997] <... chdir resumed>) = 0 [pid 8994] <... munmap resumed>) = 0 [pid 8993] <... mmap resumed>) = 0x20000000 [pid 8995] munmap(0x7f41e0600000, 138412032 [pid 8997] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8994] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8993] ftruncate(4, 33587195 [pid 8997] <... prctl resumed>) = 0 [pid 8994] <... openat resumed>) = 4 [pid 8997] setpgid(0, 0 [pid 8995] <... munmap resumed>) = 0 [pid 8994] ioctl(4, LOOP_SET_FD, 3 [pid 8997] <... setpgid resumed>) = 0 [pid 8995] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8993] <... ftruncate resumed>) = 0 [pid 8997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8994] <... ioctl resumed>) = 0 [pid 8997] <... openat resumed>) = 3 [pid 8994] close(3 [pid 8997] write(3, "1000", 4 [pid 8994] <... close resumed>) = 0 [pid 8997] <... write resumed>) = 4 [pid 8994] close(4 [pid 8997] close(3 [pid 8994] <... close resumed>) = 0 [pid 8997] <... close resumed>) = 0 [pid 8994] mkdir("./file0", 0777 [pid 8997] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8995] <... openat resumed>) = 4 [pid 8997] memfd_create("syzkaller", 0 [pid 8994] <... mkdir resumed>) = 0 [pid 8997] <... memfd_create resumed>) = 3 [pid 8997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8993] unlink("./bus" [pid 8995] ioctl(4, LOOP_SET_FD, 3 [pid 8994] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8993] <... unlink resumed>) = 0 [pid 8993] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8993] exit_group(0) = ? [pid 8995] <... ioctl resumed>) = 0 [pid 8995] close(3 [pid 8993] +++ exited with 0 +++ [pid 8995] <... close resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8993, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8995] close(4 [pid 5062] umount2("./388", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8995] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8995] mkdir("./file0", 0777 [pid 5062] openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8995] <... mkdir resumed>) = 0 [pid 5062] getdents64(3, [pid 8995] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./388/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./388/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./388/binderfs") = 0 [pid 5062] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... ioctl resumed>) = 0 [ 347.105851][ T8994] loop2: detected capacity change from 0 to 4096 [ 347.125159][ T8995] loop0: detected capacity change from 0 to 4096 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8999 attached [pid 8997] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8999] set_robust_list(0x55555745a660, 24) = 0 [pid 8999] chdir("./388") = 0 [pid 8994] <... mount resumed>) = 0 [pid 8999] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8994] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8999] <... prctl resumed>) = 0 [pid 8994] <... openat resumed>) = 3 [pid 8999] setpgid(0, 0 [pid 8994] chdir("./file0" [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8999 [pid 5062] <... umount2 resumed>) = 0 [pid 8999] <... setpgid resumed>) = 0 [pid 8994] <... chdir resumed>) = 0 [pid 8999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8994] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8999] <... openat resumed>) = 3 [pid 8994] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8999] write(3, "1000", 4) = 4 [pid 8995] <... mount resumed>) = 0 [pid 8995] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8999] close(3 [pid 8995] <... openat resumed>) = 3 [pid 8995] chdir("./file0") = 0 [pid 8999] <... close resumed>) = 0 [pid 5062] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8999] symlink("/dev/binderfs", "./binderfs" [pid 8995] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8995] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] newfstatat(AT_FDCWD, "./388/file0", [pid 8999] <... symlink resumed>) = 0 [pid 8999] memfd_create("syzkaller", 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./388/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8994] <... open resumed>) = 4 [pid 5062] newfstatat(4, "", [pid 8999] <... memfd_create resumed>) = 3 [pid 8994] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8994] <... open resumed>) = 5 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./388/file0" [pid 8994] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8994] <... mmap resumed>) = 0x20000000 [pid 5062] close(3) = 0 [pid 5062] rmdir("./388") = 0 [pid 5062] mkdir("./389", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 347.177704][ T8998] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 347.210870][ T9000] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8994] ftruncate(4, 33587195) = 0 [pid 8995] <... open resumed>) = 4 [pid 8995] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8997] <... write resumed>) = 2097152 [pid 8997] munmap(0x7f41e0600000, 138412032) = 0 [pid 8995] <... open resumed>) = 5 [pid 8994] unlink("./bus" [pid 8997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8999] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8995] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8994] <... unlink resumed>) = 0 [pid 8997] <... openat resumed>) = 4 [pid 8995] <... mmap resumed>) = 0x20000000 [pid 8994] sendfile(-1, -1, NULL, 281474978811909 [pid 8997] ioctl(4, LOOP_SET_FD, 3 [pid 8995] ftruncate(4, 33587195 [pid 8994] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8994] exit_group(0) = ? [pid 8997] <... ioctl resumed>) = 0 [pid 8995] <... ftruncate resumed>) = 0 [pid 8994] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8994, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 8997] close(3 [pid 8995] unlink("./bus" [pid 5063] umount2("./389", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8997] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 8997] close(4 [pid 5063] newfstatat(3, "", [pid 8997] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8997] mkdir("./file0", 0777 [pid 5063] getdents64(3, [pid 8997] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./389/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./389/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./389/binderfs") = 0 [pid 5063] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8997] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8995] <... unlink resumed>) = 0 [pid 8999] <... write resumed>) = 2097152 [pid 8995] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8999] munmap(0x7f41e0600000, 138412032 [pid 8995] exit_group(0) = ? [pid 8999] <... munmap resumed>) = 0 [pid 8999] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 347.283642][ T8997] loop3: detected capacity change from 0 to 4096 [pid 8999] ioctl(4, LOOP_SET_FD, 3 [pid 8995] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8995, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5063] <... umount2 resumed>) = 0 [pid 8999] <... ioctl resumed>) = 0 [pid 8997] <... mount resumed>) = 0 [pid 5063] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... ioctl resumed>) = 0 [pid 5061] umount2("./395", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 3 [pid 5063] newfstatat(AT_FDCWD, "./389/file0", [pid 8997] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] newfstatat(3, "", [pid 5062] close(3 [pid 8999] close(3 [pid 5062] <... close resumed>) = 0 [pid 8999] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8997] <... openat resumed>) = 3 [pid 5061] getdents64(3, [pid 8997] chdir("./file0" [pid 5063] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8999] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8999] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./389/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8999] mkdir("./file0", 0777 [pid 8997] <... chdir resumed>) = 0 [pid 5063] <... openat resumed>) = 4 ./strace-static-x86_64: Process 9002 attached [pid 8999] <... mkdir resumed>) = 0 [pid 5061] umount2("./395/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] newfstatat(4, "", [pid 8997] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 9002 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8997] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] newfstatat(AT_FDCWD, "./395/binderfs", [pid 5063] getdents64(4, [pid 9002] set_robust_list(0x55555745a660, 24 [pid 8999] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9002] <... set_robust_list resumed>) = 0 [pid 5063] getdents64(4, [pid 5061] unlink("./395/binderfs" [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5061] <... unlink resumed>) = 0 [pid 9002] chdir("./389" [pid 5063] <... close resumed>) = 0 [pid 5061] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./389/file0" [pid 9002] <... chdir resumed>) = 0 [pid 9002] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... rmdir resumed>) = 0 [pid 9002] <... prctl resumed>) = 0 [pid 9002] setpgid(0, 0 [pid 5063] getdents64(3, [pid 9002] <... setpgid resumed>) = 0 [pid 9002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9002] <... openat resumed>) = 3 [pid 5063] close(3) = 0 [pid 9002] write(3, "1000", 4 [pid 5063] rmdir("./389" [pid 9002] <... write resumed>) = 4 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./390", 0777 [pid 9002] close(3) = 0 [ 347.340047][ T8999] loop4: detected capacity change from 0 to 4096 [ 347.360536][ T9001] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9002] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 9002] memfd_create("syzkaller", 0 [pid 8999] <... mount resumed>) = 0 [pid 8997] <... open resumed>) = 4 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] <... umount2 resumed>) = 0 [pid 8999] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... openat resumed>) = 3 [pid 5061] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8999] <... openat resumed>) = 3 [pid 8997] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8999] chdir("./file0" [pid 5061] newfstatat(AT_FDCWD, "./395/file0", [pid 8999] <... chdir resumed>) = 0 [pid 9002] <... memfd_create resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8999] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8997] <... open resumed>) = 5 [pid 5061] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8999] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9002] <... mmap resumed>) = 0x7f41e0600000 [pid 8999] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8997] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] openat(AT_FDCWD, "./395/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", [pid 8997] <... mmap resumed>) = 0x20000000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8997] ftruncate(4, 33587195 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8999] <... open resumed>) = 4 [pid 5061] getdents64(4, [pid 8999] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 8999] <... open resumed>) = 5 [pid 8997] <... ftruncate resumed>) = 0 [pid 8999] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... close resumed>) = 0 [pid 8999] <... mmap resumed>) = 0x20000000 [pid 8997] unlink("./bus" [pid 5061] rmdir("./395/file0" [pid 8999] ftruncate(4, 33587195 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./395") = 0 [ 347.423911][ T9003] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] mkdir("./396", 0777) = 0 [pid 8999] <... ftruncate resumed>) = 0 [pid 9002] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8997] <... unlink resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8997] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8999] unlink("./bus" [pid 8997] exit_group(0 [pid 5061] <... openat resumed>) = 3 [pid 8997] <... exit_group resumed>) = ? [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8999] <... unlink resumed>) = 0 [pid 8999] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8999] exit_group(0) = ? [pid 8997] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8997, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5064] umount2("./394", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./394/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./394/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./394/binderfs") = 0 [pid 5064] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 9004 attached , child_tidptr=0x55555745a650) = 9004 [pid 8999] +++ exited with 0 +++ [pid 9004] set_robust_list(0x55555745a660, 24) = 0 [pid 9004] chdir("./390" [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8999, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 9004] <... chdir resumed>) = 0 [pid 5065] umount2("./388", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9004] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9004] setpgid(0, 0 [pid 5065] openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9004] <... setpgid resumed>) = 0 [pid 9004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... openat resumed>) = 3 [pid 9004] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", [pid 9004] write(3, "1000", 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9004] <... write resumed>) = 4 [pid 9004] close(3) = 0 [pid 9004] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./388/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9004] memfd_create("syzkaller", 0 [pid 9002] <... write resumed>) = 2097152 [pid 5064] <... umount2 resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 9004] <... memfd_create resumed>) = 3 [pid 9004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9002] munmap(0x7f41e0600000, 138412032 [pid 5065] newfstatat(AT_FDCWD, "./388/binderfs", [pid 5064] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(3 [pid 9002] <... munmap resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] newfstatat(AT_FDCWD, "./394/file0", [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9002] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] unlink("./388/binderfs" [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9002] <... openat resumed>) = 4 [pid 5064] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 9005 ./strace-static-x86_64: Process 9005 attached [pid 9002] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... unlink resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9005] set_robust_list(0x55555745a660, 24 [pid 9002] <... ioctl resumed>) = 0 [pid 5065] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "./394/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 9005] <... set_robust_list resumed>) = 0 [pid 9002] close(3 [pid 9004] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] newfstatat(4, "", [pid 9005] chdir("./396" [pid 9002] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9005] <... chdir resumed>) = 0 [pid 9002] close(4 [pid 5064] getdents64(4, [pid 9005] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9002] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9005] <... prctl resumed>) = 0 [pid 9002] mkdir("./file0", 0777 [pid 5064] getdents64(4, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] newfstatat(AT_FDCWD, "./388/file0", [pid 5064] close(4 [pid 9005] setpgid(0, 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... close resumed>) = 0 [pid 9005] <... setpgid resumed>) = 0 [pid 5064] rmdir("./394/file0" [pid 9005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9002] <... mkdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 9005] <... openat resumed>) = 3 [pid 9005] write(3, "1000", 4) = 4 [pid 9005] close(3) = 0 [pid 9005] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./388/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", [pid 5064] getdents64(3, [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9005] memfd_create("syzkaller", 0 [pid 9002] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] getdents64(4, [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9005] <... memfd_create resumed>) = 3 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] close(3 [pid 9005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5064] <... close resumed>) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] rmdir("./394" [pid 5065] close(4) = 0 [pid 5065] rmdir("./388/file0" [pid 5064] <... rmdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] mkdir("./395", 0777) = 0 [ 347.589609][ T9002] loop1: detected capacity change from 0 to 4096 [pid 5065] getdents64(3, [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5064] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5065] rmdir("./388") = 0 [pid 5065] mkdir("./389", 0777) = 0 [pid 9002] <... mount resumed>) = 0 [pid 9002] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9002] chdir("./file0") = 0 [pid 9002] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9004] <... write resumed>) = 2097152 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 9004] munmap(0x7f41e0600000, 138412032 [pid 9002] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9004] <... munmap resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 9004] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9004] ioctl(4, LOOP_SET_FD, 3 [pid 9005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9004] <... ioctl resumed>) = 0 [pid 9002] <... open resumed>) = 4 [pid 9004] close(3 [pid 9002] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... ioctl resumed>) = 0 [pid 9002] <... open resumed>) = 5 [pid 9002] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 9004] close(4 [pid 9002] ftruncate(4, 33587195 [pid 9004] <... close resumed>) = 0 [pid 9004] mkdir("./file0", 0777) = 0 [pid 9004] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9002] <... ftruncate resumed>) = 0 [ 347.660402][ T9006] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 347.686170][ T9004] loop2: detected capacity change from 0 to 4096 [pid 9002] unlink("./bus" [pid 5064] close(3 [pid 5065] <... ioctl resumed>) = 0 [pid 9002] <... unlink resumed>) = 0 [pid 9002] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9002] exit_group(0) = ? [pid 9004] <... mount resumed>) = 0 [pid 9004] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... close resumed>) = 0 [pid 9004] <... openat resumed>) = 3 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9004] chdir("./file0") = 0 [pid 9004] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9004] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 9008 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 9009 ./strace-static-x86_64: Process 9009 attached ./strace-static-x86_64: Process 9008 attached [pid 9005] <... write resumed>) = 2097152 [pid 9004] <... open resumed>) = 4 [pid 9002] +++ exited with 0 +++ [pid 9004] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9009] set_robust_list(0x55555745a660, 24 [pid 9008] set_robust_list(0x55555745a660, 24 [pid 9004] <... open resumed>) = 5 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9002, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 9009] <... set_robust_list resumed>) = 0 [pid 9008] <... set_robust_list resumed>) = 0 [pid 9005] munmap(0x7f41e0600000, 138412032 [ 347.748193][ T9007] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9004] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9009] chdir("./389" [pid 9008] chdir("./395" [pid 9005] <... munmap resumed>) = 0 [pid 9004] <... mmap resumed>) = 0x20000000 [pid 5062] umount2("./389", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9009] <... chdir resumed>) = 0 [pid 9009] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] getdents64(3, [pid 9009] <... prctl resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9009] setpgid(0, 0) = 0 [pid 9009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9008] <... chdir resumed>) = 0 [pid 9009] <... openat resumed>) = 3 [pid 9005] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9004] ftruncate(4, 33587195 [pid 5062] umount2("./389/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9009] write(3, "1000", 4 [pid 9008] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9005] <... openat resumed>) = 4 [pid 9008] <... prctl resumed>) = 0 [pid 9005] ioctl(4, LOOP_SET_FD, 3 [pid 9009] <... write resumed>) = 4 [pid 9009] close(3) = 0 [pid 9009] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./389/binderfs", [pid 9009] memfd_create("syzkaller", 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9005] <... ioctl resumed>) = 0 [pid 9008] setpgid(0, 0 [pid 5062] unlink("./389/binderfs" [pid 9009] <... memfd_create resumed>) = 3 [pid 9008] <... setpgid resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 9009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9005] close(3 [pid 9004] <... ftruncate resumed>) = 0 [pid 9009] <... mmap resumed>) = 0x7f41e0600000 [pid 9008] <... openat resumed>) = 3 [pid 9005] <... close resumed>) = 0 [pid 9004] unlink("./bus" [pid 5062] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9008] write(3, "1000", 4 [pid 9005] close(4 [pid 9008] <... write resumed>) = 4 [pid 9008] close(3 [pid 9005] <... close resumed>) = 0 [pid 9004] <... unlink resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 9008] <... close resumed>) = 0 [pid 9005] mkdir("./file0", 0777 [pid 9004] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9004] exit_group(0 [pid 9008] symlink("/dev/binderfs", "./binderfs" [pid 9009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9004] <... exit_group resumed>) = ? [pid 9008] <... symlink resumed>) = 0 [pid 9005] <... mkdir resumed>) = 0 [pid 9008] memfd_create("syzkaller", 0 [pid 9005] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9008] <... memfd_create resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5062] newfstatat(AT_FDCWD, "./389/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 347.821149][ T9005] loop0: detected capacity change from 0 to 4096 [pid 5062] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./389/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 9004] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9004, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./389/file0") = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5063] umount2("./390", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./389" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] mkdir("./390", 0777 [pid 9005] <... mount resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... mkdir resumed>) = 0 [pid 9005] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9005] chdir("./file0") = 0 [pid 5062] <... openat resumed>) = 3 [pid 9005] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] newfstatat(3, "", [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9005] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./390/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9005] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./390/binderfs", [pid 9009] <... write resumed>) = 2097152 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./390/binderfs") = 0 [pid 5063] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9009] munmap(0x7f41e0600000, 138412032) = 0 [pid 9008] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9009] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9005] <... open resumed>) = 4 [pid 5063] <... umount2 resumed>) = 0 [ 347.901936][ T9010] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9009] ioctl(4, LOOP_SET_FD, 3 [pid 9005] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9009] <... ioctl resumed>) = 0 [pid 5063] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./390/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./390/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 9009] close(3 [pid 5063] newfstatat(4, "", [pid 9009] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9009] close(4 [pid 9005] <... open resumed>) = 5 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 9009] <... close resumed>) = 0 [pid 9008] <... write resumed>) = 2097152 [pid 9005] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] getdents64(4, [pid 5062] <... ioctl resumed>) = 0 [pid 9009] mkdir("./file0", 0777 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./390/file0" [pid 5062] close(3) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9009] <... mkdir resumed>) = 0 [pid 9008] munmap(0x7f41e0600000, 138412032 [pid 9005] <... mmap resumed>) = 0x20000000 [pid 5063] getdents64(3, ./strace-static-x86_64: Process 9011 attached [pid 9009] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9011] set_robust_list(0x55555745a660, 24 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 9011 [pid 9011] <... set_robust_list resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./390" [ 347.952049][ T9009] loop4: detected capacity change from 0 to 4096 [pid 9011] chdir("./390" [pid 5063] <... rmdir resumed>) = 0 [pid 9011] <... chdir resumed>) = 0 [pid 9008] <... munmap resumed>) = 0 [pid 9005] ftruncate(4, 33587195 [pid 5063] mkdir("./391", 0777 [pid 9011] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 9008] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9011] setpgid(0, 0 [pid 9005] <... ftruncate resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9011] <... setpgid resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 9011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] ioctl(3, LOOP_CLR_FD [pid 9011] <... openat resumed>) = 3 [pid 9011] write(3, "1000", 4) = 4 [pid 9009] <... mount resumed>) = 0 [pid 9008] <... openat resumed>) = 4 [pid 9005] unlink("./bus" [pid 9011] close(3 [pid 9009] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9011] <... close resumed>) = 0 [pid 9009] <... openat resumed>) = 3 [pid 9008] ioctl(4, LOOP_SET_FD, 3 [pid 9011] symlink("/dev/binderfs", "./binderfs" [pid 9009] chdir("./file0") = 0 [pid 9009] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9011] <... symlink resumed>) = 0 [pid 9011] memfd_create("syzkaller", 0 [pid 9009] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9011] <... memfd_create resumed>) = 3 [pid 9011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9009] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9011] <... mmap resumed>) = 0x7f41e0600000 [pid 9005] <... unlink resumed>) = 0 [pid 9005] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9005] exit_group(0) = ? [pid 9008] <... ioctl resumed>) = 0 [pid 9008] close(3) = 0 [pid 9008] close(4) = 0 [pid 9008] mkdir("./file0", 0777 [pid 9005] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9005, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 9008] <... mkdir resumed>) = 0 [pid 5061] <... restart_syscall resumed>) = 0 [pid 9008] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] umount2("./396", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9009] <... open resumed>) = 4 [pid 5061] umount2("./396/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./396/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 348.017699][ T9012] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 348.047659][ T9008] loop3: detected capacity change from 0 to 4096 [pid 5061] unlink("./396/binderfs") = 0 [pid 9009] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 9008] <... mount resumed>) = 0 [pid 5061] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9008] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9008] chdir("./file0") = 0 [pid 9008] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9008] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9009] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 4 [pid 9008] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9009] ftruncate(4, 33587195 [pid 9008] <... open resumed>) = 5 [pid 9008] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9009] <... ftruncate resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [ 348.095868][ T9013] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9008] <... mmap resumed>) = 0x20000000 [pid 9009] unlink("./bus" [pid 5063] close(3 [pid 5061] <... umount2 resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 9008] ftruncate(4, 33587195 [pid 5061] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9009] <... unlink resumed>) = 0 [pid 9008] <... ftruncate resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 9014 attached [pid 9009] sendfile(-1, -1, NULL, 281474978811909 [pid 9008] unlink("./bus" [pid 5061] newfstatat(AT_FDCWD, "./396/file0", [pid 9014] set_robust_list(0x55555745a660, 24 [pid 9009] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 9014 [pid 9014] <... set_robust_list resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9014] chdir("./391" [pid 9011] <... write resumed>) = 2097152 [pid 9009] exit_group(0 [pid 9008] <... unlink resumed>) = 0 [pid 5061] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9014] <... chdir resumed>) = 0 [pid 9008] sendfile(-1, -1, NULL, 281474978811909 [pid 9014] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9011] munmap(0x7f41e0600000, 138412032 [pid 9008] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9014] <... prctl resumed>) = 0 [pid 9009] <... exit_group resumed>) = ? [pid 9008] exit_group(0 [pid 5061] openat(AT_FDCWD, "./396/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9014] setpgid(0, 0 [pid 9008] <... exit_group resumed>) = ? [pid 9014] <... setpgid resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 9011] <... munmap resumed>) = 0 [pid 9014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9014] write(3, "1000", 4 [pid 9011] <... openat resumed>) = 4 [pid 9009] +++ exited with 0 +++ [pid 9008] +++ exited with 0 +++ [pid 9011] ioctl(4, LOOP_SET_FD, 3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9009, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9008, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5061] getdents64(4, [pid 9014] <... write resumed>) = 4 [pid 9014] close(3) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 9014] symlink("/dev/binderfs", "./binderfs" [pid 9011] <... ioctl resumed>) = 0 [pid 5065] umount2("./389", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 9011] close(3 [pid 9014] <... symlink resumed>) = 0 [pid 9011] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 9011] close(4 [pid 5061] close(4 [pid 5065] openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5061] rmdir("./396/file0" [pid 9014] memfd_create("syzkaller", 0 [pid 9011] <... close resumed>) = 0 [pid 5065] newfstatat(3, "", [pid 5061] <... rmdir resumed>) = 0 [pid 5064] umount2("./395", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9014] <... memfd_create resumed>) = 3 [pid 9011] mkdir("./file0", 0777 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] getdents64(3, [pid 5064] openat(AT_FDCWD, "./395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(3, [pid 9014] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] umount2("./389/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./389/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./389/binderfs") = 0 [pid 9011] <... mkdir resumed>) = 0 [pid 5065] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(3 [pid 5064] <... openat resumed>) = 3 [pid 9011] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] newfstatat(3, "", [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./396" [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./397", 0777 [pid 5064] getdents64(3, [pid 5061] <... mkdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5064] umount2("./395/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./395/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./395/binderfs") = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./389/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./389/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 348.201069][ T9011] loop1: detected capacity change from 0 to 4096 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./389/file0" [pid 9014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9011] <... mount resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 9011] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5065] getdents64(3, [pid 5064] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9011] chdir("./file0" [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9011] <... chdir resumed>) = 0 [pid 5065] close(3 [pid 5064] newfstatat(AT_FDCWD, "./395/file0", [pid 9011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./389" [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9011] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... rmdir resumed>) = 0 [pid 9011] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] mkdir("./390", 0777 [pid 5064] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] openat(AT_FDCWD, "./395/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] <... openat resumed>) = 3 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] getdents64(4, [pid 5061] <... ioctl resumed>) = 0 [pid 9014] <... write resumed>) = 2097152 [pid 9011] <... open resumed>) = 4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 9014] munmap(0x7f41e0600000, 138412032 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [ 348.267093][ T9015] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] close(4 [pid 9014] <... munmap resumed>) = 0 [pid 9011] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... close resumed>) = 0 [pid 5061] close(3 [pid 9014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9011] <... open resumed>) = 5 [pid 5064] rmdir("./395/file0" [pid 5061] <... close resumed>) = 0 [pid 9014] <... openat resumed>) = 4 [pid 9011] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... rmdir resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9014] ioctl(4, LOOP_SET_FD, 3 [pid 9011] <... mmap resumed>) = 0x20000000 [pid 5064] getdents64(3, ./strace-static-x86_64: Process 9016 attached [pid 9016] set_robust_list(0x55555745a660, 24 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 9016 [pid 5064] close(3) = 0 [pid 9016] <... set_robust_list resumed>) = 0 [pid 5064] rmdir("./395" [pid 9016] chdir("./397" [pid 5064] <... rmdir resumed>) = 0 [pid 9016] <... chdir resumed>) = 0 [pid 9014] <... ioctl resumed>) = 0 [pid 9011] ftruncate(4, 33587195 [pid 5064] mkdir("./396", 0777 [pid 9016] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9014] close(3 [pid 9016] setpgid(0, 0 [pid 9014] <... close resumed>) = 0 [pid 9016] <... setpgid resumed>) = 0 [pid 9014] close(4 [pid 9016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9014] <... close resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 9014] mkdir("./file0", 0777 [pid 9011] <... ftruncate resumed>) = 0 [pid 9016] <... openat resumed>) = 3 [pid 9014] <... mkdir resumed>) = 0 [pid 9011] unlink("./bus" [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 9016] write(3, "1000", 4 [pid 9014] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9016] <... write resumed>) = 4 [pid 9016] close(3) = 0 [pid 9016] symlink("/dev/binderfs", "./binderfs" [pid 9011] <... unlink resumed>) = 0 [pid 9016] <... symlink resumed>) = 0 [pid 9011] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9011] exit_group(0 [pid 9016] memfd_create("syzkaller", 0 [pid 9011] <... exit_group resumed>) = ? [pid 9016] <... memfd_create resumed>) = 3 [pid 9016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [ 348.344250][ T9014] loop2: detected capacity change from 0 to 4096 [pid 5065] <... ioctl resumed>) = 0 [pid 9011] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9011, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5062] umount2("./390", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] close(3 [pid 5062] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 9018 attached [pid 9018] set_robust_list(0x55555745a660, 24 [pid 9016] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] getdents64(3, [pid 9018] <... set_robust_list resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./390/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 9018 [pid 5062] newfstatat(AT_FDCWD, "./390/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./390/binderfs" [pid 9018] chdir("./390" [pid 5062] <... unlink resumed>) = 0 [pid 9018] <... chdir resumed>) = 0 [pid 9014] <... mount resumed>) = 0 [pid 5062] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9018] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9014] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9018] <... prctl resumed>) = 0 [pid 9018] setpgid(0, 0 [pid 9014] <... openat resumed>) = 3 [pid 9018] <... setpgid resumed>) = 0 [pid 9014] chdir("./file0" [pid 9018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9014] <... chdir resumed>) = 0 [pid 9018] <... openat resumed>) = 3 [pid 9014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9018] write(3, "1000", 4) = 4 [pid 9014] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9018] close(3 [pid 9014] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9018] <... close resumed>) = 0 [ 348.425593][ T9017] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9018] symlink("/dev/binderfs", "./binderfs" [pid 9016] <... write resumed>) = 2097152 [pid 9014] <... open resumed>) = 4 [pid 9018] <... symlink resumed>) = 0 [pid 9016] munmap(0x7f41e0600000, 138412032 [pid 9014] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... ioctl resumed>) = 0 [pid 9018] memfd_create("syzkaller", 0 [pid 9014] <... open resumed>) = 5 [pid 9016] <... munmap resumed>) = 0 [pid 9018] <... memfd_create resumed>) = 3 [pid 9014] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] close(3 [pid 9018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9016] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9014] <... mmap resumed>) = 0x20000000 [pid 9018] <... mmap resumed>) = 0x7f41e0600000 [pid 9016] <... openat resumed>) = 4 [pid 9016] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 9014] ftruncate(4, 33587195 [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 9019 attached [pid 9016] close(3 [pid 9014] <... ftruncate resumed>) = 0 [pid 9019] set_robust_list(0x55555745a660, 24 [pid 9016] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9016] close(4 [pid 9014] unlink("./bus" [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 9019 [pid 9016] <... close resumed>) = 0 [pid 9019] <... set_robust_list resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./390/file0", [pid 9019] chdir("./396" [pid 9016] mkdir("./file0", 0777 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9019] <... chdir resumed>) = 0 [pid 9016] <... mkdir resumed>) = 0 [pid 9014] <... unlink resumed>) = 0 [pid 9016] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9014] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9019] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9014] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9019] <... prctl resumed>) = 0 [pid 9019] setpgid(0, 0) = 0 [pid 5062] openat(AT_FDCWD, "./390/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9014] exit_group(0) = ? [pid 9019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9019] <... openat resumed>) = 3 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 9019] write(3, "1000", 4) = 4 [pid 9019] close(3) = 0 [pid 9019] symlink("/dev/binderfs", "./binderfs" [pid 5062] getdents64(4, [pid 9019] <... symlink resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./390/file0" [pid 9019] memfd_create("syzkaller", 0) = 3 [pid 9014] +++ exited with 0 +++ [ 348.498559][ T9016] loop0: detected capacity change from 0 to 4096 [pid 5062] <... rmdir resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9014, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5063] umount2("./391", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] getdents64(3, [pid 9019] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] getdents64(3, [pid 5063] umount2("./391/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9018] <... write resumed>) = 2097152 [pid 5063] newfstatat(AT_FDCWD, "./391/binderfs", [pid 5062] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... close resumed>) = 0 [pid 9018] munmap(0x7f41e0600000, 138412032 [pid 5063] unlink("./391/binderfs" [pid 5062] rmdir("./390" [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 9018] <... munmap resumed>) = 0 [pid 5062] mkdir("./391", 0777 [pid 9018] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9016] <... mount resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 9016] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9019] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9018] <... openat resumed>) = 4 [pid 9016] <... openat resumed>) = 3 [pid 9018] ioctl(4, LOOP_SET_FD, 3 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 9016] chdir("./file0" [pid 9018] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 9016] <... chdir resumed>) = 0 [pid 5063] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9018] close(3 [pid 9016] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9018] <... close resumed>) = 0 [pid 9016] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9018] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 348.578631][ T9020] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 348.596003][ T9018] loop4: detected capacity change from 0 to 4096 [pid 5063] newfstatat(AT_FDCWD, "./391/file0", [pid 9019] <... write resumed>) = 2097152 [pid 9018] <... close resumed>) = 0 [pid 9016] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9018] mkdir("./file0", 0777) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 9018] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9019] munmap(0x7f41e0600000, 138412032 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9019] <... munmap resumed>) = 0 [pid 9016] <... open resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] close(3 [pid 9016] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] openat(AT_FDCWD, "./391/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 9021 attached [pid 5063] newfstatat(4, "", [pid 9021] set_robust_list(0x55555745a660, 24 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9016] <... open resumed>) = 5 [pid 5063] getdents64(4, [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 9021 [pid 9019] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9021] <... set_robust_list resumed>) = 0 [pid 9019] <... openat resumed>) = 4 [pid 9016] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 9021] chdir("./391" [pid 5063] <... close resumed>) = 0 [pid 9021] <... chdir resumed>) = 0 [pid 9019] ioctl(4, LOOP_SET_FD, 3 [pid 9021] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9021] setpgid(0, 0) = 0 [pid 9021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9016] <... mmap resumed>) = 0x20000000 [pid 9021] <... openat resumed>) = 3 [pid 9021] write(3, "1000", 4 [pid 9019] <... ioctl resumed>) = 0 [pid 9016] ftruncate(4, 33587195 [pid 5063] rmdir("./391/file0" [pid 9021] <... write resumed>) = 4 [pid 5063] <... rmdir resumed>) = 0 [pid 9021] close(3) = 0 [pid 9021] symlink("/dev/binderfs", "./binderfs" [pid 9019] close(3 [pid 9016] <... ftruncate resumed>) = 0 [pid 5063] getdents64(3, [pid 9021] <... symlink resumed>) = 0 [pid 9016] unlink("./bus" [pid 9021] memfd_create("syzkaller", 0) = 3 [pid 9019] <... close resumed>) = 0 [pid 9018] <... mount resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9019] close(4 [pid 9021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9019] <... close resumed>) = 0 [pid 9018] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9016] <... unlink resumed>) = 0 [pid 5063] close(3 [pid 9019] mkdir("./file0", 0777 [pid 9018] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 9021] <... mmap resumed>) = 0x7f41e0600000 [pid 9019] <... mkdir resumed>) = 0 [pid 9018] chdir("./file0" [pid 9016] sendfile(-1, -1, NULL, 281474978811909 [pid 9019] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] rmdir("./391" [pid 9018] <... chdir resumed>) = 0 [pid 9016] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5063] <... rmdir resumed>) = 0 [pid 9018] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9016] exit_group(0 [pid 5063] mkdir("./392", 0777 [pid 9018] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9016] <... exit_group resumed>) = ? [pid 9018] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 9016] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9016, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 348.676868][ T9019] loop3: detected capacity change from 0 to 4096 [ 348.694788][ T9022] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] umount2("./397", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9018] <... open resumed>) = 4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./397", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9018] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./397/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9018] <... open resumed>) = 5 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./397/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./397/binderfs") = 0 [pid 5061] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9018] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] <... umount2 resumed>) = 0 [pid 9018] <... mmap resumed>) = 0x20000000 [pid 9019] <... mount resumed>) = 0 [pid 9018] ftruncate(4, 33587195 [pid 5061] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9019] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9019] <... openat resumed>) = 3 [pid 5061] newfstatat(AT_FDCWD, "./397/file0", [pid 9019] chdir("./file0" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9019] <... chdir resumed>) = 0 [pid 5061] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9019] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9019] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] openat(AT_FDCWD, "./397/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9019] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9018] <... ftruncate resumed>) = 0 [pid 5061] getdents64(4, [pid 9018] unlink("./bus" [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 9021] <... write resumed>) = 2097152 [pid 9019] <... open resumed>) = 4 [pid 9018] <... unlink resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./397/file0" [pid 9021] munmap(0x7f41e0600000, 138412032 [pid 9019] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9018] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] <... rmdir resumed>) = 0 [pid 9021] <... munmap resumed>) = 0 [pid 9018] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] getdents64(3, [pid 9019] <... open resumed>) = 5 [pid 9019] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9019] <... mmap resumed>) = 0x20000000 [pid 5061] close(3 [pid 9018] exit_group(0 [pid 5061] <... close resumed>) = 0 [pid 9018] <... exit_group resumed>) = ? [pid 5061] rmdir("./397" [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [ 348.780739][ T9023] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] close(3 [pid 9019] ftruncate(4, 33587195 [pid 5061] mkdir("./398", 0777 [pid 9021] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5063] <... close resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 9021] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 9019] <... ftruncate resumed>) = 0 ./strace-static-x86_64: Process 9024 attached [pid 9021] close(3 [pid 9019] unlink("./bus" [pid 9018] +++ exited with 0 +++ [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 9024 [pid 9024] set_robust_list(0x55555745a660, 24) = 0 [pid 9024] chdir("./392" [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9018, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 9024] <... chdir resumed>) = 0 [pid 5065] umount2("./390", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9024] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9024] setpgid(0, 0) = 0 [pid 5065] openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9021] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 9024] <... openat resumed>) = 3 [pid 9021] close(4 [pid 5065] newfstatat(3, "", [pid 9024] write(3, "1000", 4 [pid 9021] <... close resumed>) = 0 [pid 9019] <... unlink resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9021] mkdir("./file0", 0777 [pid 9019] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] getdents64(3, [pid 9024] <... write resumed>) = 4 [pid 9021] <... mkdir resumed>) = 0 [pid 9019] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9024] close(3 [pid 5065] umount2("./390/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9024] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9024] symlink("/dev/binderfs", "./binderfs" [pid 9019] exit_group(0 [pid 5065] newfstatat(AT_FDCWD, "./390/binderfs", [pid 9024] <... symlink resumed>) = 0 [pid 9021] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9019] <... exit_group resumed>) = ? [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9024] memfd_create("syzkaller", 0 [pid 5065] unlink("./390/binderfs") = 0 [pid 9024] <... memfd_create resumed>) = 3 [pid 5065] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 9019] +++ exited with 0 +++ [ 348.850755][ T9021] loop1: detected capacity change from 0 to 4096 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9019, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 9024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./396", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./390/file0", [pid 5064] openat(AT_FDCWD, "./396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5065] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] newfstatat(3, "", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] openat(AT_FDCWD, "./390/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] <... openat resumed>) = 4 [pid 5065] newfstatat(4, "", [pid 5064] umount2("./396/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(4, [pid 5064] newfstatat(AT_FDCWD, "./396/binderfs", [pid 9021] <... mount resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9021] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] getdents64(4, [pid 5064] unlink("./396/binderfs" [pid 9021] <... openat resumed>) = 3 [pid 5064] <... unlink resumed>) = 0 [pid 9021] chdir("./file0" [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] close(4 [pid 9021] <... chdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./390/file0" [pid 5064] <... umount2 resumed>) = 0 [pid 9021] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9021] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./390") = 0 [ 348.926408][ T9025] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] mkdir("./391", 0777 [pid 9024] <... write resumed>) = 2097152 [pid 9021] <... open resumed>) = 4 [pid 5064] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... ioctl resumed>) = 0 [pid 9021] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] close(3 [pid 9024] munmap(0x7f41e0600000, 138412032 [pid 9021] <... open resumed>) = 5 [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... close resumed>) = 0 [pid 9024] <... munmap resumed>) = 0 [pid 9021] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] newfstatat(AT_FDCWD, "./396/file0", [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9021] <... mmap resumed>) = 0x20000000 [pid 5065] <... openat resumed>) = 3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 9026 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9024] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9021] ftruncate(4, 33587195 [ 348.987500][ T28] kauditd_printk_skb: 104 callbacks suppressed [ 348.987516][ T28] audit: type=1800 audit(1708423501.510:5909): pid=9021 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 349.014227][ T28] audit: type=1800 audit(1708423501.520:5910): pid=9021 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [pid 5064] openat(AT_FDCWD, "./396/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9024] <... openat resumed>) = 4 [pid 5064] <... openat resumed>) = 4 [pid 9024] ioctl(4, LOOP_SET_FD, 3 [pid 5064] newfstatat(4, "", ./strace-static-x86_64: Process 9026 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./396/file0") = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 9026] set_robust_list(0x55555745a660, 24 [pid 5064] rmdir("./396" [pid 9021] <... ftruncate resumed>) = 0 [pid 9026] <... set_robust_list resumed>) = 0 [pid 9024] <... ioctl resumed>) = 0 [pid 9021] unlink("./bus" [pid 5064] <... rmdir resumed>) = 0 [pid 9026] chdir("./398" [pid 9024] close(3 [pid 9026] <... chdir resumed>) = 0 [pid 9024] <... close resumed>) = 0 [pid 9026] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9024] close(4 [pid 9026] <... prctl resumed>) = 0 [pid 9024] <... close resumed>) = 0 [pid 5064] mkdir("./397", 0777 [pid 9026] setpgid(0, 0 [pid 9024] mkdir("./file0", 0777 [pid 5064] <... mkdir resumed>) = 0 [pid 9026] <... setpgid resumed>) = 0 [pid 9021] <... unlink resumed>) = 0 [pid 9021] sendfile(-1, -1, NULL, 281474978811909 [pid 9026] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9024] <... mkdir resumed>) = 0 [pid 9021] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [ 349.033135][ T9024] loop2: detected capacity change from 0 to 4096 [ 349.035364][ T28] audit: type=1800 audit(1708423501.540:5911): pid=9021 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [pid 9026] <... openat resumed>) = 3 [pid 9024] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9021] exit_group(0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9026] write(3, "1000", 4 [pid 9021] <... exit_group resumed>) = ? [pid 9026] <... write resumed>) = 4 [pid 9026] close(3) = 0 [pid 5064] <... openat resumed>) = 3 [pid 9026] symlink("/dev/binderfs", "./binderfs" [pid 5064] ioctl(3, LOOP_CLR_FD [pid 9026] <... symlink resumed>) = 0 [pid 9026] memfd_create("syzkaller", 0) = 3 [pid 9026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9021] +++ exited with 0 +++ [pid 5065] <... ioctl resumed>) = 0 [pid 9026] <... mmap resumed>) = 0x7f41e0600000 [pid 9024] <... mount resumed>) = 0 [pid 5065] close(3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9021, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 9024] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5065] <... close resumed>) = 0 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 9024] chdir("./file0" [pid 5062] <... restart_syscall resumed>) = 0 [pid 9024] <... chdir resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9024] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 9028 [pid 5062] umount2("./391", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9024] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 9028 attached [pid 9026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9024] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./391/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 349.111703][ T9027] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9028] set_robust_list(0x55555745a660, 24 [pid 9024] <... open resumed>) = 4 [pid 5064] <... ioctl resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./391/binderfs", [pid 9028] <... set_robust_list resumed>) = 0 [pid 9028] chdir("./391" [pid 9024] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./391/binderfs" [pid 9028] <... chdir resumed>) = 0 [ 349.174395][ T28] audit: type=1800 audit(1708423501.700:5912): pid=9024 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [pid 9028] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9024] <... open resumed>) = 5 [pid 5064] <... close resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 9028] <... prctl resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9024] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9028] setpgid(0, 0 [pid 9024] <... mmap resumed>) = 0x20000000 [pid 5062] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9024] ftruncate(4, 33587195 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 9029 ./strace-static-x86_64: Process 9029 attached [pid 9028] <... setpgid resumed>) = 0 [pid 9024] <... ftruncate resumed>) = 0 [ 349.207067][ T28] audit: type=1800 audit(1708423501.720:5913): pid=9024 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [pid 9029] set_robust_list(0x55555745a660, 24) = 0 [pid 9028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9024] unlink("./bus" [pid 5062] <... umount2 resumed>) = 0 [pid 9029] chdir("./397") = 0 [pid 9029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9029] setpgid(0, 0) = 0 [pid 9029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9029] write(3, "1000", 4) = 4 [pid 9029] close(3) = 0 [pid 9029] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9029] memfd_create("syzkaller", 0) = 3 [pid 9029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5062] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9026] <... write resumed>) = 2097152 [pid 9026] munmap(0x7f41e0600000, 138412032 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9028] <... openat resumed>) = 3 [pid 9024] <... unlink resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./391/file0", [pid 9028] write(3, "1000", 4 [pid 9024] sendfile(-1, -1, NULL, 281474978811909 [pid 9028] <... write resumed>) = 4 [pid 9024] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9028] close(3 [pid 9024] exit_group(0 [pid 5062] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./391/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9024] <... exit_group resumed>) = ? [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9024] +++ exited with 0 +++ [pid 5062] getdents64(4, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9024, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./392", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] getdents64(4, [pid 9028] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] close(4 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] <... close resumed>) = 0 [pid 9028] symlink("/dev/binderfs", "./binderfs" [pid 5063] umount2("./392/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9028] <... symlink resumed>) = 0 [pid 5062] rmdir("./391/file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./392/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./392/binderfs") = 0 [pid 5062] <... rmdir resumed>) = 0 [ 349.245613][ T28] audit: type=1800 audit(1708423501.760:5914): pid=9024 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [pid 5063] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9028] memfd_create("syzkaller", 0 [pid 9026] <... munmap resumed>) = 0 [pid 5062] getdents64(3, [pid 9028] <... memfd_create resumed>) = 3 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] close(3 [pid 9028] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] <... close resumed>) = 0 [pid 9026] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... umount2 resumed>) = 0 [pid 5062] rmdir("./391" [pid 9026] <... openat resumed>) = 4 [pid 9026] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./392", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 9029] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./392/file0", [pid 9026] <... ioctl resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9026] close(3 [pid 5063] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9026] <... close resumed>) = 0 [pid 9026] close(4) = 0 [pid 5063] openat(AT_FDCWD, "./392/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9026] mkdir("./file0", 0777 [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 9028] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9026] <... mkdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 9029] <... write resumed>) = 2097152 [pid 9026] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./392/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9029] munmap(0x7f41e0600000, 138412032 [pid 5063] close(3 [pid 9029] <... munmap resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./392") = 0 [ 349.321490][ T9026] loop0: detected capacity change from 0 to 4096 [pid 9029] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] <... ioctl resumed>) = 0 [pid 5063] mkdir("./393", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 9029] <... openat resumed>) = 4 [pid 9029] ioctl(4, LOOP_SET_FD, 3 [pid 9026] <... mount resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9026] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9026] chdir("./file0") = 0 [pid 9026] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9026] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9029] <... ioctl resumed>) = 0 [pid 9029] close(3) = 0 [pid 9029] close(4 [pid 9028] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 9031 attached [pid 9029] <... close resumed>) = 0 [pid 9028] munmap(0x7f41e0600000, 138412032 [pid 9031] set_robust_list(0x55555745a660, 24 [ 349.389700][ T9030] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 349.406855][ T9029] loop3: detected capacity change from 0 to 4096 [pid 9029] mkdir("./file0", 0777 [pid 9028] <... munmap resumed>) = 0 [pid 9026] <... open resumed>) = 4 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 9031 [pid 9029] <... mkdir resumed>) = 0 [pid 9026] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9031] <... set_robust_list resumed>) = 0 [pid 9031] chdir("./392" [pid 9026] <... open resumed>) = 5 [pid 9029] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9031] <... chdir resumed>) = 0 [pid 9031] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9028] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9031] <... prctl resumed>) = 0 [pid 9028] <... openat resumed>) = 4 [pid 9031] setpgid(0, 0 [pid 9028] ioctl(4, LOOP_SET_FD, 3 [pid 9031] <... setpgid resumed>) = 0 [pid 9026] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9031] write(3, "1000", 4 [pid 9026] <... mmap resumed>) = 0x20000000 [pid 5063] <... ioctl resumed>) = 0 [pid 9031] <... write resumed>) = 4 [pid 9031] close(3 [pid 9026] ftruncate(4, 33587195 [pid 9031] <... close resumed>) = 0 [pid 9031] symlink("/dev/binderfs", "./binderfs" [pid 5063] close(3 [pid 9031] <... symlink resumed>) = 0 [pid 9028] <... ioctl resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 9031] memfd_create("syzkaller", 0 [pid 9028] close(3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9028] <... close resumed>) = 0 [pid 9031] <... memfd_create resumed>) = 3 [pid 9028] close(4 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 9032 [pid 9031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9028] <... close resumed>) = 0 [pid 9031] <... mmap resumed>) = 0x7f41e0600000 [pid 9028] mkdir("./file0", 0777) = 0 [pid 9028] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, ""./strace-static-x86_64: Process 9032 attached [ 349.438801][ T28] audit: type=1800 audit(1708423501.960:5915): pid=9026 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 349.472543][ T9028] loop4: detected capacity change from 0 to 4096 [pid 9032] set_robust_list(0x55555745a660, 24 [pid 9026] <... ftruncate resumed>) = 0 [pid 9032] <... set_robust_list resumed>) = 0 [pid 9032] chdir("./393") = 0 [pid 9032] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9032] setpgid(0, 0) = 0 [pid 9026] unlink("./bus" [pid 9032] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9032] write(3, "1000", 4) = 4 [pid 9032] close(3) = 0 [pid 9032] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9032] memfd_create("syzkaller", 0) = 3 [pid 9032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 9026] <... unlink resumed>) = 0 [pid 9026] sendfile(-1, -1, NULL, 281474978811909 [pid 9031] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9028] <... mount resumed>) = 0 [pid 9026] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9026] exit_group(0 [pid 9028] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9026] <... exit_group resumed>) = ? [ 349.531569][ T28] audit: type=1800 audit(1708423502.000:5916): pid=9026 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 349.554493][ T9033] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9028] <... openat resumed>) = 3 [pid 9026] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9026, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] umount2("./398", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./398", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", [pid 9029] <... mount resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9028] chdir("./file0") = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./398/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9029] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] newfstatat(AT_FDCWD, "./398/binderfs", [pid 9029] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9028] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9029] chdir("./file0") = 0 [pid 9028] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9029] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9031] <... write resumed>) = 2097152 [pid 9029] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9029] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9031] munmap(0x7f41e0600000, 138412032 [pid 9028] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] unlink("./398/binderfs" [pid 9031] <... munmap resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [ 349.575949][ T9034] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 349.580976][ T28] audit: type=1800 audit(1708423502.010:5917): pid=9026 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [pid 5061] umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9031] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9028] <... open resumed>) = 4 [pid 9028] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9031] <... openat resumed>) = 4 [pid 9031] ioctl(4, LOOP_SET_FD, 3 [pid 9032] <... write resumed>) = 2097152 [pid 9031] <... ioctl resumed>) = 0 [pid 9028] <... open resumed>) = 5 [pid 9029] <... open resumed>) = 4 [pid 9031] close(3 [pid 9032] munmap(0x7f41e0600000, 138412032 [pid 9029] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9028] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... umount2 resumed>) = 0 [pid 9031] <... close resumed>) = 0 [pid 5061] umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9031] close(4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9031] <... close resumed>) = 0 [pid 9029] <... open resumed>) = 5 [pid 5061] newfstatat(AT_FDCWD, "./398/file0", [pid 9031] mkdir("./file0", 0777 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9031] <... mkdir resumed>) = 0 [pid 9029] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9031] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9028] <... mmap resumed>) = 0x20000000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./398/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./398/file0" [pid 9029] <... mmap resumed>) = 0x20000000 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 9032] <... munmap resumed>) = 0 [pid 9029] ftruncate(4, 33587195 [ 349.648919][ T28] audit: type=1800 audit(1708423502.170:5918): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 349.670724][ T9031] loop1: detected capacity change from 0 to 4096 [pid 9028] ftruncate(4, 33587195 [pid 9032] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9029] <... ftruncate resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9032] <... openat resumed>) = 4 [pid 5061] close(3) = 0 [pid 9032] ioctl(4, LOOP_SET_FD, 3 [pid 5061] rmdir("./398") = 0 [pid 5061] mkdir("./399", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 9029] unlink("./bus" [pid 9032] <... ioctl resumed>) = 0 [pid 9031] <... mount resumed>) = 0 [pid 9029] <... unlink resumed>) = 0 [pid 9028] <... ftruncate resumed>) = 0 [pid 9032] close(3 [pid 9031] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9029] sendfile(-1, -1, NULL, 281474978811909 [pid 9031] <... openat resumed>) = 3 [pid 9031] chdir("./file0") = 0 [pid 9031] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 349.710918][ T9035] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 349.716089][ T9032] loop2: detected capacity change from 0 to 4096 [pid 9031] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9029] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9028] unlink("./bus" [pid 9032] <... close resumed>) = 0 [pid 9032] close(4 [pid 9029] exit_group(0 [pid 9032] <... close resumed>) = 0 [pid 9029] <... exit_group resumed>) = ? [pid 9032] mkdir("./file0", 0777) = 0 [pid 9032] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9031] <... open resumed>) = 4 [pid 9031] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9028] <... unlink resumed>) = 0 [pid 9031] <... open resumed>) = 5 [pid 9028] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9031] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... ioctl resumed>) = 0 [pid 9031] <... ftruncate resumed>) = 0 [pid 9029] +++ exited with 0 +++ [pid 9028] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9029, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5061] close(3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9028, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5065] umount2("./391", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./397", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9031] unlink("./bus" [pid 5065] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "./397", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] newfstatat(3, "", [pid 5064] <... openat resumed>) = 3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] newfstatat(3, "", [pid 5065] getdents64(3, [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] getdents64(3, [pid 9031] <... unlink resumed>) = 0 [pid 5065] umount2("./391/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9031] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 9036 attached [pid 9031] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] newfstatat(AT_FDCWD, "./391/binderfs", [pid 5064] umount2("./397/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9036] set_robust_list(0x55555745a660, 24 [pid 9031] exit_group(0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9036] <... set_robust_list resumed>) = 0 [pid 9031] <... exit_group resumed>) = ? [pid 5065] unlink("./391/binderfs" [pid 5064] newfstatat(AT_FDCWD, "./397/binderfs", [pid 9036] chdir("./399" [pid 5065] <... unlink resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9036] <... chdir resumed>) = 0 [pid 5064] unlink("./397/binderfs") = 0 [pid 9036] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5065] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9036] setpgid(0, 0 [pid 5064] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9036] <... setpgid resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 9036 [pid 9032] <... mount resumed>) = 0 [pid 9036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9032] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9036] <... openat resumed>) = 3 [pid 9032] <... openat resumed>) = 3 [pid 9032] chdir("./file0" [pid 9036] write(3, "1000", 4 [pid 9032] <... chdir resumed>) = 0 [pid 9036] <... write resumed>) = 4 [pid 9032] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9036] close(3 [pid 9032] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9036] <... close resumed>) = 0 [pid 9032] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... umount2 resumed>) = 0 [pid 9036] symlink("/dev/binderfs", "./binderfs" [pid 9032] <... open resumed>) = 4 [pid 9032] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 9032] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9036] <... symlink resumed>) = 0 [pid 9032] <... mmap resumed>) = 0x20000000 [pid 9031] +++ exited with 0 +++ [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9036] memfd_create("syzkaller", 0 [ 349.813780][ T9037] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9032] ftruncate(4, 33587195 [pid 5065] newfstatat(AT_FDCWD, "./391/file0", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9031, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 9036] <... memfd_create resumed>) = 3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] newfstatat(AT_FDCWD, "./397/file0", [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 9036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9032] <... ftruncate resumed>) = 0 [pid 5065] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... restart_syscall resumed>) = 0 [pid 9036] <... mmap resumed>) = 0x7f41e0600000 [pid 9032] unlink("./bus" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./391/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "./397/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] umount2("./392", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 4 [pid 5064] <... openat resumed>) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(4, "", [pid 5062] openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] newfstatat(4, "", [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5064] getdents64(4, [pid 5062] newfstatat(3, "", [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, [pid 5064] getdents64(4, [pid 5062] getdents64(3, [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] getdents64(4, [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] umount2("./392/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9032] <... unlink resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9032] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] close(4 [pid 5062] newfstatat(AT_FDCWD, "./392/binderfs", [pid 9032] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9032] exit_group(0 [pid 5065] rmdir("./391/file0" [pid 5062] unlink("./392/binderfs" [pid 9032] <... exit_group resumed>) = ? [pid 5065] <... rmdir resumed>) = 0 [pid 5064] rmdir("./397/file0" [pid 5062] <... unlink resumed>) = 0 [pid 9036] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5064] <... rmdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9036] <... write resumed>) = 2097152 [pid 9032] +++ exited with 0 +++ [pid 5064] getdents64(3, [pid 5062] <... umount2 resumed>) = 0 [pid 5065] close(3 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9032, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 9036] munmap(0x7f41e0600000, 138412032 [pid 5065] <... close resumed>) = 0 [pid 5064] close(3 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5062] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] rmdir("./391" [pid 5064] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9036] <... munmap resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] rmdir("./397" [pid 5062] newfstatat(AT_FDCWD, "./392/file0", [pid 5065] mkdir("./392", 0777 [pid 9036] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... rmdir resumed>) = 0 [pid 5063] umount2("./393", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9036] <... openat resumed>) = 4 [pid 5064] mkdir("./398", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9036] ioctl(4, LOOP_SET_FD, 3 [pid 5063] openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9036] <... ioctl resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] newfstatat(3, "", [pid 5062] openat(AT_FDCWD, "./392/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9036] close(3 [pid 5065] <... openat resumed>) = 3 [pid 5064] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5063] getdents64(3, [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9036] <... close resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 9036] close(4) = 0 [pid 5063] umount2("./393/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9036] mkdir("./file0", 0777) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./393/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9036] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] unlink("./393/binderfs" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5062] getdents64(4, [pid 5063] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./392/file0") = 0 [ 349.963622][ T9036] loop0: detected capacity change from 0 to 4096 [pid 5062] getdents64(3, [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] close(3 [pid 5063] newfstatat(AT_FDCWD, "./393/file0", [pid 5062] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] rmdir("./392" [pid 5063] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./393/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", [pid 5062] mkdir("./393", 0777 [pid 5064] <... ioctl resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 9036] <... mount resumed>) = 0 [pid 9036] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5065] <... ioctl resumed>) = 0 [pid 9036] chdir("./file0" [pid 5063] close(4 [pid 5062] <... mkdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9036] <... chdir resumed>) = 0 [pid 5063] rmdir("./393/file0" [pid 5062] <... openat resumed>) = 3 [pid 9036] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] ioctl(3, LOOP_CLR_FD [pid 9036] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9036] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... rmdir resumed>) = 0 [pid 5065] close(3 [pid 5063] getdents64(3, [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 9039 attached [pid 9039] set_robust_list(0x55555745a660, 24) = 0 [pid 9039] chdir("./392" [pid 5063] close(3 [pid 9039] <... chdir resumed>) = 0 [pid 9039] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9039] setpgid(0, 0) = 0 [pid 9039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 9039 [pid 9039] <... openat resumed>) = 3 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 9040 ./strace-static-x86_64: Process 9040 attached [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./393" [pid 9040] set_robust_list(0x55555745a660, 24 [pid 9039] write(3, "1000", 4) = 4 [pid 9039] close(3) = 0 [pid 9039] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9040] <... set_robust_list resumed>) = 0 [pid 9039] memfd_create("syzkaller", 0 [pid 5063] <... rmdir resumed>) = 0 [pid 9040] chdir("./398" [pid 5063] mkdir("./394", 0777 [pid 9040] <... chdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 9040] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9040] setpgid(0, 0) = 0 [pid 9039] <... memfd_create resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 9040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] ioctl(3, LOOP_CLR_FD [pid 9039] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9040] <... openat resumed>) = 3 [pid 9039] <... mmap resumed>) = 0x7f41e0600000 [pid 9040] write(3, "1000", 4) = 4 [pid 9040] close(3) = 0 [pid 9036] <... open resumed>) = 4 [ 350.040919][ T9038] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9040] symlink("/dev/binderfs", "./binderfs" [pid 9036] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9040] <... symlink resumed>) = 0 [pid 9036] <... open resumed>) = 5 [pid 9040] memfd_create("syzkaller", 0) = 3 [pid 9040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9036] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9040] <... mmap resumed>) = 0x7f41e0600000 [pid 9036] <... mmap resumed>) = 0x20000000 [pid 9036] ftruncate(4, 33587195) = 0 [pid 9036] unlink("./bus" [pid 9040] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9039] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9036] <... unlink resumed>) = 0 [pid 9036] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9036] exit_group(0 [pid 5063] <... ioctl resumed>) = 0 [pid 9036] <... exit_group resumed>) = ? [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3 [pid 9040] <... write resumed>) = 2097152 [pid 9036] +++ exited with 0 +++ [pid 5063] close(3 [pid 5062] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9036, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- ./strace-static-x86_64: Process 9042 attached [pid 5061] umount2("./399", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9042] set_robust_list(0x55555745a660, 24) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9042] chdir("./394" [pid 5061] openat(AT_FDCWD, "./399", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9042] <... chdir resumed>) = 0 [pid 9042] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 9042 [pid 5061] <... openat resumed>) = 3 ./strace-static-x86_64: Process 9041 attached [pid 9042] <... prctl resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 9041 [pid 9041] set_robust_list(0x55555745a660, 24 [pid 9042] setpgid(0, 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9041] <... set_robust_list resumed>) = 0 [pid 9042] <... setpgid resumed>) = 0 [pid 5061] getdents64(3, [pid 9042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9041] chdir("./393" [pid 9042] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9041] <... chdir resumed>) = 0 [pid 5061] umount2("./399/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9041] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9042] write(3, "1000", 4) = 4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9042] close(3) = 0 [pid 9042] symlink("/dev/binderfs", "./binderfs" [pid 9039] <... write resumed>) = 2097152 [pid 5061] newfstatat(AT_FDCWD, "./399/binderfs", [pid 9042] <... symlink resumed>) = 0 [pid 9040] munmap(0x7f41e0600000, 138412032 [pid 9041] <... prctl resumed>) = 0 [pid 9042] memfd_create("syzkaller", 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9041] setpgid(0, 0 [pid 9042] <... memfd_create resumed>) = 3 [pid 9040] <... munmap resumed>) = 0 [pid 5061] unlink("./399/binderfs" [pid 9041] <... setpgid resumed>) = 0 [pid 9042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5061] <... unlink resumed>) = 0 [pid 9041] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9040] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9041] <... openat resumed>) = 3 [pid 9040] <... openat resumed>) = 4 [pid 9041] write(3, "1000", 4 [pid 9040] ioctl(4, LOOP_SET_FD, 3 [pid 9041] <... write resumed>) = 4 [pid 9041] close(3 [pid 9039] munmap(0x7f41e0600000, 138412032) = 0 [pid 9039] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9041] <... close resumed>) = 0 [pid 9039] <... openat resumed>) = 4 [pid 9041] symlink("/dev/binderfs", "./binderfs" [pid 9039] ioctl(4, LOOP_SET_FD, 3 [pid 9041] <... symlink resumed>) = 0 [pid 9039] <... ioctl resumed>) = 0 [pid 9041] memfd_create("syzkaller", 0 [pid 9040] <... ioctl resumed>) = 0 [pid 9039] close(3 [pid 5061] <... umount2 resumed>) = 0 [pid 9041] <... memfd_create resumed>) = 3 [pid 9040] close(3 [pid 9039] <... close resumed>) = 0 [pid 9041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9039] close(4 [pid 5061] umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9041] <... mmap resumed>) = 0x7f41e0600000 [pid 9042] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9040] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9040] close(4) = 0 [pid 5061] newfstatat(AT_FDCWD, "./399/file0", [pid 9040] mkdir("./file0", 0777 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9040] <... mkdir resumed>) = 0 [pid 9039] <... close resumed>) = 0 [pid 5061] umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9039] mkdir("./file0", 0777 [pid 9040] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9039] <... mkdir resumed>) = 0 [pid 9039] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 350.231993][ T9040] loop3: detected capacity change from 0 to 4096 [ 350.249470][ T9039] loop4: detected capacity change from 0 to 4096 [pid 5061] openat(AT_FDCWD, "./399/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./399/file0") = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./399" [pid 9040] <... mount resumed>) = 0 [pid 9040] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9040] chdir("./file0") = 0 [pid 9040] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9040] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... rmdir resumed>) = 0 [pid 9041] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] mkdir("./400", 0777) = 0 [pid 9039] <... mount resumed>) = 0 [pid 9039] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 9039] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 9039] chdir("./file0" [pid 9040] <... open resumed>) = 4 [pid 9039] <... chdir resumed>) = 0 [pid 9040] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 9039] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9040] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = -1 EBUSY (Device or resource busy) [pid 9040] ftruncate(4, 33587195 [pid 9039] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9042] <... write resumed>) = 2097152 [ 350.321750][ T9043] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 350.334667][ T9044] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9042] munmap(0x7f41e0600000, 138412032 [pid 9040] <... ftruncate resumed>) = 0 [pid 9042] <... munmap resumed>) = 0 [pid 9040] unlink("./bus" [pid 9042] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9039] <... open resumed>) = 4 [pid 9042] <... openat resumed>) = 4 [pid 9042] ioctl(4, LOOP_SET_FD, 3 [pid 9040] <... unlink resumed>) = 0 [pid 9039] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... ioctl resumed>) = 0 [pid 9040] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9040] exit_group(0 [pid 9039] <... open resumed>) = 5 [pid 5061] close(3 [pid 9040] <... exit_group resumed>) = ? [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 9045 attached [pid 9039] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9045] set_robust_list(0x55555745a660, 24) = 0 [pid 9045] chdir("./400" [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 9045 [pid 9045] <... chdir resumed>) = 0 [pid 9040] +++ exited with 0 +++ [pid 9039] <... mmap resumed>) = 0x20000000 [pid 9045] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9039] ftruncate(4, 33587195 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9040, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 9045] <... prctl resumed>) = 0 [pid 9045] setpgid(0, 0 [pid 9041] <... write resumed>) = 2097152 [pid 9042] <... ioctl resumed>) = 0 [pid 9045] <... setpgid resumed>) = 0 [pid 9041] munmap(0x7f41e0600000, 138412032 [pid 9042] close(3 [pid 9039] <... ftruncate resumed>) = 0 [pid 5064] umount2("./398", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9039] unlink("./bus" [pid 9045] <... openat resumed>) = 3 [pid 9041] <... munmap resumed>) = 0 [pid 9042] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9042] close(4 [pid 5064] openat(AT_FDCWD, "./398", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9045] write(3, "1000", 4) = 4 [pid 9042] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 9045] close(3 [ 350.406928][ T9042] loop2: detected capacity change from 0 to 4096 [pid 9042] mkdir("./file0", 0777 [pid 9045] <... close resumed>) = 0 [pid 9042] <... mkdir resumed>) = 0 [pid 5064] newfstatat(3, "", [pid 9041] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9042] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9041] <... openat resumed>) = 4 [pid 9041] ioctl(4, LOOP_SET_FD, 3 [pid 9045] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9045] <... symlink resumed>) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./398/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9045] memfd_create("syzkaller", 0 [pid 9039] <... unlink resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./398/binderfs", [pid 9039] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9039] exit_group(0) = ? [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./398/binderfs" [pid 9045] <... memfd_create resumed>) = 3 [pid 5064] <... unlink resumed>) = 0 [pid 9041] <... ioctl resumed>) = 0 [pid 9041] close(3) = 0 [pid 9041] close(4 [pid 5064] umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 9041] <... close resumed>) = 0 [pid 9041] mkdir("./file0", 0777) = 0 [pid 9041] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9039] +++ exited with 0 +++ [pid 9042] <... mount resumed>) = 0 [pid 9042] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9039, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5065] umount2("./392", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9042] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 9042] chdir("./file0") = 0 [pid 9042] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 350.454901][ T9041] loop1: detected capacity change from 0 to 4096 [ 350.481935][ T9046] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9042] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] <... umount2 resumed>) = 0 [pid 5065] getdents64(3, [pid 9042] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./392/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./392/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./392/binderfs" [pid 5064] umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... unlink resumed>) = 0 [pid 9041] <... mount resumed>) = 0 [pid 5065] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./398/file0", [pid 9041] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9041] <... openat resumed>) = 3 [pid 5064] umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9041] chdir("./file0") = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9042] <... open resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./398/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9041] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9042] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9041] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9042] <... open resumed>) = 5 [pid 5064] <... openat resumed>) = 4 [pid 9041] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9042] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] getdents64(4, [pid 9042] <... mmap resumed>) = 0x20000000 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 9042] ftruncate(4, 33587195 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./398/file0" [pid 9042] <... ftruncate resumed>) = 0 [pid 9042] unlink("./bus" [pid 5065] <... umount2 resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5065] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] close(3 [pid 5065] newfstatat(AT_FDCWD, "./392/file0", [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./398" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 9042] <... unlink resumed>) = 0 [pid 9042] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9041] <... open resumed>) = 4 [pid 9042] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] mkdir("./399", 0777 [pid 9041] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9042] exit_group(0 [pid 5065] openat(AT_FDCWD, "./392/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9041] <... open resumed>) = 5 [pid 9042] <... exit_group resumed>) = ? [pid 5065] <... openat resumed>) = 4 [ 350.551235][ T9047] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 9045] <... write resumed>) = 2097152 [pid 9041] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9042] +++ exited with 0 +++ [pid 9045] munmap(0x7f41e0600000, 138412032 [pid 5065] getdents64(4, [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9041] <... mmap resumed>) = 0x20000000 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9042, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5064] <... openat resumed>) = 3 [pid 9041] ftruncate(4, 33587195) = 0 [pid 5065] getdents64(4, [pid 5064] ioctl(3, LOOP_CLR_FD [pid 9045] <... munmap resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./394", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9045] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] close(4 [pid 9045] <... openat resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9041] unlink("./bus" [pid 5065] rmdir("./392/file0" [pid 5063] openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9045] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... openat resumed>) = 3 [pid 5065] <... rmdir resumed>) = 0 [pid 9041] <... unlink resumed>) = 0 [pid 9041] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9041] exit_group(0) = ? [pid 9045] <... ioctl resumed>) = 0 [pid 5065] getdents64(3, [pid 5063] newfstatat(3, "", [pid 9045] close(3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] close(3 [pid 9045] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5065] rmdir("./392" [pid 9045] close(4 [pid 5065] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9045] <... close resumed>) = 0 [pid 5063] umount2("./394/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9045] mkdir("./file0", 0777 [pid 5065] mkdir("./393", 0777 [pid 9045] <... mkdir resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./394/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9045] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9041] +++ exited with 0 +++ [pid 5063] unlink("./394/binderfs" [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9041, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 5062] umount2("./393", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./393/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 350.634314][ T9045] loop0: detected capacity change from 0 to 4096 [pid 5062] newfstatat(AT_FDCWD, "./393/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./393/binderfs") = 0 [pid 5062] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5063] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./394/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9045] <... mount resumed>) = 0 [pid 9045] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9045] chdir("./file0" [pid 5063] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./394/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9045] <... chdir resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 9045] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9045] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] getdents64(4, [pid 9045] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./394/file0" [pid 5062] <... umount2 resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5062] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9045] <... open resumed>) = 4 [pid 5064] close(3 [pid 5063] rmdir("./394" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9045] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./393/file0", [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] mkdir("./395", 0777./strace-static-x86_64: Process 9049 attached [pid 9045] <... open resumed>) = 5 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 9049 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9049] set_robust_list(0x55555745a660, 24 [pid 9045] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... openat resumed>) = 3 [pid 5062] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9049] <... set_robust_list resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9049] chdir("./399" [pid 5062] openat(AT_FDCWD, "./393/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9049] <... chdir resumed>) = 0 [pid 9049] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9045] <... mmap resumed>) = 0x20000000 [pid 5062] <... openat resumed>) = 4 [pid 9049] <... prctl resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 9049] setpgid(0, 0) = 0 [ 350.709381][ T9048] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9045] ftruncate(4, 33587195 [pid 5062] getdents64(4, [pid 9049] <... openat resumed>) = 3 [pid 5065] <... ioctl resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 9049] write(3, "1000", 4 [pid 5065] close(3 [pid 5062] getdents64(4, [pid 9049] <... write resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9049] close(3 [pid 9045] <... ftruncate resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 9049] <... close resumed>) = 0 [pid 5062] close(4 [pid 9049] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... close resumed>) = 0 [pid 9049] <... symlink resumed>) = 0 [pid 9045] unlink("./bus" [pid 5062] rmdir("./393/file0") = 0 ./strace-static-x86_64: Process 9050 attached [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 9050 [pid 9050] set_robust_list(0x55555745a660, 24 [pid 9049] memfd_create("syzkaller", 0 [pid 5062] getdents64(3, [pid 9050] <... set_robust_list resumed>) = 0 [pid 9049] <... memfd_create resumed>) = 3 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9050] chdir("./393" [pid 9049] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9045] <... unlink resumed>) = 0 [pid 5062] close(3 [pid 9049] <... mmap resumed>) = 0x7f41e0600000 [pid 9045] sendfile(-1, -1, NULL, 281474978811909 [pid 9050] <... chdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 9050] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] rmdir("./393" [pid 9050] <... prctl resumed>) = 0 [pid 9045] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9045] exit_group(0) = ? [pid 9050] setpgid(0, 0) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 9050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] mkdir("./394", 0777 [pid 9050] <... openat resumed>) = 3 [pid 9050] write(3, "1000", 4 [pid 5062] <... mkdir resumed>) = 0 [pid 9045] +++ exited with 0 +++ [pid 9050] <... write resumed>) = 4 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9045, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 9050] close(3 [pid 5061] umount2("./400", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9050] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9050] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "./400", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 9050] <... symlink resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./400/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./400/binderfs", [pid 9050] memfd_create("syzkaller", 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9050] <... memfd_create resumed>) = 3 [pid 9050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] unlink("./400/binderfs" [pid 9050] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... ioctl resumed>) = 0 [pid 9049] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] close(3 [pid 5061] <... umount2 resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] close(3) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 9051 ./strace-static-x86_64: Process 9051 attached [pid 9051] set_robust_list(0x55555745a660, 24) = 0 [pid 9051] chdir("./395") = 0 [pid 9051] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9051] setpgid(0, 0) = 0 [pid 9051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9051] write(3, "1000", 4) = 4 [pid 9051] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 9052 attached [pid 9051] symlink("/dev/binderfs", "./binderfs" [pid 5061] newfstatat(AT_FDCWD, "./400/file0", [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 9052 [pid 9052] set_robust_list(0x55555745a660, 24 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9052] <... set_robust_list resumed>) = 0 [pid 5061] umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9052] chdir("./394") = 0 [pid 9051] <... symlink resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9052] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] openat(AT_FDCWD, "./400/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9052] <... prctl resumed>) = 0 [pid 9052] setpgid(0, 0 [pid 5061] <... openat resumed>) = 4 [pid 9052] <... setpgid resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 9052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9051] memfd_create("syzkaller", 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9052] write(3, "1000", 4 [pid 5061] getdents64(4, [pid 9052] <... write resumed>) = 4 [pid 9052] close(3 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 9052] <... close resumed>) = 0 [pid 5061] getdents64(4, [pid 9052] symlink("/dev/binderfs", "./binderfs" [pid 9051] <... memfd_create resumed>) = 3 [pid 9050] <... write resumed>) = 2097152 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 9051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 9052] <... symlink resumed>) = 0 [pid 5061] close(4 [pid 9050] munmap(0x7f41e0600000, 138412032 [pid 5061] <... close resumed>) = 0 [pid 9052] memfd_create("syzkaller", 0 [pid 5061] rmdir("./400/file0" [pid 9052] <... memfd_create resumed>) = 3 [pid 9050] <... munmap resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 9052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9052] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] close(3 [pid 9049] <... write resumed>) = 2097152 [pid 5061] <... close resumed>) = 0 [pid 9050] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9049] munmap(0x7f41e0600000, 138412032 [pid 9050] <... openat resumed>) = 4 [pid 9050] ioctl(4, LOOP_SET_FD, 3 [pid 9049] <... munmap resumed>) = 0 [pid 5061] rmdir("./400") = 0 [pid 5061] mkdir("./401", 0777 [pid 9049] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9050] <... ioctl resumed>) = 0 [pid 9049] <... openat resumed>) = 4 [pid 9050] close(3 [pid 9049] ioctl(4, LOOP_SET_FD, 3 [pid 9050] <... close resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 9050] close(4) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9050] mkdir("./file0", 0777) = 0 [pid 5061] <... openat resumed>) = 3 [pid 9050] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 350.937907][ T9050] loop4: detected capacity change from 0 to 4096 [ 350.960214][ T9049] loop3: detected capacity change from 0 to 4096 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 9049] <... ioctl resumed>) = 0 [pid 9052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9051] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9050] <... mount resumed>) = 0 [pid 9050] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9050] chdir("./file0") = 0 [pid 9050] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9049] close(3) = 0 [pid 9050] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9049] close(4 [pid 9050] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9049] <... close resumed>) = 0 [pid 9049] mkdir("./file0", 0777) = 0 [pid 9049] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9050] <... open resumed>) = 4 [pid 9050] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 9050] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 9050] unlink("./bus" [pid 5061] close(3) = 0 [pid 9050] <... unlink resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9050] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 9054 [pid 9050] exit_group(0) = ? ./strace-static-x86_64: Process 9054 attached [pid 9054] set_robust_list(0x55555745a660, 24) = 0 [pid 9054] chdir("./401") = 0 [pid 9054] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9054] setpgid(0, 0) = 0 [pid 9054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9052] <... write resumed>) = 2097152 [pid 9049] <... mount resumed>) = 0 [pid 9054] <... openat resumed>) = 3 [pid 9052] munmap(0x7f41e0600000, 138412032 [pid 9050] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9050, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 9054] write(3, "1000", 4 [pid 9049] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9054] <... write resumed>) = 4 [pid 9049] <... openat resumed>) = 3 [pid 5065] <... restart_syscall resumed>) = 0 [pid 9054] close(3) = 0 [pid 9052] <... munmap resumed>) = 0 [pid 9049] chdir("./file0" [pid 9054] symlink("/dev/binderfs", "./binderfs" [pid 9051] <... write resumed>) = 2097152 [pid 9049] <... chdir resumed>) = 0 [pid 5065] umount2("./393", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9054] <... symlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9052] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9051] munmap(0x7f41e0600000, 138412032 [pid 9049] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... openat resumed>) = 3 [pid 9054] memfd_create("syzkaller", 0 [pid 9052] <... openat resumed>) = 4 [pid 5065] newfstatat(3, "", [pid 9054] <... memfd_create resumed>) = 3 [pid 9052] ioctl(4, LOOP_SET_FD, 3 [pid 9049] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] getdents64(3, [pid 9054] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9052] <... ioctl resumed>) = 0 [pid 9051] <... munmap resumed>) = 0 [pid 9049] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9052] close(3 [pid 9051] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9054] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9052] <... close resumed>) = 0 [pid 9049] <... open resumed>) = 4 [pid 5065] umount2("./393/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9051] <... openat resumed>) = 4 [pid 9049] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 351.091670][ T9055] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 351.130132][ T9052] loop1: detected capacity change from 0 to 4096 [pid 9052] close(4 [pid 9051] ioctl(4, LOOP_SET_FD, 3 [pid 5065] newfstatat(AT_FDCWD, "./393/binderfs", [pid 9052] <... close resumed>) = 0 [pid 9049] <... open resumed>) = 5 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./393/binderfs") = 0 [pid 9049] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9049] <... mmap resumed>) = 0x20000000 [pid 9049] ftruncate(4, 33587195 [pid 9052] mkdir("./file0", 0777 [pid 9051] <... ioctl resumed>) = 0 [pid 9052] <... mkdir resumed>) = 0 [pid 9051] close(3 [pid 9052] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9051] <... close resumed>) = 0 [pid 9049] <... ftruncate resumed>) = 0 [pid 9051] close(4) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 9054] <... write resumed>) = 2097152 [pid 9051] mkdir("./file0", 0777 [pid 9049] unlink("./bus" [pid 5065] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./393/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./393/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, [pid 9051] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./393/file0" [pid 9051] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./393") = 0 [pid 9049] <... unlink resumed>) = 0 [pid 9049] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] mkdir("./394", 0777 [pid 9054] munmap(0x7f41e0600000, 138412032 [pid 9052] <... mount resumed>) = 0 [pid 9049] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] <... mkdir resumed>) = 0 [pid 9054] <... munmap resumed>) = 0 [pid 9052] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9049] exit_group(0 [pid 9052] <... openat resumed>) = 3 [pid 9049] <... exit_group resumed>) = ? [pid 9052] chdir("./file0" [ 351.150732][ T9051] loop2: detected capacity change from 0 to 4096 [ 351.190050][ T9056] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9052] <... chdir resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 9054] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9052] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9049] +++ exited with 0 +++ [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9049, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5064] umount2("./399", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./399", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 9054] <... openat resumed>) = 4 [pid 9052] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9054] ioctl(4, LOOP_SET_FD, 3 [pid 9052] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9051] <... mount resumed>) = 0 [pid 5064] umount2("./399/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9054] <... ioctl resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./399/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./399/binderfs") = 0 [pid 9051] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9051] <... openat resumed>) = 3 [pid 9051] chdir("./file0" [pid 9054] close(3 [pid 9052] <... open resumed>) = 4 [pid 5064] <... umount2 resumed>) = 0 [pid 9051] <... chdir resumed>) = 0 [pid 9054] <... close resumed>) = 0 [pid 5064] umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9051] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9051] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] newfstatat(AT_FDCWD, "./399/file0", [pid 9051] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 351.236572][ T9057] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 351.251282][ T9054] loop0: detected capacity change from 0 to 4096 [pid 5064] umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9054] close(4 [pid 9052] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9051] <... open resumed>) = 4 [pid 9052] <... open resumed>) = 5 [pid 9051] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9052] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 5 [pid 9051] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9052] ftruncate(4, 33587195 [pid 9051] <... mmap resumed>) = 0x20000000 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./399/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9054] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 9054] mkdir("./file0", 0777 [pid 9051] ftruncate(4, 33587195 [pid 5064] newfstatat(4, "", [pid 9052] <... ftruncate resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9054] <... mkdir resumed>) = 0 [pid 9052] unlink("./bus" [pid 5064] getdents64(4, [pid 9054] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 9051] <... ftruncate resumed>) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 9051] unlink("./bus" [pid 5064] close(4) = 0 [pid 5064] rmdir("./399/file0") = 0 [pid 5064] getdents64(3, [pid 9052] <... unlink resumed>) = 0 [pid 9052] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9052] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9052] exit_group(0 [pid 5064] close(3 [pid 9052] <... exit_group resumed>) = ? [pid 9051] <... unlink resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 9051] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] rmdir("./399" [pid 9051] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] <... rmdir resumed>) = 0 [pid 9051] exit_group(0) = ? [pid 5064] mkdir("./400", 0777 [pid 9054] <... mount resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 9054] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9052] +++ exited with 0 +++ [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9052, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5065] close(3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 9051] +++ exited with 0 +++ [pid 9054] chdir("./file0" [pid 5065] <... close resumed>) = 0 [pid 9054] <... chdir resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9051, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 9054] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5062] umount2("./394", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9054] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... restart_syscall resumed>) = 0 [pid 9054] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 9059 attached [pid 5062] openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] umount2("./395", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(3, "", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9059] set_robust_list(0x55555745a660, 24 [pid 5063] openat(AT_FDCWD, "./395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] getdents64(3, [pid 9059] <... set_robust_list resumed>) = 0 [pid 9054] <... open resumed>) = 4 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 9059 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9059] chdir("./394" [pid 9054] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] <... openat resumed>) = 3 [pid 5062] umount2("./394/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9059] <... chdir resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9059] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9054] <... open resumed>) = 5 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] newfstatat(AT_FDCWD, "./394/binderfs", [pid 9059] <... prctl resumed>) = 0 [pid 9054] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] getdents64(3, [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9059] setpgid(0, 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] unlink("./394/binderfs" [pid 5063] umount2("./395/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... unlink resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./395/binderfs", [pid 9059] <... setpgid resumed>) = 0 [pid 5062] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./395/binderfs" [pid 9059] <... openat resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9059] write(3, "1000", 4) = 4 [pid 9059] close(3) = 0 [pid 9059] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9054] <... mmap resumed>) = 0x20000000 [pid 9059] memfd_create("syzkaller", 0) = 3 [pid 9059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9054] ftruncate(4, 33587195 [pid 9059] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [ 351.344615][ T9058] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9054] <... ftruncate resumed>) = 0 [pid 5063] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9054] unlink("./bus") = 0 [pid 5062] newfstatat(AT_FDCWD, "./394/file0", [pid 9054] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9054] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9054] exit_group(0) = ? [pid 5063] newfstatat(AT_FDCWD, "./395/file0", [pid 5062] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./394/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./395/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 9059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] newfstatat(4, "", [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 9054] +++ exited with 0 +++ [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5062] getdents64(4, [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9054, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(4, [pid 5062] close(4 [pid 5064] <... ioctl resumed>) = 0 [pid 5061] umount2("./401", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... close resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./401", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5063] close(4 [pid 5062] rmdir("./394/file0"./strace-static-x86_64: Process 9060 attached [pid 5063] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 9060] set_robust_list(0x55555745a660, 24 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 9060 [pid 5063] rmdir("./395/file0" [pid 9060] <... set_robust_list resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5062] getdents64(3, [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] getdents64(3, [pid 9060] chdir("./400" [pid 5063] close(3 [pid 9060] <... chdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] close(3 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] rmdir("./395" [pid 5061] umount2("./401/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9060] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9060] <... prctl resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./401/binderfs", [pid 9060] setpgid(0, 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9060] <... setpgid resumed>) = 0 [pid 5061] unlink("./401/binderfs" [pid 5062] <... close resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 9060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9059] <... write resumed>) = 2097152 [pid 5063] mkdir("./396", 0777 [pid 5062] rmdir("./394" [pid 5061] umount2("./401/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9060] <... openat resumed>) = 3 [pid 9060] write(3, "1000", 4) = 4 [pid 5063] <... mkdir resumed>) = 0 [pid 9060] close(3) = 0 [pid 9060] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... rmdir resumed>) = 0 [pid 9059] munmap(0x7f41e0600000, 138412032 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] mkdir("./395", 0777 [pid 9060] <... symlink resumed>) = 0 [pid 9060] memfd_create("syzkaller", 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... mkdir resumed>) = 0 [pid 9060] <... memfd_create resumed>) = 3 [pid 9060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 9059] <... munmap resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 9059] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... umount2 resumed>) = 0 [pid 9060] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9059] <... openat resumed>) = 4 [pid 5061] umount2("./401/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9059] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./401/file0", [pid 9059] close(3 [pid 9060] <... write resumed>) = 2097152 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9059] <... close resumed>) = 0 [pid 9060] munmap(0x7f41e0600000, 138412032) = 0 [pid 9059] close(4 [pid 5061] umount2("./401/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./401/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 9060] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9059] <... close resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 9060] <... openat resumed>) = 4 [pid 9060] ioctl(4, LOOP_SET_FD, 3 [pid 9059] mkdir("./file0", 0777 [pid 5063] close(3 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] close(4) = 0 [ 351.499426][ T9059] loop4: detected capacity change from 0 to 4096 [pid 5061] rmdir("./401/file0") = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./401") = 0 [pid 5061] mkdir("./402", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 9060] <... ioctl resumed>) = 0 [pid 9059] <... mkdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 9059] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9060] close(3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] close(3 [pid 9060] <... close resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 9061 [pid 5062] <... close resumed>) = 0 [pid 9060] close(4 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 9061 attached [pid 9061] set_robust_list(0x55555745a660, 24 [pid 9060] <... close resumed>) = 0 [pid 9061] <... set_robust_list resumed>) = 0 [pid 9060] mkdir("./file0", 0777./strace-static-x86_64: Process 9062 attached [pid 9061] chdir("./396" [pid 9060] <... mkdir resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 9062 [pid 9062] set_robust_list(0x55555745a660, 24 [pid 9061] <... chdir resumed>) = 0 [pid 9060] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9062] <... set_robust_list resumed>) = 0 [pid 9061] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9062] chdir("./395" [pid 9061] <... prctl resumed>) = 0 [pid 9061] setpgid(0, 0) = 0 [pid 9061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9061] write(3, "1000", 4) = 4 [pid 9061] close(3) = 0 [pid 9061] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9062] <... chdir resumed>) = 0 [pid 9061] memfd_create("syzkaller", 0 [pid 9062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9062] setpgid(0, 0) = 0 [pid 9061] <... memfd_create resumed>) = 3 [pid 9062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9062] <... openat resumed>) = 3 [pid 9061] <... mmap resumed>) = 0x7f41e0600000 [pid 9062] write(3, "1000", 4) = 4 [ 351.558524][ T9060] loop3: detected capacity change from 0 to 4096 [pid 9062] close(3) = 0 [pid 9062] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9059] <... mount resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3 [pid 9059] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... close resumed>) = 0 [pid 9059] <... openat resumed>) = 3 [pid 9062] memfd_create("syzkaller", 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9059] chdir("./file0") = 0 [pid 9060] <... mount resumed>) = 0 [pid 9059] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9060] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9062] <... memfd_create resumed>) = 3 [pid 9059] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9059] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9060] <... openat resumed>) = 3 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 9065 ./strace-static-x86_64: Process 9065 attached [pid 9062] <... mmap resumed>) = 0x7f41e0600000 [pid 9060] chdir("./file0" [pid 9065] set_robust_list(0x55555745a660, 24 [pid 9060] <... chdir resumed>) = 0 [pid 9065] <... set_robust_list resumed>) = 0 [pid 9060] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9065] chdir("./402" [pid 9060] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9065] <... chdir resumed>) = 0 [pid 9060] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9065] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9065] setpgid(0, 0) = 0 [pid 9065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9059] <... open resumed>) = 4 [pid 9065] <... openat resumed>) = 3 [pid 9059] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 9065] write(3, "1000", 4 [pid 9059] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9065] <... write resumed>) = 4 [pid 9065] close(3) = 0 [pid 9061] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9059] <... mmap resumed>) = 0x20000000 [pid 9065] symlink("/dev/binderfs", "./binderfs" [pid 9059] ftruncate(4, 33587195 [pid 9065] <... symlink resumed>) = 0 [pid 9065] memfd_create("syzkaller", 0) = 3 [pid 9065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 9059] <... ftruncate resumed>) = 0 [ 351.622509][ T9063] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 351.650240][ T9064] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9059] unlink("./bus" [pid 9060] <... open resumed>) = 4 [pid 9062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9060] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9059] <... unlink resumed>) = 0 [pid 9059] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9059] exit_group(0) = ? [pid 9060] <... open resumed>) = 5 [pid 9060] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9060] ftruncate(4, 33587195 [pid 9059] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9059, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] umount2("./394", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9060] <... ftruncate resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 9060] unlink("./bus" [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./394/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./394/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./394/binderfs") = 0 [pid 5065] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9061] <... write resumed>) = 2097152 [pid 9060] <... unlink resumed>) = 0 [pid 9060] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9061] munmap(0x7f41e0600000, 138412032 [pid 9060] exit_group(0) = ? [pid 9061] <... munmap resumed>) = 0 [pid 9060] +++ exited with 0 +++ [pid 5065] <... umount2 resumed>) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9060, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5064] umount2("./400", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./400", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./400/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] newfstatat(AT_FDCWD, "./400/binderfs", [pid 9061] <... openat resumed>) = 4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9061] ioctl(4, LOOP_SET_FD, 3 [pid 5064] unlink("./400/binderfs" [pid 9062] <... write resumed>) = 2097152 [pid 9062] munmap(0x7f41e0600000, 138412032 [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./394/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9062] <... munmap resumed>) = 0 [pid 9062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] openat(AT_FDCWD, "./394/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9062] <... openat resumed>) = 4 [pid 5065] <... openat resumed>) = 4 [pid 9062] ioctl(4, LOOP_SET_FD, 3 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./394/file0") = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./394") = 0 [pid 9061] <... ioctl resumed>) = 0 [pid 9061] close(3) = 0 [pid 9061] close(4) = 0 [pid 5065] mkdir("./395", 0777 [pid 9061] mkdir("./file0", 0777 [pid 5065] <... mkdir resumed>) = 0 [pid 9061] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9065] <... write resumed>) = 2097152 [pid 9062] <... ioctl resumed>) = 0 [pid 9061] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9065] munmap(0x7f41e0600000, 138412032 [pid 9062] close(3 [pid 5065] <... openat resumed>) = 3 [pid 9062] <... close resumed>) = 0 [pid 9062] close(4 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 9062] <... close resumed>) = 0 [pid 9062] mkdir("./file0", 0777) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 9065] <... munmap resumed>) = 0 [pid 9062] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 351.814716][ T9061] loop2: detected capacity change from 0 to 4096 [ 351.829128][ T9062] loop1: detected capacity change from 0 to 4096 [pid 9065] ioctl(4, LOOP_SET_FD, 3 [pid 5064] umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./400/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9065] <... ioctl resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./400/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 9065] close(3 [pid 5064] newfstatat(4, "", [pid 9065] <... close resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9065] close(4 [ 351.865883][ T9065] loop0: detected capacity change from 0 to 4096 [pid 5064] getdents64(4, [pid 9065] <... close resumed>) = 0 [pid 9065] mkdir("./file0", 0777) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 9065] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./400/file0" [pid 9061] <... mount resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 9062] <... mount resumed>) = 0 [pid 9061] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9062] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9061] <... openat resumed>) = 3 [pid 9062] <... openat resumed>) = 3 [pid 9061] chdir("./file0" [pid 9062] chdir("./file0" [pid 9061] <... chdir resumed>) = 0 [pid 9062] <... chdir resumed>) = 0 [pid 9061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9061] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9062] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9061] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9062] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... ioctl resumed>) = 0 [pid 5064] getdents64(3, [pid 9062] <... open resumed>) = 4 [ 351.907390][ T9066] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 351.927906][ T9067] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] close(3 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9062] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... close resumed>) = 0 [pid 5064] close(3 [pid 9062] <... open resumed>) = 5 [pid 9062] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9065] <... mount resumed>) = 0 [pid 9065] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... close resumed>) = 0 [pid 9065] chdir("./file0") = 0 [pid 9065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9065] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] rmdir("./400"./strace-static-x86_64: Process 9069 attached ) = 0 [pid 9069] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 9069 [pid 5064] mkdir("./401", 0777 [pid 9069] <... set_robust_list resumed>) = 0 [pid 9069] chdir("./395" [pid 9062] <... ftruncate resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 9069] <... chdir resumed>) = 0 [pid 9069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9069] setpgid(0, 0 [pid 9062] unlink("./bus" [pid 9061] <... open resumed>) = 4 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9069] <... setpgid resumed>) = 0 [pid 9061] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9061] <... open resumed>) = 5 [pid 5064] <... openat resumed>) = 3 [pid 9069] <... openat resumed>) = 3 [pid 9065] <... open resumed>) = 4 [pid 9061] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] ioctl(3, LOOP_CLR_FD [pid 9069] write(3, "1000", 4 [pid 9065] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9061] <... mmap resumed>) = 0x20000000 [pid 9069] <... write resumed>) = 4 [pid 9062] <... unlink resumed>) = 0 [pid 9061] ftruncate(4, 33587195 [pid 9069] close(3 [pid 9062] sendfile(-1, -1, NULL, 281474978811909 [pid 9069] <... close resumed>) = 0 [pid 9062] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9069] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9062] exit_group(0 [pid 9065] <... open resumed>) = 5 [pid 9062] <... exit_group resumed>) = ? [ 351.978601][ T9068] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9069] memfd_create("syzkaller", 0) = 3 [pid 9065] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9062] +++ exited with 0 +++ [pid 9061] <... ftruncate resumed>) = 0 [pid 9069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9065] <... mmap resumed>) = 0x20000000 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9062, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 9069] <... mmap resumed>) = 0x7f41e0600000 [pid 9061] unlink("./bus" [pid 9065] ftruncate(4, 33587195 [pid 5062] umount2("./395", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9061] <... unlink resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./395/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./395/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./395/binderfs") = 0 [pid 5062] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9065] <... ftruncate resumed>) = 0 [pid 9061] sendfile(-1, -1, NULL, 281474978811909 [pid 9065] unlink("./bus" [pid 9061] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9061] exit_group(0 [pid 5062] <... umount2 resumed>) = 0 [pid 9061] <... exit_group resumed>) = ? [pid 9069] <... write resumed>) = 2097152 [pid 9065] <... unlink resumed>) = 0 [pid 9065] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9069] munmap(0x7f41e0600000, 138412032 [pid 9065] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9061] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9061, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5062] newfstatat(AT_FDCWD, "./395/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./396", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9065] exit_group(0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./395/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5062] getdents64(4, [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./395/file0" [pid 9065] <... exit_group resumed>) = ? [pid 5063] umount2("./396/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./395" [pid 5063] newfstatat(AT_FDCWD, "./396/binderfs", [pid 5062] <... rmdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./396/binderfs" [pid 5062] mkdir("./396", 0777 [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 9069] <... munmap resumed>) = 0 [pid 9065] +++ exited with 0 +++ [pid 9069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... ioctl resumed>) = 0 [pid 5063] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9065, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 9069] <... openat resumed>) = 4 [pid 9069] ioctl(4, LOOP_SET_FD, 3 [pid 5064] close(3) = 0 [pid 5061] umount2("./402", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9069] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 9070 attached [pid 5063] <... umount2 resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./402", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9069] close(3) = 0 [pid 9069] close(4) = 0 [pid 9069] mkdir("./file0", 0777 [pid 5061] <... openat resumed>) = 3 [pid 9070] set_robust_list(0x55555745a660, 24 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 9070 [pid 5063] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(3, "", [pid 9070] <... set_robust_list resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9070] chdir("./401" [pid 5063] newfstatat(AT_FDCWD, "./396/file0", [pid 5061] getdents64(3, [pid 9070] <... chdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9070] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./402/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9070] <... prctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./396/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] newfstatat(AT_FDCWD, "./402/binderfs", [pid 9070] setpgid(0, 0 [pid 5063] <... openat resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9070] <... setpgid resumed>) = 0 [pid 9069] <... mkdir resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5061] unlink("./402/binderfs") = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./402/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 9070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9069] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] getdents64(4, [pid 9070] <... openat resumed>) = 3 [pid 9070] write(3, "1000", 4 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 9070] <... write resumed>) = 4 [ 352.133959][ T9069] loop4: detected capacity change from 0 to 4096 [pid 5063] close(4 [pid 9070] close(3 [pid 5063] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 9070] <... close resumed>) = 0 [pid 5063] rmdir("./396/file0" [pid 9070] symlink("/dev/binderfs", "./binderfs" [pid 5061] umount2("./402/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9070] <... symlink resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./402/file0", [pid 5063] getdents64(3, [pid 5062] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9070] memfd_create("syzkaller", 0 [pid 5063] close(3 [pid 5061] umount2("./402/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9070] <... memfd_create resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] rmdir("./396" [pid 5061] openat(AT_FDCWD, "./402/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9070] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] <... openat resumed>) = 4 ./strace-static-x86_64: Process 9072 attached [pid 5063] <... rmdir resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 9072] set_robust_list(0x55555745a660, 24 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9072] <... set_robust_list resumed>) = 0 [pid 5061] getdents64(4, [pid 9069] <... mount resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 9072] chdir("./396" [pid 9069] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] getdents64(4, [pid 9072] <... chdir resumed>) = 0 [pid 9069] <... openat resumed>) = 3 [pid 9072] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 9072] <... prctl resumed>) = 0 [pid 9069] chdir("./file0" [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 9072 [pid 5061] close(4 [pid 9072] setpgid(0, 0 [pid 9069] <... chdir resumed>) = 0 [pid 5063] mkdir("./397", 0777 [pid 9072] <... setpgid resumed>) = 0 [pid 9069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... close resumed>) = 0 [pid 9072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9069] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... mkdir resumed>) = 0 [pid 5061] rmdir("./402/file0" [pid 9069] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] <... rmdir resumed>) = 0 [pid 9072] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 9072] write(3, "1000", 4 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 9072] <... write resumed>) = 4 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9072] close(3 [pid 5061] close(3 [pid 9072] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./402") = 0 [pid 9072] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5061] mkdir("./403", 0777) = 0 [pid 9072] memfd_create("syzkaller", 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9072] <... memfd_create resumed>) = 3 [pid 9069] <... open resumed>) = 4 [pid 9072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... openat resumed>) = 3 [pid 9069] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9072] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 9069] <... open resumed>) = 5 [ 352.213036][ T9071] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9069] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9069] ftruncate(4, 33587195) = 0 [pid 9069] unlink("./bus") = 0 [pid 9069] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9069] exit_group(0) = ? [pid 9072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9070] <... write resumed>) = 2097152 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 9070] munmap(0x7f41e0600000, 138412032 [pid 5063] <... close resumed>) = 0 [pid 9070] <... munmap resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9069] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9069, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 9070] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 9070] ioctl(4, LOOP_SET_FD, 3 [pid 5065] umount2("./395", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 9073 [pid 5065] openat(AT_FDCWD, "./395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./395/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 9073 attached [pid 9072] <... write resumed>) = 2097152 [pid 9070] <... ioctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... ioctl resumed>) = 0 [pid 9073] set_robust_list(0x55555745a660, 24 [pid 9072] munmap(0x7f41e0600000, 138412032 [pid 9070] close(3 [pid 5065] newfstatat(AT_FDCWD, "./395/binderfs", [pid 5061] close(3 [pid 9073] <... set_robust_list resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9073] chdir("./397" [pid 9072] <... munmap resumed>) = 0 [pid 9070] <... close resumed>) = 0 [pid 5065] unlink("./395/binderfs" [pid 5061] <... close resumed>) = 0 [pid 9073] <... chdir resumed>) = 0 [pid 9072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9070] close(4 [pid 5065] <... unlink resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9073] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9072] <... openat resumed>) = 4 [pid 5065] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 9074 attached [pid 9073] <... prctl resumed>) = 0 [pid 9072] ioctl(4, LOOP_SET_FD, 3 [pid 9070] <... close resumed>) = 0 [pid 9073] setpgid(0, 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 9074 [pid 9070] mkdir("./file0", 0777 [pid 9074] set_robust_list(0x55555745a660, 24 [pid 9073] <... setpgid resumed>) = 0 [pid 9072] <... ioctl resumed>) = 0 [pid 9070] <... mkdir resumed>) = 0 [pid 9073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9074] <... set_robust_list resumed>) = 0 [pid 9073] <... openat resumed>) = 3 [pid 9074] chdir("./403" [pid 9073] write(3, "1000", 4 [pid 9072] close(3 [pid 9070] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9074] <... chdir resumed>) = 0 [pid 9073] <... write resumed>) = 4 [pid 9072] <... close resumed>) = 0 [pid 9074] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9073] close(3 [pid 9072] close(4 [pid 9074] <... prctl resumed>) = 0 [pid 9073] <... close resumed>) = 0 [pid 9074] setpgid(0, 0 [pid 9073] symlink("/dev/binderfs", "./binderfs" [pid 9072] <... close resumed>) = 0 [pid 9074] <... setpgid resumed>) = 0 [pid 9072] mkdir("./file0", 0777 [pid 9074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... umount2 resumed>) = 0 [pid 9072] <... mkdir resumed>) = 0 [ 352.362540][ T9070] loop3: detected capacity change from 0 to 4096 [ 352.401354][ T9072] loop1: detected capacity change from 0 to 4096 [pid 9072] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9074] <... openat resumed>) = 3 [pid 9073] <... symlink resumed>) = 0 [pid 9074] write(3, "1000", 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9074] <... write resumed>) = 4 [pid 9074] close(3 [pid 5065] newfstatat(AT_FDCWD, "./395/file0", [pid 9074] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9074] symlink("/dev/binderfs", "./binderfs" [pid 5065] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9074] <... symlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9074] memfd_create("syzkaller", 0 [pid 9073] memfd_create("syzkaller", 0 [pid 9070] <... mount resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./395/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9074] <... memfd_create resumed>) = 3 [pid 9073] <... memfd_create resumed>) = 3 [pid 9070] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9070] <... openat resumed>) = 3 [pid 9073] <... mmap resumed>) = 0x7f41e0600000 [pid 9070] chdir("./file0" [pid 9074] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] <... openat resumed>) = 4 [pid 9070] <... chdir resumed>) = 0 [pid 9070] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9070] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 9072] <... mount resumed>) = 0 [pid 9072] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9070] <... open resumed>) = 4 [pid 5065] getdents64(4, [pid 9072] <... openat resumed>) = 3 [pid 9070] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9072] chdir("./file0" [pid 9070] <... open resumed>) = 5 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 9072] <... chdir resumed>) = 0 [pid 9070] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] close(4 [pid 9072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9070] <... mmap resumed>) = 0x20000000 [pid 5065] <... close resumed>) = 0 [pid 9072] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] rmdir("./395/file0" [pid 9070] ftruncate(4, 33587195 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 9072] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./395" [pid 9070] <... ftruncate resumed>) = 0 [ 352.438220][ T9075] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 352.472107][ T9076] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] <... rmdir resumed>) = 0 [pid 9074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9072] <... open resumed>) = 4 [pid 9070] unlink("./bus" [pid 9072] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 9072] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9072] <... mmap resumed>) = 0x20000000 [pid 5065] mkdir("./396", 0777 [pid 9072] ftruncate(4, 33587195) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 9072] unlink("./bus" [pid 9070] <... unlink resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9070] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... openat resumed>) = 3 [pid 9070] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9072] <... unlink resumed>) = 0 [pid 9072] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9070] exit_group(0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 9072] exit_group(0 [pid 9070] <... exit_group resumed>) = ? [pid 9072] <... exit_group resumed>) = ? [pid 9072] +++ exited with 0 +++ [pid 9073] <... write resumed>) = 2097152 [pid 9073] munmap(0x7f41e0600000, 138412032 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9072, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] umount2("./396", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9073] <... munmap resumed>) = 0 [pid 9070] +++ exited with 0 +++ [pid 5062] openat(AT_FDCWD, "./396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... openat resumed>) = 3 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9070, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5062] newfstatat(3, "", [pid 9073] <... openat resumed>) = 4 [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9073] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... restart_syscall resumed>) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./396/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./396/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./396/binderfs") = 0 [pid 5062] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9074] <... write resumed>) = 2097152 [pid 9073] <... ioctl resumed>) = 0 [pid 9074] munmap(0x7f41e0600000, 138412032 [pid 9073] close(3 [pid 5064] umount2("./401", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9073] <... close resumed>) = 0 [pid 9073] close(4 [pid 9074] <... munmap resumed>) = 0 [pid 9073] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./401", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = 0 [pid 9073] mkdir("./file0", 0777 [pid 5064] <... openat resumed>) = 3 [pid 5062] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9074] ioctl(4, LOOP_SET_FD, 3 [pid 9073] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] newfstatat(AT_FDCWD, "./396/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 352.576116][ T9073] loop2: detected capacity change from 0 to 4096 [pid 9073] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] getdents64(3, [pid 5062] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./401/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./396/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 4 [pid 5064] newfstatat(AT_FDCWD, "./401/binderfs", [pid 5062] newfstatat(4, "", [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] unlink("./401/binderfs" [pid 5062] getdents64(4, [pid 5064] <... unlink resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] umount2("./401/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./396/file0") = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9074] <... ioctl resumed>) = 0 [pid 9074] close(3 [pid 5062] close(3 [pid 9074] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 9074] close(4 [pid 5062] rmdir("./396" [pid 9074] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 9074] mkdir("./file0", 0777 [pid 5062] mkdir("./397", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 9074] <... mkdir resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [ 352.622050][ T9074] loop0: detected capacity change from 0 to 4096 [pid 9074] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] close(3 [pid 5064] <... umount2 resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 9078 attached [pid 9073] <... mount resumed>) = 0 [pid 5064] umount2("./401/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9078] set_robust_list(0x55555745a660, 24 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9078] <... set_robust_list resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./401/file0", [pid 9078] chdir("./396" [pid 9073] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9078] <... chdir resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 9078 [pid 5064] umount2("./401/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9078] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9073] <... openat resumed>) = 3 [pid 9078] <... prctl resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./401/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9078] setpgid(0, 0 [pid 5064] <... openat resumed>) = 4 [pid 9078] <... setpgid resumed>) = 0 [pid 9073] chdir("./file0" [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] getdents64(4, [pid 9078] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 9078] write(3, "1000", 4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 9078] <... write resumed>) = 4 [pid 5064] close(4) = 0 [pid 5064] rmdir("./401/file0" [pid 9073] <... chdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 9078] close(3) = 0 [pid 9073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9078] symlink("/dev/binderfs", "./binderfs" [pid 9074] <... mount resumed>) = 0 [pid 9073] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] getdents64(3, [pid 9078] <... symlink resumed>) = 0 [pid 9074] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9073] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9074] <... openat resumed>) = 3 [pid 5064] close(3 [pid 9074] chdir("./file0" [pid 5064] <... close resumed>) = 0 [pid 9074] <... chdir resumed>) = 0 [pid 5064] rmdir("./401" [pid 9074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... rmdir resumed>) = 0 [pid 9074] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9078] memfd_create("syzkaller", 0 [pid 9074] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9073] <... open resumed>) = 4 [pid 5064] mkdir("./402", 0777 [pid 5062] <... ioctl resumed>) = 0 [pid 9073] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9078] <... memfd_create resumed>) = 3 [pid 9073] <... open resumed>) = 5 [pid 5064] <... mkdir resumed>) = 0 [pid 5062] close(3 [pid 9073] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... close resumed>) = 0 [pid 9078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 9073] <... mmap resumed>) = 0x20000000 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9073] ftruncate(4, 33587195 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 9080 [ 352.671027][ T9077] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 352.708954][ T9079] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9073] <... ftruncate resumed>) = 0 ./strace-static-x86_64: Process 9080 attached [pid 9073] unlink("./bus" [pid 9080] set_robust_list(0x55555745a660, 24 [pid 9074] <... open resumed>) = 4 [pid 9073] <... unlink resumed>) = 0 [pid 9080] <... set_robust_list resumed>) = 0 [pid 9073] sendfile(-1, -1, NULL, 281474978811909 [pid 9080] chdir("./397" [pid 9073] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9073] exit_group(0) = ? [pid 9074] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 9080] <... chdir resumed>) = 0 [pid 9080] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9073] +++ exited with 0 +++ [pid 9080] <... prctl resumed>) = 0 [pid 9074] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9080] setpgid(0, 0 [pid 9074] <... mmap resumed>) = 0x20000000 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9073, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5063] umount2("./397", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./397", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9080] <... setpgid resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 9074] ftruncate(4, 33587195 [pid 5063] newfstatat(3, "", [pid 9080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9080] <... openat resumed>) = 3 [pid 5063] getdents64(3, [pid 9080] write(3, "1000", 4) = 4 [pid 9074] <... ftruncate resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9080] close(3 [pid 9074] unlink("./bus" [pid 5063] umount2("./397/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9080] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9080] symlink("/dev/binderfs", "./binderfs" [pid 5063] newfstatat(AT_FDCWD, "./397/binderfs", [pid 9080] <... symlink resumed>) = 0 [pid 9078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9080] memfd_create("syzkaller", 0 [pid 5063] unlink("./397/binderfs") = 0 [pid 5063] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9080] <... memfd_create resumed>) = 3 [pid 9080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5064] <... ioctl resumed>) = 0 [pid 9074] <... unlink resumed>) = 0 [pid 9074] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9074] exit_group(0) = ? [pid 5064] close(3 [pid 9078] <... write resumed>) = 2097152 [pid 9074] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9074, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5063] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./403", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./397/file0", [pid 5061] openat(AT_FDCWD, "./403", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5063] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(3, "", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] openat(AT_FDCWD, "./397/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] <... openat resumed>) = 4 [pid 5061] umount2("./403/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9078] munmap(0x7f41e0600000, 138412032 [pid 5063] newfstatat(4, "", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(AT_FDCWD, "./403/binderfs", ./strace-static-x86_64: Process 9081 attached [pid 9080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 9081 [pid 5063] getdents64(4, [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9081] set_robust_list(0x55555745a660, 24 [pid 9078] <... munmap resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] unlink("./403/binderfs") = 0 [pid 9081] <... set_robust_list resumed>) = 0 [pid 5063] getdents64(4, [pid 5061] umount2("./403/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 9081] chdir("./402") = 0 [pid 5063] close(4 [pid 9078] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9081] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9078] <... openat resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./397/file0" [pid 9081] <... prctl resumed>) = 0 [pid 9081] setpgid(0, 0 [pid 9078] ioctl(4, LOOP_SET_FD, 3 [pid 9081] <... setpgid resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 9081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] getdents64(3, [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./403/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./403/file0", [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] close(3 [pid 9081] <... openat resumed>) = 3 [pid 9080] <... write resumed>) = 2097152 [pid 9078] <... ioctl resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] umount2("./403/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9081] write(3, "1000", 4 [pid 9080] munmap(0x7f41e0600000, 138412032 [pid 9078] close(3 [pid 5063] rmdir("./397" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9081] <... write resumed>) = 4 [pid 9081] close(3 [pid 9078] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./403/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9081] <... close resumed>) = 0 [pid 9078] close(4) = 0 [pid 5061] <... openat resumed>) = 4 [pid 9081] symlink("/dev/binderfs", "./binderfs" [pid 9080] <... munmap resumed>) = 0 [pid 9078] mkdir("./file0", 0777 [pid 5063] mkdir("./398", 0777 [pid 5061] newfstatat(4, "", [pid 9081] <... symlink resumed>) = 0 [pid 9080] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9078] <... mkdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9080] <... openat resumed>) = 4 [pid 9078] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] getdents64(4, [pid 9081] memfd_create("syzkaller", 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 9081] <... memfd_create resumed>) = 3 [pid 9080] ioctl(4, LOOP_SET_FD, 3 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] getdents64(4, [pid 9081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./403/file0") = 0 [ 352.872270][ T9078] loop4: detected capacity change from 0 to 4096 [ 352.905213][ T9080] loop1: detected capacity change from 0 to 4096 [pid 9081] <... mmap resumed>) = 0x7f41e0600000 [pid 9080] <... ioctl resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./403") = 0 [pid 5061] mkdir("./404", 0777) = 0 [pid 9080] close(3 [pid 9078] <... mount resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 9080] <... close resumed>) = 0 [pid 9080] close(4) = 0 [pid 9080] mkdir("./file0", 0777) = 0 [pid 9078] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9080] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9078] chdir("./file0" [pid 5061] <... openat resumed>) = 3 [pid 9078] <... chdir resumed>) = 0 [pid 9078] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] ioctl(3, LOOP_CLR_FD [pid 9078] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9078] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9078] <... open resumed>) = 4 [ 352.924010][ T9082] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9078] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 9078] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... ioctl resumed>) = 0 [pid 9078] <... ftruncate resumed>) = 0 [pid 9078] unlink("./bus" [pid 9080] <... mount resumed>) = 0 [pid 9080] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] close(3 [pid 9080] <... openat resumed>) = 3 [pid 9078] <... unlink resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 9080] chdir("./file0" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9078] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9078] exit_group(0) = ? [pid 9080] <... chdir resumed>) = 0 [pid 9080] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 9084 [pid 9080] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 9084 attached [pid 9081] <... write resumed>) = 2097152 [pid 9080] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9084] set_robust_list(0x55555745a660, 24 [pid 9081] munmap(0x7f41e0600000, 138412032 [pid 9084] <... set_robust_list resumed>) = 0 [pid 9081] <... munmap resumed>) = 0 [pid 9080] <... open resumed>) = 4 [pid 9078] +++ exited with 0 +++ [pid 5061] <... ioctl resumed>) = 0 [ 352.991167][ T9083] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9084] chdir("./398") = 0 [pid 9080] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9084] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] close(3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9078, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=3 /* 0.03 s */} --- [pid 9084] setpgid(0, 0 [pid 9081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... close resumed>) = 0 [pid 9081] <... openat resumed>) = 4 [pid 9080] <... open resumed>) = 5 [pid 5065] umount2("./396", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9080] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] openat(AT_FDCWD, "./396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9081] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", [pid 9080] <... mmap resumed>) = 0x20000000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9084] <... setpgid resumed>) = 0 [pid 9084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] getdents64(3, [pid 9084] <... openat resumed>) = 3 ./strace-static-x86_64: Process 9085 attached [pid 9084] write(3, "1000", 4 [pid 9085] set_robust_list(0x55555745a660, 24 [pid 9084] <... write resumed>) = 4 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 9085 [pid 9084] close(3 [pid 9080] ftruncate(4, 33587195 [pid 9085] <... set_robust_list resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9085] chdir("./404" [pid 9084] <... close resumed>) = 0 [pid 5065] umount2("./396/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9085] <... chdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] newfstatat(AT_FDCWD, "./396/binderfs", [pid 9085] <... prctl resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9085] setpgid(0, 0 [pid 9084] symlink("/dev/binderfs", "./binderfs" [pid 5065] unlink("./396/binderfs" [pid 9085] <... setpgid resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 9085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9081] <... ioctl resumed>) = 0 [pid 9085] <... openat resumed>) = 3 [pid 9084] <... symlink resumed>) = 0 [pid 9080] <... ftruncate resumed>) = 0 [pid 9085] write(3, "1000", 4 [pid 9084] memfd_create("syzkaller", 0 [pid 9081] close(3 [pid 5065] <... umount2 resumed>) = 0 [pid 9085] <... write resumed>) = 4 [pid 9084] <... memfd_create resumed>) = 3 [pid 9081] <... close resumed>) = 0 [pid 9085] close(3 [pid 9084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9081] close(4 [pid 5065] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9085] <... close resumed>) = 0 [pid 9084] <... mmap resumed>) = 0x7f41e0600000 [pid 9081] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9085] symlink("/dev/binderfs", "./binderfs" [pid 9081] mkdir("./file0", 0777 [pid 9080] unlink("./bus" [pid 5065] newfstatat(AT_FDCWD, "./396/file0", [pid 9085] <... symlink resumed>) = 0 [pid 9081] <... mkdir resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 353.065582][ T9081] loop3: detected capacity change from 0 to 4096 [pid 9081] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] openat(AT_FDCWD, "./396/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9085] memfd_create("syzkaller", 0 [pid 9084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9080] <... unlink resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 9085] <... memfd_create resumed>) = 3 [pid 9080] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9080] exit_group(0 [pid 9085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9080] <... exit_group resumed>) = ? [pid 9085] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./396/file0" [pid 9081] <... mount resumed>) = 0 [pid 9080] +++ exited with 0 +++ [pid 5065] <... rmdir resumed>) = 0 [pid 9081] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9084] <... write resumed>) = 2097152 [pid 9081] <... openat resumed>) = 3 [pid 5065] getdents64(3, [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9080, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 9081] chdir("./file0" [pid 5062] umount2("./397", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9081] <... chdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./397", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./397/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] close(3 [pid 5062] newfstatat(AT_FDCWD, "./397/binderfs", [pid 5065] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] rmdir("./396" [pid 5062] unlink("./397/binderfs" [pid 9081] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9084] munmap(0x7f41e0600000, 138412032 [pid 9081] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... rmdir resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5062] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] mkdir("./397", 0777 [pid 9085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9084] <... munmap resumed>) = 0 [pid 9081] <... open resumed>) = 4 [pid 5062] <... umount2 resumed>) = 0 [pid 9084] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9081] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... mkdir resumed>) = 0 [pid 9084] <... openat resumed>) = 4 [pid 5062] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9084] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 353.153599][ T9086] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9081] <... open resumed>) = 5 [pid 5065] <... openat resumed>) = 3 [pid 5062] newfstatat(AT_FDCWD, "./397/file0", [pid 5065] ioctl(3, LOOP_CLR_FD [pid 9084] <... ioctl resumed>) = 0 [pid 9085] <... write resumed>) = 2097152 [pid 9081] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9085] munmap(0x7f41e0600000, 138412032 [pid 9084] close(3) = 0 [pid 9081] <... mmap resumed>) = 0x20000000 [pid 5062] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9085] <... munmap resumed>) = 0 [pid 9084] close(4 [pid 9081] ftruncate(4, 33587195 [pid 9085] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9084] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9085] <... openat resumed>) = 4 [pid 9084] mkdir("./file0", 0777 [pid 5062] openat(AT_FDCWD, "./397/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9085] ioctl(4, LOOP_SET_FD, 3 [pid 9081] <... ftruncate resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 9085] <... ioctl resumed>) = 0 [pid 9084] <... mkdir resumed>) = 0 [pid 9081] unlink("./bus" [pid 5062] newfstatat(4, "", [pid 9084] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./397/file0") = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./397") = 0 [pid 9081] <... unlink resumed>) = 0 [pid 9081] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9081] exit_group(0 [pid 5062] mkdir("./398", 0777 [pid 9081] <... exit_group resumed>) = ? [pid 5062] <... mkdir resumed>) = 0 [pid 9085] close(3) = 0 [pid 9085] close(4) = 0 [pid 9085] mkdir("./file0", 0777 [ 353.201084][ T9084] loop2: detected capacity change from 0 to 4096 [ 353.229226][ T9085] loop0: detected capacity change from 0 to 4096 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 9081] +++ exited with 0 +++ [pid 9085] <... mkdir resumed>) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9081, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 9085] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] umount2("./402", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./402", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./402/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... ioctl resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./402/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9084] <... mount resumed>) = 0 [pid 5065] close(3 [pid 5064] unlink("./402/binderfs" [pid 9084] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... close resumed>) = 0 [pid 9084] <... openat resumed>) = 3 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 9089 attached [pid 9084] chdir("./file0" [pid 5064] <... unlink resumed>) = 0 [pid 9084] <... chdir resumed>) = 0 [pid 5064] umount2("./402/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9089] set_robust_list(0x55555745a660, 24 [pid 9084] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 9089 [pid 9089] <... set_robust_list resumed>) = 0 [pid 9084] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9089] chdir("./397" [pid 9084] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9089] <... chdir resumed>) = 0 [pid 9089] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9089] setpgid(0, 0 [pid 9085] <... mount resumed>) = 0 [pid 9089] <... setpgid resumed>) = 0 [pid 9089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9085] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9084] <... open resumed>) = 4 [pid 5064] <... umount2 resumed>) = 0 [pid 9084] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 9085] <... openat resumed>) = 3 [pid 9089] write(3, "1000", 4 [pid 9084] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9085] chdir("./file0") = 0 [pid 9089] <... write resumed>) = 4 [pid 9084] <... mmap resumed>) = 0x20000000 [pid 9089] close(3) = 0 [pid 9089] symlink("/dev/binderfs", "./binderfs" [pid 9084] ftruncate(4, 33587195 [pid 9089] <... symlink resumed>) = 0 [pid 9085] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9089] memfd_create("syzkaller", 0 [pid 9084] <... ftruncate resumed>) = 0 [pid 9085] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9089] <... memfd_create resumed>) = 3 [pid 9089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [ 353.303197][ T9087] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 353.319603][ T9088] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9084] unlink("./bus" [pid 5064] umount2("./402/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./402/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./402/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./402/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 9084] <... unlink resumed>) = 0 [pid 5064] close(4 [pid 9084] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... close resumed>) = 0 [pid 9084] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9084] exit_group(0 [pid 5064] rmdir("./402/file0" [pid 9084] <... exit_group resumed>) = ? [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, [pid 9085] <... open resumed>) = 4 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9085] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] close(3 [pid 5062] <... ioctl resumed>) = 0 [pid 9084] +++ exited with 0 +++ [pid 5064] <... close resumed>) = 0 [pid 9085] <... open resumed>) = 5 [pid 5064] rmdir("./402" [pid 5062] close(3 [pid 9085] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... rmdir resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9084, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5064] mkdir("./403", 0777 [pid 5063] umount2("./398", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] openat(AT_FDCWD, "./398", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] newfstatat(3, "", [pid 9085] <... mmap resumed>) = 0x20000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./398/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./398/binderfs", [pid 9085] ftruncate(4, 33587195 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./398/binderfs") = 0 [pid 5063] umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9085] <... ftruncate resumed>) = 0 ./strace-static-x86_64: Process 9090 attached [pid 9089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9090] set_robust_list(0x55555745a660, 24) = 0 [pid 9090] chdir("./398" [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 9090 [pid 9090] <... chdir resumed>) = 0 [pid 9090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9085] unlink("./bus" [pid 9090] setpgid(0, 0) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 9090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9085] <... unlink resumed>) = 0 [pid 5063] umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9090] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9085] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5063] newfstatat(AT_FDCWD, "./398/file0", [pid 9085] exit_group(0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9090] write(3, "1000", 4 [pid 9085] <... exit_group resumed>) = ? [pid 5063] umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9090] <... write resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9090] close(3) = 0 [pid 5063] openat(AT_FDCWD, "./398/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9090] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] <... openat resumed>) = 4 [pid 9090] memfd_create("syzkaller", 0) = 3 [pid 5063] newfstatat(4, "", [pid 9090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9090] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] getdents64(4, [pid 9089] <... write resumed>) = 2097152 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 9089] munmap(0x7f41e0600000, 138412032 [pid 9090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9085] +++ exited with 0 +++ [pid 5063] close(4) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9085, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 5063] rmdir("./398/file0" [pid 5061] umount2("./404", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./404", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9089] <... munmap resumed>) = 0 [pid 5063] getdents64(3, [pid 5061] <... openat resumed>) = 3 [pid 9089] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... ioctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] newfstatat(3, "", [pid 9089] <... openat resumed>) = 4 [pid 5063] close(3 [pid 5064] close(3 [pid 9089] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] rmdir("./398") = 0 [pid 5063] mkdir("./399", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 9089] <... ioctl resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] getdents64(3, [pid 9090] <... write resumed>) = 2097152 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./404/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./404/binderfs", [pid 9090] munmap(0x7f41e0600000, 138412032 [pid 9089] close(3 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 9091 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 9091 attached [pid 9090] <... munmap resumed>) = 0 [pid 9089] <... close resumed>) = 0 [pid 5061] unlink("./404/binderfs") = 0 [pid 5061] umount2("./404/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9091] set_robust_list(0x55555745a660, 24 [pid 9090] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9089] close(4 [pid 9091] <... set_robust_list resumed>) = 0 [pid 9090] <... openat resumed>) = 4 [pid 9089] <... close resumed>) = 0 [pid 9091] chdir("./403") = 0 [pid 9091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9090] ioctl(4, LOOP_SET_FD, 3 [pid 9091] setpgid(0, 0) = 0 [ 353.518737][ T9089] loop4: detected capacity change from 0 to 4096 [pid 9091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9089] mkdir("./file0", 0777 [pid 9091] <... openat resumed>) = 3 [pid 9091] write(3, "1000", 4) = 4 [pid 9091] close(3) = 0 [pid 9089] <... mkdir resumed>) = 0 [pid 9091] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9089] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9091] memfd_create("syzkaller", 0) = 3 [pid 9091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./404/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./404/file0", [pid 9090] <... ioctl resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9090] close(3 [pid 5061] umount2("./404/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9090] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9090] close(4 [pid 5061] openat(AT_FDCWD, "./404/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9090] <... close resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 9090] mkdir("./file0", 0777 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 9090] <... mkdir resumed>) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./404/file0") = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9090] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] close(3) = 0 [pid 5061] rmdir("./404") = 0 [pid 5063] close(3) = 0 [pid 5061] mkdir("./405", 0777 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... mkdir resumed>) = 0 [pid 9089] <... mount resumed>) = 0 ./strace-static-x86_64: Process 9093 attached [pid 9089] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9093] set_robust_list(0x55555745a660, 24 [pid 9089] <... openat resumed>) = 3 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 9093 [pid 5061] <... openat resumed>) = 3 [pid 9089] chdir("./file0" [pid 9093] <... set_robust_list resumed>) = 0 [pid 9089] <... chdir resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 9089] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9089] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9093] chdir("./399") = 0 [pid 9093] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9093] setpgid(0, 0) = 0 [pid 9093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9089] <... open resumed>) = 4 [pid 9093] <... openat resumed>) = 3 [pid 9089] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9093] write(3, "1000", 4) = 4 [pid 9093] close(3 [pid 9089] <... open resumed>) = 5 [pid 9093] <... close resumed>) = 0 [pid 9089] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [ 353.578505][ T9090] loop1: detected capacity change from 0 to 4096 [ 353.600634][ T9092] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9093] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9089] <... mmap resumed>) = 0x20000000 [pid 9093] memfd_create("syzkaller", 0) = 3 [pid 9093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 9091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9089] ftruncate(4, 33587195) = 0 [pid 9089] unlink("./bus") = 0 [pid 9089] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9089] exit_group(0 [pid 9090] <... mount resumed>) = 0 [pid 9089] <... exit_group resumed>) = ? [pid 9090] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9090] chdir("./file0") = 0 [pid 9090] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9090] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9089] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9089, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] umount2("./397", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9090] <... open resumed>) = 4 [pid 5065] openat(AT_FDCWD, "./397", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9090] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... openat resumed>) = 3 [pid 9090] <... open resumed>) = 5 [pid 5065] newfstatat(3, "", [pid 9090] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9090] <... mmap resumed>) = 0x20000000 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] umount2("./397/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9090] ftruncate(4, 33587195 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./397/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 353.684010][ T9094] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9090] <... ftruncate resumed>) = 0 [pid 5065] unlink("./397/binderfs" [pid 5061] <... ioctl resumed>) = 0 [pid 9090] unlink("./bus" [pid 5065] <... unlink resumed>) = 0 [pid 9091] <... write resumed>) = 2097152 [pid 5065] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9090] <... unlink resumed>) = 0 [pid 9090] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 9095 [pid 9090] exit_group(0./strace-static-x86_64: Process 9095 attached [pid 9095] set_robust_list(0x55555745a660, 24) = 0 [pid 9090] <... exit_group resumed>) = ? [pid 9095] chdir("./405") = 0 [pid 9095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9095] setpgid(0, 0) = 0 [pid 9095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9090] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9090, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5062] umount2("./398", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./398", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 9095] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 9095] write(3, "1000", 4 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9095] <... write resumed>) = 4 [pid 5062] umount2("./398/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./398/binderfs", [pid 9095] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./398/binderfs") = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5062] umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9095] <... close resumed>) = 0 [pid 9095] symlink("/dev/binderfs", "./binderfs" [pid 9091] munmap(0x7f41e0600000, 138412032 [pid 9095] <... symlink resumed>) = 0 [pid 9095] memfd_create("syzkaller", 0) = 3 [pid 9091] <... munmap resumed>) = 0 [pid 9095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 9091] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5065] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9091] ioctl(4, LOOP_SET_FD, 3 [pid 5065] newfstatat(AT_FDCWD, "./397/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9093] <... write resumed>) = 2097152 [pid 9091] <... ioctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9093] munmap(0x7f41e0600000, 138412032 [pid 9091] close(3 [pid 5065] openat(AT_FDCWD, "./397/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9091] <... close resumed>) = 0 [pid 9091] close(4 [pid 5065] <... openat resumed>) = 4 [pid 9093] <... munmap resumed>) = 0 [pid 9091] <... close resumed>) = 0 [pid 9091] mkdir("./file0", 0777 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9093] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9091] <... mkdir resumed>) = 0 [pid 5065] getdents64(4, [pid 9093] <... openat resumed>) = 4 [pid 9093] ioctl(4, LOOP_SET_FD, 3 [pid 9091] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 9093] <... ioctl resumed>) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./397/file0" [pid 9093] close(3) = 0 [pid 9093] close(4) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 9095] <... write resumed>) = 2097152 [pid 9093] mkdir("./file0", 0777 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./397") = 0 [pid 5065] mkdir("./398", 0777 [pid 9093] <... mkdir resumed>) = 0 [ 353.800244][ T9091] loop3: detected capacity change from 0 to 4096 [ 353.832281][ T9093] loop2: detected capacity change from 0 to 4096 [pid 9093] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9095] munmap(0x7f41e0600000, 138412032 [pid 5065] <... mkdir resumed>) = 0 [pid 9095] <... munmap resumed>) = 0 [pid 9095] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9091] <... mount resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9095] ioctl(4, LOOP_SET_FD, 3 [pid 9091] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... openat resumed>) = 3 [pid 9091] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 9091] chdir("./file0") = 0 [pid 9091] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9091] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9093] <... mount resumed>) = 0 [pid 9093] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9093] chdir("./file0") = 0 [pid 9093] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9093] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9095] <... ioctl resumed>) = 0 [pid 9095] close(3 [pid 9091] <... open resumed>) = 4 [pid 9095] <... close resumed>) = 0 [pid 9095] close(4 [pid 9091] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9095] <... close resumed>) = 0 [pid 9095] mkdir("./file0", 0777) = 0 [pid 9091] <... open resumed>) = 5 [pid 9093] <... open resumed>) = 4 [pid 9095] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9093] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9091] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 5 [pid 9091] ftruncate(4, 33587195 [pid 9093] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 9093] ftruncate(4, 33587195 [pid 9091] unlink("./bus" [pid 9093] <... ftruncate resumed>) = 0 [ 353.879953][ T9096] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 353.898273][ T9097] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 353.910183][ T9095] loop0: detected capacity change from 0 to 4096 [pid 9093] unlink("./bus" [pid 9095] <... mount resumed>) = 0 [pid 9095] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9091] <... unlink resumed>) = 0 [pid 9091] sendfile(-1, -1, NULL, 281474978811909 [pid 9095] chdir("./file0" [pid 9091] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9095] <... chdir resumed>) = 0 [pid 9091] exit_group(0 [pid 9093] <... unlink resumed>) = 0 [pid 9095] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9093] sendfile(-1, -1, NULL, 281474978811909 [pid 9091] <... exit_group resumed>) = ? [pid 9093] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9095] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9093] exit_group(0 [pid 9095] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9093] <... exit_group resumed>) = ? [ 353.968295][ T9098] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] <... ioctl resumed>) = 0 [pid 9095] <... open resumed>) = 4 [pid 9091] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9091, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 9093] +++ exited with 0 +++ [pid 9095] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9093, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5064] umount2("./403", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9095] <... open resumed>) = 5 [pid 5065] close(3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9095] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] openat(AT_FDCWD, "./403", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] umount2("./399", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] newfstatat(3, "", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./399", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 9099 attached [pid 9099] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 9099 [pid 9099] <... set_robust_list resumed>) = 0 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9095] <... mmap resumed>) = 0x20000000 [pid 5064] getdents64(3, [pid 5063] getdents64(3, [pid 9099] chdir("./398") = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9099] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9095] ftruncate(4, 33587195 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./399/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9099] <... prctl resumed>) = 0 [pid 5064] umount2("./403/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9099] setpgid(0, 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./399/binderfs", [pid 9099] <... setpgid resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./403/binderfs", [pid 9099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9099] <... openat resumed>) = 3 [pid 9099] write(3, "1000", 4) = 4 [pid 9099] close(3) = 0 [pid 9099] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9099] memfd_create("syzkaller", 0) = 3 [pid 5064] unlink("./403/binderfs" [pid 5063] unlink("./399/binderfs" [ 354.010581][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 354.010599][ T28] audit: type=1800 audit(1708423506.540:6020): pid=9095 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [pid 9099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5064] <... unlink resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9095] <... ftruncate resumed>) = 0 [pid 5064] umount2("./403/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9095] unlink("./bus" [pid 9099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9095] <... unlink resumed>) = 0 [pid 9095] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... umount2 resumed>) = 0 [pid 9095] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5063] <... umount2 resumed>) = 0 [pid 9095] exit_group(0) = ? [pid 5064] umount2("./403/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./403/file0", [pid 5063] newfstatat(AT_FDCWD, "./399/file0", [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./403/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./399/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", [pid 5064] openat(AT_FDCWD, "./403/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5063] getdents64(4, [pid 5064] newfstatat(4, "", [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 9095] +++ exited with 0 +++ [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5064] getdents64(4, [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] close(4 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9095, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5063] <... close resumed>) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5064] getdents64(4, [pid 5063] rmdir("./399/file0" [pid 5061] <... restart_syscall resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [ 354.070308][ T28] audit: type=1800 audit(1708423506.570:6021): pid=9095 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 354.094122][ T28] audit: type=1800 audit(1708423506.570:6022): pid=9095 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [pid 5064] close(4 [pid 5063] <... rmdir resumed>) = 0 [pid 9099] <... write resumed>) = 2097152 [pid 5064] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5061] umount2("./405", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9099] munmap(0x7f41e0600000, 138412032 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./405", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] rmdir("./403/file0" [pid 5063] close(3 [pid 5061] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 5063] rmdir("./399" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9099] <... munmap resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 9099] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9099] <... openat resumed>) = 4 [pid 5064] getdents64(3, [pid 5061] umount2("./405/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9099] ioctl(4, LOOP_SET_FD, 3 [pid 5064] close(3 [pid 5063] mkdir("./400", 0777 [pid 5061] newfstatat(AT_FDCWD, "./405/binderfs", [pid 5063] <... mkdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./405/binderfs") = 0 [pid 5061] umount2("./405/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9099] <... ioctl resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 9099] close(3 [pid 5064] rmdir("./403" [pid 5063] <... openat resumed>) = 3 [pid 5061] umount2("./405/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9099] <... close resumed>) = 0 [pid 9099] close(4 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9099] <... close resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./405/file0", [pid 9099] mkdir("./file0", 0777 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9099] <... mkdir resumed>) = 0 [pid 5064] mkdir("./404", 0777 [pid 9099] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] umount2("./405/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./405/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] ioctl(3, LOOP_CLR_FD [ 354.163226][ T9099] loop4: detected capacity change from 0 to 4096 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./405/file0") = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./405") = 0 [pid 5061] mkdir("./406", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9099] <... mount resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 9099] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] close(3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 9099] chdir("./file0" [pid 5063] <... close resumed>) = 0 [pid 9099] <... chdir resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9099] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 9101 attached [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 9101 [pid 9101] set_robust_list(0x55555745a660, 24 [pid 9099] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9101] <... set_robust_list resumed>) = 0 [pid 9101] chdir("./400" [pid 9099] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9101] <... chdir resumed>) = 0 [pid 9101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9101] setpgid(0, 0) = 0 [pid 9101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9099] <... open resumed>) = 4 [pid 9101] <... openat resumed>) = 3 [pid 9099] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [ 354.251325][ T9100] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9101] write(3, "1000", 4 [pid 5064] <... ioctl resumed>) = 0 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 9102 ./strace-static-x86_64: Process 9102 attached [pid 9102] set_robust_list(0x55555745a660, 24 [pid 9101] <... write resumed>) = 4 [pid 9102] <... set_robust_list resumed>) = 0 [pid 9101] close(3 [pid 9099] <... open resumed>) = 5 [pid 9101] <... close resumed>) = 0 [pid 9099] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9102] chdir("./404" [pid 9101] symlink("/dev/binderfs", "./binderfs" [pid 9099] <... mmap resumed>) = 0x20000000 [pid 9102] <... chdir resumed>) = 0 [pid 9101] <... symlink resumed>) = 0 [pid 9099] ftruncate(4, 33587195 [pid 9102] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9102] setpgid(0, 0) = 0 [pid 9102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9102] write(3, "1000", 4) = 4 [pid 9102] close(3) = 0 [pid 9102] symlink("/dev/binderfs", "./binderfs") = 0 [ 354.291574][ T28] audit: type=1800 audit(1708423506.820:6023): pid=9099 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [pid 9101] memfd_create("syzkaller", 0 [pid 9099] <... ftruncate resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 9102] memfd_create("syzkaller", 0) = 3 [pid 9102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 9099] unlink("./bus" [pid 5061] close(3 [pid 9101] <... memfd_create resumed>) = 3 [pid 9101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... close resumed>) = 0 [pid 9101] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 9103 [ 354.332527][ T28] audit: type=1800 audit(1708423506.840:6024): pid=9099 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 ./strace-static-x86_64: Process 9103 attached [pid 9103] set_robust_list(0x55555745a660, 24 [pid 9099] <... unlink resumed>) = 0 [pid 9099] sendfile(-1, -1, NULL, 281474978811909 [pid 9103] <... set_robust_list resumed>) = 0 [pid 9101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9099] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9099] exit_group(0) = ? [pid 9103] chdir("./406" [pid 9102] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9103] <... chdir resumed>) = 0 [pid 9099] +++ exited with 0 +++ [pid 9103] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9101] <... write resumed>) = 2097152 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9099, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 9103] <... prctl resumed>) = 0 [pid 9101] munmap(0x7f41e0600000, 138412032 [pid 9103] setpgid(0, 0 [pid 9101] <... munmap resumed>) = 0 [pid 5065] umount2("./398", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./398", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9103] <... setpgid resumed>) = 0 [pid 9103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... openat resumed>) = 3 [pid 9103] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", [pid 9103] write(3, "1000", 4 [pid 9101] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9103] <... write resumed>) = 4 [pid 9101] <... openat resumed>) = 4 [pid 5065] getdents64(3, [pid 9103] close(3 [pid 9101] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [ 354.381731][ T28] audit: type=1800 audit(1708423506.850:6025): pid=9099 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [pid 9103] <... close resumed>) = 0 [pid 5065] umount2("./398/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./398/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9103] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9103] memfd_create("syzkaller", 0) = 3 [pid 5065] unlink("./398/binderfs" [pid 9103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9102] <... write resumed>) = 2097152 [pid 9101] <... ioctl resumed>) = 0 [pid 9101] close(3) = 0 [pid 9101] close(4) = 0 [pid 9101] mkdir("./file0", 0777) = 0 [pid 9101] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9102] munmap(0x7f41e0600000, 138412032 [pid 5065] <... umount2 resumed>) = 0 [pid 9102] <... munmap resumed>) = 0 [pid 9102] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9102] <... openat resumed>) = 4 [ 354.435845][ T9101] loop2: detected capacity change from 0 to 4096 [pid 9102] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9102] <... ioctl resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./398/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./398/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", [pid 9102] close(3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9102] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 9102] close(4 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 9102] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 9102] mkdir("./file0", 0777 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 9102] <... mkdir resumed>) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./398/file0") = 0 [pid 9102] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9101] <... mount resumed>) = 0 [pid 5065] getdents64(3, [pid 9101] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9101] chdir("./file0") = 0 [pid 9101] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] close(3) = 0 [pid 5065] rmdir("./398" [pid 9101] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... rmdir resumed>) = 0 [pid 9101] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] mkdir("./399", 0777) = 0 [ 354.476183][ T9102] loop3: detected capacity change from 0 to 4096 [ 354.486236][ T9104] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9103] <... write resumed>) = 2097152 [pid 9101] <... open resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 9103] munmap(0x7f41e0600000, 138412032 [pid 9101] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 9103] <... munmap resumed>) = 0 [pid 9101] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9101] +++ exited with 0 +++ [pid 9103] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9101, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5063] umount2("./400", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9103] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./400", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9103] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", [pid 9102] <... mount resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9102] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./400/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./400/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./400/binderfs") = 0 [ 354.522017][ T28] audit: type=1800 audit(1708423507.050:6026): pid=9101 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 354.553463][ T9105] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 354.556309][ T9103] loop0: detected capacity change from 0 to 4096 [pid 5063] umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9102] <... openat resumed>) = 3 [pid 9103] <... ioctl resumed>) = 0 [pid 9102] chdir("./file0" [pid 9103] close(3) = 0 [pid 9103] close(4) = 0 [pid 9102] <... chdir resumed>) = 0 [pid 9102] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9102] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9103] mkdir("./file0", 0777) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9103] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] newfstatat(AT_FDCWD, "./400/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9102] <... open resumed>) = 4 [ 354.578343][ T28] audit: type=1800 audit(1708423507.050:6027): pid=9101 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 354.598788][ T28] audit: type=1800 audit(1708423507.050:6028): pid=9101 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [pid 9102] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9102] <... open resumed>) = 5 [pid 5063] openat(AT_FDCWD, "./400/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9102] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... openat resumed>) = 4 [pid 9102] <... mmap resumed>) = 0x20000000 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 9103] <... mount resumed>) = 0 [pid 9103] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 9103] <... openat resumed>) = 3 [pid 9102] ftruncate(4, 33587195 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 9103] chdir("./file0" [pid 5063] close(4 [pid 9103] <... chdir resumed>) = 0 [pid 9102] <... ftruncate resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 9103] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] rmdir("./400/file0") = 0 [pid 9103] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9103] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9102] unlink("./bus" [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9102] <... unlink resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 9102] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] close(3 [pid 9102] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5063] <... close resumed>) = 0 [pid 9102] exit_group(0) = ? [ 354.633507][ T28] audit: type=1800 audit(1708423507.160:6029): pid=9102 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 354.646698][ T9106] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] rmdir("./400" [pid 5065] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 9102] +++ exited with 0 +++ [pid 5063] mkdir("./401", 0777 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9102, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./404", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 9107 attached [pid 9103] <... open resumed>) = 4 [pid 5063] <... mkdir resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 9107 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9103] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] openat(AT_FDCWD, "./404", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 9107] set_robust_list(0x55555745a660, 24 [pid 9103] <... open resumed>) = 5 [pid 5064] newfstatat(3, "", [pid 5063] ioctl(3, LOOP_CLR_FD [pid 9103] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9107] <... set_robust_list resumed>) = 0 [pid 9103] <... mmap resumed>) = 0x20000000 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 9107] chdir("./399" [pid 9103] ftruncate(4, 33587195 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9107] <... chdir resumed>) = 0 [pid 5064] umount2("./404/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9107] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9107] setpgid(0, 0 [pid 5064] newfstatat(AT_FDCWD, "./404/binderfs", [pid 9107] <... setpgid resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] unlink("./404/binderfs" [pid 9103] <... ftruncate resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 9107] <... openat resumed>) = 3 [pid 9107] write(3, "1000", 4 [pid 5064] umount2("./404/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9107] <... write resumed>) = 4 [pid 9107] close(3 [pid 9103] unlink("./bus" [pid 9107] <... close resumed>) = 0 [pid 9107] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9103] <... unlink resumed>) = 0 [pid 9107] memfd_create("syzkaller", 0 [pid 9103] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... umount2 resumed>) = 0 [pid 9107] <... memfd_create resumed>) = 3 [pid 9103] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] umount2("./404/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9107] <... mmap resumed>) = 0x7f41e0600000 [pid 9103] exit_group(0 [pid 5064] newfstatat(AT_FDCWD, "./404/file0", [pid 9103] <... exit_group resumed>) = ? [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./404/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./404/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 9103] +++ exited with 0 +++ [pid 5064] newfstatat(4, "", [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9103, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./406", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./406", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./406/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./406/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./406/binderfs") = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] umount2("./406/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 9107] <... write resumed>) = 2097152 [pid 5064] close(4 [pid 9107] munmap(0x7f41e0600000, 138412032 [pid 5064] <... close resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] rmdir("./404/file0" [pid 9107] <... munmap resumed>) = 0 [pid 9107] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9107] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 9108 [pid 9107] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 9108 attached [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 9108] set_robust_list(0x55555745a660, 24 [pid 5064] close(3 [pid 9108] <... set_robust_list resumed>) = 0 [pid 9107] close(3 [pid 5064] <... close resumed>) = 0 [pid 5061] umount2("./406/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9108] chdir("./401" [pid 9107] <... close resumed>) = 0 [pid 5064] rmdir("./404" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9107] close(4 [pid 5064] <... rmdir resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./406/file0", [pid 9108] <... chdir resumed>) = 0 [pid 9107] <... close resumed>) = 0 [pid 5064] mkdir("./405", 0777 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9108] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9107] mkdir("./file0", 0777 [pid 5064] <... mkdir resumed>) = 0 [pid 5061] umount2("./406/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9108] <... prctl resumed>) = 0 [pid 9107] <... mkdir resumed>) = 0 [pid 9108] setpgid(0, 0 [pid 9107] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9108] <... setpgid resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "./406/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5061] <... openat resumed>) = 4 [ 354.846324][ T9107] loop4: detected capacity change from 0 to 4096 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9108] <... openat resumed>) = 3 [pid 9107] <... mount resumed>) = 0 [pid 9107] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9107] chdir("./file0" [pid 9108] write(3, "1000", 4 [pid 9107] <... chdir resumed>) = 0 [pid 9108] <... write resumed>) = 4 [pid 9107] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] getdents64(4, [pid 9107] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9108] close(3 [pid 9107] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 9108] <... close resumed>) = 0 [pid 5061] close(4 [pid 9108] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./406/file0" [pid 9108] <... symlink resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 9108] memfd_create("syzkaller", 0 [pid 9107] <... open resumed>) = 4 [pid 9107] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9108] <... memfd_create resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] close(3 [pid 9108] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] <... close resumed>) = 0 [pid 9107] <... open resumed>) = 5 [pid 5061] rmdir("./406" [pid 9107] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... ioctl resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [ 354.898316][ T9109] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] mkdir("./407", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 9107] <... mmap resumed>) = 0x20000000 [pid 5064] close(3 [pid 9107] ftruncate(4, 33587195 [pid 9108] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... close resumed>) = 0 [pid 9107] <... ftruncate resumed>) = 0 [pid 9107] unlink("./bus" [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 9110 ./strace-static-x86_64: Process 9110 attached [pid 9110] set_robust_list(0x55555745a660, 24) = 0 [pid 9107] <... unlink resumed>) = 0 [pid 9110] chdir("./405" [pid 9107] sendfile(-1, -1, NULL, 281474978811909 [pid 9110] <... chdir resumed>) = 0 [pid 9107] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9110] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9107] exit_group(0 [pid 9110] <... prctl resumed>) = 0 [pid 9107] <... exit_group resumed>) = ? [pid 9110] setpgid(0, 0 [pid 9108] <... write resumed>) = 2097152 [pid 9110] <... setpgid resumed>) = 0 [pid 9110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9108] munmap(0x7f41e0600000, 138412032 [pid 9110] <... openat resumed>) = 3 [pid 9110] write(3, "1000", 4) = 4 [pid 9110] close(3 [pid 9108] <... munmap resumed>) = 0 [pid 9110] <... close resumed>) = 0 [pid 9107] +++ exited with 0 +++ [pid 9110] symlink("/dev/binderfs", "./binderfs" [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9107, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 9110] <... symlink resumed>) = 0 [pid 5065] umount2("./399", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9110] memfd_create("syzkaller", 0 [pid 5065] openat(AT_FDCWD, "./399", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9110] <... memfd_create resumed>) = 3 [pid 9110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9108] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... openat resumed>) = 3 [pid 9110] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] newfstatat(3, "", [pid 9108] <... openat resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9108] ioctl(4, LOOP_SET_FD, 3 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./399/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./399/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5065] unlink("./399/binderfs") = 0 [pid 5065] umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9108] <... ioctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9108] close(3) = 0 [pid 9108] close(4) = 0 [pid 9108] mkdir("./file0", 0777) = 0 [pid 5065] umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9108] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 9111 attached [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 9111 [pid 5065] newfstatat(AT_FDCWD, "./399/file0", [pid 9111] set_robust_list(0x55555745a660, 24 [pid 9110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9111] <... set_robust_list resumed>) = 0 [pid 5065] umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9111] chdir("./407" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9111] <... chdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./399/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9111] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... openat resumed>) = 4 [pid 9111] <... prctl resumed>) = 0 [pid 9111] setpgid(0, 0) = 0 [pid 5065] newfstatat(4, "", [pid 9111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9111] <... openat resumed>) = 3 [pid 5065] getdents64(4, [pid 9111] write(3, "1000", 4 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 9111] <... write resumed>) = 4 [pid 9111] close(3 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./399/file0" [pid 9111] <... close resumed>) = 0 [pid 9111] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 9111] memfd_create("syzkaller", 0 [pid 5065] getdents64(3, [pid 9111] <... memfd_create resumed>) = 3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] close(3 [pid 9111] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./399") = 0 [ 355.027234][ T9108] loop2: detected capacity change from 0 to 4096 [pid 5065] mkdir("./400", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 9110] <... write resumed>) = 2097152 [pid 9108] <... mount resumed>) = 0 [pid 9108] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9110] munmap(0x7f41e0600000, 138412032 [pid 9108] <... openat resumed>) = 3 [pid 9108] chdir("./file0") = 0 [pid 9108] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9108] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9111] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9110] <... munmap resumed>) = 0 [pid 9110] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9108] <... open resumed>) = 4 [pid 9110] <... openat resumed>) = 4 [pid 9108] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [ 355.099532][ T9112] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9110] ioctl(4, LOOP_SET_FD, 3 [pid 9108] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... ioctl resumed>) = 0 [pid 9110] <... ioctl resumed>) = 0 [pid 5065] close(3 [pid 9110] close(3 [pid 5065] <... close resumed>) = 0 [pid 9110] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9108] <... unlink resumed>) = 0 [pid 9108] sendfile(-1, -1, NULL, 281474978811909 [pid 9110] close(4 [pid 9108] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9110] <... close resumed>) = 0 ./strace-static-x86_64: Process 9113 attached [pid 9110] mkdir("./file0", 0777 [pid 9108] exit_group(0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 9113 [pid 9108] <... exit_group resumed>) = ? [pid 9111] <... write resumed>) = 2097152 [pid 9113] set_robust_list(0x55555745a660, 24 [pid 9111] munmap(0x7f41e0600000, 138412032 [pid 9110] <... mkdir resumed>) = 0 [pid 9113] <... set_robust_list resumed>) = 0 [pid 9113] chdir("./400") = 0 [pid 9110] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9111] <... munmap resumed>) = 0 [pid 9113] setpgid(0, 0) = 0 [pid 9113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9111] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9108] +++ exited with 0 +++ [pid 9113] <... openat resumed>) = 3 [pid 9111] <... openat resumed>) = 4 [ 355.159086][ T9110] loop3: detected capacity change from 0 to 4096 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9108, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 9111] ioctl(4, LOOP_SET_FD, 3 [pid 9113] write(3, "1000", 4 [pid 5063] umount2("./401", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9113] <... write resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9113] close(3 [pid 5063] openat(AT_FDCWD, "./401", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9113] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 9113] symlink("/dev/binderfs", "./binderfs" [pid 5063] newfstatat(3, "", [pid 9113] <... symlink resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 9113] memfd_create("syzkaller", 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./401/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./401/binderfs", [pid 9113] <... memfd_create resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9111] <... ioctl resumed>) = 0 [pid 5063] unlink("./401/binderfs" [pid 9113] <... mmap resumed>) = 0x7f41e0600000 [pid 9111] close(3) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 9111] close(4) = 0 [pid 5063] umount2("./401/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9111] mkdir("./file0", 0777) = 0 [pid 9110] <... mount resumed>) = 0 [pid 9110] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9110] chdir("./file0") = 0 [pid 9110] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9110] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... umount2 resumed>) = 0 [pid 9111] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] umount2("./401/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./401/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./401/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./401/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./401/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./401") = 0 [pid 5063] mkdir("./402", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [ 355.207153][ T9111] loop0: detected capacity change from 0 to 4096 [ 355.233487][ T9114] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9111] <... mount resumed>) = 0 [pid 9111] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9110] <... open resumed>) = 4 [pid 9111] chdir("./file0") = 0 [pid 9111] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9110] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 9113] <... write resumed>) = 2097152 [pid 9111] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9110] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9113] munmap(0x7f41e0600000, 138412032 [pid 9111] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9110] <... mmap resumed>) = 0x20000000 [pid 9110] ftruncate(4, 33587195 [pid 9113] <... munmap resumed>) = 0 [pid 9111] <... open resumed>) = 4 [pid 9110] <... ftruncate resumed>) = 0 [pid 9111] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9110] unlink("./bus" [pid 9111] <... open resumed>) = 5 [pid 9111] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9113] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9110] <... unlink resumed>) = 0 [ 355.302810][ T9115] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9110] sendfile(-1, -1, NULL, 281474978811909 [pid 9113] <... openat resumed>) = 4 [pid 9111] <... mmap resumed>) = 0x20000000 [pid 9110] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5063] <... ioctl resumed>) = 0 [pid 9113] ioctl(4, LOOP_SET_FD, 3 [pid 9111] ftruncate(4, 33587195 [pid 9110] exit_group(0) = ? [pid 5063] close(3 [pid 9113] <... ioctl resumed>) = 0 [pid 9111] <... ftruncate resumed>) = 0 [pid 9110] +++ exited with 0 +++ [pid 5063] <... close resumed>) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9110, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=5 /* 0.05 s */} --- [pid 5064] umount2("./405", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./405", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 9113] close(3 [pid 9111] unlink("./bus" [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./405/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./405/binderfs", [pid 9113] <... close resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9113] close(4 [pid 5064] unlink("./405/binderfs") = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] umount2("./405/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9113] <... close resumed>) = 0 [pid 9113] mkdir("./file0", 0777./strace-static-x86_64: Process 9116 attached [pid 9111] <... unlink resumed>) = 0 [pid 9116] set_robust_list(0x55555745a660, 24 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 9116 [pid 9116] <... set_robust_list resumed>) = 0 [pid 9113] <... mkdir resumed>) = 0 [pid 9111] sendfile(-1, -1, NULL, 281474978811909 [pid 9116] chdir("./402" [pid 9113] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9111] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [ 355.363655][ T9113] loop4: detected capacity change from 0 to 4096 [pid 9111] exit_group(0 [pid 9116] <... chdir resumed>) = 0 [pid 9111] <... exit_group resumed>) = ? [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./405/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./405/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9116] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] umount2("./405/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9116] <... prctl resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./405/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", [pid 9116] setpgid(0, 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, [pid 9116] <... setpgid resumed>) = 0 [pid 9116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 9116] <... openat resumed>) = 3 [pid 5064] close(4 [pid 9116] write(3, "1000", 4) = 4 [pid 9111] +++ exited with 0 +++ [pid 5064] <... close resumed>) = 0 [pid 9116] close(3) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9111, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 9116] symlink("/dev/binderfs", "./binderfs" [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 9116] <... symlink resumed>) = 0 [pid 9116] memfd_create("syzkaller", 0 [pid 9113] <... mount resumed>) = 0 [pid 5064] rmdir("./405/file0" [pid 9113] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] umount2("./407", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9116] <... memfd_create resumed>) = 3 [pid 9113] <... openat resumed>) = 3 [pid 9113] chdir("./file0" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./407", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9113] <... chdir resumed>) = 0 [pid 9116] <... mmap resumed>) = 0x7f41e0600000 [pid 9113] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] getdents64(3, [pid 5061] <... openat resumed>) = 3 [pid 9113] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] newfstatat(3, "", [pid 9113] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... close resumed>) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] rmdir("./405" [pid 5061] umount2("./407/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./407/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./407/binderfs") = 0 [pid 5064] mkdir("./406", 0777 [pid 5061] umount2("./407/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9113] <... open resumed>) = 4 [pid 5061] <... umount2 resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 9113] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] umount2("./407/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] ioctl(3, LOOP_CLR_FD [pid 9113] <... open resumed>) = 5 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9113] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] newfstatat(AT_FDCWD, "./407/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./407/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 355.449919][ T9117] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] openat(AT_FDCWD, "./407/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9113] <... mmap resumed>) = 0x20000000 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 9113] ftruncate(4, 33587195 [pid 5061] getdents64(4, [pid 9113] <... ftruncate resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./407/file0" [pid 9113] unlink("./bus" [pid 9116] <... write resumed>) = 2097152 [pid 5061] <... rmdir resumed>) = 0 [pid 9116] munmap(0x7f41e0600000, 138412032 [pid 5061] getdents64(3, [pid 9116] <... munmap resumed>) = 0 [pid 9113] <... unlink resumed>) = 0 [pid 9113] sendfile(-1, -1, NULL, 281474978811909 [pid 9116] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9116] <... openat resumed>) = 4 [pid 9113] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9116] ioctl(4, LOOP_SET_FD, 3 [pid 5061] close(3 [pid 9113] exit_group(0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./407" [pid 9113] <... exit_group resumed>) = ? [pid 9116] <... ioctl resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./408", 0777 [pid 9116] close(3 [pid 5061] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9116] <... close resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 9116] close(4 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 9116] <... close resumed>) = 0 [pid 9116] mkdir("./file0", 0777) = 0 [pid 9116] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... ioctl resumed>) = 0 [pid 9113] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9113, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- [pid 5065] umount2("./400", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./400", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] close(3 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./400/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 355.543613][ T9116] loop2: detected capacity change from 0 to 4096 [pid 5065] newfstatat(AT_FDCWD, "./400/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] unlink("./400/binderfs" [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 9118 attached [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 9118 [pid 9118] set_robust_list(0x55555745a660, 24) = 0 [pid 9118] chdir("./406") = 0 [pid 9118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9118] setpgid(0, 0) = 0 [pid 9118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9118] write(3, "1000", 4) = 4 [pid 9118] close(3 [pid 9116] <... mount resumed>) = 0 [pid 9116] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9118] <... close resumed>) = 0 [pid 9116] chdir("./file0" [pid 9118] symlink("/dev/binderfs", "./binderfs" [pid 9116] <... chdir resumed>) = 0 [pid 9118] <... symlink resumed>) = 0 [pid 9116] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] <... ioctl resumed>) = 0 [pid 9118] memfd_create("syzkaller", 0 [pid 9116] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9116] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9118] <... memfd_create resumed>) = 3 [pid 5065] <... umount2 resumed>) = 0 [ 355.626763][ T9119] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 9116] <... open resumed>) = 4 [pid 5065] umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9116] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] newfstatat(AT_FDCWD, "./400/file0", [pid 5061] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9116] <... open resumed>) = 5 [pid 5065] umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 9121 ./strace-static-x86_64: Process 9121 attached [pid 9116] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./400/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9116] <... mmap resumed>) = 0x20000000 [pid 9121] set_robust_list(0x55555745a660, 24 [pid 9116] ftruncate(4, 33587195 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 9121] <... set_robust_list resumed>) = 0 [pid 9116] <... ftruncate resumed>) = 0 [pid 5065] close(4) = 0 [pid 9121] chdir("./408" [pid 9118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9116] unlink("./bus" [pid 5065] rmdir("./400/file0" [pid 9121] <... chdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 9121] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5065] getdents64(3, [pid 9121] setpgid(0, 0 [pid 9116] <... unlink resumed>) = 0 [pid 9121] <... setpgid resumed>) = 0 [pid 9116] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9116] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9116] exit_group(0 [pid 5065] close(3) = 0 [pid 9121] <... openat resumed>) = 3 [pid 9116] <... exit_group resumed>) = ? [pid 5065] rmdir("./400") = 0 [pid 9121] write(3, "1000", 4 [pid 9118] <... write resumed>) = 2097152 [pid 9116] +++ exited with 0 +++ [pid 5065] mkdir("./401", 0777 [pid 9121] <... write resumed>) = 4 [pid 9118] munmap(0x7f41e0600000, 138412032 [pid 9121] close(3 [pid 5065] <... mkdir resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9116, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 9121] <... close resumed>) = 0 [pid 9121] symlink("/dev/binderfs", "./binderfs" [pid 9118] <... munmap resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] umount2("./402", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9118] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./402", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9118] <... openat resumed>) = 4 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] <... openat resumed>) = 3 [pid 9118] ioctl(4, LOOP_SET_FD, 3 [pid 5063] newfstatat(3, "", [pid 9121] <... symlink resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./402/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9121] memfd_create("syzkaller", 0 [pid 9118] <... ioctl resumed>) = 0 [pid 9118] close(3) = 0 [pid 9118] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9121] <... memfd_create resumed>) = 3 [pid 5063] newfstatat(AT_FDCWD, "./402/binderfs", [pid 9121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 9118] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9118] mkdir("./file0", 0777 [pid 5063] unlink("./402/binderfs" [pid 9118] <... mkdir resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./402/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9118] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... umount2 resumed>) = 0 [pid 9121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 355.749990][ T9118] loop3: detected capacity change from 0 to 4096 [pid 5063] umount2("./402/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./402/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./402/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9118] <... mount resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9118] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./402/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9118] <... openat resumed>) = 3 [pid 5065] <... ioctl resumed>) = 0 [pid 9118] chdir("./file0" [pid 5065] close(3 [pid 5063] <... openat resumed>) = 4 [pid 9118] <... chdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 9118] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 9123 attached [pid 9118] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] getdents64(4, [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 9123 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 9118] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9123] set_robust_list(0x55555745a660, 24 [pid 5063] getdents64(4, [pid 9123] <... set_robust_list resumed>) = 0 [pid 9121] <... write resumed>) = 2097152 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 9123] chdir("./401" [pid 9121] munmap(0x7f41e0600000, 138412032 [pid 5063] close(4 [pid 9123] <... chdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 9123] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] rmdir("./402/file0" [pid 9123] <... prctl resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 9123] setpgid(0, 0 [pid 9121] <... munmap resumed>) = 0 [pid 5063] getdents64(3, [pid 9123] <... setpgid resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] close(3 [pid 9123] <... openat resumed>) = 3 [pid 9118] <... open resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 9123] write(3, "1000", 4 [pid 5063] rmdir("./402" [pid 9123] <... write resumed>) = 4 [pid 5063] <... rmdir resumed>) = 0 [pid 9123] close(3 [pid 5063] mkdir("./403", 0777 [pid 9123] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 9123] symlink("/dev/binderfs", "./binderfs" [pid 9118] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9123] <... symlink resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 9123] memfd_create("syzkaller", 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 9123] <... memfd_create resumed>) = 3 [ 355.828512][ T9122] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9121] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9118] <... open resumed>) = 5 [pid 9123] <... mmap resumed>) = 0x7f41e0600000 [pid 9121] <... openat resumed>) = 4 [pid 9118] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9121] ioctl(4, LOOP_SET_FD, 3 [pid 9118] <... mmap resumed>) = 0x20000000 [pid 9121] <... ioctl resumed>) = 0 [pid 9118] ftruncate(4, 33587195 [pid 9121] close(3 [pid 9123] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9118] <... ftruncate resumed>) = 0 [pid 9121] <... close resumed>) = 0 [pid 9118] unlink("./bus" [pid 9121] close(4 [pid 9118] <... unlink resumed>) = 0 [pid 9118] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9118] exit_group(0) = ? [pid 9121] <... close resumed>) = 0 [pid 9121] mkdir("./file0", 0777) = 0 [pid 9121] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9118] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9118, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5064] umount2("./406", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 355.900666][ T9121] loop0: detected capacity change from 0 to 4096 [pid 5064] openat(AT_FDCWD, "./406", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", [pid 5063] <... ioctl resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] close(3 [pid 5064] umount2("./406/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 9125 attached [pid 5064] newfstatat(AT_FDCWD, "./406/binderfs", [pid 9125] set_robust_list(0x55555745a660, 24 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 9125 [pid 9125] <... set_robust_list resumed>) = 0 [pid 9125] chdir("./403") = 0 [pid 9125] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9125] setpgid(0, 0) = 0 [pid 9125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9121] <... mount resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9121] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] unlink("./406/binderfs" [pid 9125] write(3, "1000", 4 [pid 9123] <... write resumed>) = 2097152 [pid 9121] <... openat resumed>) = 3 [pid 5064] <... unlink resumed>) = 0 [pid 9125] <... write resumed>) = 4 [pid 9121] chdir("./file0" [pid 5064] umount2("./406/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9125] close(3) = 0 [pid 9125] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9121] <... chdir resumed>) = 0 [pid 9125] memfd_create("syzkaller", 0 [pid 9123] munmap(0x7f41e0600000, 138412032 [pid 9121] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9125] <... memfd_create resumed>) = 3 [pid 9121] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9121] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9125] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] <... umount2 resumed>) = 0 [pid 9123] <... munmap resumed>) = 0 [pid 9123] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 355.973232][ T9124] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9123] ioctl(4, LOOP_SET_FD, 3 [pid 5064] umount2("./406/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9121] <... open resumed>) = 4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./406/file0", [pid 9121] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9121] <... open resumed>) = 5 [pid 5064] umount2("./406/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9121] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] openat(AT_FDCWD, "./406/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9123] <... ioctl resumed>) = 0 [pid 9121] <... mmap resumed>) = 0x20000000 [pid 5064] <... openat resumed>) = 4 [pid 9125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9121] ftruncate(4, 33587195 [pid 5064] newfstatat(4, "", [pid 9123] close(3) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9123] close(4 [pid 9121] <... ftruncate resumed>) = 0 [pid 5064] getdents64(4, [pid 9123] <... close resumed>) = 0 [pid 9123] mkdir("./file0", 0777 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 9123] <... mkdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 9121] unlink("./bus" [pid 5064] close(4 [pid 9123] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./406/file0") = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 9121] <... unlink resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 9121] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] rmdir("./406" [pid 9121] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9121] exit_group(0) = ? [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./407", 0777 [pid 9121] +++ exited with 0 +++ [pid 5064] <... mkdir resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9121, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [ 356.026719][ T9123] loop4: detected capacity change from 0 to 4096 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5061] umount2("./408", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./408", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./408/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./408/binderfs", [pid 9125] <... write resumed>) = 2097152 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./408/binderfs" [pid 9125] munmap(0x7f41e0600000, 138412032 [pid 5061] <... unlink resumed>) = 0 [pid 9125] <... munmap resumed>) = 0 [pid 5061] umount2("./408/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9125] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9123] <... mount resumed>) = 0 [pid 9123] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9125] ioctl(4, LOOP_SET_FD, 3 [pid 9123] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = 0 [pid 9123] chdir("./file0") = 0 [pid 5061] umount2("./408/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9123] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./408/file0", [pid 9123] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9123] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] umount2("./408/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./408/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9125] <... ioctl resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 9125] close(3 [pid 5061] getdents64(4, [pid 9125] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 9125] close(4) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5061] close(4 [pid 9125] mkdir("./file0", 0777 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./408/file0" [pid 5064] close(3 [pid 5061] <... rmdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 9125] <... mkdir resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./408" [pid 9125] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./409", 0777./strace-static-x86_64: Process 9127 attached [pid 9123] <... open resumed>) = 4 [pid 5061] <... mkdir resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 9127 [pid 9123] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 9127] set_robust_list(0x55555745a660, 24 [pid 9123] <... open resumed>) = 5 [pid 9127] <... set_robust_list resumed>) = 0 [pid 9127] chdir("./407") = 0 [pid 9123] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9127] setpgid(0, 0) = 0 [pid 9127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9123] <... mmap resumed>) = 0x20000000 [pid 9127] <... openat resumed>) = 3 [ 356.108180][ T9126] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 356.128740][ T9125] loop2: detected capacity change from 0 to 4096 [pid 9123] ftruncate(4, 33587195 [pid 9127] write(3, "1000", 4) = 4 [pid 9127] close(3) = 0 [pid 9123] <... ftruncate resumed>) = 0 [pid 9127] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9127] memfd_create("syzkaller", 0 [pid 9123] unlink("./bus" [pid 9127] <... memfd_create resumed>) = 3 [pid 9127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 9125] <... mount resumed>) = 0 [pid 9125] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9125] chdir("./file0") = 0 [pid 9125] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9125] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9123] <... unlink resumed>) = 0 [pid 9123] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9123] exit_group(0) = ? [pid 9125] <... open resumed>) = 4 [pid 5061] <... ioctl resumed>) = 0 [pid 9125] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9123] +++ exited with 0 +++ [pid 5061] close(3 [pid 9127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9125] <... open resumed>) = 5 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9123, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 9125] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 9125] <... mmap resumed>) = 0x20000000 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5065] umount2("./401", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./401", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", [pid 9125] ftruncate(4, 33587195 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [ 356.207623][ T9128] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] umount2("./401/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./401/binderfs", [pid 9125] <... ftruncate resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] unlink("./401/binderfs" [pid 9125] unlink("./bus" [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./401/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 9129 attached [pid 9125] <... unlink resumed>) = 0 [pid 9129] set_robust_list(0x55555745a660, 24 [pid 9125] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 9129 [pid 9129] <... set_robust_list resumed>) = 0 [pid 9125] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9125] exit_group(0 [pid 9129] chdir("./409" [pid 9125] <... exit_group resumed>) = ? [pid 9129] <... chdir resumed>) = 0 [pid 9129] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9129] setpgid(0, 0) = 0 [pid 9127] <... write resumed>) = 2097152 [pid 9129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9129] write(3, "1000", 4) = 4 [pid 9129] close(3) = 0 [pid 9129] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... umount2 resumed>) = 0 [pid 9129] <... symlink resumed>) = 0 [pid 9129] memfd_create("syzkaller", 0 [pid 9125] +++ exited with 0 +++ [pid 9129] <... memfd_create resumed>) = 3 [pid 9127] munmap(0x7f41e0600000, 138412032 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9125, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 9129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] umount2("./401/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9129] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9127] <... munmap resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./401/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./403", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./401/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9127] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./403", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9127] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", [pid 9127] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] openat(AT_FDCWD, "./401/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] <... openat resumed>) = 4 [pid 5063] umount2("./403/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] newfstatat(4, "", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9127] <... ioctl resumed>) = 0 [pid 9129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] newfstatat(AT_FDCWD, "./403/binderfs", [pid 9127] close(3 [pid 5065] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] unlink("./403/binderfs" [pid 9127] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 9127] close(4 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 9127] <... close resumed>) = 0 [pid 5063] umount2("./403/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] close(4) = 0 [pid 5065] rmdir("./401/file0") = 0 [pid 9127] mkdir("./file0", 0777 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9127] <... mkdir resumed>) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./401" [pid 9127] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... rmdir resumed>) = 0 [pid 9129] <... write resumed>) = 2097152 [pid 5065] mkdir("./402", 0777) = 0 [ 356.324978][ T9127] loop3: detected capacity change from 0 to 4096 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 9129] munmap(0x7f41e0600000, 138412032 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./403/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./403/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./403/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./403/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9129] <... munmap resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 9129] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] newfstatat(4, "", [pid 9129] <... openat resumed>) = 4 [pid 9127] <... mount resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9127] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] getdents64(4, [pid 9129] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 9127] chdir("./file0") = 0 [pid 9127] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9127] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 9129] <... ioctl resumed>) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./403/file0") = 0 [pid 9129] close(3 [pid 5063] getdents64(3, [pid 9129] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9129] close(4 [pid 5063] close(3 [pid 9129] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./403" [pid 9129] mkdir("./file0", 0777 [pid 5063] <... rmdir resumed>) = 0 [pid 9129] <... mkdir resumed>) = 0 [pid 5063] mkdir("./404", 0777 [pid 9129] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9127] <... open resumed>) = 4 [pid 5065] <... ioctl resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 9127] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] close(3 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] ioctl(3, LOOP_CLR_FD [pid 9127] <... open resumed>) = 5 ./strace-static-x86_64: Process 9131 attached [ 356.396378][ T9130] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 356.417776][ T9129] loop0: detected capacity change from 0 to 4096 [pid 9131] set_robust_list(0x55555745a660, 24 [pid 9127] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9131] <... set_robust_list resumed>) = 0 [pid 9127] <... mmap resumed>) = 0x20000000 [pid 9131] chdir("./402" [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 9131 [pid 9131] <... chdir resumed>) = 0 [pid 9131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9131] setpgid(0, 0) = 0 [pid 9131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9127] ftruncate(4, 33587195 [pid 9131] write(3, "1000", 4) = 4 [pid 9129] <... mount resumed>) = 0 [pid 9131] close(3 [pid 9129] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9131] <... close resumed>) = 0 [pid 9131] symlink("/dev/binderfs", "./binderfs" [pid 9129] <... openat resumed>) = 3 [pid 9131] <... symlink resumed>) = 0 [pid 9129] chdir("./file0" [pid 9127] <... ftruncate resumed>) = 0 [pid 9131] memfd_create("syzkaller", 0 [pid 9129] <... chdir resumed>) = 0 [pid 9127] unlink("./bus" [pid 9131] <... memfd_create resumed>) = 3 [pid 9129] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9129] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 9129] <... open resumed>) = 4 [pid 9127] <... unlink resumed>) = 0 [pid 9129] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9127] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9129] <... open resumed>) = 5 [pid 9127] exit_group(0 [pid 9129] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9127] <... exit_group resumed>) = ? [ 356.482564][ T9132] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9129] <... mmap resumed>) = 0x20000000 [pid 9129] ftruncate(4, 33587195) = 0 [pid 9127] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9127, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 9129] unlink("./bus" [pid 5064] umount2("./407", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./407", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./407/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./407/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./407/binderfs") = 0 [pid 5064] umount2("./407/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9129] <... unlink resumed>) = 0 [pid 9129] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9129] exit_group(0) = ? [pid 5063] <... ioctl resumed>) = 0 [pid 9131] <... write resumed>) = 2097152 [pid 9129] +++ exited with 0 +++ [pid 5064] <... umount2 resumed>) = 0 [pid 5063] close(3 [pid 9131] munmap(0x7f41e0600000, 138412032 [pid 5064] umount2("./407/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9129, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 9131] <... munmap resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] newfstatat(AT_FDCWD, "./407/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./409", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./407/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./409", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "./407/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... openat resumed>) = 3 ./strace-static-x86_64: Process 9133 attached [pid 5064] <... openat resumed>) = 4 [pid 5061] newfstatat(3, "", [pid 9133] set_robust_list(0x55555745a660, 24 [pid 9131] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] newfstatat(4, "", [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 9133 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9133] <... set_robust_list resumed>) = 0 [pid 9131] <... openat resumed>) = 4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 9133] chdir("./404" [pid 9131] ioctl(4, LOOP_SET_FD, 3 [pid 5064] getdents64(4, [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9133] <... chdir resumed>) = 0 [pid 9133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9133] setpgid(0, 0) = 0 [pid 9133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9131] <... ioctl resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] umount2("./409/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9131] close(3 [pid 5064] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] newfstatat(AT_FDCWD, "./409/binderfs", [pid 5064] close(4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9131] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5061] unlink("./409/binderfs" [pid 9133] <... openat resumed>) = 3 [pid 9131] close(4 [pid 5064] rmdir("./407/file0" [pid 9131] <... close resumed>) = 0 [pid 9133] write(3, "1000", 4 [pid 9131] mkdir("./file0", 0777 [pid 9133] <... write resumed>) = 4 [pid 9131] <... mkdir resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./409/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9133] close(3 [pid 9131] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... rmdir resumed>) = 0 [pid 9133] <... close resumed>) = 0 [pid 9133] symlink("/dev/binderfs", "./binderfs" [pid 5064] getdents64(3, [pid 9133] <... symlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9133] memfd_create("syzkaller", 0 [pid 5064] close(3) = 0 [pid 9133] <... memfd_create resumed>) = 3 [pid 5064] rmdir("./407" [pid 9133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./408", 0777) = 0 [pid 9133] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... umount2 resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [ 356.615140][ T9131] loop4: detected capacity change from 0 to 4096 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5061] umount2("./409/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./409/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./409/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9133] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9131] <... mount resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./409/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9131] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5061] <... openat resumed>) = 4 [pid 9131] chdir("./file0" [pid 5061] newfstatat(4, "", [pid 9131] <... chdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9131] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] getdents64(4, [pid 9131] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 9131] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./409/file0") = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./409") = 0 [pid 5061] mkdir("./410", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 9133] <... write resumed>) = 2097152 [pid 9131] <... open resumed>) = 4 [pid 5064] <... ioctl resumed>) = 0 [pid 9131] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] close(3 [pid 9133] munmap(0x7f41e0600000, 138412032 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 9131] <... open resumed>) = 5 [pid 5064] <... close resumed>) = 0 [ 356.682909][ T9134] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9133] <... munmap resumed>) = 0 [pid 9131] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9133] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9131] <... mmap resumed>) = 0x20000000 [pid 9133] <... openat resumed>) = 4 [pid 9131] ftruncate(4, 33587195 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 9135 [pid 9133] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 9135 attached [pid 9135] set_robust_list(0x55555745a660, 24) = 0 [pid 9135] chdir("./408") = 0 [pid 9135] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9131] <... ftruncate resumed>) = 0 [pid 9135] setpgid(0, 0) = 0 [pid 9135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9135] write(3, "1000", 4) = 4 [pid 9135] close(3 [pid 9131] unlink("./bus" [pid 9133] <... ioctl resumed>) = 0 [pid 9135] <... close resumed>) = 0 [pid 9135] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9135] memfd_create("syzkaller", 0 [pid 9133] close(3 [pid 9131] <... unlink resumed>) = 0 [pid 9133] <... close resumed>) = 0 [pid 9131] sendfile(-1, -1, NULL, 281474978811909 [pid 9133] close(4 [pid 9131] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9135] <... memfd_create resumed>) = 3 [pid 9135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9133] <... close resumed>) = 0 [pid 9131] exit_group(0 [pid 9135] <... mmap resumed>) = 0x7f41e0600000 [pid 9133] mkdir("./file0", 0777 [pid 9131] <... exit_group resumed>) = ? [pid 9133] <... mkdir resumed>) = 0 [pid 9133] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9131] +++ exited with 0 +++ [pid 5061] <... ioctl resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9131, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [ 356.761556][ T9133] loop2: detected capacity change from 0 to 4096 [pid 5065] umount2("./402", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./402", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", [pid 5061] close(3 [pid 9135] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9133] <... mount resumed>) = 0 [pid 9133] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9133] chdir("./file0") = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... close resumed>) = 0 [pid 9133] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] getdents64(3, [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9133] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9133] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000./strace-static-x86_64: Process 9137 attached [pid 5065] umount2("./402/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9137] set_robust_list(0x55555745a660, 24 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9137] <... set_robust_list resumed>) = 0 [pid 9133] <... open resumed>) = 4 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 9137 [pid 9137] chdir("./410" [pid 9133] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] newfstatat(AT_FDCWD, "./402/binderfs", [pid 9137] <... chdir resumed>) = 0 [pid 9133] <... open resumed>) = 5 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9137] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9133] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] unlink("./402/binderfs" [pid 9137] <... prctl resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 9137] setpgid(0, 0 [pid 9133] <... mmap resumed>) = 0x20000000 [pid 9137] <... setpgid resumed>) = 0 [pid 9137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9137] write(3, "1000", 4 [pid 5065] umount2("./402/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9137] <... write resumed>) = 4 [pid 9133] ftruncate(4, 33587195 [pid 9137] close(3) = 0 [pid 9137] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9137] memfd_create("syzkaller", 0 [pid 9133] <... ftruncate resumed>) = 0 [pid 9137] <... memfd_create resumed>) = 3 [pid 9137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [ 356.837985][ T9136] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9133] unlink("./bus" [pid 5065] <... umount2 resumed>) = 0 [pid 9133] <... unlink resumed>) = 0 [pid 5065] umount2("./402/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9133] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9133] exit_group(0) = ? [pid 9135] <... write resumed>) = 2097152 [pid 5065] newfstatat(AT_FDCWD, "./402/file0", [pid 9135] munmap(0x7f41e0600000, 138412032 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./402/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./402/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./402/file0") = 0 [pid 9135] <... munmap resumed>) = 0 [pid 5065] getdents64(3, [pid 9135] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 9135] <... openat resumed>) = 4 [pid 5065] rmdir("./402" [pid 9135] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... rmdir resumed>) = 0 [pid 9133] +++ exited with 0 +++ [pid 5065] mkdir("./403", 0777 [pid 9135] <... ioctl resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9133, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 9135] close(3 [pid 5065] <... mkdir resumed>) = 0 [pid 9135] <... close resumed>) = 0 [pid 5063] umount2("./404", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./404", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9135] close(4 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 9135] <... close resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 9135] mkdir("./file0", 0777 [pid 5065] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./404/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9135] <... mkdir resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] newfstatat(AT_FDCWD, "./404/binderfs", [pid 9135] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./404/binderfs") = 0 [pid 5063] umount2("./404/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./404/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./404/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./404/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./404/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [ 356.931268][ T9135] loop3: detected capacity change from 0 to 4096 [pid 5063] close(4 [pid 9137] <... write resumed>) = 2097152 [pid 9135] <... mount resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 9137] munmap(0x7f41e0600000, 138412032 [pid 9135] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] rmdir("./404/file0" [pid 9135] <... openat resumed>) = 3 [pid 9135] chdir("./file0" [pid 5063] <... rmdir resumed>) = 0 [pid 9135] <... chdir resumed>) = 0 [pid 5063] getdents64(3, [pid 9135] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9135] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9135] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] close(3 [pid 9137] <... munmap resumed>) = 0 [pid 9137] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./404" [pid 9137] <... openat resumed>) = 4 [pid 5063] <... rmdir resumed>) = 0 [pid 9137] ioctl(4, LOOP_SET_FD, 3 [pid 9135] <... open resumed>) = 4 [pid 5063] mkdir("./405", 0777 [pid 9135] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] <... mkdir resumed>) = 0 [pid 9135] <... open resumed>) = 5 [pid 9135] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9135] ftruncate(4, 33587195 [pid 5063] <... openat resumed>) = 3 [pid 9135] <... ftruncate resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 9135] unlink("./bus" [pid 9137] <... ioctl resumed>) = 0 [pid 9137] close(3) = 0 [pid 9137] close(4) = 0 [pid 9137] mkdir("./file0", 0777) = 0 [pid 9137] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9135] <... unlink resumed>) = 0 [pid 9135] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9135] exit_group(0) = ? [pid 9135] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9135, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./408", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./408", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./408/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./408/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./408/binderfs") = 0 [pid 5064] umount2("./408/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... ioctl resumed>) = 0 [pid 5065] close(3) = 0 [ 356.973198][ T9138] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 356.993395][ T9137] loop0: detected capacity change from 0 to 4096 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9137] <... mount resumed>) = 0 [pid 9137] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9137] chdir("./file0") = 0 [pid 9137] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9137] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000./strace-static-x86_64: Process 9140 attached [pid 5064] <... umount2 resumed>) = 0 [pid 9140] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 9140 [pid 9140] <... set_robust_list resumed>) = 0 [pid 9140] chdir("./403") = 0 [pid 9140] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... ioctl resumed>) = 0 [pid 9140] <... prctl resumed>) = 0 [pid 9140] setpgid(0, 0 [pid 9137] <... open resumed>) = 4 [pid 5064] umount2("./408/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 9140] <... setpgid resumed>) = 0 [pid 9137] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] newfstatat(AT_FDCWD, "./408/file0", [pid 9137] <... open resumed>) = 5 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./408/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] openat(AT_FDCWD, "./408/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 9140] <... openat resumed>) = 3 [pid 9137] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 9141 attached [pid 9140] write(3, "1000", 4 [pid 9137] <... mmap resumed>) = 0x20000000 [pid 5064] getdents64(4, [pid 9141] set_robust_list(0x55555745a660, 24 [pid 9140] <... write resumed>) = 4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 9141 [pid 9141] <... set_robust_list resumed>) = 0 [pid 9140] close(3 [pid 5064] getdents64(4, [pid 9137] ftruncate(4, 33587195 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 9141] chdir("./405" [pid 5064] close(4 [pid 9140] <... close resumed>) = 0 [ 357.049232][ T9139] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9141] <... chdir resumed>) = 0 [pid 9140] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./408/file0" [pid 9141] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9140] <... symlink resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 9141] <... prctl resumed>) = 0 [pid 9141] setpgid(0, 0 [pid 9140] memfd_create("syzkaller", 0 [pid 9141] <... setpgid resumed>) = 0 [pid 9140] <... memfd_create resumed>) = 3 [pid 9141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9137] <... ftruncate resumed>) = 0 [pid 5064] getdents64(3, [pid 9141] <... openat resumed>) = 3 [pid 9140] <... mmap resumed>) = 0x7f41e0600000 [pid 9137] unlink("./bus" [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9141] write(3, "1000", 4 [pid 5064] close(3) = 0 [pid 9141] <... write resumed>) = 4 [pid 5064] rmdir("./408" [pid 9141] close(3 [pid 5064] <... rmdir resumed>) = 0 [pid 9141] <... close resumed>) = 0 [pid 5064] mkdir("./409", 0777) = 0 [pid 9141] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9137] <... unlink resumed>) = 0 [pid 9141] memfd_create("syzkaller", 0 [pid 9137] sendfile(-1, -1, NULL, 281474978811909 [pid 9141] <... memfd_create resumed>) = 3 [pid 9137] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9137] exit_group(0 [pid 9141] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] <... openat resumed>) = 3 [pid 9137] <... exit_group resumed>) = ? [pid 5064] ioctl(3, LOOP_CLR_FD [pid 9137] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9137, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5061] umount2("./410", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./410", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./410/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./410/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./410/binderfs") = 0 [pid 5061] umount2("./410/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 9141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9140] <... write resumed>) = 2097152 [pid 9140] munmap(0x7f41e0600000, 138412032 [pid 5061] umount2("./410/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9140] <... munmap resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9140] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./410/file0", [pid 9140] <... openat resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./410/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./410/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 9140] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./410/file0") = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./410" [pid 9141] <... write resumed>) = 2097152 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./411", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 9141] munmap(0x7f41e0600000, 138412032) = 0 [pid 9141] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9141] ioctl(4, LOOP_SET_FD, 3 [pid 9140] <... ioctl resumed>) = 0 [pid 9141] <... ioctl resumed>) = 0 [pid 9140] close(3 [pid 5064] <... ioctl resumed>) = 0 [pid 9141] close(3 [pid 9140] <... close resumed>) = 0 [pid 9141] <... close resumed>) = 0 [pid 9140] close(4 [pid 5064] close(3 [pid 9141] close(4 [pid 9140] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 9141] <... close resumed>) = 0 [pid 9141] mkdir("./file0", 0777 [pid 9140] mkdir("./file0", 0777 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 9142 attached [pid 9141] <... mkdir resumed>) = 0 [pid 9140] <... mkdir resumed>) = 0 [pid 9141] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9142] set_robust_list(0x55555745a660, 24) = 0 [pid 9140] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 9142 [pid 9142] chdir("./409") = 0 [ 357.217272][ T9140] loop4: detected capacity change from 0 to 4096 [ 357.243000][ T9141] loop2: detected capacity change from 0 to 4096 [pid 9142] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9142] setpgid(0, 0) = 0 [pid 9142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9140] <... mount resumed>) = 0 [pid 9142] write(3, "1000", 4 [pid 9140] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9142] <... write resumed>) = 4 [pid 9142] close(3 [pid 9140] <... openat resumed>) = 3 [pid 9142] <... close resumed>) = 0 [pid 9140] chdir("./file0" [pid 9142] symlink("/dev/binderfs", "./binderfs" [pid 9140] <... chdir resumed>) = 0 [pid 9142] <... symlink resumed>) = 0 [pid 9140] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... ioctl resumed>) = 0 [pid 9140] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] close(3 [pid 9140] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9141] <... mount resumed>) = 0 [pid 9141] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9141] chdir("./file0" [pid 9140] <... open resumed>) = 4 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 9145 [pid 9140] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000./strace-static-x86_64: Process 9145 attached [pid 9142] memfd_create("syzkaller", 0 [pid 9141] <... chdir resumed>) = 0 [pid 9145] set_robust_list(0x55555745a660, 24 [pid 9142] <... memfd_create resumed>) = 3 [pid 9141] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9140] <... open resumed>) = 5 [pid 9145] <... set_robust_list resumed>) = 0 [pid 9142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9141] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9140] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9145] chdir("./411" [pid 9142] <... mmap resumed>) = 0x7f41e0600000 [pid 9141] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9140] <... mmap resumed>) = 0x20000000 [pid 9145] <... chdir resumed>) = 0 [pid 9145] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9145] setpgid(0, 0) = 0 [pid 9145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9145] write(3, "1000", 4 [pid 9140] ftruncate(4, 33587195 [pid 9145] <... write resumed>) = 4 [ 357.285476][ T9143] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 357.302453][ T9144] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9145] close(3) = 0 [pid 9145] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9140] <... ftruncate resumed>) = 0 [pid 9145] memfd_create("syzkaller", 0 [pid 9141] <... open resumed>) = 4 [pid 9145] <... memfd_create resumed>) = 3 [pid 9145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 9140] unlink("./bus" [pid 9141] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 9140] <... unlink resumed>) = 0 [pid 9140] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9141] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9140] exit_group(0 [pid 9141] <... mmap resumed>) = 0x20000000 [pid 9140] <... exit_group resumed>) = ? [pid 9141] ftruncate(4, 33587195 [pid 9140] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9140, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 9142] <... write resumed>) = 2097152 [pid 9141] <... ftruncate resumed>) = 0 [pid 5065] <... restart_syscall resumed>) = 0 [pid 9145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9142] munmap(0x7f41e0600000, 138412032 [pid 9141] unlink("./bus" [pid 5065] umount2("./403", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./403", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9141] <... unlink resumed>) = 0 [pid 9142] <... munmap resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 9141] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9141] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] getdents64(3, [pid 9141] exit_group(0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9142] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] umount2("./403/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9142] <... openat resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./403/binderfs", [pid 9142] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9141] <... exit_group resumed>) = ? [pid 5065] unlink("./403/binderfs") = 0 [pid 5065] umount2("./403/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9142] <... ioctl resumed>) = 0 [pid 9141] +++ exited with 0 +++ [pid 5065] <... umount2 resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9141, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5065] umount2("./403/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9142] close(3 [pid 9145] <... write resumed>) = 2097152 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9145] munmap(0x7f41e0600000, 138412032 [pid 9142] <... close resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./403/file0", [pid 9142] close(4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9142] <... close resumed>) = 0 [pid 5063] umount2("./405", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./403/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9142] mkdir("./file0", 0777 [pid 5063] openat(AT_FDCWD, "./405", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 9145] <... munmap resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./403/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] newfstatat(3, "", [pid 5065] <... openat resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 9145] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9142] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] newfstatat(4, "", [pid 5063] umount2("./405/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9145] <... openat resumed>) = 4 [pid 9142] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9145] ioctl(4, LOOP_SET_FD, 3 [pid 5065] getdents64(4, [pid 5063] newfstatat(AT_FDCWD, "./405/binderfs", [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] getdents64(4, [pid 5063] unlink("./405/binderfs" [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [ 357.452097][ T9142] loop3: detected capacity change from 0 to 4096 [pid 5063] <... unlink resumed>) = 0 [pid 5065] close(4 [pid 5063] umount2("./405/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 9145] <... ioctl resumed>) = 0 [pid 9145] close(3 [pid 5065] rmdir("./403/file0" [pid 9145] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 9145] close(4) = 0 [pid 9145] mkdir("./file0", 0777 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./403" [pid 9145] <... mkdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 9145] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] mkdir("./404", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./405/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9142] <... mount resumed>) = 0 [pid 9142] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9142] chdir("./file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9142] <... chdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./405/file0", [pid 9142] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9142] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] umount2("./405/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 357.494249][ T9145] loop0: detected capacity change from 0 to 4096 [ 357.528279][ T9146] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] openat(AT_FDCWD, "./405/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 9145] <... mount resumed>) = 0 [pid 9145] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9145] chdir("./file0") = 0 [pid 9145] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] newfstatat(4, "", [pid 9142] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9145] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 9145] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./405/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./405") = 0 [pid 5063] mkdir("./406", 0777) = 0 [pid 9145] <... open resumed>) = 4 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9145] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 9145] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... ioctl resumed>) = 0 [pid 9142] <... open resumed>) = 4 [ 357.559675][ T9147] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9142] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9145] <... mmap resumed>) = 0x20000000 [pid 9142] <... open resumed>) = 5 [pid 5065] close(3 [pid 9142] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9145] ftruncate(4, 33587195 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9142] <... ftruncate resumed>) = 0 [pid 9145] <... ftruncate resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 9148 [pid 9145] unlink("./bus" [pid 9142] unlink("./bus"./strace-static-x86_64: Process 9148 attached [pid 9148] set_robust_list(0x55555745a660, 24) = 0 [pid 9148] chdir("./404") = 0 [pid 9148] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9148] setpgid(0, 0 [pid 9142] <... unlink resumed>) = 0 [pid 9148] <... setpgid resumed>) = 0 [pid 9148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9142] sendfile(-1, -1, NULL, 281474978811909 [pid 9148] <... openat resumed>) = 3 [pid 9145] <... unlink resumed>) = 0 [pid 9142] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9145] sendfile(-1, -1, NULL, 281474978811909 [pid 9142] exit_group(0) = ? [pid 9145] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9145] exit_group(0) = ? [pid 9148] write(3, "1000", 4) = 4 [pid 9148] close(3) = 0 [pid 9148] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9148] memfd_create("syzkaller", 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 9148] <... memfd_create resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 9148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 9145] +++ exited with 0 +++ [pid 9142] +++ exited with 0 +++ [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 9149 attached [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9142, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9145, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5061] umount2("./411", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./411", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./411/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./411/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./411/binderfs") = 0 [pid 5064] umount2("./409", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./411/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9149] set_robust_list(0x55555745a660, 24 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 9149 [pid 9149] <... set_robust_list resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./409", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9149] chdir("./406" [pid 5064] <... openat resumed>) = 3 [pid 9149] <... chdir resumed>) = 0 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 9149] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 9149] <... prctl resumed>) = 0 [pid 5064] umount2("./409/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9149] setpgid(0, 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./409/binderfs", [pid 9149] <... setpgid resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./409/binderfs") = 0 [pid 9149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... umount2 resumed>) = 0 [pid 9149] <... openat resumed>) = 3 [pid 5064] umount2("./409/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9149] write(3, "1000", 4 [pid 9148] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] umount2("./411/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9149] <... write resumed>) = 4 [pid 9149] close(3) = 0 [pid 9149] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... umount2 resumed>) = 0 [pid 9149] <... symlink resumed>) = 0 [pid 9149] memfd_create("syzkaller", 0 [pid 5064] umount2("./409/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9149] <... memfd_create resumed>) = 3 [pid 9149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9149] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] newfstatat(AT_FDCWD, "./409/file0", [pid 5061] newfstatat(AT_FDCWD, "./411/file0", [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./409/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./411/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "./409/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 4 [pid 5061] openat(AT_FDCWD, "./411/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] newfstatat(4, "", [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 5064] getdents64(4, [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./411/file0") = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./411") = 0 [pid 5061] mkdir("./412", 0777) = 0 [pid 9149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9148] <... write resumed>) = 2097152 [pid 5064] getdents64(4, [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9148] munmap(0x7f41e0600000, 138412032 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5064] close(4 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./409/file0") = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 9148] <... munmap resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 9148] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] rmdir("./409" [pid 9148] <... openat resumed>) = 4 [pid 5064] <... rmdir resumed>) = 0 [pid 9148] ioctl(4, LOOP_SET_FD, 3 [pid 5064] mkdir("./410", 0777 [pid 9149] <... write resumed>) = 2097152 [pid 5064] <... mkdir resumed>) = 0 [pid 9149] munmap(0x7f41e0600000, 138412032 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 9148] <... ioctl resumed>) = 0 [pid 9148] close(3) = 0 [pid 9148] close(4) = 0 [pid 9148] mkdir("./file0", 0777 [pid 9149] <... munmap resumed>) = 0 [pid 9149] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9149] ioctl(4, LOOP_SET_FD, 3 [pid 9148] <... mkdir resumed>) = 0 [pid 9148] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 9149] <... ioctl resumed>) = 0 [pid 9149] close(3) = 0 [pid 9149] close(4) = 0 [pid 9149] mkdir("./file0", 0777) = 0 [pid 9149] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 357.785720][ T9148] loop4: detected capacity change from 0 to 4096 [ 357.812093][ T9149] loop2: detected capacity change from 0 to 4096 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 9151 attached [pid 9151] set_robust_list(0x55555745a660, 24 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 9151 [pid 9151] <... set_robust_list resumed>) = 0 [pid 9148] <... mount resumed>) = 0 [pid 9151] chdir("./412") = 0 [pid 9151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9151] setpgid(0, 0 [pid 9148] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9151] <... setpgid resumed>) = 0 [pid 9151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9148] <... openat resumed>) = 3 [pid 9148] chdir("./file0") = 0 [pid 9151] <... openat resumed>) = 3 [pid 9151] write(3, "1000", 4 [pid 9148] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9151] <... write resumed>) = 4 [pid 9151] close(3) = 0 [pid 9148] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9151] symlink("/dev/binderfs", "./binderfs" [pid 9148] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9151] <... symlink resumed>) = 0 [ 357.850757][ T9150] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9151] memfd_create("syzkaller", 0 [pid 9148] <... open resumed>) = 4 [pid 9148] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9149] <... mount resumed>) = 0 [pid 9149] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9149] chdir("./file0") = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 9149] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9148] <... open resumed>) = 5 [pid 9151] <... memfd_create resumed>) = 3 [pid 9151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9149] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9151] <... mmap resumed>) = 0x7f41e0600000 [pid 9148] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9148] <... mmap resumed>) = 0x20000000 ./strace-static-x86_64: Process 9153 attached [pid 9148] ftruncate(4, 33587195 [pid 9153] set_robust_list(0x55555745a660, 24 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 9153 [pid 9153] <... set_robust_list resumed>) = 0 [pid 9148] <... ftruncate resumed>) = 0 [pid 9153] chdir("./410") = 0 [pid 9153] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9148] unlink("./bus" [pid 9153] setpgid(0, 0) = 0 [pid 9149] <... open resumed>) = 4 [pid 9148] <... unlink resumed>) = 0 [pid 9149] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9148] sendfile(-1, -1, NULL, 281474978811909 [pid 9153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9149] <... open resumed>) = 5 [pid 9148] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9148] exit_group(0) = ? [pid 9149] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 3 [pid 9151] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9149] ftruncate(4, 33587195 [pid 9153] write(3, "1000", 4) = 4 [pid 9148] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9148, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 9153] close(3 [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 9153] <... close resumed>) = 0 [pid 9153] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] umount2("./404", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./404", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 9153] memfd_create("syzkaller", 0 [pid 9149] <... ftruncate resumed>) = 0 [pid 9153] <... memfd_create resumed>) = 3 [pid 5065] newfstatat(3, "", [pid 9153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 9149] unlink("./bus" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./404/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./404/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./404/binderfs" [pid 9149] <... unlink resumed>) = 0 [pid 9149] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9149] exit_group(0) = ? [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./404/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9149] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9149, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./406", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./406", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./406/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./406/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5063] unlink("./406/binderfs" [pid 5065] umount2("./404/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... unlink resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./404/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./404/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./406/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./404/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9151] <... write resumed>) = 2097152 [pid 5065] <... openat resumed>) = 4 [pid 5065] newfstatat(4, "", [pid 5063] <... umount2 resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, [pid 5063] umount2("./406/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9151] munmap(0x7f41e0600000, 138412032 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] newfstatat(AT_FDCWD, "./406/file0", [pid 5065] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5063] umount2("./406/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./404/file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./406/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", [pid 5065] <... rmdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(4, [pid 5065] close(3) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] rmdir("./404" [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5063] rmdir("./406/file0") = 0 [pid 5063] getdents64(3, [pid 9151] <... munmap resumed>) = 0 [pid 5065] mkdir("./405", 0777 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./406") = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 9151] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9151] <... openat resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 9151] ioctl(4, LOOP_SET_FD, 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] mkdir("./407", 0777) = 0 [pid 9153] <... write resumed>) = 2097152 [pid 9151] <... ioctl resumed>) = 0 [pid 9151] close(3 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9153] munmap(0x7f41e0600000, 138412032 [pid 9151] <... close resumed>) = 0 [pid 9151] close(4 [pid 5063] <... openat resumed>) = 3 [pid 9151] <... close resumed>) = 0 [pid 9151] mkdir("./file0", 0777) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 9151] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9153] <... munmap resumed>) = 0 [pid 9153] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 9153] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... ioctl resumed>) = 0 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 9154 attached [pid 9153] <... ioctl resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 9154 [ 358.067396][ T9151] loop0: detected capacity change from 0 to 4096 [ 358.101856][ T9153] loop3: detected capacity change from 0 to 4096 [pid 9151] <... mount resumed>) = 0 [pid 9151] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9153] close(3 [pid 9151] <... openat resumed>) = 3 [pid 9154] set_robust_list(0x55555745a660, 24 [pid 9153] <... close resumed>) = 0 [pid 9154] <... set_robust_list resumed>) = 0 [pid 9153] close(4 [pid 9151] chdir("./file0" [pid 9154] chdir("./405" [pid 9153] <... close resumed>) = 0 [pid 9153] mkdir("./file0", 0777) = 0 [pid 9154] <... chdir resumed>) = 0 [pid 9154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9154] setpgid(0, 0) = 0 [pid 9154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9153] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9151] <... chdir resumed>) = 0 [pid 9151] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9154] <... openat resumed>) = 3 [pid 9151] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9154] write(3, "1000", 4 [pid 9151] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9154] <... write resumed>) = 4 [pid 9154] close(3 [pid 9151] <... open resumed>) = 4 [pid 9151] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9154] <... close resumed>) = 0 [pid 9151] <... open resumed>) = 5 [pid 9154] symlink("/dev/binderfs", "./binderfs" [pid 9151] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9154] <... symlink resumed>) = 0 [pid 9154] memfd_create("syzkaller", 0) = 3 [pid 9154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [ 358.148375][ T9155] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9151] <... mmap resumed>) = 0x20000000 [pid 9151] ftruncate(4, 33587195 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 9151] <... ftruncate resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 9153] <... mount resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 9157 ./strace-static-x86_64: Process 9157 attached [pid 9153] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9151] unlink("./bus" [pid 9153] <... openat resumed>) = 3 [pid 9153] chdir("./file0" [pid 9157] set_robust_list(0x55555745a660, 24) = 0 [pid 9153] <... chdir resumed>) = 0 [pid 9151] <... unlink resumed>) = 0 [pid 9153] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9157] chdir("./407" [pid 9153] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9151] sendfile(-1, -1, NULL, 281474978811909 [pid 9157] <... chdir resumed>) = 0 [pid 9153] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 9151] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9151] exit_group(0) = ? [pid 9157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9157] setpgid(0, 0) = 0 [pid 9157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9157] write(3, "1000", 4) = 4 [pid 9157] close(3) = 0 [pid 9157] symlink("/dev/binderfs", "./binderfs" [pid 9153] <... open resumed>) = 4 [pid 9151] +++ exited with 0 +++ [pid 9157] <... symlink resumed>) = 0 [pid 9153] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9151, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5061] umount2("./412", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9157] memfd_create("syzkaller", 0 [pid 9153] <... open resumed>) = 5 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./412", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", [pid 9157] <... memfd_create resumed>) = 3 [ 358.216536][ T9156] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9153] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9153] <... mmap resumed>) = 0x20000000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9157] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./412/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9153] ftruncate(4, 33587195 [pid 5061] newfstatat(AT_FDCWD, "./412/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./412/binderfs") = 0 [pid 5061] umount2("./412/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9153] <... ftruncate resumed>) = 0 [pid 9153] unlink("./bus" [pid 5061] <... umount2 resumed>) = 0 [pid 9153] <... unlink resumed>) = 0 [pid 9153] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 9153] exit_group(0) = ? [pid 5061] umount2("./412/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9154] <... write resumed>) = 2097152 [pid 9153] +++ exited with 0 +++ [pid 9154] munmap(0x7f41e0600000, 138412032 [pid 5061] newfstatat(AT_FDCWD, "./412/file0", [pid 9154] <... munmap resumed>) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9153, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./412/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9154] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] umount2("./410", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9157] <... write resumed>) = 2097152 [pid 9154] <... openat resumed>) = 4 [pid 9157] munmap(0x7f41e0600000, 138412032 [pid 9154] ioctl(4, LOOP_SET_FD, 3 [pid 5061] openat(AT_FDCWD, "./412/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9157] <... munmap resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9157] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9157] ioctl(4, LOOP_SET_FD, 3 [pid 9154] <... ioctl resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./410", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... openat resumed>) = 4 [pid 9154] close(3 [pid 5064] <... openat resumed>) = 3 [pid 5061] newfstatat(4, "", [pid 5064] newfstatat(3, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9154] <... close resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 9154] close(4 [pid 5064] getdents64(3, [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 9157] <... ioctl resumed>) = 0 [pid 9154] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] getdents64(4, [pid 5064] umount2("./410/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] close(4 [pid 9157] close(3 [pid 5064] newfstatat(AT_FDCWD, "./410/binderfs", [pid 5061] <... close resumed>) = 0 [pid 9157] <... close resumed>) = 0 [pid 9154] mkdir("./file0", 0777 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] rmdir("./412/file0" [pid 9157] close(4 [pid 9154] <... mkdir resumed>) = 0 [pid 5064] unlink("./410/binderfs" [pid 5061] <... rmdir resumed>) = 0 [pid 9157] <... close resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5061] getdents64(3, [pid 9157] mkdir("./file0", 0777 [pid 5064] umount2("./410/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 9157] <... mkdir resumed>) = 0 [pid 9154] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] close(3) = 0 [pid 5061] rmdir("./412" [pid 9157] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... rmdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5061] mkdir("./413", 0777) = 0 [ 358.340861][ T9154] loop4: detected capacity change from 0 to 4096 [ 358.343655][ T9157] loop2: detected capacity change from 0 to 4096 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] umount2("./410/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5064] newfstatat(AT_FDCWD, "./410/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./410/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./410/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 9157] <... mount resumed>) = 0 [pid 9154] <... mount resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./410/file0" [pid 9157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9154] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... rmdir resumed>) = 0 [pid 9157] <... openat resumed>) = 3 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 9154] <... openat resumed>) = 3 [pid 5064] <... close resumed>) = 0 [pid 9157] chdir("./file0") = 0 [pid 5064] rmdir("./410" [pid 9157] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9154] chdir("./file0" [pid 5064] <... rmdir resumed>) = 0 [pid 9157] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9154] <... chdir resumed>) = 0 [pid 5064] mkdir("./411", 0777 [pid 9154] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5064] <... mkdir resumed>) = 0 [pid 9154] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9157] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... openat resumed>) = 3 [ 358.405178][ T9158] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 358.417205][ T9159] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] ioctl(3, LOOP_CLR_FD [pid 9157] <... open resumed>) = 4 [pid 9154] <... open resumed>) = 4 [pid 5061] <... ioctl resumed>) = 0 [pid 9157] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9154] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] close(3 [pid 9154] <... open resumed>) = 5 [pid 9154] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... close resumed>) = 0 [pid 9157] <... open resumed>) = 5 [pid 9154] <... mmap resumed>) = 0x20000000 [pid 5064] <... ioctl resumed>) = 0 [pid 9157] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 9154] ftruncate(4, 33587195 [pid 5064] close(3 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... close resumed>) = 0 [pid 9154] <... ftruncate resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 9160 attached [pid 9157] <... mmap resumed>) = 0x20000000 [pid 9154] unlink("./bus" [pid 9157] ftruncate(4, 33587195 [pid 9160] set_robust_list(0x55555745a660, 24) = 0 [pid 9157] <... ftruncate resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 9160 [pid 9160] chdir("./413" [pid 9157] unlink("./bus" [pid 9160] <... chdir resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 9161 [pid 9160] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 9161 attached ) = 0 [pid 9161] set_robust_list(0x55555745a660, 24) = 0 [pid 9160] setpgid(0, 0 [pid 9161] chdir("./411" [pid 9160] <... setpgid resumed>) = 0 [pid 9154] <... unlink resumed>) = 0 [pid 9161] <... chdir resumed>) = 0 [pid 9160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9154] sendfile(-1, -1, NULL, 281474978811909 [pid 9161] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9160] <... openat resumed>) = 3 [pid 9157] <... unlink resumed>) = 0 [pid 9154] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9161] <... prctl resumed>) = 0 [pid 9160] write(3, "1000", 4 [pid 9157] sendfile(-1, -1, NULL, 281474978811909 [pid 9154] exit_group(0 [pid 9161] setpgid(0, 0 [pid 9160] <... write resumed>) = 4 [pid 9157] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 9154] <... exit_group resumed>) = ? [pid 9160] close(3 [pid 9157] exit_group(0 [pid 9161] <... setpgid resumed>) = 0 [pid 9157] <... exit_group resumed>) = ? [pid 9161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9160] <... close resumed>) = 0 [pid 9160] symlink("/dev/binderfs", "./binderfs" [pid 9161] <... openat resumed>) = 3 [pid 9161] write(3, "1000", 4) = 4 [pid 9160] <... symlink resumed>) = 0 [pid 9161] close(3) = 0 [pid 9160] memfd_create("syzkaller", 0 [pid 9161] symlink("/dev/binderfs", "./binderfs" [pid 9160] <... memfd_create resumed>) = 3 [pid 9161] <... symlink resumed>) = 0 [pid 9160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9154] +++ exited with 0 +++ [pid 9161] memfd_create("syzkaller", 0 [pid 9160] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9154, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 9161] <... memfd_create resumed>) = 3 [pid 9161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 9157] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9157, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5065] umount2("./405", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./405", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./407", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] openat(AT_FDCWD, "./407", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] <... openat resumed>) = 3 [pid 5065] umount2("./405/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(3, "", [pid 5065] newfstatat(AT_FDCWD, "./405/binderfs", [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] getdents64(3, [pid 5065] unlink("./405/binderfs") = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./405/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./407/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./407/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./407/binderfs") = 0 [pid 5063] umount2("./407/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = 0 [pid 9161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 9160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] umount2("./405/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./405/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./405/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./407/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./405/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(4, "", [pid 5063] newfstatat(AT_FDCWD, "./407/file0", [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] umount2("./407/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] openat(AT_FDCWD, "./407/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] close(4 [pid 5063] <... openat resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5065] rmdir("./405/file0" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5063] getdents64(4, [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./407/file0") = 0 [pid 9161] <... write resumed>) = 2097152 [pid 9160] <... write resumed>) = 2097152 [pid 5065] close(3 [pid 5063] getdents64(3, [pid 9161] munmap(0x7f41e0600000, 138412032 [pid 9160] munmap(0x7f41e0600000, 138412032 [pid 5065] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./407") = 0 [pid 5063] mkdir("./408", 0777 [pid 9161] <... munmap resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5065] rmdir("./405" [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9161] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9160] <... munmap resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 9160] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] mkdir("./406", 0777 [pid 9160] <... openat resumed>) = 4 [pid 9161] <... openat resumed>) = 4 [pid 9160] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... mkdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 9161] ioctl(4, LOOP_SET_FD, 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9161] <... ioctl resumed>) = 0 [pid 9161] close(3) = 0 [pid 5065] <... openat resumed>) = 3 [pid 9161] close(4 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 9161] <... close resumed>) = 0 [pid 9160] <... ioctl resumed>) = 0 [pid 9161] mkdir("./file0", 0777 [pid 9160] close(3) = 0 [pid 9160] close(4 [pid 9161] <... mkdir resumed>) = 0 [pid 9160] <... close resumed>) = 0 [pid 9160] mkdir("./file0", 0777 [pid 9161] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 9160] <... mkdir resumed>) = 0 [ 358.648968][ T9161] loop3: detected capacity change from 0 to 4096 [ 358.649218][ T9160] loop0: detected capacity change from 0 to 4096 [pid 9160] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "") = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 9161] <... mount resumed>) = 0 [pid 9160] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] close(3 [pid 5063] close(3 [pid 9161] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9160] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 9161] <... openat resumed>) = 3 [pid 9160] chdir("./file0" [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... close resumed>) = 0 [pid 9161] chdir("./file0" [pid 9160] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 9164 attached [pid 9161] <... chdir resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 9164 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9164] set_robust_list(0x55555745a660, 24 [pid 9161] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9161] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000./strace-static-x86_64: Process 9165 attached [pid 9164] <... set_robust_list resumed>) = 0 [pid 9160] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9165] set_robust_list(0x55555745a660, 24 [pid 9164] chdir("./406" [pid 9160] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 9165 [pid 9165] <... set_robust_list resumed>) = 0 [pid 9164] <... chdir resumed>) = 0 [pid 9164] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9165] chdir("./408" [pid 9164] <... prctl resumed>) = 0 [pid 9160] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [ 358.744847][ T9162] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 358.758184][ T9163] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 9164] setpgid(0, 0 [pid 9165] <... chdir resumed>) = 0 [pid 9164] <... setpgid resumed>) = 0 [pid 9161] <... open resumed>) = 4 [pid 9165] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9161] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9160] <... open resumed>) = 4 [pid 9165] <... prctl resumed>) = 0 [pid 9164] <... openat resumed>) = 3 [pid 9160] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 9165] setpgid(0, 0 [pid 9164] write(3, "1000", 4 [pid 9165] <... setpgid resumed>) = 0 [pid 9164] <... write resumed>) = 4 [pid 9165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9164] close(3) = 0 [pid 9165] <... openat resumed>) = 3 [pid 9164] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9164] memfd_create("syzkaller", 0 [pid 9165] write(3, "1000", 4) = 4 [pid 9164] <... memfd_create resumed>) = 3 [pid 9165] close(3) = 0 [pid 9165] symlink("/dev/binderfs", "./binderfs" [pid 9164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9165] <... symlink resumed>) = 0 [pid 9164] <... mmap resumed>) = 0x7f41e0600000 [ 358.828173][ C0] ================================================================== [ 358.836279][ C0] BUG: KASAN: slab-use-after-free in __lock_acquire+0x77/0x1fd0 [ 358.843987][ C0] Read of size 8 at addr ffff8880211c4578 by task syz-executor115/9164 [ 358.852243][ C0] [ 358.854564][ C0] CPU: 0 PID: 9164 Comm: syz-executor115 Not tainted 6.8.0-rc5-syzkaller #0 [ 358.863236][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 358.873289][ C0] Call Trace: [ 358.876574][ C0] [ 358.879518][ C0] dump_stack_lvl+0x1e7/0x2e0 [ 358.884308][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.889521][ C0] ? __pfx__printk+0x10/0x10 [ 358.894171][ C0] ? _printk+0xd5/0x120 [ 358.898338][ C0] ? __virt_addr_valid+0x183/0x520 [ 358.903482][ C0] ? __virt_addr_valid+0x183/0x520 [ 358.908604][ C0] print_report+0x167/0x540 [ 358.913135][ C0] ? __virt_addr_valid+0x183/0x520 [ 358.918248][ C0] ? __virt_addr_valid+0x183/0x520 [ 358.923365][ C0] ? __virt_addr_valid+0x44e/0x520 [ 358.928482][ C0] ? __phys_addr+0xba/0x170 [ 358.933005][ C0] ? __lock_acquire+0x77/0x1fd0 [ 358.937856][ C0] kasan_report+0x142/0x180 [ 358.942379][ C0] ? __lock_acquire+0x77/0x1fd0 [ 358.947234][ C0] __lock_acquire+0x77/0x1fd0 [ 358.951919][ C0] ? stack_trace_save+0x117/0x1d0 [ 358.956956][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 358.962329][ C0] lock_acquire+0x1e3/0x530 [ 358.966840][ C0] ? try_to_wake_up+0xaf/0x1470 [ 358.971698][ C0] ? __pfx_lockdep_unlock+0x10/0x10 [ 358.976896][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 358.981928][ C0] ? mark_lock+0x9a/0x350 [ 358.986254][ C0] ? __lock_acquire+0x1345/0x1fd0 [ 358.991287][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 358.996636][ C0] ? try_to_wake_up+0xaf/0x1470 [ 359.001488][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 359.007385][ C0] try_to_wake_up+0xaf/0x1470 [ 359.012063][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 359.017094][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 359.022987][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 359.028194][ C0] ? __pfx_nilfs_construction_timeout+0x10/0x10 [ 359.034469][ C0] ? call_timer_fn+0xa8/0x600 [ 359.039152][ C0] call_timer_fn+0x17e/0x600 [ 359.043778][ C0] ? call_timer_fn+0xc0/0x600 [ 359.048511][ C0] ? __pfx_nilfs_construction_timeout+0x10/0x10 [ 359.054751][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 359.059866][ C0] ? __pfx_nilfs_construction_timeout+0x10/0x10 [ 359.066118][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.071318][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 359.076521][ C0] ? __pfx_nilfs_construction_timeout+0x10/0x10 [ 359.082759][ C0] __run_timers+0x621/0x830 [ 359.087273][ C0] ? __pfx___run_timers+0x10/0x10 [ 359.092304][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 359.098639][ C0] ? do_raw_spin_unlock+0x13b/0x8b0 [ 359.103848][ C0] run_timer_softirq+0x67/0xf0 [ 359.108627][ C0] __do_softirq+0x2bb/0x942 [ 359.113135][ C0] ? __irq_exit_rcu+0xf1/0x1c0 [ 359.117902][ C0] ? __pfx___do_softirq+0x10/0x10 [ 359.122932][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 359.128142][ C0] __irq_exit_rcu+0xf1/0x1c0 [ 359.132748][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 359.137943][ C0] irq_exit_rcu+0x9/0x30 [ 359.142189][ C0] sysvec_apic_timer_interrupt+0x48/0xb0 [ 359.147822][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 359.153906][ C0] RIP: 0033:0x7f41e8a24b70 [ 359.158325][ C0] Code: 49 8b 47 10 48 39 f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 <49> 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b [ 359.177928][ C0] RSP: 002b:00007ffe4bfce3f0 EFLAGS: 00000202 [ 359.183995][ C0] RAX: 00000000001c00b1 RBX: 00007ffe4bfce490 RCX: 00000000000000b8 [ 359.191966][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007ffe4bfce530 [ 359.199936][ C0] RBP: 0000000000000102 R08: 00007f41e0600000 R09: 0000000000000000 [ 359.207923][ C0] R10: 0000000000000000 R11: 00007ffe4bfce4a0 R12: 0000000000000001 [ 359.215913][ C0] R13: 00007f41e8aa40c0 R14: 0000000000000000 R15: 00007ffe4bfce530 [ 359.223898][ C0] [ 359.226935][ C0] [ 359.229260][ C0] Allocated by task 2: [ 359.233340][ C0] kasan_save_track+0x3f/0x80 [ 359.238019][ C0] __kasan_slab_alloc+0x66/0x80 [ 359.242874][ C0] kmem_cache_alloc_node+0x18f/0x380 [ 359.248169][ C0] dup_task_struct+0x57/0x7d0 [ 359.252856][ C0] copy_process+0x5d5/0x3fc0 [ 359.257439][ C0] kernel_clone+0x222/0x840 [ 359.261936][ C0] kernel_thread+0x1bc/0x240 [ 359.266521][ C0] kthreadd+0x60c/0x810 [ 359.270708][ C0] ret_from_fork+0x4b/0x80 [ 359.275149][ C0] ret_from_fork_asm+0x1b/0x30 [ 359.279925][ C0] [ 359.282241][ C0] Freed by task 5079: [ 359.286211][ C0] kasan_save_track+0x3f/0x80 [ 359.290886][ C0] kasan_save_free_info+0x4e/0x60 [ 359.295914][ C0] poison_slab_object+0xa6/0xe0 [ 359.300761][ C0] __kasan_slab_free+0x34/0x70 [ 359.305537][ C0] kmem_cache_free+0x102/0x2a0 [ 359.310341][ C0] delayed_put_task_struct+0x115/0x2d0 [ 359.315798][ C0] rcu_core+0xd76/0x1810 [ 359.320042][ C0] __do_softirq+0x2bb/0x942 [ 359.324546][ C0] [ 359.326858][ C0] Last potentially related work creation: [ 359.332586][ C0] kasan_save_stack+0x3f/0x60 [ 359.337258][ C0] __kasan_record_aux_stack+0xae/0x100 [ 359.342721][ C0] call_rcu+0x167/0xa80 [ 359.346892][ C0] __schedule+0x1787/0x49a0 [ 359.351435][ C0] preempt_schedule_common+0x83/0xd0 [ 359.356719][ C0] preempt_schedule+0xe1/0xf0 [ 359.361397][ C0] preempt_schedule_thunk+0x1a/0x30 [ 359.366595][ C0] _raw_spin_unlock_irq+0x44/0x50 [ 359.371625][ C0] process_scheduled_works+0x7f4/0x1420 [ 359.377174][ C0] worker_thread+0xa5f/0x1000 [ 359.381850][ C0] kthread+0x2ef/0x390 [ 359.385913][ C0] ret_from_fork+0x4b/0x80 [ 359.390331][ C0] ret_from_fork_asm+0x1b/0x30 [ 359.395098][ C0] [ 359.397414][ C0] The buggy address belongs to the object at ffff8880211c3b80 [ 359.397414][ C0] which belongs to the cache task_struct of size 7360 [ 359.411553][ C0] The buggy address is located 2552 bytes inside of [ 359.411553][ C0] freed 7360-byte region [ffff8880211c3b80, ffff8880211c5840) [ 359.425518][ C0] [ 359.427836][ C0] The buggy address belongs to the physical page: [ 359.434264][ C0] page:ffffea0000847000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x211c0 [ 359.444435][ C0] head:ffffea0000847000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 359.453371][ C0] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 359.461800][ C0] page_type: 0xffffffff() [ 359.466129][ C0] raw: 00fff00000000840 ffff8880162b2500 0000000000000000 dead000000000001 [ 359.474711][ C0] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 359.483378][ C0] page dumped because: kasan: bad access detected [ 359.489786][ C0] page_owner tracks the page as allocated [ 359.495490][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11, tgid 11 (kworker/u4:0), ts 9635853610, free_ts 0 [ 359.515581][ C0] post_alloc_hook+0x1ea/0x210 [ 359.520370][ C0] get_page_from_freelist+0x33ea/0x3580 [ 359.525936][ C0] __alloc_pages+0x255/0x680 [ 359.530553][ C0] alloc_slab_page+0x5f/0x160 [ 359.535247][ C0] new_slab+0x84/0x2f0 [ 359.539325][ C0] ___slab_alloc+0xd17/0x13e0 [ 359.544111][ C0] kmem_cache_alloc_node+0x245/0x380 [ 359.549492][ C0] dup_task_struct+0x57/0x7d0 [ 359.554172][ C0] copy_process+0x5d5/0x3fc0 [ 359.558764][ C0] kernel_clone+0x222/0x840 [ 359.563266][ C0] user_mode_thread+0x132/0x1a0 [ 359.568119][ C0] call_usermodehelper_exec_work+0x5c/0x230 [ 359.574030][ C0] process_scheduled_works+0x913/0x1420 [ 359.579583][ C0] worker_thread+0xa5f/0x1000 [ 359.584269][ C0] kthread+0x2ef/0x390 [ 359.588337][ C0] ret_from_fork+0x4b/0x80 [ 359.592755][ C0] page_owner free stack trace missing [ 359.598121][ C0] [ 359.600439][ C0] Memory state around the buggy address: [ 359.606060][ C0] ffff8880211c4400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 359.614115][ C0] ffff8880211c4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 359.622169][ C0] >ffff8880211c4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 359.630223][ C0] ^ [ 359.638196][ C0] ffff8880211c4580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 359.646246][ C0] ffff8880211c4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 359.654297][ C0] ================================================================== [ 359.662354][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 359.669543][ C0] CPU: 0 PID: 9164 Comm: syz-executor115 Not tainted 6.8.0-rc5-syzkaller #0 [ 359.678211][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 359.688260][ C0] Call Trace: [ 359.691559][ C0] [ 359.694486][ C0] dump_stack_lvl+0x1e7/0x2e0 [ 359.699179][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.704378][ C0] ? __pfx__printk+0x10/0x10 [ 359.708982][ C0] ? rcu_is_watching+0x15/0xb0 [ 359.713752][ C0] ? lock_release+0xbf/0x9d0 [ 359.718348][ C0] ? vscnprintf+0x5d/0x90 [ 359.722692][ C0] panic+0x349/0x860 [ 359.726602][ C0] ? check_panic_on_warn+0x21/0xb0 [ 359.731726][ C0] ? __pfx_panic+0x10/0x10 [ 359.736151][ C0] ? do_raw_spin_unlock+0x13b/0x8b0 [ 359.741358][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 359.747256][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 359.753600][ C0] ? print_report+0x4ff/0x540 [ 359.758295][ C0] check_panic_on_warn+0x86/0xb0 [ 359.763244][ C0] ? __lock_acquire+0x77/0x1fd0 [ 359.768106][ C0] end_report+0x6e/0x140 [ 359.772363][ C0] kasan_report+0x153/0x180 [ 359.776867][ C0] ? __lock_acquire+0x77/0x1fd0 [ 359.781731][ C0] __lock_acquire+0x77/0x1fd0 [ 359.786414][ C0] ? stack_trace_save+0x117/0x1d0 [ 359.791440][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 359.796813][ C0] lock_acquire+0x1e3/0x530 [ 359.801320][ C0] ? try_to_wake_up+0xaf/0x1470 [ 359.806169][ C0] ? __pfx_lockdep_unlock+0x10/0x10 [ 359.811380][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 359.816410][ C0] ? mark_lock+0x9a/0x350 [ 359.820734][ C0] ? __lock_acquire+0x1345/0x1fd0 [ 359.825762][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 359.831047][ C0] ? try_to_wake_up+0xaf/0x1470 [ 359.835895][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 359.841804][ C0] try_to_wake_up+0xaf/0x1470 [ 359.846502][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 359.851545][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 359.857449][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 359.862650][ C0] ? __pfx_nilfs_construction_timeout+0x10/0x10 [ 359.868900][ C0] ? call_timer_fn+0xa8/0x600 [ 359.873588][ C0] call_timer_fn+0x17e/0x600 [ 359.878188][ C0] ? call_timer_fn+0xc0/0x600 [ 359.882869][ C0] ? __pfx_nilfs_construction_timeout+0x10/0x10 [ 359.889111][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 359.894232][ C0] ? __pfx_nilfs_construction_timeout+0x10/0x10 [ 359.900479][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.905676][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 359.910892][ C0] ? __pfx_nilfs_construction_timeout+0x10/0x10 [ 359.917157][ C0] __run_timers+0x621/0x830 [ 359.921685][ C0] ? __pfx___run_timers+0x10/0x10 [ 359.926719][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 359.933055][ C0] ? do_raw_spin_unlock+0x13b/0x8b0 [ 359.938257][ C0] run_timer_softirq+0x67/0xf0 [ 359.943023][ C0] __do_softirq+0x2bb/0x942 [ 359.947537][ C0] ? __irq_exit_rcu+0xf1/0x1c0 [ 359.952319][ C0] ? __pfx___do_softirq+0x10/0x10 [ 359.957348][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 359.962544][ C0] __irq_exit_rcu+0xf1/0x1c0 [ 359.967126][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 359.972324][ C0] irq_exit_rcu+0x9/0x30 [ 359.976569][ C0] sysvec_apic_timer_interrupt+0x48/0xb0 [ 359.982205][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 359.988201][ C0] RIP: 0033:0x7f41e8a24b70 [ 359.992616][ C0] Code: 49 8b 47 10 48 39 f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 <49> 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b [ 360.012220][ C0] RSP: 002b:00007ffe4bfce3f0 EFLAGS: 00000202 [ 360.018286][ C0] RAX: 00000000001c00b1 RBX: 00007ffe4bfce490 RCX: 00000000000000b8 [ 360.026264][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007ffe4bfce530 [ 360.034233][ C0] RBP: 0000000000000102 R08: 00007f41e0600000 R09: 0000000000000000 [ 360.042205][ C0] R10: 0000000000000000 R11: 00007ffe4bfce4a0 R12: 0000000000000001 [ 360.050175][ C0] R13: 00007f41e8aa40c0 R14: 0000000000000000 R15: 00007ffe4bfce530 [ 360.058153][ C0] [ 360.061440][ C0] Kernel Offset: disabled [ 360.065768][ C0] Rebooting in 86400 seconds..