./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor477370953 <...> entries */, 32768) = 112 ./strace-static-x86_64: Process 5719 attached [pid 5002] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5719] chdir("./58" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5719] <... chdir resumed>) = 0 [pid 5002] lstat("./59/binderfs", [pid 5719] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5719] <... prctl resumed>) = 0 [pid 5002] unlink("./59/binderfs" [pid 5719] setpgid(0, 0 [pid 5002] <... unlink resumed>) = 0 [pid 5719] <... setpgid resumed>) = 0 [pid 5002] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5711] <... pwritev resumed>) = 1114112 [pid 5719] <... openat resumed>) = 3 [pid 5719] write(3, "1000", 4) = 4 [pid 5711] exit_group(0 [pid 5710] <... pwritev resumed>) = 1114112 [pid 5719] close(3 [pid 5710] exit_group(0 [pid 5719] <... close resumed>) = 0 [pid 5711] <... exit_group resumed>) = ? [pid 5710] <... exit_group resumed>) = ? [pid 5719] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5719] memfd_create("syzkaller", 0) = 3 [pid 5719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5718] <... mount resumed>) = 0 [pid 5718] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5718] chdir("./file0" [pid 5002] <... umount2 resumed>) = 0 [pid 5718] <... chdir resumed>) = 0 [pid 5718] ioctl(4, LOOP_CLR_FD) = 0 [pid 5718] close(4) = 0 [pid 5002] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5718] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5712] <... pwritev resumed>) = 1114112 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./59/file0", [pid 5718] <... openat resumed>) = 4 [pid 5712] exit_group(0 [pid 5711] +++ exited with 0 +++ [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5719] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5718] unlink("./file1" [pid 5712] <... exit_group resumed>) = ? [pid 5002] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5710] +++ exited with 0 +++ [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5711, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5002] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5710, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5002] <... openat resumed>) = 4 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(4, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] getdents64(4, [pid 5000] <... openat resumed>) = 3 [pid 4998] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] fstat(3, [pid 4998] <... openat resumed>) = 3 [pid 5718] <... unlink resumed>) = 0 [pid 5002] close(4 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] fstat(3, [pid 5718] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... close resumed>) = 0 [pid 5000] getdents64(3, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5719] <... write resumed>) = 2097152 [pid 5002] rmdir("./59/file0" [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] getdents64(3, [pid 5002] <... rmdir resumed>) = 0 [pid 5000] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] getdents64(3, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5719] munmap(0x7f0ed4ac1000, 2097152 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] lstat("./58/binderfs", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5719] <... munmap resumed>) = 0 [pid 5712] +++ exited with 0 +++ [pid 5002] close(3 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] lstat("./57/binderfs", [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5712, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5719] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] <... close resumed>) = 0 [ 87.881189][ T5720] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] unlink("./58/binderfs" [pid 5002] rmdir("./59" [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5719] <... openat resumed>) = 4 [pid 5719] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... unlink resumed>) = 0 [pid 5719] <... ioctl resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] unlink("./57/binderfs" [pid 5002] mkdir("./60", 0777 [pid 5003] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... unlink resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, [pid 5002] <... mkdir resumed>) = 0 [pid 4998] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5003] unlink("./58/binderfs") = 0 [pid 5003] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5719] close(3) = 0 [pid 5719] mkdir("./file0", 0777) = 0 [pid 5719] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5721 [pid 5719] <... mount resumed>) = 0 [pid 5719] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5719] chdir("./file0") = 0 [pid 5719] ioctl(4, LOOP_CLR_FD) = 0 [pid 5719] close(4) = 0 [pid 5719] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 87.943507][ T5719] loop1: detected capacity change from 0 to 4096 [pid 5719] unlink("./file1"./strace-static-x86_64: Process 5721 attached [pid 5003] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5721] chdir("./60" [pid 5003] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5721] <... chdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5721] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] lstat("./58/file0", [pid 4998] lstat("./57/file0", [pid 5721] <... prctl resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5721] setpgid(0, 0 [pid 5003] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5721] <... setpgid resumed>) = 0 [pid 4998] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5721] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5721] <... openat resumed>) = 3 [pid 5003] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5721] write(3, "1000", 4 [pid 5003] <... openat resumed>) = 4 [pid 4998] <... openat resumed>) = 4 [pid 5721] <... write resumed>) = 4 [pid 5003] fstat(4, [pid 4998] fstat(4, [pid 5721] close(3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5721] <... close resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5721] symlink("/dev/binderfs", "./binderfs" [pid 5003] getdents64(4, [pid 4998] getdents64(4, [pid 5721] <... symlink resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] <... umount2 resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5721] memfd_create("syzkaller", 0 [pid 5003] getdents64(4, [pid 5000] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(4, [pid 5721] <... memfd_create resumed>) = 3 [pid 5719] <... unlink resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5721] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5719] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] close(4 [pid 5000] lstat("./58/file0", [pid 4998] close(4 [pid 5721] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] <... close resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... close resumed>) = 0 [pid 5721] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] rmdir("./58/file0" [pid 5000] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] rmdir("./57/file0" [pid 5003] <... rmdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] getdents64(3, [pid 5000] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... rmdir resumed>) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3 [pid 5000] <... openat resumed>) = 4 [pid 4998] getdents64(3, [pid 5003] <... close resumed>) = 0 [pid 5000] fstat(4, [pid 5003] rmdir("./58" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5000] getdents64(4, [pid 4998] close(3 [pid 5003] mkdir("./59", 0777) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] <... close resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] getdents64(4, [pid 4998] rmdir("./57" [pid 5003] <... openat resumed>) = 3 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5000] close(4 [pid 4998] mkdir("./58", 0777 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5718] <... pwritev resumed>) = 1114112 [pid 5000] <... close resumed>) = 0 [ 88.005332][ T5722] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5718] exit_group(0 [pid 5003] close(3 [pid 5000] rmdir("./58/file0" [pid 4998] <... mkdir resumed>) = 0 [pid 5721] <... write resumed>) = 2097152 [pid 5718] <... exit_group resumed>) = ? [pid 5003] <... close resumed>) = 0 [pid 5721] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5721] <... munmap resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5721] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5723 [pid 5000] getdents64(3, [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5721] <... openat resumed>) = 4 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 5721] ioctl(4, LOOP_SET_FD, 3 [pid 5000] close(3 [pid 4998] <... close resumed>) = 0 ./strace-static-x86_64: Process 5723 attached [pid 5723] chdir("./59") = 0 [pid 5723] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5723] setpgid(0, 0) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./58" [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5724 [pid 5723] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... rmdir resumed>) = 0 [pid 5000] mkdir("./59", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5725 [pid 5723] <... openat resumed>) = 3 [pid 5723] write(3, "1000", 4./strace-static-x86_64: Process 5725 attached ) = 4 [pid 5725] chdir("./59" [pid 5721] <... ioctl resumed>) = 0 [pid 5725] <... chdir resumed>) = 0 [pid 5721] close(3 [pid 5725] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5721] <... close resumed>) = 0 [pid 5725] <... prctl resumed>) = 0 [pid 5725] setpgid(0, 0 [pid 5723] close(3 [pid 5721] mkdir("./file0", 0777 [pid 5725] <... setpgid resumed>) = 0 [pid 5723] <... close resumed>) = 0 [pid 5721] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5724 attached [pid 5725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5723] symlink("/dev/binderfs", "./binderfs" [pid 5721] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5719] <... pwritev resumed>) = 1114112 [pid 5718] +++ exited with 0 +++ [pid 5725] <... openat resumed>) = 3 [pid 5724] chdir("./58" [pid 5723] <... symlink resumed>) = 0 [pid 5719] exit_group(0 [pid 5725] write(3, "1000", 4 [pid 5724] <... chdir resumed>) = 0 [pid 5723] memfd_create("syzkaller", 0 [pid 5719] <... exit_group resumed>) = ? [pid 5725] <... write resumed>) = 4 [ 88.086412][ T5721] loop4: detected capacity change from 0 to 4096 [pid 5724] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5723] <... memfd_create resumed>) = 3 [pid 5725] close(3 [pid 5724] <... prctl resumed>) = 0 [pid 5723] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5721] <... mount resumed>) = 0 [pid 5719] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5718, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5725] <... close resumed>) = 0 [pid 5724] setpgid(0, 0 [pid 5723] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5721] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5725] symlink("/dev/binderfs", "./binderfs" [pid 5724] <... setpgid resumed>) = 0 [pid 5721] <... openat resumed>) = 3 [pid 5001] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5719, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5725] <... symlink resumed>) = 0 [pid 5724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5721] chdir("./file0" [pid 4999] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5725] memfd_create("syzkaller", 0 [pid 5724] <... openat resumed>) = 3 [pid 5721] <... chdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5725] <... memfd_create resumed>) = 3 [pid 5724] write(3, "1000", 4 [pid 5721] ioctl(4, LOOP_CLR_FD [pid 4999] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5724] <... write resumed>) = 4 [pid 5721] <... ioctl resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5725] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5724] close(3 [pid 5721] close(4 [pid 4999] fstat(3, [pid 5725] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5724] <... close resumed>) = 0 [pid 5723] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5721] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5724] symlink("/dev/binderfs", "./binderfs" [pid 5721] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4999] getdents64(3, [pid 5724] <... symlink resumed>) = 0 [pid 5721] <... openat resumed>) = 4 [pid 5001] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5724] memfd_create("syzkaller", 0 [pid 5721] unlink("./file1" [pid 4999] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5724] <... memfd_create resumed>) = 3 [pid 5721] <... unlink resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5724] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5721] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] lstat("./58/binderfs", [pid 5724] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5001] fstat(3, [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5725] <... write resumed>) = 2097152 [pid 5723] <... write resumed>) = 2097152 [pid 4999] unlink("./58/binderfs") = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5723] munmap(0x7f0ed4ac1000, 2097152 [ 88.133791][ T5726] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5725] munmap(0x7f0ed4ac1000, 2097152 [pid 5723] <... munmap resumed>) = 0 [pid 5001] getdents64(3, [pid 5723] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5723] <... openat resumed>) = 4 [pid 5001] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5723] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5724] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] lstat("./58/binderfs", [pid 5725] <... munmap resumed>) = 0 [pid 5723] <... ioctl resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./58/binderfs" [pid 4999] <... openat resumed>) = 4 [pid 5725] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5001] <... unlink resumed>) = 0 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5725] <... openat resumed>) = 4 [pid 5001] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5725] ioctl(4, LOOP_SET_FD, 3 [pid 4999] close(4) = 0 [pid 4999] rmdir("./58/file0") = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 4999] getdents64(3, [pid 5723] close(3 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./58" [pid 5725] <... ioctl resumed>) = 0 [pid 5723] <... close resumed>) = 0 [pid 5001] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./59", 0777 [pid 5725] close(3 [pid 5723] mkdir("./file0", 0777 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5725] <... close resumed>) = 0 [pid 5723] <... mkdir resumed>) = 0 [pid 5001] lstat("./58/file0", [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5725] mkdir("./file0", 0777 [pid 5723] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5725] <... mkdir resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5727 [pid 5725] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 88.203122][ T5723] loop5: detected capacity change from 0 to 4096 [ 88.219804][ T5725] loop2: detected capacity change from 0 to 4096 [pid 5001] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./58/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./58" [pid 5724] <... write resumed>) = 2097152 [pid 5001] <... rmdir resumed>) = 0 [pid 5724] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] mkdir("./59", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5724] <... munmap resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5724] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5724] <... openat resumed>) = 4 [pid 5001] close(3./strace-static-x86_64: Process 5727 attached [pid 5725] <... mount resumed>) = 0 [pid 5724] ioctl(4, LOOP_SET_FD, 3 [pid 5723] <... mount resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5727] chdir("./59" [pid 5725] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5723] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5727] <... chdir resumed>) = 0 [pid 5725] <... openat resumed>) = 3 [pid 5723] <... openat resumed>) = 3 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5725] chdir("./file0" [pid 5723] chdir("./file0" [pid 5725] <... chdir resumed>) = 0 [pid 5723] <... chdir resumed>) = 0 [pid 5725] ioctl(4, LOOP_CLR_FD [pid 5723] ioctl(4, LOOP_CLR_FD [pid 5725] <... ioctl resumed>) = 0 [pid 5723] <... ioctl resumed>) = 0 [pid 5725] close(4 [pid 5723] close(4./strace-static-x86_64: Process 5730 attached [pid 5727] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5725] <... close resumed>) = 0 [pid 5724] <... ioctl resumed>) = 0 [pid 5723] <... close resumed>) = 0 [pid 5721] <... pwritev resumed>) = 1114112 [pid 5730] chdir("./59" [pid 5727] <... prctl resumed>) = 0 [pid 5725] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5724] close(3 [pid 5721] exit_group(0 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5730 [pid 5730] <... chdir resumed>) = 0 [pid 5727] setpgid(0, 0 [pid 5725] <... openat resumed>) = 4 [pid 5724] <... close resumed>) = 0 [pid 5723] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5721] <... exit_group resumed>) = ? [pid 5730] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5727] <... setpgid resumed>) = 0 [pid 5725] unlink("./file1" [pid 5724] mkdir("./file0", 0777 [pid 5723] <... openat resumed>) = 4 [pid 5730] <... prctl resumed>) = 0 [pid 5727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5725] <... unlink resumed>) = 0 [pid 5724] <... mkdir resumed>) = 0 [pid 5723] unlink("./file1" [pid 5730] setpgid(0, 0 [pid 5727] <... openat resumed>) = 3 [pid 5725] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5724] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5730] <... setpgid resumed>) = 0 [pid 5727] write(3, "1000", 4 [pid 5723] <... unlink resumed>) = 0 [pid 5730] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5727] <... write resumed>) = 4 [pid 5723] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5730] <... openat resumed>) = 3 [pid 5727] close(3 [pid 5730] write(3, "1000", 4 [pid 5727] <... close resumed>) = 0 [pid 5730] <... write resumed>) = 4 [pid 5727] symlink("/dev/binderfs", "./binderfs" [pid 5730] close(3 [pid 5727] <... symlink resumed>) = 0 [pid 5730] <... close resumed>) = 0 [pid 5727] memfd_create("syzkaller", 0 [pid 5730] symlink("/dev/binderfs", "./binderfs" [pid 5727] <... memfd_create resumed>) = 3 [pid 5730] <... symlink resumed>) = 0 [ 88.286424][ T5729] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.297758][ T5728] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.301973][ T5724] loop0: detected capacity change from 0 to 4096 [pid 5727] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5730] memfd_create("syzkaller", 0 [pid 5727] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5730] <... memfd_create resumed>) = 3 [pid 5727] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5730] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5730] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5724] <... mount resumed>) = 0 [pid 5724] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5721] +++ exited with 0 +++ [pid 5724] <... openat resumed>) = 3 [pid 5724] chdir("./file0" [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5721, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5724] <... chdir resumed>) = 0 [pid 5002] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5724] ioctl(4, LOOP_CLR_FD [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5724] <... ioctl resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5724] close(4 [pid 5002] <... openat resumed>) = 3 [pid 5724] <... close resumed>) = 0 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5724] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5724] <... openat resumed>) = 4 [pid 5002] lstat("./60/binderfs", [pid 5724] unlink("./file1" [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./60/binderfs") = 0 [pid 5002] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5730] <... write resumed>) = 2097152 [pid 5727] <... write resumed>) = 2097152 [pid 5727] munmap(0x7f0ed4ac1000, 2097152 [pid 5730] munmap(0x7f0ed4ac1000, 2097152 [pid 5727] <... munmap resumed>) = 0 [pid 5727] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5724] <... unlink resumed>) = 0 [pid 5724] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5727] <... openat resumed>) = 4 [pid 5730] <... munmap resumed>) = 0 [ 88.391969][ T5731] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5727] ioctl(4, LOOP_SET_FD, 3 [pid 5730] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5730] ioctl(4, LOOP_SET_FD, 3 [pid 5727] <... ioctl resumed>) = 0 [pid 5727] close(3) = 0 [pid 5727] mkdir("./file0", 0777 [pid 5730] <... ioctl resumed>) = 0 [pid 5730] close(3) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5730] mkdir("./file0", 0777) = 0 [pid 5002] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5730] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./60/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 5727] <... mkdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./60" [pid 5727] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] <... rmdir resumed>) = 0 [ 88.448205][ T5727] loop1: detected capacity change from 0 to 4096 [ 88.457553][ T5730] loop3: detected capacity change from 0 to 4096 [pid 5002] mkdir("./61", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5730] <... mount resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5730] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5730] chdir("./file0" [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5733 [pid 5730] <... chdir resumed>) = 0 [pid 5730] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 5733 attached ) = 0 [pid 5725] <... pwritev resumed>) = 1114112 [pid 5723] <... pwritev resumed>) = 1114112 [pid 5733] chdir("./61" [pid 5730] close(4 [pid 5723] exit_group(0 [pid 5725] exit_group(0 [pid 5730] <... close resumed>) = 0 [pid 5733] <... chdir resumed>) = 0 [pid 5730] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5725] <... exit_group resumed>) = ? [pid 5723] <... exit_group resumed>) = ? [pid 5733] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5724] <... pwritev resumed>) = 1114112 [pid 5733] <... prctl resumed>) = 0 [pid 5730] <... openat resumed>) = 4 [pid 5724] exit_group(0 [pid 5733] setpgid(0, 0 [pid 5730] unlink("./file1" [pid 5724] <... exit_group resumed>) = ? [pid 5733] <... setpgid resumed>) = 0 [pid 5733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5733] write(3, "1000", 4) = 4 [pid 5733] close(3) = 0 [pid 5733] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5730] <... unlink resumed>) = 0 [ 88.517354][ T5732] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5730] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5733] memfd_create("syzkaller", 0) = 3 [pid 5733] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5725] +++ exited with 0 +++ [pid 5727] <... mount resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5725, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5727] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5727] chdir("./file0") = 0 [pid 5727] ioctl(4, LOOP_CLR_FD) = 0 [pid 5000] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5727] close(4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5727] <... close resumed>) = 0 [pid 5727] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5727] unlink("./file1" [pid 5000] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./59/binderfs") = 0 [pid 5000] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5724] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5724, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5723] +++ exited with 0 +++ [pid 4998] fstat(3, [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5723, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5733] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] <... openat resumed>) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, [pid 4998] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [ 88.587642][ T5734] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] unlink("./58/binderfs" [pid 5003] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... unlink resumed>) = 0 [pid 5003] lstat("./59/binderfs", [pid 4998] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./59/binderfs") = 0 [pid 5003] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5727] <... unlink resumed>) = 0 [pid 5727] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = 0 [pid 5000] lstat("./59/file0", [pid 4998] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] lstat("./58/file0", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] fstat(4, [pid 5733] <... write resumed>) = 2097152 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] getdents64(4, [pid 5000] <... openat resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] fstat(4, [pid 4998] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] getdents64(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5733] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(4, [pid 4998] fstat(4, [pid 5733] <... munmap resumed>) = 0 [pid 5003] close(4 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 4998] getdents64(4, [pid 5733] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5003] rmdir("./59/file0" [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5733] <... openat resumed>) = 4 [pid 5003] <... rmdir resumed>) = 0 [pid 5000] close(4 [pid 4998] getdents64(4, [pid 5733] ioctl(4, LOOP_SET_FD, 3 [pid 5003] getdents64(3, [pid 5000] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5733] <... ioctl resumed>) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] rmdir("./59/file0" [pid 4998] close(4 [pid 5003] close(3 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5000] getdents64(3, [pid 4998] rmdir("./58/file0" [pid 5003] rmdir("./59" [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5000] close(3 [pid 4998] getdents64(3, [pid 5003] mkdir("./60", 0777 [pid 5000] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5000] rmdir("./59" [pid 4998] close(3 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] <... rmdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5000] mkdir("./60", 0777 [pid 4998] rmdir("./58" [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5000] <... mkdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] mkdir("./59", 0777 [pid 5003] close(3 [pid 5000] <... openat resumed>) = 3 [pid 4998] <... mkdir resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... openat resumed>) = 3 [pid 5000] close(3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5000] <... close resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5735 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] close(3) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5736 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5735 attached [pid 5735] chdir("./60" [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5737 [pid 5735] <... chdir resumed>) = 0 [pid 5735] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5733] close(3 [pid 5735] setpgid(0, 0 [pid 5733] <... close resumed>) = 0 [pid 5735] <... setpgid resumed>) = 0 [pid 5733] mkdir("./file0", 0777 [pid 5730] <... pwritev resumed>) = 1114112 ./strace-static-x86_64: Process 5736 attached [pid 5735] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5733] <... mkdir resumed>) = 0 [pid 5730] exit_group(0 [pid 5736] chdir("./60" [pid 5733] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5736] <... chdir resumed>) = 0 [pid 5730] <... exit_group resumed>) = ? [pid 5736] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5736] setpgid(0, 0) = 0 [pid 5736] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5736] write(3, "1000", 4) = 4 [pid 5736] close(3) = 0 [pid 5736] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5736] memfd_create("syzkaller", 0) = 3 [pid 5735] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5737 attached [pid 5736] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 88.712393][ T5733] loop4: detected capacity change from 0 to 4096 [pid 5735] write(3, "1000", 4 [pid 5737] chdir("./59" [pid 5736] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5735] <... write resumed>) = 4 [pid 5737] <... chdir resumed>) = 0 [pid 5735] close(3 [pid 5737] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5735] <... close resumed>) = 0 [pid 5737] <... prctl resumed>) = 0 [pid 5735] symlink("/dev/binderfs", "./binderfs" [pid 5737] setpgid(0, 0) = 0 [pid 5735] <... symlink resumed>) = 0 [pid 5737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5735] memfd_create("syzkaller", 0 [pid 5737] <... openat resumed>) = 3 [pid 5735] <... memfd_create resumed>) = 3 [pid 5737] write(3, "1000", 4 [pid 5735] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5737] <... write resumed>) = 4 [pid 5735] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5730] +++ exited with 0 +++ [pid 5737] close(3) = 0 [pid 5737] symlink("/dev/binderfs", "./binderfs" [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5730, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5737] <... symlink resumed>) = 0 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5737] memfd_create("syzkaller", 0 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5737] <... memfd_create resumed>) = 3 [pid 5737] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5735] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5736] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5737] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5733] <... mount resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5733] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5733] chdir("./file0") = 0 [pid 5733] ioctl(4, LOOP_CLR_FD) = 0 [pid 5733] close(4) = 0 [pid 5727] <... pwritev resumed>) = 1114112 [pid 5001] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5733] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5727] exit_group(0 [pid 5001] <... openat resumed>) = 3 [pid 5735] <... write resumed>) = 2097152 [pid 5733] <... openat resumed>) = 4 [pid 5727] <... exit_group resumed>) = ? [pid 5001] fstat(3, [pid 5737] <... write resumed>) = 2097152 [pid 5736] <... write resumed>) = 2097152 [pid 5735] munmap(0x7f0ed4ac1000, 2097152 [pid 5733] unlink("./file1" [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5737] munmap(0x7f0ed4ac1000, 2097152 [pid 5736] munmap(0x7f0ed4ac1000, 2097152 [pid 5735] <... munmap resumed>) = 0 [pid 5001] getdents64(3, [pid 5737] <... munmap resumed>) = 0 [pid 5736] <... munmap resumed>) = 0 [pid 5735] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5733] <... unlink resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5737] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5736] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5735] <... openat resumed>) = 4 [pid 5733] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5737] <... openat resumed>) = 4 [pid 5736] <... openat resumed>) = 4 [ 88.820269][ T5738] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5735] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5737] ioctl(4, LOOP_SET_FD, 3 [pid 5736] ioctl(4, LOOP_SET_FD, 3 [pid 5001] lstat("./59/binderfs", [pid 5736] <... ioctl resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./59/binderfs" [pid 5735] <... ioctl resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5737] <... ioctl resumed>) = 0 [pid 5735] close(3 [pid 5001] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5737] close(3 [pid 5735] <... close resumed>) = 0 [pid 5727] +++ exited with 0 +++ [pid 5737] <... close resumed>) = 0 [pid 5735] mkdir("./file0", 0777 [pid 5737] mkdir("./file0", 0777 [pid 5735] <... mkdir resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5727, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5737] <... mkdir resumed>) = 0 [pid 5735] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5737] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5736] close(3) = 0 [pid 5736] mkdir("./file0", 0777) = 0 [pid 5736] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./59/binderfs") = 0 [ 88.866916][ T5735] loop5: detected capacity change from 0 to 4096 [ 88.874103][ T5737] loop0: detected capacity change from 0 to 4096 [ 88.880888][ T5736] loop2: detected capacity change from 0 to 4096 [pid 4999] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5737] <... mount resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5737] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5737] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5737] chdir("./file0" [pid 5001] lstat("./59/file0", [pid 5737] <... chdir resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5737] ioctl(4, LOOP_CLR_FD [pid 5001] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5737] <... ioctl resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5737] close(4) = 0 [pid 5735] <... mount resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5737] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5735] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] <... openat resumed>) = 4 [pid 5735] <... openat resumed>) = 3 [pid 5001] fstat(4, [pid 5735] chdir("./file0" [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5735] <... chdir resumed>) = 0 [pid 5001] getdents64(4, [pid 5737] <... openat resumed>) = 4 [pid 5735] ioctl(4, LOOP_CLR_FD [pid 4999] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5737] unlink("./file1" [pid 5735] <... ioctl resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] lstat("./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5735] close(4 [pid 5001] getdents64(4, [pid 5737] <... unlink resumed>) = 0 [pid 5736] <... mount resumed>) = 0 [pid 5735] <... close resumed>) = 0 [pid 4999] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5736] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5737] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5736] <... openat resumed>) = 3 [pid 5735] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5736] chdir("./file0") = 0 [pid 4999] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5736] ioctl(4, LOOP_CLR_FD) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5736] close(4) = 0 [pid 4999] fstat(4, [pid 5736] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5736] unlink("./file1" [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./59/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./59") = 0 [pid 4999] mkdir("./60", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5735] <... openat resumed>) = 4 [pid 5001] close(4 [pid 5735] unlink("./file1" [pid 4999] <... openat resumed>) = 3 [pid 5001] <... close resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5001] rmdir("./59/file0" [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5735] <... unlink resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [ 88.926996][ T5740] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.947109][ T5739] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.965039][ T5741] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5735] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] getdents64(3, [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5742 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5733] <... pwritev resumed>) = 1114112 [pid 5001] close(3 [pid 5733] exit_group(0) = ? [pid 5001] <... close resumed>) = 0 ./strace-static-x86_64: Process 5742 attached [pid 5742] chdir("./60" [pid 5001] rmdir("./59" [pid 5742] <... chdir resumed>) = 0 [pid 5742] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] mkdir("./60", 0777 [pid 5742] setpgid(0, 0) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5742] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5742] write(3, "1000", 4) = 4 [pid 5742] close(3) = 0 [pid 5742] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5742] memfd_create("syzkaller", 0) = 3 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5742] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5743 [pid 5736] <... unlink resumed>) = 0 [pid 5736] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0./strace-static-x86_64: Process 5743 attached [pid 5743] chdir("./60") = 0 [pid 5743] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5743] setpgid(0, 0) = 0 [pid 5743] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5742] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5743] write(3, "1000", 4) = 4 [pid 5743] close(3) = 0 [pid 5743] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5743] memfd_create("syzkaller", 0) = 3 [pid 5743] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5733] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5733, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5002] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5743] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5742] <... write resumed>) = 2097152 [pid 5737] <... pwritev resumed>) = 1114112 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5737] exit_group(0 [pid 5002] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5737] <... exit_group resumed>) = ? [pid 5002] <... openat resumed>) = 3 [pid 5742] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5742] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5742] ioctl(4, LOOP_SET_FD, 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5742] <... ioctl resumed>) = 0 [pid 5742] close(3) = 0 [pid 5742] mkdir("./file0", 0777 [pid 5002] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./61/binderfs" [pid 5742] <... mkdir resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5742] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 5742] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5742] chdir("./file0") = 0 [pid 5742] ioctl(4, LOOP_CLR_FD) = 0 [pid 5742] close(4) = 0 [ 89.119030][ T5742] loop1: detected capacity change from 0 to 4096 [pid 5742] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5002] <... umount2 resumed>) = 0 [pid 5742] unlink("./file1" [pid 5743] <... write resumed>) = 2097152 [pid 5002] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5743] munmap(0x7f0ed4ac1000, 2097152 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, [pid 5743] <... munmap resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5743] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5002] getdents64(4, [pid 5743] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./61/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./61") = 0 [pid 5002] mkdir("./62", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5742] <... unlink resumed>) = 0 [pid 5742] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5743] <... ioctl resumed>) = 0 [pid 5737] +++ exited with 0 +++ [pid 5735] <... pwritev resumed>) = 1114112 [pid 5002] <... openat resumed>) = 3 [pid 5736] <... pwritev resumed>) = 1114112 [pid 5743] close(3 [pid 5735] exit_group(0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5743] <... close resumed>) = 0 [pid 5736] exit_group(0 [pid 5735] <... exit_group resumed>) = ? [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5737, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5743] mkdir("./file0", 0777 [pid 5736] <... exit_group resumed>) = ? [pid 5002] close(3 [pid 4998] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5743] <... mkdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5743] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5745 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./59/binderfs") = 0 [ 89.173533][ T5744] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.210122][ T5743] loop3: detected capacity change from 0 to 4096 [pid 4998] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5743] <... mount resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5743] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5743] chdir("./file0") = 0 [pid 5743] ioctl(4, LOOP_CLR_FD) = 0 [pid 5743] close(4) = 0 [pid 5743] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5743] unlink("./file1" [pid 4998] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5745 attached ) = 4 [pid 4998] fstat(4, [pid 5745] chdir("./62" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5745] <... chdir resumed>) = 0 [pid 5745] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] getdents64(4, [pid 5745] <... prctl resumed>) = 0 [pid 5745] setpgid(0, 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5745] <... setpgid resumed>) = 0 [pid 4998] getdents64(4, [pid 5745] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5745] <... openat resumed>) = 3 [pid 4998] close(4 [pid 5745] write(3, "1000", 4 [pid 4998] <... close resumed>) = 0 [pid 5745] <... write resumed>) = 4 [pid 4998] rmdir("./59/file0" [pid 5745] close(3) = 0 [pid 4998] <... rmdir resumed>) = 0 [ 89.268637][ T5746] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5745] symlink("/dev/binderfs", "./binderfs" [pid 4998] getdents64(3, [pid 5745] <... symlink resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5745] memfd_create("syzkaller", 0 [pid 5743] <... unlink resumed>) = 0 [pid 4998] close(3 [pid 5745] <... memfd_create resumed>) = 3 [pid 5743] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5736] +++ exited with 0 +++ [pid 5735] +++ exited with 0 +++ [pid 4998] <... close resumed>) = 0 [pid 5745] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5735, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4998] rmdir("./59" [pid 5745] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 4998] <... rmdir resumed>) = 0 [pid 5003] <... restart_syscall resumed>) = 0 [pid 4998] mkdir("./60", 0777 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5736, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5003] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5745] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... openat resumed>) = 3 [pid 4998] close(3 [pid 5003] fstat(3, [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 4998] <... close resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] getdents64(3, [pid 5000] <... restart_syscall resumed>) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5747 [pid 5003] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./60/binderfs") = 0 [pid 5000] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5747 attached ) = -1 EINVAL (Invalid argument) [pid 5747] chdir("./60" [pid 5000] lstat("./60/binderfs", [pid 5747] <... chdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5747] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5747] setpgid(0, 0 [pid 5000] unlink("./60/binderfs" [pid 5747] <... setpgid resumed>) = 0 [pid 5747] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5000] <... unlink resumed>) = 0 [pid 5747] write(3, "1000", 4 [pid 5000] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5747] <... write resumed>) = 4 [pid 5747] close(3) = 0 [pid 5747] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5747] memfd_create("syzkaller", 0) = 3 [pid 5747] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5003] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5747] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5742] <... pwritev resumed>) = 1114112 [pid 5003] lstat("./60/file0", [pid 5742] exit_group(0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5742] <... exit_group resumed>) = ? [pid 5003] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5745] <... write resumed>) = 2097152 [pid 5745] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5745] <... munmap resumed>) = 0 [pid 5745] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5745] ioctl(4, LOOP_SET_FD, 3 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./60/file0") = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./60") = 0 [pid 5003] mkdir("./61", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5748 ./strace-static-x86_64: Process 5748 attached [pid 5745] <... ioctl resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5748] chdir("./61" [pid 5745] close(3 [pid 5742] +++ exited with 0 +++ [pid 5000] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5742, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5748] <... chdir resumed>) = 0 [pid 5745] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5748] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5745] mkdir("./file0", 0777 [pid 5000] lstat("./60/file0", [pid 4999] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5748] <... prctl resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5748] setpgid(0, 0 [pid 5745] <... mkdir resumed>) = 0 [pid 5000] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5748] <... setpgid resumed>) = 0 [pid 4999] fstat(3, [pid 5748] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 5748] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5748] write(3, "1000", 4 [pid 5000] <... openat resumed>) = 4 [pid 4999] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5748] <... write resumed>) = 4 [pid 5745] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] fstat(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./60/binderfs", [pid 5748] close(3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5748] <... close resumed>) = 0 [pid 5000] getdents64(4, [ 89.411693][ T5745] loop4: detected capacity change from 0 to 4096 [pid 4999] unlink("./60/binderfs" [pid 5748] symlink("/dev/binderfs", "./binderfs" [pid 5747] <... write resumed>) = 2097152 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] <... unlink resumed>) = 0 [pid 5748] <... symlink resumed>) = 0 [pid 5747] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] getdents64(4, [pid 5748] memfd_create("syzkaller", 0 [pid 5747] <... munmap resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5748] <... memfd_create resumed>) = 3 [pid 5000] close(4 [pid 5748] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5747] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] <... close resumed>) = 0 [pid 5748] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5747] <... openat resumed>) = 4 [pid 5000] rmdir("./60/file0" [pid 5747] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... rmdir resumed>) = 0 [pid 5747] <... ioctl resumed>) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./60") = 0 [pid 5000] mkdir("./61", 0777) = 0 [pid 5748] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5750 ./strace-static-x86_64: Process 5750 attached [pid 5750] chdir("./61") = 0 [pid 5750] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5750] setpgid(0, 0) = 0 [pid 5745] <... mount resumed>) = 0 [pid 5750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5745] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5750] <... openat resumed>) = 3 [pid 5750] write(3, "1000", 4 [pid 5748] <... write resumed>) = 2097152 [pid 5745] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = 0 [pid 5750] <... write resumed>) = 4 [pid 5747] close(3 [pid 5745] chdir("./file0" [pid 5750] close(3 [pid 5747] <... close resumed>) = 0 [pid 4999] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5750] <... close resumed>) = 0 [pid 5747] mkdir("./file0", 0777 [pid 5745] <... chdir resumed>) = 0 [pid 5750] symlink("/dev/binderfs", "./binderfs" [pid 5747] <... mkdir resumed>) = 0 [pid 5745] ioctl(4, LOOP_CLR_FD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5750] <... symlink resumed>) = 0 [pid 5747] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5745] <... ioctl resumed>) = 0 [pid 4999] lstat("./60/file0", [pid 5750] memfd_create("syzkaller", 0 [pid 5745] close(4 [pid 5743] <... pwritev resumed>) = 1114112 [pid 5750] <... memfd_create resumed>) = 3 [pid 5745] <... close resumed>) = 0 [pid 5743] exit_group(0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5750] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5745] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5743] <... exit_group resumed>) = ? [pid 4999] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5750] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5748] munmap(0x7f0ed4ac1000, 2097152 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5748] <... munmap resumed>) = 0 [pid 5745] <... openat resumed>) = 4 [ 89.492800][ T5747] loop0: detected capacity change from 0 to 4096 [ 89.503458][ T5749] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5748] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5745] unlink("./file1" [pid 4999] <... openat resumed>) = 4 [pid 5748] <... openat resumed>) = 4 [pid 5748] ioctl(4, LOOP_SET_FD, 3 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5750] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5748] <... ioctl resumed>) = 0 [pid 5745] <... unlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5745] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5748] close(3 [pid 5743] +++ exited with 0 +++ [pid 4999] getdents64(4, [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5743, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5748] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5747] <... mount resumed>) = 0 [pid 5748] mkdir("./file0", 0777 [pid 4999] close(4) = 0 [pid 5748] <... mkdir resumed>) = 0 [pid 5747] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./60/file0" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... rmdir resumed>) = 0 [pid 5748] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5747] <... openat resumed>) = 3 [pid 5001] lstat("./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./60/binderfs") = 0 [pid 5001] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5747] chdir("./file0" [pid 4999] getdents64(3, [pid 5747] <... chdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5747] ioctl(4, LOOP_CLR_FD [pid 4999] close(3 [pid 5747] <... ioctl resumed>) = 0 [pid 4999] <... close resumed>) = 0 [ 89.562188][ T5748] loop5: detected capacity change from 0 to 4096 [ 89.568763][ T5751] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5747] close(4 [pid 5750] <... write resumed>) = 2097152 [pid 5747] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 4999] rmdir("./60" [pid 5001] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5750] munmap(0x7f0ed4ac1000, 2097152 [pid 5747] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./60/file0" [pid 4999] <... rmdir resumed>) = 0 [pid 5748] <... mount resumed>) = 0 [pid 5747] <... openat resumed>) = 4 [pid 5750] <... munmap resumed>) = 0 [pid 5748] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5747] unlink("./file1" [pid 5750] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5748] <... openat resumed>) = 3 [pid 4999] mkdir("./61", 0777 [pid 5748] chdir("./file0") = 0 [pid 5748] ioctl(4, LOOP_CLR_FD) = 0 [pid 5748] close(4 [pid 5750] <... openat resumed>) = 4 [pid 5748] <... close resumed>) = 0 [pid 5747] <... unlink resumed>) = 0 [pid 5745] <... pwritev resumed>) = 1114112 [pid 4999] <... mkdir resumed>) = 0 [pid 5748] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5747] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5745] exit_group(0 [pid 5750] ioctl(4, LOOP_SET_FD, 3 [pid 5748] <... openat resumed>) = 4 [pid 5745] <... exit_group resumed>) = ? [pid 5001] <... rmdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5750] <... ioctl resumed>) = 0 [pid 5748] unlink("./file1" [pid 5750] close(3 [pid 5001] getdents64(3, [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5748] <... unlink resumed>) = 0 [pid 4999] close(3 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5750] <... close resumed>) = 0 [pid 5748] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5750] mkdir("./file0", 0777 [pid 5001] close(3 [pid 4999] <... close resumed>) = 0 [pid 5750] <... mkdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5750] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] rmdir("./60") = 0 [pid 5001] mkdir("./61", 0777) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5753 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 5753 attached [pid 5753] chdir("./61" [pid 5001] <... openat resumed>) = 3 [pid 5745] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5745, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] close(3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5001] <... close resumed>) = 0 [pid 5753] <... chdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5753] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5753] <... prctl resumed>) = 0 [ 89.635894][ T5752] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.662659][ T5750] loop2: detected capacity change from 0 to 4096 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5753] setpgid(0, 0 [pid 5002] lstat("./62/binderfs", [pid 5753] <... setpgid resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5753] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] unlink("./62/binderfs" [pid 5753] <... openat resumed>) = 3 [pid 5002] <... unlink resumed>) = 0 [pid 5753] write(3, "1000", 4 [pid 5002] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5753] <... write resumed>) = 4 [pid 5002] <... umount2 resumed>) = 0 [pid 5753] close(3 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5754 [pid 5753] <... close resumed>) = 0 [pid 5753] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5753] memfd_create("syzkaller", 0) = 3 [pid 5753] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 ./strace-static-x86_64: Process 5754 attached [pid 5754] chdir("./61") = 0 [pid 5754] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5754] setpgid(0, 0) = 0 [pid 5754] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5754] write(3, "1000", 4) = 4 [pid 5754] close(3) = 0 [pid 5754] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5754] memfd_create("syzkaller", 0) = 3 [pid 5754] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5002] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 5750] <... mount resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5750] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] getdents64(4, [pid 5750] <... openat resumed>) = 3 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./62/file0" [pid 5750] chdir("./file0" [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5750] <... chdir resumed>) = 0 [pid 5002] close(3 [pid 5750] ioctl(4, LOOP_CLR_FD [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./62" [pid 5750] <... ioctl resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5750] close(4 [pid 5002] mkdir("./63", 0777 [pid 5750] <... close resumed>) = 0 [pid 5750] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5750] <... openat resumed>) = 4 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5750] unlink("./file1" [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5756 ./strace-static-x86_64: Process 5756 attached [pid 5750] <... unlink resumed>) = 0 [pid 5756] chdir("./63" [pid 5750] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5756] <... chdir resumed>) = 0 [ 89.737754][ T5755] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5756] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5753] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5756] setpgid(0, 0) = 0 [pid 5756] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5754] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5756] write(3, "1000", 4 [pid 5748] <... pwritev resumed>) = 1114112 [pid 5756] <... write resumed>) = 4 [pid 5756] close(3 [pid 5748] exit_group(0 [pid 5756] <... close resumed>) = 0 [pid 5748] <... exit_group resumed>) = ? [pid 5756] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5756] memfd_create("syzkaller", 0) = 3 [pid 5756] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5753] <... write resumed>) = 2097152 [pid 5753] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5753] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5753] ioctl(4, LOOP_SET_FD, 3 [pid 5756] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5754] <... write resumed>) = 2097152 [pid 5754] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5754] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5754] ioctl(4, LOOP_SET_FD, 3 [pid 5753] <... ioctl resumed>) = 0 [pid 5753] close(3) = 0 [pid 5753] mkdir("./file0", 0777) = 0 [pid 5753] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5754] <... ioctl resumed>) = 0 [pid 5754] close(3) = 0 [pid 5754] mkdir("./file0", 0777) = 0 [ 89.851071][ T5753] loop1: detected capacity change from 0 to 4096 [ 89.866269][ T5754] loop3: detected capacity change from 0 to 4096 [pid 5754] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5753] <... mount resumed>) = 0 [pid 5753] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5753] chdir("./file0") = 0 [pid 5753] ioctl(4, LOOP_CLR_FD) = 0 [pid 5753] close(4) = 0 [pid 5748] +++ exited with 0 +++ [pid 5747] <... pwritev resumed>) = 1114112 [pid 5753] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5748, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5747] exit_group(0) = ? [pid 5003] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5753] <... openat resumed>) = 4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5753] unlink("./file1" [pid 5003] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./61/binderfs") = 0 [pid 5003] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5753] <... unlink resumed>) = 0 [ 89.897835][ T5757] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5753] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5754] <... mount resumed>) = 0 [pid 5750] <... pwritev resumed>) = 1114112 [pid 5003] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5754] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5750] exit_group(0 [pid 5754] <... openat resumed>) = 3 [pid 5750] <... exit_group resumed>) = ? [pid 5756] <... write resumed>) = 2097152 [pid 5754] chdir("./file0" [pid 5756] munmap(0x7f0ed4ac1000, 2097152 [pid 5754] <... chdir resumed>) = 0 [pid 5754] ioctl(4, LOOP_CLR_FD [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5756] <... munmap resumed>) = 0 [pid 5754] <... ioctl resumed>) = 0 [pid 5003] lstat("./61/file0", [pid 5754] close(4) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5754] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5756] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5756] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5754] <... openat resumed>) = 4 [pid 5003] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5754] unlink("./file1" [pid 5003] <... openat resumed>) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./61/file0") = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./61") = 0 [pid 5003] mkdir("./62", 0777 [pid 5756] <... ioctl resumed>) = 0 [pid 5756] close(3) = 0 [pid 5756] mkdir("./file0", 0777) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5756] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5759 [pid 5747] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5747, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 ./strace-static-x86_64: Process 5759 attached [pid 5759] chdir("./62" [pid 5754] <... unlink resumed>) = 0 [pid 4998] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5759] <... chdir resumed>) = 0 [pid 5754] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, [pid 5759] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 89.956077][ T5758] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.976251][ T5756] loop4: detected capacity change from 0 to 4096 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5759] setpgid(0, 0 [pid 5756] <... mount resumed>) = 0 [pid 5756] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5756] chdir("./file0") = 0 [pid 5756] ioctl(4, LOOP_CLR_FD) = 0 [pid 5756] close(4) = 0 [pid 5756] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5756] unlink("./file1" [pid 4998] getdents64(3, [pid 5759] <... setpgid resumed>) = 0 [pid 5759] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5759] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./60/binderfs", [pid 5759] write(3, "1000", 4) = 4 [pid 5750] +++ exited with 0 +++ [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5759] close(3 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5750, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5759] <... close resumed>) = 0 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 4998] unlink("./60/binderfs" [pid 5000] <... restart_syscall resumed>) = 0 [pid 5000] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] <... unlink resumed>) = 0 [pid 5759] symlink("/dev/binderfs", "./binderfs" [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./61/binderfs") = 0 [pid 5000] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5759] <... symlink resumed>) = 0 [pid 4998] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5759] memfd_create("syzkaller", 0 [pid 5756] <... unlink resumed>) = 0 [pid 5759] <... memfd_create resumed>) = 3 [pid 5759] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5756] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 90.037001][ T5760] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5759] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5759] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5759] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5759] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... umount2 resumed>) = 0 [pid 5759] <... ioctl resumed>) = 0 [pid 5759] close(3) = 0 [pid 5759] mkdir("./file0", 0777 [pid 5000] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./61/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5754] <... pwritev resumed>) = 1114112 [pid 5000] rmdir("./61" [pid 5754] exit_group(0 [pid 5753] <... pwritev resumed>) = 1114112 [pid 5754] <... exit_group resumed>) = ? [ 90.122040][ T5759] loop5: detected capacity change from 0 to 4096 [pid 5753] exit_group(0 [pid 5000] <... rmdir resumed>) = 0 [pid 5759] <... mkdir resumed>) = 0 [pid 5753] <... exit_group resumed>) = ? [pid 5000] mkdir("./62", 0777 [pid 4998] <... umount2 resumed>) = 0 [pid 5759] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] <... mkdir resumed>) = 0 [pid 4998] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... openat resumed>) = 3 [pid 4998] lstat("./60/file0", [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... openat resumed>) = 4 [pid 4998] fstat(4, [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5761 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./60/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./60") = 0 [pid 4998] mkdir("./61", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5762 ./strace-static-x86_64: Process 5762 attached [pid 5762] chdir("./61") = 0 [pid 5762] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5762] setpgid(0, 0) = 0 [pid 5762] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5762] write(3, "1000", 4) = 4 [pid 5762] close(3) = 0 [pid 5762] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5762] memfd_create("syzkaller", 0) = 3 [pid 5762] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5759] <... mount resumed>) = 0 [pid 5754] +++ exited with 0 +++ [pid 5762] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5759] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5754, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5759] <... openat resumed>) = 3 [pid 5759] chdir("./file0" [pid 5753] +++ exited with 0 +++ [pid 5001] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5753, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5759] <... chdir resumed>) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5759] ioctl(4, LOOP_CLR_FD [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5759] <... ioctl resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5759] close(4 [pid 5001] <... openat resumed>) = 3 [pid 4999] <... restart_syscall resumed>) = 0 [pid 5759] <... close resumed>) = 0 [pid 5001] fstat(3, [pid 5759] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 4999] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5759] <... openat resumed>) = 4 [pid 4999] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5759] unlink("./file1" [pid 5001] lstat("./61/binderfs", [pid 4999] fstat(3, [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] unlink("./61/binderfs" [pid 4999] getdents64(3, [pid 5001] <... unlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./61/binderfs", ./strace-static-x86_64: Process 5761 attached {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./61/binderfs" [pid 5762] <... write resumed>) = 2097152 [pid 5761] chdir("./62" [pid 5759] <... unlink resumed>) = 0 [pid 5756] <... pwritev resumed>) = 1114112 [pid 4999] <... unlink resumed>) = 0 [pid 5761] <... chdir resumed>) = 0 [pid 5759] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5756] exit_group(0 [pid 4999] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5761] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5756] <... exit_group resumed>) = ? [pid 5761] <... prctl resumed>) = 0 [pid 5761] setpgid(0, 0) = 0 [pid 5761] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5761] write(3, "1000", 4) = 4 [pid 5761] close(3) = 0 [pid 5761] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5761] memfd_create("syzkaller", 0) = 3 [pid 5761] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [ 90.226076][ T5763] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5761] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./61/file0") = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] close(3 [pid 5762] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... close resumed>) = 0 [pid 5001] lstat("./61/file0", [pid 5762] <... munmap resumed>) = 0 [pid 4999] rmdir("./61" [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5762] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5762] <... openat resumed>) = 4 [pid 4999] <... rmdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5762] ioctl(4, LOOP_SET_FD, 3 [pid 5001] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] mkdir("./62", 0777 [pid 5756] +++ exited with 0 +++ [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5001] <... openat resumed>) = 4 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5764 [pid 5762] <... ioctl resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5756, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5001] fstat(4, [pid 5762] close(3 [pid 5002] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5762] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(4, [pid 5762] mkdir("./file0", 0777 [pid 5002] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5762] <... mkdir resumed>) = 0 [pid 5002] fstat(3, [pid 5001] getdents64(4, [pid 5762] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] getdents64(3, [pid 5001] close(4) = 0 ./strace-static-x86_64: Process 5764 attached [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] rmdir("./61/file0" [pid 5002] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5764] chdir("./62" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... rmdir resumed>) = 0 [pid 5764] <... chdir resumed>) = 0 [pid 5002] lstat("./63/binderfs", [pid 5001] getdents64(3, [pid 5764] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5764] <... prctl resumed>) = 0 [pid 5002] unlink("./63/binderfs" [pid 5001] close(3 [pid 5764] setpgid(0, 0 [pid 5002] <... unlink resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5764] <... setpgid resumed>) = 0 [pid 5002] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5764] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] rmdir("./61" [pid 5764] <... openat resumed>) = 3 [pid 5764] write(3, "1000", 4 [pid 5001] <... rmdir resumed>) = 0 [pid 5764] <... write resumed>) = 4 [pid 5764] close(3) = 0 [pid 5764] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5764] memfd_create("syzkaller", 0) = 3 [pid 5001] mkdir("./62", 0777 [pid 5764] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5761] <... write resumed>) = 2097152 [pid 5764] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5761] munmap(0x7f0ed4ac1000, 2097152 [pid 5764] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5761] <... munmap resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5761] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5001] close(3 [pid 5761] <... openat resumed>) = 4 [ 90.329240][ T5762] loop0: detected capacity change from 0 to 4096 [pid 5761] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5761] <... ioctl resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5766 [pid 5761] close(3) = 0 [pid 5761] mkdir("./file0", 0777 [pid 5762] <... mount resumed>) = 0 [pid 5761] <... mkdir resumed>) = 0 [pid 5761] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5762] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5762] chdir("./file0") = 0 [pid 5762] ioctl(4, LOOP_CLR_FD) = 0 [pid 5762] close(4) = 0 ./strace-static-x86_64: Process 5766 attached [pid 5762] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5766] chdir("./62" [pid 5762] <... openat resumed>) = 4 [pid 5762] unlink("./file1" [pid 5766] <... chdir resumed>) = 0 [pid 5766] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5766] setpgid(0, 0) = 0 [pid 5766] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5002] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5766] write(3, "1000", 4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5766] <... write resumed>) = 4 [pid 5762] <... unlink resumed>) = 0 [pid 5002] lstat("./63/file0", [pid 5766] close(3 [ 90.384326][ T5761] loop2: detected capacity change from 0 to 4096 [ 90.397626][ T5765] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5762] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5766] <... close resumed>) = 0 [pid 5002] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5766] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5766] memfd_create("syzkaller", 0 [pid 5002] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5766] <... memfd_create resumed>) = 3 [pid 5002] <... openat resumed>) = 4 [pid 5766] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] fstat(4, [pid 5766] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5764] <... write resumed>) = 2097152 [pid 5002] getdents64(4, [pid 5764] munmap(0x7f0ed4ac1000, 2097152 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5764] <... munmap resumed>) = 0 [pid 5002] getdents64(4, [pid 5764] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5764] <... openat resumed>) = 4 [pid 5761] <... mount resumed>) = 0 [pid 5002] close(4 [pid 5761] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] <... close resumed>) = 0 [pid 5761] <... openat resumed>) = 3 [pid 5002] rmdir("./63/file0" [pid 5761] chdir("./file0" [pid 5002] <... rmdir resumed>) = 0 [pid 5761] <... chdir resumed>) = 0 [pid 5002] getdents64(3, [pid 5761] ioctl(4, LOOP_CLR_FD [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5761] <... ioctl resumed>) = 0 [pid 5002] close(3 [pid 5761] close(4 [pid 5002] <... close resumed>) = 0 [pid 5761] <... close resumed>) = 0 [pid 5002] rmdir("./63" [pid 5761] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] <... rmdir resumed>) = 0 [pid 5761] <... openat resumed>) = 4 [pid 5002] mkdir("./64", 0777 [pid 5761] unlink("./file1" [pid 5002] <... mkdir resumed>) = 0 [pid 5764] ioctl(4, LOOP_SET_FD, 3 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5768 ./strace-static-x86_64: Process 5768 attached [pid 5768] chdir("./64" [pid 5766] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5768] <... chdir resumed>) = 0 [pid 5768] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5768] setpgid(0, 0) = 0 [pid 5768] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5766] <... write resumed>) = 2097152 [pid 5764] <... ioctl resumed>) = 0 [pid 5768] <... openat resumed>) = 3 [pid 5764] close(3 [pid 5768] write(3, "1000", 4 [pid 5764] <... close resumed>) = 0 [pid 5768] <... write resumed>) = 4 [pid 5764] mkdir("./file0", 0777 [pid 5768] close(3) = 0 [pid 5764] <... mkdir resumed>) = 0 [pid 5768] symlink("/dev/binderfs", "./binderfs" [pid 5764] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5768] <... symlink resumed>) = 0 [pid 5768] memfd_create("syzkaller", 0) = 3 [pid 5768] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [ 90.465700][ T5767] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.479283][ T5764] loop1: detected capacity change from 0 to 4096 [pid 5759] <... pwritev resumed>) = 1114112 [pid 5759] exit_group(0) = ? [pid 5768] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5766] munmap(0x7f0ed4ac1000, 2097152 [pid 5764] <... mount resumed>) = 0 [pid 5761] <... unlink resumed>) = 0 [pid 5764] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5761] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5764] <... openat resumed>) = 3 [pid 5764] chdir("./file0") = 0 [pid 5764] ioctl(4, LOOP_CLR_FD) = 0 [pid 5764] close(4) = 0 [pid 5766] <... munmap resumed>) = 0 [pid 5766] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5766] ioctl(4, LOOP_SET_FD, 3 [pid 5764] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5764] unlink("./file1" [pid 5759] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5759, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5762] <... pwritev resumed>) = 1114112 [pid 5762] exit_group(0 [pid 5003] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5766] <... ioctl resumed>) = 0 [pid 5764] <... unlink resumed>) = 0 [pid 5762] <... exit_group resumed>) = ? [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5768] <... write resumed>) = 2097152 [pid 5766] close(3 [ 90.540809][ T5769] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.569101][ T5766] loop3: detected capacity change from 0 to 4096 [pid 5764] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5768] munmap(0x7f0ed4ac1000, 2097152 [pid 5766] <... close resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5766] mkdir("./file0", 0777 [pid 5003] <... openat resumed>) = 3 [pid 5768] <... munmap resumed>) = 0 [pid 5766] <... mkdir resumed>) = 0 [pid 5003] fstat(3, [pid 5768] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5766] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5768] <... openat resumed>) = 4 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5768] ioctl(4, LOOP_SET_FD, 3 [pid 5003] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./62/binderfs") = 0 [pid 5768] <... ioctl resumed>) = 0 [pid 5003] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5768] close(3 [pid 5762] +++ exited with 0 +++ [pid 5768] <... close resumed>) = 0 [pid 5766] <... mount resumed>) = 0 [pid 5768] mkdir("./file0", 0777 [pid 5766] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5761] <... pwritev resumed>) = 1114112 [pid 5768] <... mkdir resumed>) = 0 [pid 5766] <... openat resumed>) = 3 [pid 5761] exit_group(0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5762, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5768] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5766] chdir("./file0" [pid 5761] <... exit_group resumed>) = ? [pid 4998] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5766] <... chdir resumed>) = 0 [pid 5768] <... mount resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 90.637965][ T5768] loop4: detected capacity change from 0 to 4096 [ 90.648273][ T5770] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5768] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5766] ioctl(4, LOOP_CLR_FD [pid 4998] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5768] <... openat resumed>) = 3 [pid 5766] <... ioctl resumed>) = 0 [pid 5768] chdir("./file0" [pid 5766] close(4 [pid 4998] <... openat resumed>) = 3 [pid 5768] <... chdir resumed>) = 0 [pid 5766] <... close resumed>) = 0 [pid 4998] fstat(3, [pid 5768] ioctl(4, LOOP_CLR_FD [pid 5766] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5768] <... ioctl resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5768] close(4 [pid 5766] <... openat resumed>) = 4 [pid 5768] <... close resumed>) = 0 [pid 5766] unlink("./file1" [pid 4998] getdents64(3, [pid 5768] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5766] <... unlink resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5768] <... openat resumed>) = 4 [pid 5766] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5768] unlink("./file1") = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5768] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./61/binderfs") = 0 [ 90.681293][ T5771] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./62/file0", [pid 5761] +++ exited with 0 +++ [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5761, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5764] <... pwritev resumed>) = 1114112 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5764] exit_group(0 [pid 5003] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5764] <... exit_group resumed>) = ? [pid 5003] <... openat resumed>) = 4 [pid 5000] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4 [pid 4998] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] rmdir("./62/file0") = 0 [pid 5000] <... openat resumed>) = 3 [pid 4998] lstat("./61/file0", [pid 5003] getdents64(3, [pid 5000] fstat(3, [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] close(3 [pid 5000] getdents64(3, [pid 4998] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] rmdir("./62" [pid 5000] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... rmdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] mkdir("./63", 0777 [pid 5000] lstat("./62/binderfs", [pid 4998] <... openat resumed>) = 4 [pid 5003] <... mkdir resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] fstat(4, [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] unlink("./62/binderfs" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5000] <... unlink resumed>) = 0 [pid 4998] getdents64(4, [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5000] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] getdents64(4, [pid 5003] close(3 [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4998] close(4 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./61/file0" [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5772 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./61") = 0 [pid 4998] mkdir("./62", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5772 attached [pid 5772] chdir("./63" [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5773 [pid 5772] <... chdir resumed>) = 0 [pid 5000] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5772] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5764] +++ exited with 0 +++ [pid 5000] lstat("./62/file0", [pid 5772] <... prctl resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5764, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5772] setpgid(0, 0 [pid 5000] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5772] <... setpgid resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5772] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5773 attached [pid 5772] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5773] chdir("./62" [pid 5772] write(3, "1000", 4 [pid 5000] fstat(4, [pid 4999] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5773] <... chdir resumed>) = 0 [pid 5772] <... write resumed>) = 4 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5773] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5772] close(3 [pid 5000] getdents64(4, [pid 4999] fstat(3, [pid 5773] <... prctl resumed>) = 0 [pid 5772] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5773] setpgid(0, 0 [pid 5772] symlink("/dev/binderfs", "./binderfs" [pid 5000] getdents64(4, [pid 4999] getdents64(3, [pid 5773] <... setpgid resumed>) = 0 [pid 5772] <... symlink resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5773] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5772] memfd_create("syzkaller", 0 [pid 5000] close(4 [pid 4999] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5773] <... openat resumed>) = 3 [pid 5772] <... memfd_create resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5773] write(3, "1000", 4 [pid 5772] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] rmdir("./62/file0" [pid 4999] lstat("./62/binderfs", [pid 5773] <... write resumed>) = 4 [pid 5772] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5773] close(3 [pid 5000] getdents64(3, [pid 4999] unlink("./62/binderfs" [pid 5773] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5773] symlink("/dev/binderfs", "./binderfs" [pid 5000] close(3 [pid 4999] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5773] <... symlink resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5773] memfd_create("syzkaller", 0 [pid 5000] rmdir("./62" [pid 5773] <... memfd_create resumed>) = 3 [pid 5000] <... rmdir resumed>) = 0 [pid 5773] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] mkdir("./63", 0777 [pid 5773] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5000] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5772] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5768] <... pwritev resumed>) = 1114112 [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5773] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5768] exit_group(0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5768] <... exit_group resumed>) = ? [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5774 [pid 4999] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5774 attached [pid 5774] chdir("./63") = 0 [pid 4999] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5774] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5774] <... prctl resumed>) = 0 [pid 4999] lstat("./62/file0", [pid 5774] setpgid(0, 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5774] <... setpgid resumed>) = 0 [pid 4999] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5774] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5774] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5774] write(3, "1000", 4 [pid 4999] <... openat resumed>) = 4 [pid 5774] <... write resumed>) = 4 [pid 5774] close(3 [pid 4999] fstat(4, [pid 5774] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5774] symlink("/dev/binderfs", "./binderfs" [pid 4999] getdents64(4, [pid 5774] <... symlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5774] memfd_create("syzkaller", 0 [pid 4999] getdents64(4, [pid 5774] <... memfd_create resumed>) = 3 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5774] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] close(4 [pid 5774] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5772] <... write resumed>) = 2097152 [pid 4999] <... close resumed>) = 0 [pid 5772] munmap(0x7f0ed4ac1000, 2097152 [pid 5768] +++ exited with 0 +++ [pid 5766] <... pwritev resumed>) = 1114112 [pid 4999] rmdir("./62/file0" [pid 5772] <... munmap resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5768, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4999] <... rmdir resumed>) = 0 [pid 5772] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5766] exit_group(0 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 4999] getdents64(3, [pid 5773] <... write resumed>) = 2097152 [pid 5772] <... openat resumed>) = 4 [pid 5766] <... exit_group resumed>) = ? [pid 5002] <... restart_syscall resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5774] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5773] munmap(0x7f0ed4ac1000, 2097152 [pid 5772] ioctl(4, LOOP_SET_FD, 3 [pid 4999] close(3) = 0 [pid 5002] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./62" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... rmdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] mkdir("./63", 0777 [pid 5002] <... openat resumed>) = 3 [pid 4999] <... mkdir resumed>) = 0 [pid 5002] fstat(3, [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5002] getdents64(3, [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] close(3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... close resumed>) = 0 [pid 5002] lstat("./64/binderfs", [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./64/binderfs" [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5775 [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5773] <... munmap resumed>) = 0 [pid 5773] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5772] <... ioctl resumed>) = 0 [pid 5773] <... openat resumed>) = 4 [pid 5772] close(3 [pid 5773] ioctl(4, LOOP_SET_FD, 3 [pid 5772] <... close resumed>) = 0 ./strace-static-x86_64: Process 5775 attached [pid 5775] chdir("./63") = 0 [pid 5775] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5775] setpgid(0, 0) = 0 [pid 5775] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5775] write(3, "1000", 4 [pid 5773] <... ioctl resumed>) = 0 [pid 5772] mkdir("./file0", 0777 [pid 5775] <... write resumed>) = 4 [pid 5775] close(3) = 0 [pid 5775] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5772] <... mkdir resumed>) = 0 [pid 5775] memfd_create("syzkaller", 0 [pid 5772] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5775] <... memfd_create resumed>) = 3 [pid 5775] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5773] close(3) = 0 [pid 5773] mkdir("./file0", 0777) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5773] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [ 90.950610][ T5772] loop5: detected capacity change from 0 to 4096 [ 90.972808][ T5773] loop0: detected capacity change from 0 to 4096 [pid 5002] getdents64(4, [pid 5774] <... write resumed>) = 2097152 [pid 5772] <... mount resumed>) = 0 [pid 5766] +++ exited with 0 +++ [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5775] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5774] munmap(0x7f0ed4ac1000, 2097152 [pid 5773] <... mount resumed>) = 0 [pid 5772] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] close(4 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5766, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./64/file0") = 0 [pid 5001] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] close(3 [pid 5001] <... openat resumed>) = 3 [pid 5002] <... close resumed>) = 0 [pid 5001] fstat(3, [pid 5002] rmdir("./64" [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 5002] mkdir("./65", 0777 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5773] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5772] <... openat resumed>) = 3 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5774] <... munmap resumed>) = 0 [pid 5773] <... openat resumed>) = 3 [pid 5772] chdir("./file0" [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5774] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5773] chdir("./file0" [pid 5772] <... chdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] lstat("./62/binderfs", [pid 5774] <... openat resumed>) = 4 [pid 5773] <... chdir resumed>) = 0 [pid 5772] ioctl(4, LOOP_CLR_FD [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5774] ioctl(4, LOOP_SET_FD, 3 [pid 5773] ioctl(4, LOOP_CLR_FD [pid 5772] <... ioctl resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] unlink("./62/binderfs" [pid 5002] close(3 [pid 5001] <... unlink resumed>) = 0 [pid 5774] <... ioctl resumed>) = 0 [pid 5773] <... ioctl resumed>) = 0 [pid 5772] close(4 [pid 5002] <... close resumed>) = 0 [pid 5001] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5775] <... write resumed>) = 2097152 [pid 5774] close(3 [pid 5773] close(4 [pid 5772] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5775] munmap(0x7f0ed4ac1000, 2097152 [pid 5774] <... close resumed>) = 0 [pid 5773] <... close resumed>) = 0 [pid 5772] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5775] <... munmap resumed>) = 0 [pid 5774] mkdir("./file0", 0777 [pid 5773] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5775] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5774] <... mkdir resumed>) = 0 [pid 5773] <... openat resumed>) = 4 [pid 5775] <... openat resumed>) = 4 [pid 5774] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5773] unlink("./file1" [ 91.010256][ T5776] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.022618][ T5777] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.040083][ T5774] loop2: detected capacity change from 0 to 4096 [pid 5775] ioctl(4, LOOP_SET_FD, 3 [pid 5773] <... unlink resumed>) = 0 [pid 5772] <... openat resumed>) = 4 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5778 [pid 5773] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5772] unlink("./file1"./strace-static-x86_64: Process 5778 attached [pid 5774] <... mount resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5774] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5775] <... ioctl resumed>) = 0 [pid 5774] chdir("./file0" [pid 5775] close(3 [pid 5774] <... chdir resumed>) = 0 [pid 5775] <... close resumed>) = 0 [pid 5774] ioctl(4, LOOP_CLR_FD [pid 5775] mkdir("./file0", 0777 [pid 5774] <... ioctl resumed>) = 0 [pid 5775] <... mkdir resumed>) = 0 [pid 5774] close(4 [pid 5778] chdir("./65" [pid 5774] <... close resumed>) = 0 [pid 5772] <... unlink resumed>) = 0 [pid 5001] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5775] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5774] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5772] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5778] <... chdir resumed>) = 0 [pid 5774] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5774] unlink("./file1" [pid 5778] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] lstat("./62/file0", [pid 5778] <... prctl resumed>) = 0 [pid 5778] setpgid(0, 0) = 0 [pid 5778] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5778] write(3, "1000", 4) = 4 [pid 5775] <... mount resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5778] close(3 [pid 5001] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5778] <... close resumed>) = 0 [pid 5778] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5775] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5775] chdir("./file0" [pid 5778] <... symlink resumed>) = 0 [pid 5775] <... chdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5775] ioctl(4, LOOP_CLR_FD) = 0 [pid 5778] memfd_create("syzkaller", 0 [pid 5001] <... openat resumed>) = 4 [pid 5775] close(4 [pid 5001] fstat(4, [pid 5778] <... memfd_create resumed>) = 3 [pid 5775] <... close resumed>) = 0 [pid 5775] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5778] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5775] <... openat resumed>) = 4 [pid 5001] getdents64(4, [pid 5775] unlink("./file1" [pid 5778] <... mmap resumed>) = 0x7f0ed4ac1000 [ 91.064833][ T5775] loop1: detected capacity change from 0 to 4096 [ 91.077113][ T5779] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5778] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./62/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./62") = 0 [pid 5001] mkdir("./63", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5781 [pid 5775] <... unlink resumed>) = 0 [pid 5775] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0./strace-static-x86_64: Process 5781 attached [pid 5774] <... unlink resumed>) = 0 [pid 5774] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5781] chdir("./63") = 0 [ 91.109136][ T5780] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5781] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5781] setpgid(0, 0) = 0 [pid 5781] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5781] write(3, "1000", 4) = 4 [pid 5781] close(3) = 0 [pid 5781] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5781] memfd_create("syzkaller", 0) = 3 [pid 5781] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5778] <... write resumed>) = 2097152 [pid 5778] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5778] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5781] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5778] <... openat resumed>) = 4 [pid 5773] <... pwritev resumed>) = 1114112 [pid 5773] exit_group(0) = ? [pid 5778] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5778] close(3) = 0 [pid 5778] mkdir("./file0", 0777) = 0 [pid 5778] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5781] <... write resumed>) = 2097152 [pid 5781] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5781] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 91.271211][ T5778] loop4: detected capacity change from 0 to 4096 [pid 5781] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5778] <... mount resumed>) = 0 [pid 5773] +++ exited with 0 +++ [pid 5781] close(3) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5773, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5781] mkdir("./file0", 0777 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5781] <... mkdir resumed>) = 0 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5781] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5778] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5775] <... pwritev resumed>) = 1114112 [pid 5772] <... pwritev resumed>) = 1114112 [pid 4998] getdents64(3, [pid 5778] <... openat resumed>) = 3 [pid 5774] <... pwritev resumed>) = 1114112 [pid 5772] exit_group(0 [pid 5778] chdir("./file0" [pid 5772] <... exit_group resumed>) = ? [pid 5781] <... mount resumed>) = 0 [pid 5778] <... chdir resumed>) = 0 [pid 5775] exit_group(0 [pid 5774] exit_group(0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5778] ioctl(4, LOOP_CLR_FD) = 0 [pid 5778] close(4 [pid 5781] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5778] <... close resumed>) = 0 [pid 5775] <... exit_group resumed>) = ? [pid 5774] <... exit_group resumed>) = ? [pid 4998] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5778] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5778] unlink("./file1") = 0 [pid 5778] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5781] <... openat resumed>) = 3 [pid 5781] chdir("./file0") = 0 [pid 5781] ioctl(4, LOOP_CLR_FD) = 0 [pid 5781] close(4) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5781] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] lstat("./62/binderfs", [pid 5781] <... openat resumed>) = 4 [ 91.313582][ T5781] loop3: detected capacity change from 0 to 4096 [ 91.318284][ T5782] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.338770][ T5783] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5775] +++ exited with 0 +++ [pid 5774] +++ exited with 0 +++ [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5781] unlink("./file1" [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5774, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5775, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4998] unlink("./62/binderfs") = 0 [pid 5000] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5781] <... unlink resumed>) = 0 [pid 5772] +++ exited with 0 +++ [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5781] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5772, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5000] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 5000] <... openat resumed>) = 3 [pid 5003] <... restart_syscall resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 4999] fstat(3, [pid 5003] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] getdents64(3, [pid 4999] getdents64(3, [pid 5003] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] <... openat resumed>) = 3 [pid 5000] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] fstat(3, [pid 4999] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] getdents64(3, [pid 5000] lstat("./63/binderfs", [pid 4999] lstat("./63/binderfs", [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] unlink("./63/binderfs" [pid 4999] unlink("./63/binderfs" [pid 5003] lstat("./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5003] unlink("./63/binderfs" [pid 5000] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... unlink resumed>) = 0 [pid 5003] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./62/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./62") = 0 [pid 4998] mkdir("./63", 0777) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5784 [pid 4999] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4./strace-static-x86_64: Process 5784 attached ) = 0 [pid 4999] rmdir("./63/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5784] chdir("./63" [pid 4999] close(3 [pid 5784] <... chdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5784] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] rmdir("./63") = 0 [pid 5784] <... prctl resumed>) = 0 [pid 4999] mkdir("./64", 0777 [pid 5784] setpgid(0, 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5784] <... setpgid resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5784] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 5784] <... openat resumed>) = 3 [pid 5003] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5784] write(3, "1000", 4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = 0 [pid 5784] <... write resumed>) = 4 [pid 5003] lstat("./63/file0", [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5785 [pid 5784] close(3 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5784] <... close resumed>) = 0 [pid 5003] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5784] symlink("/dev/binderfs", "./binderfs" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./63/file0", [pid 5784] <... symlink resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5785 attached [pid 5785] chdir("./64") = 0 [pid 5785] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5785] setpgid(0, 0) = 0 [pid 5785] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5784] memfd_create("syzkaller", 0 [pid 5003] <... openat resumed>) = 4 [pid 5000] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5785] write(3, "1000", 4 [pid 5784] <... memfd_create resumed>) = 3 [pid 5003] fstat(4, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5785] <... write resumed>) = 4 [pid 5784] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5785] close(3 [pid 5784] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] getdents64(4, [pid 5000] <... openat resumed>) = 4 [pid 5785] <... close resumed>) = 0 [pid 5785] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5785] memfd_create("syzkaller", 0) = 3 [pid 5785] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] fstat(4, [pid 5003] getdents64(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5784] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(4, [pid 5003] close(4 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 5003] rmdir("./63/file0" [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5000] close(4 [pid 5003] getdents64(3, [pid 5000] <... close resumed>) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] rmdir("./63/file0" [pid 5003] close(3 [pid 5000] <... rmdir resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5000] getdents64(3, [pid 5003] rmdir("./63" [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5000] close(3 [pid 5003] mkdir("./64", 0777 [pid 5000] <... close resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5000] rmdir("./63" [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5000] <... rmdir resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5000] mkdir("./64", 0777 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3 [pid 5000] <... mkdir resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5778] <... pwritev resumed>) = 1114112 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5778] exit_group(0) = ? [pid 5000] <... openat resumed>) = 3 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5786 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5787 [pid 5785] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5786 attached [pid 5786] chdir("./64") = 0 [pid 5786] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5787 attached ) = 0 [pid 5786] setpgid(0, 0 [pid 5787] chdir("./64" [pid 5786] <... setpgid resumed>) = 0 [pid 5787] <... chdir resumed>) = 0 [pid 5786] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5784] <... write resumed>) = 2097152 [pid 5781] <... pwritev resumed>) = 1114112 [pid 5787] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5786] <... openat resumed>) = 3 [pid 5784] munmap(0x7f0ed4ac1000, 2097152 [pid 5787] <... prctl resumed>) = 0 [pid 5781] exit_group(0 [pid 5786] write(3, "1000", 4) = 4 [pid 5786] close(3) = 0 [pid 5787] setpgid(0, 0 [pid 5786] symlink("/dev/binderfs", "./binderfs" [pid 5784] <... munmap resumed>) = 0 [pid 5781] <... exit_group resumed>) = ? [pid 5787] <... setpgid resumed>) = 0 [pid 5786] <... symlink resumed>) = 0 [pid 5784] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5786] memfd_create("syzkaller", 0) = 3 [pid 5786] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5787] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5784] <... openat resumed>) = 4 [pid 5787] <... openat resumed>) = 3 [pid 5784] ioctl(4, LOOP_SET_FD, 3 [pid 5787] write(3, "1000", 4 [pid 5784] <... ioctl resumed>) = 0 [pid 5787] <... write resumed>) = 4 [pid 5787] close(3) = 0 [pid 5787] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5787] memfd_create("syzkaller", 0) = 3 [pid 5787] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5785] <... write resumed>) = 2097152 [pid 5785] munmap(0x7f0ed4ac1000, 2097152 [pid 5784] close(3) = 0 [pid 5784] mkdir("./file0", 0777 [pid 5778] +++ exited with 0 +++ [pid 5784] <... mkdir resumed>) = 0 [pid 5786] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5778, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5787] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5785] <... munmap resumed>) = 0 [pid 5784] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5786] <... write resumed>) = 2097152 [pid 5786] munmap(0x7f0ed4ac1000, 2097152 [pid 5785] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] <... restart_syscall resumed>) = 0 [pid 5785] <... openat resumed>) = 4 [pid 5781] +++ exited with 0 +++ [pid 5785] ioctl(4, LOOP_SET_FD, 3 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5781, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5002] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5786] <... munmap resumed>) = 0 [ 91.602322][ T5784] loop0: detected capacity change from 0 to 4096 [pid 5786] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5786] ioctl(4, LOOP_SET_FD, 3 [pid 5785] <... ioctl resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5785] close(3 [pid 5002] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5785] <... close resumed>) = 0 [pid 5785] mkdir("./file0", 0777 [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 5001] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] getdents64(3, [pid 5001] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] <... openat resumed>) = 3 [pid 5002] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(3, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] lstat("./65/binderfs", [pid 5785] <... mkdir resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] getdents64(3, [pid 5785] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] unlink("./65/binderfs" [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] <... unlink resumed>) = 0 [pid 5001] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./63/binderfs", [pid 5787] <... write resumed>) = 2097152 [pid 5786] <... ioctl resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5787] munmap(0x7f0ed4ac1000, 2097152 [pid 5786] close(3 [pid 5001] unlink("./63/binderfs" [pid 5787] <... munmap resumed>) = 0 [pid 5786] <... close resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5787] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5786] mkdir("./file0", 0777 [pid 5001] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5787] <... openat resumed>) = 4 [pid 5786] <... mkdir resumed>) = 0 [pid 5784] <... mount resumed>) = 0 [ 91.647714][ T5785] loop1: detected capacity change from 0 to 4096 [ 91.649961][ T5786] loop5: detected capacity change from 0 to 4096 [ 91.669680][ T5788] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.685382][ T5787] loop2: detected capacity change from 0 to 4096 [pid 5787] ioctl(4, LOOP_SET_FD, 3 [pid 5786] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5784] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5785] <... mount resumed>) = 0 [pid 5784] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = 0 [pid 5784] chdir("./file0") = 0 [pid 5784] ioctl(4, LOOP_CLR_FD) = 0 [pid 5784] close(4 [pid 5785] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5784] <... close resumed>) = 0 [pid 5784] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5787] <... ioctl resumed>) = 0 [pid 5785] <... openat resumed>) = 3 [pid 5787] close(3) = 0 [pid 5785] chdir("./file0" [pid 5784] <... openat resumed>) = 4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5787] mkdir("./file0", 0777 [pid 5784] unlink("./file1" [pid 5787] <... mkdir resumed>) = 0 [pid 5785] <... chdir resumed>) = 0 [pid 5002] lstat("./65/file0", [pid 5787] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5785] ioctl(4, LOOP_CLR_FD [pid 5784] <... unlink resumed>) = 0 [pid 5785] <... ioctl resumed>) = 0 [pid 5784] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5785] close(4 [pid 5001] <... umount2 resumed>) = 0 [pid 5786] <... mount resumed>) = 0 [pid 5785] <... close resumed>) = 0 [ 91.694002][ T5789] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5786] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5785] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5786] <... openat resumed>) = 3 [pid 5001] lstat("./63/file0", [pid 5786] chdir("./file0" [pid 5785] <... openat resumed>) = 4 [pid 5002] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5001] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5786] <... chdir resumed>) = 0 [pid 5002] fstat(4, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5785] unlink("./file1" [pid 5786] ioctl(4, LOOP_CLR_FD [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5786] <... ioctl resumed>) = 0 [pid 5785] <... unlink resumed>) = 0 [pid 5002] getdents64(4, [pid 5001] <... openat resumed>) = 4 [pid 5786] close(4 [pid 5785] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] fstat(4, [pid 5786] <... close resumed>) = 0 [pid 5002] getdents64(4, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5787] <... mount resumed>) = 0 [pid 5786] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(4, [pid 5787] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5787] chdir("./file0") = 0 [pid 5002] close(4 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] <... close resumed>) = 0 [pid 5001] getdents64(4, [pid 5787] ioctl(4, LOOP_CLR_FD) = 0 [pid 5787] close(4) = 0 [pid 5002] rmdir("./65/file0" [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5787] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5786] <... openat resumed>) = 4 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] close(4 [pid 5787] unlink("./file1") = 0 [pid 5786] unlink("./file1" [pid 5002] getdents64(3, [pid 5001] <... close resumed>) = 0 [pid 5787] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5786] <... unlink resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] rmdir("./63/file0" [pid 5786] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] close(3 [pid 5001] <... rmdir resumed>) = 0 [ 91.738084][ T5790] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.757372][ T5791] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] <... close resumed>) = 0 [pid 5001] getdents64(3, [pid 5002] rmdir("./65" [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./63" [pid 5002] mkdir("./66", 0777 [pid 5001] <... rmdir resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] mkdir("./64", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5002] close(3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] close(3) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5792 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5793 ./strace-static-x86_64: Process 5793 attached [pid 5793] chdir("./64") = 0 [pid 5793] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5793] setpgid(0, 0) = 0 [pid 5793] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5792 attached [pid 5792] chdir("./66" [pid 5793] <... openat resumed>) = 3 [pid 5792] <... chdir resumed>) = 0 [pid 5792] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5793] write(3, "1000", 4 [pid 5792] <... prctl resumed>) = 0 [pid 5792] setpgid(0, 0) = 0 [pid 5793] <... write resumed>) = 4 [pid 5792] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5793] close(3 [pid 5792] <... openat resumed>) = 3 [pid 5793] <... close resumed>) = 0 [pid 5792] write(3, "1000", 4 [pid 5793] symlink("/dev/binderfs", "./binderfs" [pid 5792] <... write resumed>) = 4 [pid 5792] close(3) = 0 [pid 5792] symlink("/dev/binderfs", "./binderfs" [pid 5793] <... symlink resumed>) = 0 [pid 5792] <... symlink resumed>) = 0 [pid 5793] memfd_create("syzkaller", 0) = 3 [pid 5793] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5792] memfd_create("syzkaller", 0) = 3 [pid 5792] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5793] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5792] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5784] <... pwritev resumed>) = 1114112 [pid 5784] exit_group(0) = ? [pid 5793] <... write resumed>) = 2097152 [pid 5785] <... pwritev resumed>) = 1114112 [pid 5785] exit_group(0 [pid 5793] munmap(0x7f0ed4ac1000, 2097152 [pid 5785] <... exit_group resumed>) = ? [pid 5793] <... munmap resumed>) = 0 [pid 5793] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5793] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5785] +++ exited with 0 +++ [pid 5793] close(3) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5785, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5793] mkdir("./file0", 0777 [pid 4999] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5793] <... mkdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5793] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./64/binderfs") = 0 [pid 4999] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5793] <... mount resumed>) = 0 [ 91.928503][ T5793] loop3: detected capacity change from 0 to 4096 [pid 5792] <... write resumed>) = 2097152 [pid 5792] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5792] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5792] ioctl(4, LOOP_SET_FD, 3 [pid 5793] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5793] chdir("./file0") = 0 [pid 5793] ioctl(4, LOOP_CLR_FD) = 0 [pid 5793] close(4) = 0 [pid 5793] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5793] unlink("./file1" [pid 4999] <... umount2 resumed>) = 0 [pid 5784] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5784, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4999] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 4 [pid 4998] <... openat resumed>) = 3 [pid 4999] fstat(4, [pid 4998] fstat(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 4998] getdents64(3, [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] getdents64(4, [pid 4998] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5786] <... pwritev resumed>) = 1114112 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5792] <... ioctl resumed>) = 0 [pid 5786] exit_group(0 [pid 4999] close(4 [pid 4998] lstat("./63/binderfs", [pid 5793] <... unlink resumed>) = 0 [pid 5792] close(3 [pid 5786] <... exit_group resumed>) = ? [pid 4999] <... close resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5793] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5792] <... close resumed>) = 0 [pid 5787] <... pwritev resumed>) = 1114112 [pid 4999] rmdir("./64/file0" [pid 4998] unlink("./63/binderfs" [pid 5792] mkdir("./file0", 0777 [pid 5787] exit_group(0 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5792] <... mkdir resumed>) = 0 [pid 5787] <... exit_group resumed>) = ? [ 91.976195][ T5794] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.987577][ T5792] loop4: detected capacity change from 0 to 4096 [pid 4999] getdents64(3, [pid 4998] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5792] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./64") = 0 [pid 4999] mkdir("./65", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5795 [pid 5786] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5786, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5003] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./64/binderfs") = 0 [pid 5003] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5795 attached [pid 4998] <... umount2 resumed>) = 0 [pid 5792] <... mount resumed>) = 0 [pid 5792] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5792] chdir("./file0") = 0 [pid 5792] ioctl(4, LOOP_CLR_FD) = 0 [pid 5792] close(4) = 0 [pid 5792] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5792] unlink("./file1" [pid 5795] chdir("./65") = 0 [pid 5795] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5795] <... prctl resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5795] setpgid(0, 0 [pid 4998] lstat("./63/file0", [pid 5795] <... setpgid resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5795] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5795] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5795] write(3, "1000", 4 [pid 4998] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5795] <... write resumed>) = 4 [pid 5795] close(3 [pid 4998] <... openat resumed>) = 4 [pid 5795] <... close resumed>) = 0 [pid 5795] symlink("/dev/binderfs", "./binderfs" [pid 4998] fstat(4, [pid 5795] <... symlink resumed>) = 0 [pid 5792] <... unlink resumed>) = 0 [pid 5795] memfd_create("syzkaller", 0 [pid 5792] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5795] <... memfd_create resumed>) = 3 [pid 5787] +++ exited with 0 +++ [pid 5003] <... umount2 resumed>) = 0 [pid 5795] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5787, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4998] getdents64(4, [pid 5795] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [ 92.075666][ T5796] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5003] lstat("./64/file0", [pid 4998] getdents64(4, [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(4 [pid 5003] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] rmdir("./63/file0" [pid 5000] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... rmdir resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5003] <... openat resumed>) = 4 [pid 5003] fstat(4, [pid 5000] fstat(3, [pid 4998] getdents64(3, [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(3, [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] close(3 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 5003] close(4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] rmdir("./63" [pid 5000] lstat("./64/binderfs", [pid 5003] <... close resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] rmdir("./64/file0" [pid 5000] unlink("./64/binderfs" [pid 4998] <... rmdir resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 5003] getdents64(3, [pid 5000] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] mkdir("./64", 0777 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5003] close(3) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] rmdir("./64" [pid 4998] <... openat resumed>) = 3 [pid 5003] <... rmdir resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5003] mkdir("./65", 0777) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4998] close(3 [pid 5003] <... openat resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5797 [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5798 ./strace-static-x86_64: Process 5797 attached [pid 5797] chdir("./64") = 0 [pid 5797] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5797] setpgid(0, 0) = 0 [pid 5797] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5797] write(3, "1000", 4) = 4 [pid 5797] close(3) = 0 [pid 5797] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5797] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5798 attached [pid 5798] chdir("./65" [pid 5797] <... memfd_create resumed>) = 3 [pid 5797] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5798] <... chdir resumed>) = 0 [pid 5798] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5798] setpgid(0, 0) = 0 [pid 5798] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5798] write(3, "1000", 4) = 4 [pid 5798] close(3 [pid 5795] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5798] <... close resumed>) = 0 [pid 5798] symlink("/dev/binderfs", "./binderfs" [pid 5795] <... write resumed>) = 2097152 [pid 5798] <... symlink resumed>) = 0 [pid 5798] memfd_create("syzkaller", 0) = 3 [pid 5798] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5798] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5793] <... pwritev resumed>) = 1114112 [pid 5793] exit_group(0) = ? [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./64/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./64") = 0 [pid 5000] mkdir("./65", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5797] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5799 ./strace-static-x86_64: Process 5799 attached [pid 5799] chdir("./65") = 0 [pid 5799] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5799] setpgid(0, 0) = 0 [pid 5799] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5799] write(3, "1000", 4 [pid 5795] munmap(0x7f0ed4ac1000, 2097152 [pid 5799] <... write resumed>) = 4 [pid 5799] close(3) = 0 [pid 5799] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5799] memfd_create("syzkaller", 0) = 3 [pid 5795] <... munmap resumed>) = 0 [pid 5799] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5795] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5799] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5795] <... openat resumed>) = 4 [pid 5795] ioctl(4, LOOP_SET_FD, 3 [pid 5793] +++ exited with 0 +++ [pid 5792] <... pwritev resumed>) = 1114112 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5793, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5792] exit_group(0 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5792] <... exit_group resumed>) = ? [pid 5795] <... ioctl resumed>) = 0 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5001] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./64/binderfs") = 0 [pid 5001] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5795] close(3) = 0 [pid 5795] mkdir("./file0", 0777) = 0 [pid 5795] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5799] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5798] <... write resumed>) = 2097152 [pid 5798] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5798] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5798] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5798] close(3) = 0 [pid 5798] mkdir("./file0", 0777) = 0 [pid 5798] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5797] <... write resumed>) = 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 5797] munmap(0x7f0ed4ac1000, 2097152 [pid 5792] +++ exited with 0 +++ [pid 5001] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5797] <... munmap resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5792, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5002] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] lstat("./64/file0", [pid 5797] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5797] <... openat resumed>) = 4 [pid 5002] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5797] ioctl(4, LOOP_SET_FD, 3 [pid 5002] fstat(3, [ 92.261006][ T5795] loop1: detected capacity change from 0 to 4096 [ 92.293556][ T5798] loop5: detected capacity change from 0 to 4096 [pid 5001] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5799] <... write resumed>) = 2097152 [pid 5797] <... ioctl resumed>) = 0 [pid 5002] getdents64(3, [pid 5001] fstat(4, [pid 5799] munmap(0x7f0ed4ac1000, 2097152 [pid 5797] close(3 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5799] <... munmap resumed>) = 0 [pid 5797] <... close resumed>) = 0 [pid 5795] <... mount resumed>) = 0 [pid 5002] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, [pid 5795] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5795] chdir("./file0") = 0 [pid 5795] ioctl(4, LOOP_CLR_FD) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5795] close(4 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5795] <... close resumed>) = 0 [pid 5795] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5795] unlink("./file1") = 0 [pid 5795] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5799] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5797] mkdir("./file0", 0777 [pid 5002] lstat("./66/binderfs", [pid 5001] getdents64(4, [pid 5798] <... mount resumed>) = 0 [pid 5798] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5798] chdir("./file0") = 0 [pid 5798] ioctl(4, LOOP_CLR_FD) = 0 [pid 5798] close(4 [pid 5799] <... openat resumed>) = 4 [pid 5798] <... close resumed>) = 0 [pid 5797] <... mkdir resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5798] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5799] ioctl(4, LOOP_SET_FD, 3 [pid 5798] <... openat resumed>) = 4 [pid 5797] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] unlink("./66/binderfs" [pid 5001] close(4 [ 92.321823][ T5797] loop0: detected capacity change from 0 to 4096 [ 92.324604][ T5800] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.350685][ T5801] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5798] unlink("./file1" [pid 5799] <... ioctl resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./64/file0") = 0 [pid 5002] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5798] <... unlink resumed>) = 0 [pid 5001] close(3 [pid 5798] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5799] close(3 [pid 5001] <... close resumed>) = 0 [pid 5799] <... close resumed>) = 0 [pid 5001] rmdir("./64" [pid 5799] mkdir("./file0", 0777 [pid 5001] <... rmdir resumed>) = 0 [pid 5799] <... mkdir resumed>) = 0 [pid 5001] mkdir("./65", 0777 [pid 5799] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] <... mkdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5803 ./strace-static-x86_64: Process 5803 attached [pid 5797] <... mount resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5803] chdir("./65" [ 92.371997][ T5799] loop2: detected capacity change from 0 to 4096 [pid 5002] lstat("./66/file0", [pid 5803] <... chdir resumed>) = 0 [pid 5799] <... mount resumed>) = 0 [pid 5797] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5803] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5803] <... prctl resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5803] setpgid(0, 0 [pid 5002] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5803] <... setpgid resumed>) = 0 [pid 5803] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5799] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5797] <... openat resumed>) = 3 [pid 5002] <... openat resumed>) = 4 [pid 5803] <... openat resumed>) = 3 [pid 5799] <... openat resumed>) = 3 [pid 5797] chdir("./file0" [pid 5803] write(3, "1000", 4 [pid 5799] chdir("./file0" [pid 5797] <... chdir resumed>) = 0 [pid 5002] fstat(4, [pid 5803] <... write resumed>) = 4 [pid 5799] <... chdir resumed>) = 0 [pid 5797] ioctl(4, LOOP_CLR_FD [pid 5803] close(3 [pid 5799] ioctl(4, LOOP_CLR_FD [pid 5797] <... ioctl resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5803] <... close resumed>) = 0 [pid 5799] <... ioctl resumed>) = 0 [pid 5797] close(4 [pid 5002] getdents64(4, [pid 5803] symlink("/dev/binderfs", "./binderfs" [pid 5799] close(4 [pid 5797] <... close resumed>) = 0 [pid 5803] <... symlink resumed>) = 0 [pid 5799] <... close resumed>) = 0 [pid 5797] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5803] memfd_create("syzkaller", 0 [pid 5799] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5797] <... openat resumed>) = 4 [pid 5002] getdents64(4, [pid 5803] <... memfd_create resumed>) = 3 [pid 5799] <... openat resumed>) = 4 [pid 5797] unlink("./file1" [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5803] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5799] unlink("./file1" [pid 5002] close(4 [pid 5803] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5799] <... unlink resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5799] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] rmdir("./66/file0" [pid 5803] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./66") = 0 [pid 5002] mkdir("./67", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5805 ./strace-static-x86_64: Process 5805 attached [ 92.421581][ T5804] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.444878][ T5802] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5805] chdir("./67") = 0 [pid 5805] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5805] setpgid(0, 0) = 0 [pid 5805] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5805] write(3, "1000", 4) = 4 [pid 5805] close(3) = 0 [pid 5805] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5805] memfd_create("syzkaller", 0 [pid 5803] <... write resumed>) = 2097152 [pid 5805] <... memfd_create resumed>) = 3 [pid 5805] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5795] <... pwritev resumed>) = 1114112 [pid 5795] exit_group(0) = ? [pid 5797] <... unlink resumed>) = 0 [pid 5797] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5803] munmap(0x7f0ed4ac1000, 2097152 [pid 5798] <... pwritev resumed>) = 1114112 [pid 5798] exit_group(0) = ? [pid 5803] <... munmap resumed>) = 0 [pid 5803] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5803] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5803] close(3) = 0 [pid 5803] mkdir("./file0", 0777 [pid 5805] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5803] <... mkdir resumed>) = 0 [pid 5803] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5795] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5795, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4999] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5798] +++ exited with 0 +++ [pid 4999] fstat(3, [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5798, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(3, [pid 5003] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] fstat(3, [pid 5803] <... mount resumed>) = 0 [ 92.552287][ T5803] loop3: detected capacity change from 0 to 4096 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./65/binderfs") = 0 [pid 5003] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5803] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] unlink("./65/binderfs" [pid 5803] <... openat resumed>) = 3 [pid 4999] <... unlink resumed>) = 0 [pid 5803] chdir("./file0" [pid 4999] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5803] <... chdir resumed>) = 0 [pid 5803] ioctl(4, LOOP_CLR_FD) = 0 [pid 5803] close(4 [pid 5805] <... write resumed>) = 2097152 [pid 5803] <... close resumed>) = 0 [pid 5805] munmap(0x7f0ed4ac1000, 2097152 [pid 5803] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5805] <... munmap resumed>) = 0 [ 92.596785][ T5806] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5805] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5003] <... umount2 resumed>) = 0 [pid 5805] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5803] <... openat resumed>) = 4 [pid 5799] <... pwritev resumed>) = 1114112 [pid 5803] unlink("./file1" [pid 5799] exit_group(0 [pid 5003] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5799] <... exit_group resumed>) = ? [pid 5003] lstat("./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./65/file0") = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./65") = 0 [pid 5805] close(3) = 0 [pid 5805] mkdir("./file0", 0777 [pid 5003] mkdir("./66", 0777) = 0 [pid 5805] <... mkdir resumed>) = 0 [pid 5805] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5803] <... unlink resumed>) = 0 [pid 5803] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5807 ./strace-static-x86_64: Process 5807 attached [pid 5807] chdir("./66") = 0 [pid 5807] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5807] setpgid(0, 0) = 0 [pid 5807] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5807] write(3, "1000", 4) = 4 [pid 5807] close(3) = 0 [pid 5807] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5807] memfd_create("syzkaller", 0) = 3 [pid 5807] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 4999] <... umount2 resumed>) = 0 [ 92.641568][ T5805] loop4: detected capacity change from 0 to 4096 [pid 5805] <... mount resumed>) = 0 [pid 5805] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5805] chdir("./file0") = 0 [pid 5805] ioctl(4, LOOP_CLR_FD) = 0 [pid 5805] close(4) = 0 [pid 5805] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5805] unlink("./file1" [pid 5797] <... pwritev resumed>) = 1114112 [pid 5797] exit_group(0 [pid 4999] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5797] <... exit_group resumed>) = ? [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./65/file0", [pid 5799] +++ exited with 0 +++ [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5799, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 4999] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5807] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... restart_syscall resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 4 [pid 5000] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, [pid 4999] fstat(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5805] <... unlink resumed>) = 0 [pid 5000] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(4, [ 92.694044][ T5808] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5805] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./65/binderfs", [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] getdents64(4, [pid 5000] unlink("./65/binderfs") = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] close(4) = 0 [pid 4999] rmdir("./65/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 5797] +++ exited with 0 +++ [pid 4999] rmdir("./65" [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5797, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./66", 0777 [pid 4998] <... restart_syscall resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4998] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] getdents64(3, [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] close(3 [pid 4998] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./64/binderfs") = 0 [pid 4998] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5807] <... write resumed>) = 2097152 [pid 5807] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5809 ./strace-static-x86_64: Process 5809 attached [pid 5807] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5809] chdir("./66" [pid 5807] <... openat resumed>) = 4 [pid 5807] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... umount2 resumed>) = 0 [pid 5809] <... chdir resumed>) = 0 [pid 5809] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5809] setpgid(0, 0) = 0 [pid 5809] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5809] <... openat resumed>) = 3 [pid 5000] lstat("./65/file0", [pid 5807] <... ioctl resumed>) = 0 [pid 5809] write(3, "1000", 4) = 4 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5809] close(3 [pid 5807] close(3 [pid 5809] <... close resumed>) = 0 [pid 5807] <... close resumed>) = 0 [pid 5000] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5809] symlink("/dev/binderfs", "./binderfs" [pid 5807] mkdir("./file0", 0777 [pid 5809] <... symlink resumed>) = 0 [pid 5807] <... mkdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5809] memfd_create("syzkaller", 0 [pid 5807] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5809] <... memfd_create resumed>) = 3 [pid 5000] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = 0 [pid 5809] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5000] <... openat resumed>) = 4 [pid 4998] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] fstat(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] lstat("./64/file0", [pid 5000] getdents64(4, [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] close(4 [pid 4998] <... openat resumed>) = 4 [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./65/file0" [pid 4998] fstat(4, [pid 5000] <... rmdir resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [ 92.791673][ T5807] loop5: detected capacity change from 0 to 4096 [pid 4998] getdents64(4, [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] close(3 [pid 4998] getdents64(4, [pid 5000] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] rmdir("./65" [pid 4998] close(4 [pid 5807] <... mount resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5807] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5807] chdir("./file0") = 0 [pid 5807] ioctl(4, LOOP_CLR_FD) = 0 [pid 5807] close(4) = 0 [pid 5807] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5807] unlink("./file1" [pid 4998] rmdir("./64/file0") = 0 [pid 5000] mkdir("./66", 0777 [pid 4998] getdents64(3, [pid 5809] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... mkdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] close(3 [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4998] <... close resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] rmdir("./64" [pid 5000] close(3 [pid 4998] <... rmdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4998] mkdir("./65", 0777 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5811 [pid 5803] <... pwritev resumed>) = 1114112 [pid 4998] <... openat resumed>) = 3 [pid 5803] exit_group(0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5803] <... exit_group resumed>) = ? [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5805] <... pwritev resumed>) = 1114112 [pid 4998] close(3 [pid 5805] exit_group(0) = ? [pid 4998] <... close resumed>) = 0 ./strace-static-x86_64: Process 5811 attached [ 92.856147][ T5810] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5811] chdir("./66" [pid 5809] <... write resumed>) = 2097152 [pid 5809] munmap(0x7f0ed4ac1000, 2097152 [pid 5811] <... chdir resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5812 [pid 5811] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5809] <... munmap resumed>) = 0 [pid 5811] setpgid(0, 0) = 0 [pid 5811] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5811] write(3, "1000", 4) = 4 [pid 5809] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5811] close(3) = 0 [pid 5809] ioctl(4, LOOP_SET_FD, 3 [pid 5811] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5811] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5812 attached ) = 3 [pid 5807] <... unlink resumed>) = 0 [pid 5803] +++ exited with 0 +++ [pid 5812] chdir("./65" [pid 5811] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5807] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5803, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5812] <... chdir resumed>) = 0 [pid 5811] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5809] <... ioctl resumed>) = 0 [pid 5812] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5809] close(3 [pid 5805] +++ exited with 0 +++ [pid 5812] <... prctl resumed>) = 0 [pid 5809] <... close resumed>) = 0 [pid 5812] setpgid(0, 0 [pid 5809] mkdir("./file0", 0777 [pid 5812] <... setpgid resumed>) = 0 [pid 5809] <... mkdir resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5805, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5001] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5812] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5811] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5809] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5812] <... openat resumed>) = 3 [pid 5002] <... restart_syscall resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5812] write(3, "1000", 4 [pid 5001] <... openat resumed>) = 3 [pid 5812] <... write resumed>) = 4 [pid 5001] fstat(3, [pid 5812] close(3 [pid 5002] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5812] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(3, [pid 5812] symlink("/dev/binderfs", "./binderfs" [pid 5002] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5812] <... symlink resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5812] memfd_create("syzkaller", 0 [pid 5002] fstat(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5812] <... memfd_create resumed>) = 3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] lstat("./65/binderfs", [pid 5812] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] getdents64(3, [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5812] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] unlink("./65/binderfs" [pid 5002] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... unlink resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 92.925654][ T5809] loop1: detected capacity change from 0 to 4096 [pid 5002] unlink("./67/binderfs") = 0 [pid 5002] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5809] <... mount resumed>) = 0 [pid 5809] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5809] chdir("./file0") = 0 [pid 5809] ioctl(4, LOOP_CLR_FD) = 0 [pid 5809] close(4) = 0 [pid 5809] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 5809] <... openat resumed>) = 4 [pid 5809] unlink("./file1" [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./65/file0" [pid 5812] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./65") = 0 [pid 5001] mkdir("./66", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5814 [pid 5811] <... write resumed>) = 2097152 [pid 5811] munmap(0x7f0ed4ac1000, 2097152./strace-static-x86_64: Process 5814 attached [pid 5814] chdir("./66") = 0 [pid 5814] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5814] setpgid(0, 0) = 0 [pid 5814] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5811] <... munmap resumed>) = 0 [pid 5814] <... openat resumed>) = 3 [pid 5811] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5814] write(3, "1000", 4 [pid 5811] <... openat resumed>) = 4 [pid 5814] <... write resumed>) = 4 [pid 5811] ioctl(4, LOOP_SET_FD, 3 [pid 5814] close(3) = 0 [pid 5814] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5814] memfd_create("syzkaller", 0) = 3 [pid 5814] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5814] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... umount2 resumed>) = 0 [pid 5811] <... ioctl resumed>) = 0 [pid 5811] close(3) = 0 [pid 5811] mkdir("./file0", 0777) = 0 [pid 5812] <... write resumed>) = 2097152 [pid 5809] <... unlink resumed>) = 0 [pid 5002] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5811] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5809] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5812] munmap(0x7f0ed4ac1000, 2097152 [ 92.993458][ T5813] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.029375][ T5811] loop2: detected capacity change from 0 to 4096 [pid 5002] lstat("./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5812] <... munmap resumed>) = 0 [pid 5002] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5812] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5812] <... openat resumed>) = 4 [pid 5002] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5812] ioctl(4, LOOP_SET_FD, 3 [pid 5002] fstat(4, [pid 5811] <... mount resumed>) = 0 [pid 5811] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5811] chdir("./file0") = 0 [pid 5811] ioctl(4, LOOP_CLR_FD) = 0 [pid 5811] close(4) = 0 [pid 5811] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5811] unlink("./file1") = 0 [pid 5811] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./67/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 5807] <... pwritev resumed>) = 1114112 [pid 5002] <... close resumed>) = 0 [pid 5807] exit_group(0 [pid 5002] rmdir("./67" [pid 5807] <... exit_group resumed>) = ? [pid 5814] <... write resumed>) = 2097152 [pid 5812] <... ioctl resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5814] munmap(0x7f0ed4ac1000, 2097152 [pid 5812] close(3 [pid 5002] mkdir("./68", 0777 [pid 5814] <... munmap resumed>) = 0 [pid 5814] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5812] <... close resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5814] <... openat resumed>) = 4 [pid 5812] mkdir("./file0", 0777 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5814] ioctl(4, LOOP_SET_FD, 3 [pid 5812] <... mkdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [ 93.078243][ T5812] loop0: detected capacity change from 0 to 4096 [ 93.084661][ T5815] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5814] <... ioctl resumed>) = 0 [pid 5812] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5816 [pid 5814] close(3./strace-static-x86_64: Process 5816 attached ) = 0 [pid 5816] chdir("./68" [pid 5814] mkdir("./file0", 0777 [pid 5816] <... chdir resumed>) = 0 [pid 5816] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5814] <... mkdir resumed>) = 0 [pid 5816] <... prctl resumed>) = 0 [pid 5814] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5812] <... mount resumed>) = 0 [pid 5816] setpgid(0, 0 [pid 5812] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5816] <... setpgid resumed>) = 0 [pid 5816] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5812] <... openat resumed>) = 3 [pid 5816] <... openat resumed>) = 3 [pid 5812] chdir("./file0" [pid 5816] write(3, "1000", 4 [pid 5812] <... chdir resumed>) = 0 [pid 5816] <... write resumed>) = 4 [pid 5812] ioctl(4, LOOP_CLR_FD [pid 5807] +++ exited with 0 +++ [ 93.130748][ T5814] loop3: detected capacity change from 0 to 4096 [ 93.162690][ T5817] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5816] close(3 [pid 5812] <... ioctl resumed>) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5807, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5816] <... close resumed>) = 0 [pid 5814] <... mount resumed>) = 0 [pid 5812] close(4 [pid 5816] symlink("/dev/binderfs", "./binderfs" [pid 5814] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5812] <... close resumed>) = 0 [pid 5816] <... symlink resumed>) = 0 [pid 5814] <... openat resumed>) = 3 [pid 5812] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5809] <... pwritev resumed>) = 1114112 [pid 5816] memfd_create("syzkaller", 0 [pid 5814] chdir("./file0" [pid 5809] exit_group(0 [pid 5816] <... memfd_create resumed>) = 3 [pid 5814] <... chdir resumed>) = 0 [pid 5809] <... exit_group resumed>) = ? [pid 5816] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5814] ioctl(4, LOOP_CLR_FD [pid 5812] <... openat resumed>) = 4 [pid 5811] <... pwritev resumed>) = 1114112 [pid 5816] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5814] <... ioctl resumed>) = 0 [pid 5812] unlink("./file1" [pid 5811] exit_group(0 [pid 5809] +++ exited with 0 +++ [pid 5814] close(4) = 0 [pid 5814] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5814] unlink("./file1") = 0 [ 93.186130][ T5818] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5814] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5816] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5812] <... unlink resumed>) = 0 [pid 5811] <... exit_group resumed>) = ? [pid 5003] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5809, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5812] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] fstat(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] getdents64(3, [pid 4999] <... openat resumed>) = 3 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(3, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] lstat("./66/binderfs", [pid 4999] getdents64(3, [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./66/binderfs" [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] <... unlink resumed>) = 0 [pid 5003] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5816] <... write resumed>) = 2097152 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./66/binderfs" [pid 5003] <... umount2 resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5003] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5816] munmap(0x7f0ed4ac1000, 2097152 [pid 4999] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5816] <... munmap resumed>) = 0 [pid 5811] +++ exited with 0 +++ [pid 5003] lstat("./66/file0", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5816] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] lstat("./66/file0", [pid 5816] <... openat resumed>) = 4 [pid 5003] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5816] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5816] <... ioctl resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... openat resumed>) = 4 [pid 4999] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] fstat(4, [pid 4999] <... openat resumed>) = 4 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(4, [pid 5816] close(3 [pid 5003] getdents64(4, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5816] <... close resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, [pid 5816] mkdir("./file0", 0777 [pid 5003] getdents64(4, [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5811, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5816] <... mkdir resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(4, [pid 5816] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] close(4 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] <... close resumed>) = 0 [pid 4999] close(4 [pid 5003] rmdir("./66/file0" [pid 4999] <... close resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] rmdir("./66/file0" [pid 5003] getdents64(3, [pid 4999] <... rmdir resumed>) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(3, [pid 5003] close(3 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] <... close resumed>) = 0 [pid 4999] close(3 [pid 5003] rmdir("./66" [pid 5000] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] rmdir("./66" [pid 5003] mkdir("./67", 0777 [pid 5000] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... rmdir resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4999] mkdir("./67", 0777 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] fstat(3, [pid 4999] <... mkdir resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5000] getdents64(3, [pid 4999] <... openat resumed>) = 3 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5003] close(3 [pid 5000] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] close(3 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] lstat("./66/binderfs", [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5820 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5821 [ 93.342291][ T5816] loop4: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 5821 attached ./strace-static-x86_64: Process 5820 attached [pid 5814] <... pwritev resumed>) = 1114112 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5821] chdir("./67" [pid 5814] exit_group(0 [pid 5000] unlink("./66/binderfs" [pid 5821] <... chdir resumed>) = 0 [pid 5814] <... exit_group resumed>) = ? [pid 5000] <... unlink resumed>) = 0 [pid 5821] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5820] chdir("./67" [pid 5816] <... mount resumed>) = 0 [pid 5812] <... pwritev resumed>) = 1114112 [pid 5000] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5821] <... prctl resumed>) = 0 [pid 5820] <... chdir resumed>) = 0 [pid 5816] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5812] exit_group(0 [pid 5820] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5816] <... openat resumed>) = 3 [pid 5812] <... exit_group resumed>) = ? [pid 5821] setpgid(0, 0 [pid 5820] <... prctl resumed>) = 0 [pid 5816] chdir("./file0" [pid 5000] <... umount2 resumed>) = 0 [pid 5820] setpgid(0, 0 [pid 5816] <... chdir resumed>) = 0 [pid 5820] <... setpgid resumed>) = 0 [pid 5816] ioctl(4, LOOP_CLR_FD [pid 5820] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5816] <... ioctl resumed>) = 0 [pid 5820] <... openat resumed>) = 3 [pid 5816] close(4 [pid 5820] write(3, "1000", 4 [pid 5816] <... close resumed>) = 0 [pid 5820] <... write resumed>) = 4 [pid 5816] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5820] close(3) = 0 [pid 5820] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5820] memfd_create("syzkaller", 0) = 3 [pid 5820] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5821] <... setpgid resumed>) = 0 [pid 5816] <... openat resumed>) = 4 [pid 5816] unlink("./file1" [pid 5821] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5820] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5816] <... unlink resumed>) = 0 [pid 5816] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5821] <... openat resumed>) = 3 [pid 5000] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5821] write(3, "1000", 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... write resumed>) = 4 [pid 5000] lstat("./66/file0", [pid 5821] close(3) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5821] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5000] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5821] memfd_create("syzkaller", 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... memfd_create resumed>) = 3 [pid 5000] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 93.392007][ T5819] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5821] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 5814] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5814, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5000] getdents64(4, [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5001] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] rmdir("./66/file0" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... rmdir resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5000] getdents64(3, [pid 5001] fstat(3, [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5812] +++ exited with 0 +++ [pid 5001] getdents64(3, [pid 5000] close(3 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] <... close resumed>) = 0 [pid 5001] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5812, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5000] rmdir("./66" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... rmdir resumed>) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5001] lstat("./66/binderfs", [pid 5000] mkdir("./67", 0777 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5001] unlink("./66/binderfs") = 0 [pid 4998] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5001] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] <... openat resumed>) = 3 [pid 5000] close(3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... close resumed>) = 0 [pid 5820] <... write resumed>) = 2097152 [pid 5820] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] getdents64(3, [pid 5820] <... munmap resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5822 [pid 4998] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./65/binderfs", ./strace-static-x86_64: Process 5822 attached {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5822] chdir("./67" [pid 5821] <... write resumed>) = 2097152 [pid 5820] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] unlink("./65/binderfs" [pid 5822] <... chdir resumed>) = 0 [pid 5821] munmap(0x7f0ed4ac1000, 2097152 [pid 5820] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5822] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5820] ioctl(4, LOOP_SET_FD, 3 [pid 5001] lstat("./66/file0", [pid 4998] <... unlink resumed>) = 0 [pid 5822] <... prctl resumed>) = 0 [pid 5821] <... munmap resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5822] setpgid(0, 0 [pid 4998] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5822] <... setpgid resumed>) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5820] <... ioctl resumed>) = 0 [pid 5001] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5822] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5822] <... openat resumed>) = 3 [pid 5001] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] <... openat resumed>) = 4 [pid 5821] ioctl(4, LOOP_SET_FD, 3 [pid 5822] write(3, "1000", 4 [pid 5001] <... openat resumed>) = 4 [pid 5822] <... write resumed>) = 4 [pid 5001] fstat(4, [pid 5822] close(3) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5822] symlink("/dev/binderfs", "./binderfs" [pid 5001] getdents64(4, [pid 5822] <... symlink resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5822] memfd_create("syzkaller", 0 [pid 5001] getdents64(4, [pid 5822] <... memfd_create resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5822] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] close(4 [pid 5822] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5001] <... close resumed>) = 0 [pid 5821] <... ioctl resumed>) = 0 [pid 5821] close(3) = 0 [pid 5821] mkdir("./file0", 0777 [pid 5001] rmdir("./66/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./66") = 0 [pid 5001] mkdir("./67", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5820] close(3) = 0 [pid 5820] mkdir("./file0", 0777 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] <... mkdir resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5823 [pid 5820] <... mkdir resumed>) = 0 [pid 5821] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5820] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, ""./strace-static-x86_64: Process 5823 attached [pid 5823] chdir("./67" [pid 4998] <... umount2 resumed>) = 0 [pid 5823] <... chdir resumed>) = 0 [pid 5823] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4998] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5823] setpgid(0, 0 [ 93.525434][ T5820] loop5: detected capacity change from 0 to 4096 [ 93.537776][ T5821] loop1: detected capacity change from 0 to 4096 [pid 5822] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... setpgid resumed>) = 0 [pid 5822] <... write resumed>) = 2097152 [pid 4998] lstat("./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./65/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./65") = 0 [pid 4998] mkdir("./66", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 5823] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5821] <... mount resumed>) = 0 [pid 5820] <... mount resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5826 ./strace-static-x86_64: Process 5826 attached [pid 5826] chdir("./66") = 0 [pid 5826] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5826] setpgid(0, 0) = 0 [pid 5826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5826] write(3, "1000", 4) = 4 [pid 5826] close(3) = 0 [pid 5826] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5826] memfd_create("syzkaller", 0) = 3 [pid 5826] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5823] <... openat resumed>) = 3 [pid 5820] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5821] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] write(3, "1000", 4 [pid 5820] <... openat resumed>) = 3 [pid 5823] <... write resumed>) = 4 [pid 5821] <... openat resumed>) = 3 [pid 5820] chdir("./file0" [pid 5823] close(3) = 0 [pid 5821] chdir("./file0" [pid 5820] <... chdir resumed>) = 0 [pid 5823] symlink("/dev/binderfs", "./binderfs" [pid 5820] ioctl(4, LOOP_CLR_FD [pid 5823] <... symlink resumed>) = 0 [pid 5823] memfd_create("syzkaller", 0 [pid 5821] <... chdir resumed>) = 0 [pid 5820] <... ioctl resumed>) = 0 [pid 5823] <... memfd_create resumed>) = 3 [pid 5820] close(4 [pid 5823] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5821] ioctl(4, LOOP_CLR_FD [pid 5826] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5823] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5822] munmap(0x7f0ed4ac1000, 2097152 [pid 5821] <... ioctl resumed>) = 0 [pid 5820] <... close resumed>) = 0 [pid 5816] <... pwritev resumed>) = 1114112 [pid 5816] exit_group(0) = ? [ 93.594651][ T5825] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.607732][ T5824] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5826] <... write resumed>) = 2097152 [pid 5823] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5822] <... munmap resumed>) = 0 [pid 5821] close(4 [pid 5820] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5822] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5821] <... close resumed>) = 0 [pid 5820] <... openat resumed>) = 4 [pid 5820] unlink("./file1" [pid 5822] <... openat resumed>) = 4 [pid 5821] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5822] ioctl(4, LOOP_SET_FD, 3 [pid 5826] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5826] ioctl(4, LOOP_SET_FD, 3 [pid 5822] <... ioctl resumed>) = 0 [pid 5821] <... openat resumed>) = 4 [pid 5821] unlink("./file1" [pid 5820] <... unlink resumed>) = 0 [pid 5822] close(3 [pid 5820] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5826] <... ioctl resumed>) = 0 [pid 5823] <... write resumed>) = 2097152 [pid 5822] <... close resumed>) = 0 [pid 5821] <... unlink resumed>) = 0 [pid 5816] +++ exited with 0 +++ [pid 5823] munmap(0x7f0ed4ac1000, 2097152 [pid 5822] mkdir("./file0", 0777 [pid 5821] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5816, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... munmap resumed>) = 0 [pid 5822] <... mkdir resumed>) = 0 [pid 5002] <... restart_syscall resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5822] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] ioctl(4, LOOP_SET_FD, 3 [pid 5002] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5823] <... ioctl resumed>) = 0 [pid 5823] close(3) = 0 [pid 5823] mkdir("./file0", 0777 [pid 5826] close(3) = 0 [pid 5826] mkdir("./file0", 0777 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5826] <... mkdir resumed>) = 0 [pid 5002] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5826] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./68/binderfs", [pid 5822] <... mount resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 93.671648][ T5822] loop2: detected capacity change from 0 to 4096 [ 93.675205][ T5826] loop0: detected capacity change from 0 to 4096 [ 93.706796][ T5823] loop3: detected capacity change from 0 to 4096 [pid 5002] unlink("./68/binderfs" [pid 5823] <... mkdir resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5823] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5822] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5822] chdir("./file0") = 0 [pid 5822] ioctl(4, LOOP_CLR_FD) = 0 [pid 5822] close(4) = 0 [pid 5822] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] <... umount2 resumed>) = 0 [pid 5822] <... openat resumed>) = 4 [pid 5822] unlink("./file1" [pid 5826] <... mount resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5826] chdir("./file0") = 0 [pid 5826] ioctl(4, LOOP_CLR_FD) = 0 [ 93.729393][ T5827] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.766011][ T5828] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5826] close(4 [pid 5822] <... unlink resumed>) = 0 [pid 5002] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5826] <... close resumed>) = 0 [pid 5822] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./68/file0", [pid 5826] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... openat resumed>) = 4 [pid 5002] <... openat resumed>) = 4 [pid 5826] unlink("./file1" [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./68/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./68") = 0 [pid 5002] mkdir("./69", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5830 [pid 5826] <... unlink resumed>) = 0 [pid 5823] <... mount resumed>) = 0 [pid 5826] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0./strace-static-x86_64: Process 5830 attached [pid 5830] chdir("./69") = 0 [pid 5830] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5830] setpgid(0, 0) = 0 [pid 5830] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5823] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5823] chdir("./file0" [pid 5830] write(3, "1000", 4 [pid 5823] <... chdir resumed>) = 0 [pid 5830] <... write resumed>) = 4 [pid 5823] ioctl(4, LOOP_CLR_FD [pid 5821] <... pwritev resumed>) = 1114112 [pid 5830] close(3 [pid 5823] <... ioctl resumed>) = 0 [pid 5821] exit_group(0 [pid 5830] <... close resumed>) = 0 [pid 5823] close(4 [pid 5821] <... exit_group resumed>) = ? [ 93.790812][ T5829] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5830] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5830] memfd_create("syzkaller", 0) = 3 [pid 5823] <... close resumed>) = 0 [pid 5830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5830] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5823] <... openat resumed>) = 4 [pid 5823] unlink("./file1" [pid 5820] <... pwritev resumed>) = 1114112 [pid 5820] exit_group(0) = ? [pid 5830] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5823] <... unlink resumed>) = 0 [pid 5823] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5830] <... write resumed>) = 2097152 [pid 5830] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5830] ioctl(4, LOOP_SET_FD, 3 [pid 5821] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5821, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./67/binderfs") = 0 [pid 4999] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3) = 0 [pid 5820] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5820, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5003] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5830] mkdir("./file0", 0777 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... mkdir resumed>) = 0 [pid 5003] lstat("./67/binderfs", [pid 5830] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./67/binderfs") = 0 [pid 5003] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 93.938288][ T5830] loop4: detected capacity change from 0 to 4096 [pid 4999] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./67/file0") = 0 [pid 4999] getdents64(3, [pid 5003] <... umount2 resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] close(3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... close resumed>) = 0 [pid 5003] lstat("./67/file0", [pid 4999] rmdir("./67" [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5830] <... mount resumed>) = 0 [pid 5003] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] mkdir("./68", 0777 [pid 5830] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] <... pwritev resumed>) = 1114112 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... mkdir resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5826] exit_group(0 [pid 5003] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5830] chdir("./file0" [pid 5826] <... exit_group resumed>) = ? [pid 5003] <... openat resumed>) = 4 [pid 4999] <... openat resumed>) = 3 [pid 5830] <... chdir resumed>) = 0 [pid 5003] fstat(4, [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5830] ioctl(4, LOOP_CLR_FD [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5830] <... ioctl resumed>) = 0 [pid 5003] getdents64(4, [pid 4999] close(3 [pid 5830] close(4 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5003] getdents64(4, [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5003] close(4 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5832 [pid 5830] unlink("./file1" [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./67/file0") = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 ./strace-static-x86_64: Process 5832 attached [pid 5003] rmdir("./67" [pid 5832] chdir("./68" [pid 5003] <... rmdir resumed>) = 0 [pid 5832] <... chdir resumed>) = 0 [pid 5003] mkdir("./68", 0777 [pid 5832] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] <... mkdir resumed>) = 0 [pid 5832] <... prctl resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5832] setpgid(0, 0 [pid 5003] <... openat resumed>) = 3 [pid 5832] <... setpgid resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5832] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5822] <... pwritev resumed>) = 1114112 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5832] <... openat resumed>) = 3 [pid 5822] exit_group(0 [pid 5003] close(3 [pid 5832] write(3, "1000", 4 [pid 5822] <... exit_group resumed>) = ? [pid 5003] <... close resumed>) = 0 [pid 5832] <... write resumed>) = 4 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] close(3) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5833 [pid 5832] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5832] memfd_create("syzkaller", 0) = 3 [ 94.023265][ T5831] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5832] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5832] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5833 attached [pid 5833] chdir("./68") = 0 [pid 5833] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5833] setpgid(0, 0) = 0 [pid 5833] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] write(3, "1000", 4) = 4 [pid 5833] close(3) = 0 [pid 5833] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5833] memfd_create("syzkaller", 0) = 3 [pid 5830] <... unlink resumed>) = 0 [pid 5833] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5833] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5823] <... pwritev resumed>) = 1114112 [pid 5823] exit_group(0) = ? [pid 5833] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5826] +++ exited with 0 +++ [pid 5832] <... write resumed>) = 2097152 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5826, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5822] +++ exited with 0 +++ [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5822, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4998] lstat("./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./66/binderfs") = 0 [pid 4998] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5832] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] <... munmap resumed>) = 0 [pid 5000] lstat("./67/binderfs", [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5000] unlink("./67/binderfs" [pid 5832] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5833] <... write resumed>) = 2097152 [pid 5833] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5833] ioctl(4, LOOP_SET_FD, 3 [pid 5000] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5823] +++ exited with 0 +++ [pid 4998] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5823, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] lstat("./66/file0", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5832] <... ioctl resumed>) = 0 [pid 5001] fstat(3, [pid 5000] <... openat resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] close(3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] fstat(4, [pid 4998] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... close resumed>) = 0 [pid 5001] getdents64(3, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5833] <... ioctl resumed>) = 0 [pid 5832] mkdir("./file0", 0777 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] <... openat resumed>) = 4 [pid 5833] close(3 [pid 5001] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(4, [pid 5833] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5833] mkdir("./file0", 0777 [pid 5001] lstat("./67/binderfs", [pid 4998] getdents64(4, [pid 5833] <... mkdir resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5833] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] unlink("./67/binderfs" [pid 4998] getdents64(4, [pid 5001] <... unlink resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(4 [pid 5000] getdents64(4, [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./66/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./66") = 0 [pid 4998] mkdir("./67", 0777) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 94.179526][ T5832] loop1: detected capacity change from 0 to 4096 [ 94.205380][ T5833] loop5: detected capacity change from 0 to 4096 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5835 ./strace-static-x86_64: Process 5835 attached [pid 5832] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] <... umount2 resumed>) = 0 [pid 5000] getdents64(4, [pid 5833] <... mount resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5833] chdir("./file0" [pid 5000] close(4 [pid 5833] <... chdir resumed>) = 0 [pid 5833] ioctl(4, LOOP_CLR_FD) = 0 [pid 5833] close(4) = 0 [pid 5833] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./67/file0" [pid 5833] <... openat resumed>) = 4 [pid 5833] unlink("./file1" [pid 5000] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./67") = 0 [pid 5000] mkdir("./68", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5836 [pid 5833] <... unlink resumed>) = 0 [pid 5833] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0./strace-static-x86_64: Process 5836 attached [pid 5835] chdir("./67" [pid 5001] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5835] <... chdir resumed>) = 0 [pid 5835] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] <... prctl resumed>) = 0 [pid 5001] lstat("./67/file0", [pid 5835] setpgid(0, 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5835] <... setpgid resumed>) = 0 [pid 5836] chdir("./68" [pid 5835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5836] <... chdir resumed>) = 0 [pid 5835] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] write(3, "1000", 4) = 4 [pid 5001] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5835] close(3 [pid 5001] <... openat resumed>) = 4 [pid 5835] <... close resumed>) = 0 [pid 5001] fstat(4, [pid 5836] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5835] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, [pid 5835] <... symlink resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5836] <... prctl resumed>) = 0 [pid 5835] memfd_create("syzkaller", 0 [pid 5001] getdents64(4, [pid 5835] <... memfd_create resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5836] setpgid(0, 0 [pid 5835] <... mmap resumed>) = 0x7f0ed4ac1000 [ 94.248221][ T5834] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] close(4 [pid 5836] <... setpgid resumed>) = 0 [pid 5835] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5832] <... mount resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5836] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] rmdir("./67/file0" [pid 5832] <... openat resumed>) = 3 [pid 5001] <... rmdir resumed>) = 0 [pid 5832] chdir("./file0" [pid 5836] <... openat resumed>) = 3 [pid 5832] <... chdir resumed>) = 0 [pid 5830] <... pwritev resumed>) = 1114112 [pid 5001] getdents64(3, [pid 5830] exit_group(0 [pid 5832] ioctl(4, LOOP_CLR_FD [pid 5830] <... exit_group resumed>) = ? [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5832] <... ioctl resumed>) = 0 [pid 5832] close(4 [pid 5001] close(3 [pid 5836] write(3, "1000", 4 [pid 5832] <... close resumed>) = 0 [pid 5836] <... write resumed>) = 4 [pid 5832] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] <... close resumed>) = 0 [pid 5836] close(3 [pid 5001] rmdir("./67") = 0 [pid 5836] <... close resumed>) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5836] symlink("/dev/binderfs", "./binderfs" [pid 5001] mkdir("./68", 0777 [pid 5832] unlink("./file1" [pid 5836] <... symlink resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5836] memfd_create("syzkaller", 0) = 3 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... openat resumed>) = 3 [pid 5836] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5832] <... unlink resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5832] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] close(3) = 0 [ 94.300595][ T5837] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5838 ./strace-static-x86_64: Process 5838 attached [pid 5838] chdir("./68") = 0 [pid 5838] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5838] setpgid(0, 0) = 0 [pid 5838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5838] write(3, "1000", 4 [pid 5835] <... write resumed>) = 2097152 [pid 5838] <... write resumed>) = 4 [pid 5835] munmap(0x7f0ed4ac1000, 2097152 [pid 5838] close(3) = 0 [pid 5838] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5838] memfd_create("syzkaller", 0) = 3 [pid 5838] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5835] <... munmap resumed>) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5836] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5835] <... openat resumed>) = 4 [pid 5835] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5830] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5830, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5835] close(3) = 0 [pid 5835] mkdir("./file0", 0777 [pid 5002] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5835] <... mkdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5835] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5833] <... pwritev resumed>) = 1114112 [pid 5002] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5833] exit_group(0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... exit_group resumed>) = ? [pid 5002] lstat("./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./69/binderfs") = 0 [pid 5002] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 94.407873][ T5835] loop0: detected capacity change from 0 to 4096 [pid 5836] <... write resumed>) = 2097152 [pid 5836] munmap(0x7f0ed4ac1000, 2097152 [pid 5838] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5836] <... munmap resumed>) = 0 [pid 5835] <... mount resumed>) = 0 [pid 5002] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5835] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5836] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5835] chdir("./file0" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] <... chdir resumed>) = 0 [pid 5835] ioctl(4, LOOP_CLR_FD) = 0 [pid 5835] close(4 [pid 5838] <... write resumed>) = 2097152 [pid 5836] <... openat resumed>) = 4 [pid 5835] <... close resumed>) = 0 [pid 5832] <... pwritev resumed>) = 1114112 [pid 5002] lstat("./69/file0", [pid 5836] ioctl(4, LOOP_SET_FD, 3 [ 94.449868][ T5839] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5835] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5832] exit_group(0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5838] munmap(0x7f0ed4ac1000, 2097152 [pid 5835] <... openat resumed>) = 4 [pid 5832] <... exit_group resumed>) = ? [pid 5838] <... munmap resumed>) = 0 [pid 5836] <... ioctl resumed>) = 0 [pid 5835] unlink("./file1" [pid 5002] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5838] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5836] close(3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5838] <... openat resumed>) = 4 [pid 5836] <... close resumed>) = 0 [pid 5835] <... unlink resumed>) = 0 [pid 5833] +++ exited with 0 +++ [pid 5002] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5838] ioctl(4, LOOP_SET_FD, 3 [pid 5836] mkdir("./file0", 0777 [pid 5835] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5833, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5002] <... openat resumed>) = 4 [pid 5838] <... ioctl resumed>) = 0 [pid 5836] <... mkdir resumed>) = 0 [pid 5002] fstat(4, [pid 5838] close(3 [pid 5836] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5838] <... close resumed>) = 0 [pid 5002] getdents64(4, [pid 5838] mkdir("./file0", 0777 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5838] <... mkdir resumed>) = 0 [pid 5003] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(4, [pid 5838] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5832] +++ exited with 0 +++ [pid 5003] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] close(4 [pid 5003] <... openat resumed>) = 3 [pid 5002] <... close resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5832, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5836] <... mount resumed>) = 0 [pid 5003] fstat(3, [pid 5002] rmdir("./69/file0" [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./68/binderfs") = 0 [pid 5003] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... rmdir resumed>) = 0 [ 94.499190][ T5836] loop2: detected capacity change from 0 to 4096 [ 94.512617][ T5838] loop3: detected capacity change from 0 to 4096 [ 94.538267][ T5840] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5836] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] getdents64(3, [pid 4999] <... restart_syscall resumed>) = 0 [pid 5838] <... mount resumed>) = 0 [pid 5838] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5838] chdir("./file0") = 0 [pid 5838] ioctl(4, LOOP_CLR_FD) = 0 [pid 5838] close(4) = 0 [pid 5836] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5838] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5836] chdir("./file0" [pid 5002] close(3 [pid 5836] <... chdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 4999] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5836] ioctl(4, LOOP_CLR_FD [pid 5002] rmdir("./69" [pid 5836] <... ioctl resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5836] close(4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5838] <... openat resumed>) = 4 [pid 5836] <... close resumed>) = 0 [pid 5002] mkdir("./70", 0777 [pid 4999] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5838] unlink("./file1" [pid 4999] <... openat resumed>) = 3 [pid 5836] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... mkdir resumed>) = 0 [pid 4999] fstat(3, [pid 5836] <... openat resumed>) = 4 [pid 5835] <... pwritev resumed>) = 1114112 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5835] exit_group(0) = ? [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 3 [pid 5836] unlink("./file1" [pid 4999] getdents64(3, [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5003] lstat("./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] fstat(4, [pid 5002] close(3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 4999] lstat("./68/binderfs", [pid 5003] close(4) = 0 [pid 5003] rmdir("./68/file0" [pid 5836] <... unlink resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./68") = 0 [pid 5003] mkdir("./69", 0777 [pid 5836] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] <... mkdir resumed>) = 0 [pid 4999] unlink("./68/binderfs" [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] <... unlink resumed>) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5842 [pid 4999] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... openat resumed>) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5843 [pid 5838] <... unlink resumed>) = 0 [ 94.550112][ T5841] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5838] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0./strace-static-x86_64: Process 5842 attached [pid 5842] chdir("./70") = 0 [pid 5842] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5842] setpgid(0, 0) = 0 [pid 5842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5842] write(3, "1000", 4) = 4 [pid 5842] close(3) = 0 [pid 5842] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5842] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 5843 attached [pid 5842] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5843] chdir("./69" [pid 5842] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5843] <... chdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5843] setpgid(0, 0) = 0 [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4999] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5843] write(3, "1000", 4) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5843] close(3) = 0 [pid 5843] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4999] lstat("./68/file0", [pid 5843] memfd_create("syzkaller", 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5843] <... memfd_create resumed>) = 3 [pid 5843] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 4999] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./68/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./68") = 0 [pid 4999] mkdir("./69", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5842] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5844 ./strace-static-x86_64: Process 5844 attached [pid 5843] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5844] chdir("./69") = 0 [pid 5844] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5844] setpgid(0, 0) = 0 [pid 5835] +++ exited with 0 +++ [pid 5844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5835, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4998] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5844] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5844] write(3, "1000", 4 [pid 4998] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5844] <... write resumed>) = 4 [pid 4998] <... openat resumed>) = 3 [pid 5844] close(3 [pid 4998] fstat(3, [pid 5844] <... close resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5844] symlink("/dev/binderfs", "./binderfs" [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5844] <... symlink resumed>) = 0 [pid 4998] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./67/binderfs", [pid 5844] memfd_create("syzkaller", 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5842] <... write resumed>) = 2097152 [pid 4998] unlink("./67/binderfs" [pid 5842] munmap(0x7f0ed4ac1000, 2097152 [pid 5844] <... memfd_create resumed>) = 3 [pid 4998] <... unlink resumed>) = 0 [pid 5844] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5842] <... munmap resumed>) = 0 [pid 5842] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5842] ioctl(4, LOOP_SET_FD, 3 [pid 5844] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 4998] <... umount2 resumed>) = 0 [pid 5843] <... write resumed>) = 2097152 [pid 5843] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5843] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5843] ioctl(4, LOOP_SET_FD, 3 [pid 4998] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 5844] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5843] <... ioctl resumed>) = 0 [pid 5842] <... ioctl resumed>) = 0 [pid 5843] close(3 [pid 5842] close(3 [pid 4998] rmdir("./67/file0" [pid 5843] <... close resumed>) = 0 [pid 5842] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5843] mkdir("./file0", 0777 [pid 5842] mkdir("./file0", 0777 [pid 4998] getdents64(3, [pid 5843] <... mkdir resumed>) = 0 [pid 5842] <... mkdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5843] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5842] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] close(3) = 0 [pid 4998] rmdir("./67") = 0 [pid 4998] mkdir("./68", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5845 [ 94.735898][ T5842] loop4: detected capacity change from 0 to 4096 [ 94.747119][ T5843] loop5: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 5845 attached [pid 5845] chdir("./68" [pid 5843] <... mount resumed>) = 0 [pid 5838] <... pwritev resumed>) = 1114112 [pid 5843] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5838] exit_group(0 [pid 5845] <... chdir resumed>) = 0 [pid 5844] <... write resumed>) = 2097152 [pid 5843] <... openat resumed>) = 3 [pid 5842] <... mount resumed>) = 0 [pid 5838] <... exit_group resumed>) = ? [pid 5845] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5845] setpgid(0, 0) = 0 [pid 5845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "1000", 4) = 4 [pid 5845] close(3) = 0 [pid 5845] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5845] memfd_create("syzkaller", 0) = 3 [pid 5845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5844] munmap(0x7f0ed4ac1000, 2097152 [pid 5843] chdir("./file0" [pid 5842] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5836] <... pwritev resumed>) = 1114112 [pid 5844] <... munmap resumed>) = 0 [pid 5843] <... chdir resumed>) = 0 [pid 5842] <... openat resumed>) = 3 [pid 5836] exit_group(0 [pid 5844] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5843] ioctl(4, LOOP_CLR_FD [pid 5842] chdir("./file0" [pid 5836] <... exit_group resumed>) = ? [pid 5845] <... write resumed>) = 2097152 [pid 5844] <... openat resumed>) = 4 [pid 5843] <... ioctl resumed>) = 0 [pid 5842] <... chdir resumed>) = 0 [pid 5845] munmap(0x7f0ed4ac1000, 2097152 [ 94.799689][ T5846] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.804328][ T5847] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5844] ioctl(4, LOOP_SET_FD, 3 [pid 5843] close(4 [pid 5842] ioctl(4, LOOP_CLR_FD [pid 5838] +++ exited with 0 +++ [pid 5845] <... munmap resumed>) = 0 [pid 5844] <... ioctl resumed>) = 0 [pid 5843] <... close resumed>) = 0 [pid 5842] <... ioctl resumed>) = 0 [pid 5836] +++ exited with 0 +++ [pid 5845] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5844] close(3 [pid 5843] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5842] close(4 [pid 5845] <... openat resumed>) = 4 [pid 5844] <... close resumed>) = 0 [pid 5842] <... close resumed>) = 0 [pid 5845] ioctl(4, LOOP_SET_FD, 3 [pid 5844] mkdir("./file0", 0777 [pid 5842] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5838, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5845] <... ioctl resumed>) = 0 [pid 5844] <... mkdir resumed>) = 0 [pid 5843] <... openat resumed>) = 4 [pid 5842] <... openat resumed>) = 4 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5836, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5844] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5843] unlink("./file1" [pid 5842] unlink("./file1" [pid 5845] close(3) = 0 [pid 5842] <... unlink resumed>) = 0 [pid 5001] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5843] <... unlink resumed>) = 0 [pid 5842] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5843] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] fstat(3, [pid 5000] <... openat resumed>) = 3 [pid 5845] mkdir("./file0", 0777 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] fstat(3, [pid 5001] getdents64(3, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5845] <... mkdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] getdents64(3, [pid 5845] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] lstat("./68/binderfs", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 94.851426][ T5844] loop1: detected capacity change from 0 to 4096 [ 94.861555][ T5845] loop0: detected capacity change from 0 to 4096 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] lstat("./68/binderfs", [pid 5001] unlink("./68/binderfs" [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5000] unlink("./68/binderfs" [pid 5001] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5844] <... mount resumed>) = 0 [pid 5844] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5000] <... umount2 resumed>) = 0 [pid 5844] chdir("./file0") = 0 [pid 5844] ioctl(4, LOOP_CLR_FD) = 0 [pid 5844] close(4) = 0 [pid 5844] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5845] <... mount resumed>) = 0 [pid 5844] <... openat resumed>) = 4 [ 94.897990][ T5848] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.937937][ T5849] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5845] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5844] unlink("./file1" [pid 5845] <... openat resumed>) = 3 [pid 5845] chdir("./file0") = 0 [pid 5845] ioctl(4, LOOP_CLR_FD) = 0 [pid 5845] close(4) = 0 [pid 5845] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5001] <... umount2 resumed>) = 0 [pid 5845] unlink("./file1" [pid 5001] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5844] <... unlink resumed>) = 0 [pid 5844] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] fstat(4, [pid 5000] lstat("./68/file0", [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, [pid 5000] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(4, [pid 5000] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5001] close(4 [pid 5000] fstat(4, [pid 5001] <... close resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] rmdir("./68/file0" [pid 5000] getdents64(4, [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(3, [pid 5000] getdents64(4, [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [pid 5000] close(4 [pid 5001] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5001] rmdir("./68" [pid 5000] rmdir("./68/file0" [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5001] mkdir("./69", 0777 [pid 5000] getdents64(3, [pid 5001] <... mkdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] close(3 [pid 5001] <... openat resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] rmdir("./68" [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... rmdir resumed>) = 0 [pid 5001] close(3 [pid 5000] mkdir("./69", 0777 [pid 5001] <... close resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5850 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5851 ./strace-static-x86_64: Process 5850 attached [pid 5850] chdir("./69") = 0 [pid 5850] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5850] setpgid(0, 0 [pid 5845] <... unlink resumed>) = 0 [pid 5850] <... setpgid resumed>) = 0 [pid 5845] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0./strace-static-x86_64: Process 5851 attached [pid 5850] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5850] write(3, "1000", 4) = 4 [pid 5850] close(3) = 0 [pid 5850] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5850] memfd_create("syzkaller", 0) = 3 [pid 5850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5851] chdir("./69") = 0 [pid 5851] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5851] setpgid(0, 0) = 0 [pid 5851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "1000", 4) = 4 [pid 5851] close(3) = 0 [pid 5851] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5851] memfd_create("syzkaller", 0) = 3 [pid 5851] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5850] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5851] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5843] <... pwritev resumed>) = 1114112 [pid 5843] exit_group(0) = ? [pid 5842] <... pwritev resumed>) = 1114112 [pid 5842] exit_group(0 [pid 5850] <... write resumed>) = 2097152 [pid 5842] <... exit_group resumed>) = ? [pid 5851] <... write resumed>) = 2097152 [pid 5850] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5850] ioctl(4, LOOP_SET_FD, 3 [pid 5851] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5851] ioctl(4, LOOP_SET_FD, 3 [pid 5850] <... ioctl resumed>) = 0 [pid 5850] close(3) = 0 [pid 5842] +++ exited with 0 +++ [pid 5851] <... ioctl resumed>) = 0 [pid 5843] +++ exited with 0 +++ [pid 5851] close(3 [pid 5850] mkdir("./file0", 0777 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5843, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5842, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5851] <... close resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5844] <... pwritev resumed>) = 1114112 [pid 5851] mkdir("./file0", 0777 [pid 5850] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5844] exit_group(0 [pid 5851] <... mkdir resumed>) = 0 [pid 5844] <... exit_group resumed>) = ? [pid 5003] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./70/binderfs") = 0 [pid 5002] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./69/binderfs") = 0 [pid 5003] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5845] <... pwritev resumed>) = 1114112 [pid 5845] exit_group(0) = ? [ 95.126770][ T5850] loop3: detected capacity change from 0 to 4096 [ 95.146429][ T5851] loop2: detected capacity change from 0 to 4096 [pid 5851] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5850] <... mount resumed>) = 0 [pid 5850] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5850] chdir("./file0") = 0 [pid 5850] ioctl(4, LOOP_CLR_FD) = 0 [pid 5850] close(4) = 0 [pid 5850] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5850] unlink("./file1" [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./70/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./70") = 0 [pid 5002] mkdir("./71", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5853 [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5853 attached [pid 5853] chdir("./71") = 0 [pid 5851] <... mount resumed>) = 0 [pid 5853] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5851] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] lstat("./69/file0", [pid 5853] setpgid(0, 0) = 0 [pid 5853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] <... openat resumed>) = 3 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5844] +++ exited with 0 +++ [pid 5853] write(3, "1000", 4 [pid 5851] chdir("./file0" [pid 5003] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5844, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5853] <... write resumed>) = 4 [pid 5853] close(3) = 0 [pid 5851] <... chdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5853] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5851] ioctl(4, LOOP_CLR_FD [pid 5003] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5853] memfd_create("syzkaller", 0 [pid 5851] <... ioctl resumed>) = 0 [pid 5845] +++ exited with 0 +++ [pid 5853] <... memfd_create resumed>) = 3 [pid 5003] <... openat resumed>) = 4 [pid 4999] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5851] close(4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] fstat(4, [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5845, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5851] <... close resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5851] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] getdents64(4, [pid 4999] <... openat resumed>) = 3 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5003] getdents64(4, [pid 4999] fstat(3, [pid 5850] <... unlink resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5850] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5851] <... openat resumed>) = 4 [pid 5003] close(4 [pid 4999] getdents64(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] unlink("./file1" [pid 5003] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] rmdir("./69/file0" [pid 4999] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... rmdir resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5003] getdents64(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] fstat(3, [pid 4999] lstat("./69/binderfs", [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] close(3 [pid 4998] getdents64(3, [pid 4999] unlink("./69/binderfs" [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... unlink resumed>) = 0 [pid 4998] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] rmdir("./69" [pid 4999] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] lstat("./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 4998] unlink("./68/binderfs") = 0 [pid 4998] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] mkdir("./70", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 95.213387][ T5852] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.252722][ T5854] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5003] close(3) = 0 [pid 5853] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5851] <... unlink resumed>) = 0 [pid 5851] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5855 ./strace-static-x86_64: Process 5855 attached [pid 5855] chdir("./70") = 0 [pid 5855] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5855] setpgid(0, 0) = 0 [pid 5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5855] write(3, "1000", 4) = 4 [pid 5855] close(3) = 0 [pid 5855] symlink("/dev/binderfs", "./binderfs" [pid 4999] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5855] <... symlink resumed>) = 0 [pid 5855] memfd_create("syzkaller", 0 [pid 5853] <... write resumed>) = 2097152 [pid 4999] lstat("./69/file0", [pid 5855] <... memfd_create resumed>) = 3 [pid 5855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5855] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./68/file0", [pid 4999] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./68/file0" [pid 4999] <... openat resumed>) = 4 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] fstat(4, [pid 4998] close(3) = 0 [pid 4998] rmdir("./68" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5853] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 4999] getdents64(4, [pid 4998] mkdir("./69", 0777 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] getdents64(4, [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5853] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5853] <... openat resumed>) = 4 [pid 4998] close(3 [pid 5853] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... close resumed>) = 0 [pid 4999] close(4 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... close resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5856 [pid 4999] rmdir("./69/file0"./strace-static-x86_64: Process 5856 attached [pid 5856] chdir("./69" [pid 4999] <... rmdir resumed>) = 0 [pid 5856] <... chdir resumed>) = 0 [pid 5856] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5856] setpgid(0, 0) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] close(3 [pid 5856] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 5856] write(3, "1000", 4 [pid 4999] rmdir("./69" [pid 5856] <... write resumed>) = 4 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./70", 0777 [pid 5856] close(3) = 0 [pid 5856] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5855] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5856] memfd_create("syzkaller", 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5856] <... memfd_create resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 5856] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5856] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5856] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5853] <... ioctl resumed>) = 0 [pid 4999] close(3 [ 95.374586][ T5853] loop4: detected capacity change from 0 to 4096 [pid 5853] close(3 [pid 4999] <... close resumed>) = 0 [pid 5853] <... close resumed>) = 0 [pid 5853] mkdir("./file0", 0777 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5853] <... mkdir resumed>) = 0 [pid 5853] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5857 ./strace-static-x86_64: Process 5857 attached [pid 5857] chdir("./70") = 0 [pid 5857] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5857] setpgid(0, 0 [pid 5855] <... write resumed>) = 2097152 [pid 5857] <... setpgid resumed>) = 0 [pid 5856] <... write resumed>) = 2097152 [pid 5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5855] munmap(0x7f0ed4ac1000, 2097152 [pid 5857] <... openat resumed>) = 3 [pid 5857] write(3, "1000", 4) = 4 [pid 5857] close(3) = 0 [pid 5857] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5857] memfd_create("syzkaller", 0) = 3 [pid 5855] <... munmap resumed>) = 0 [pid 5857] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5855] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5857] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5855] <... openat resumed>) = 4 [pid 5855] ioctl(4, LOOP_SET_FD, 3 [pid 5856] munmap(0x7f0ed4ac1000, 2097152 [pid 5853] <... mount resumed>) = 0 [pid 5851] <... pwritev resumed>) = 1114112 [pid 5850] <... pwritev resumed>) = 1114112 [pid 5853] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5851] exit_group(0 [pid 5850] exit_group(0 [pid 5856] <... munmap resumed>) = 0 [pid 5853] <... openat resumed>) = 3 [pid 5851] <... exit_group resumed>) = ? [pid 5850] <... exit_group resumed>) = ? [pid 5857] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5856] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5855] <... ioctl resumed>) = 0 [pid 5853] chdir("./file0" [pid 5857] <... write resumed>) = 2097152 [pid 5856] <... openat resumed>) = 4 [pid 5855] close(3 [pid 5853] <... chdir resumed>) = 0 [pid 5856] ioctl(4, LOOP_SET_FD, 3 [pid 5855] <... close resumed>) = 0 [pid 5853] ioctl(4, LOOP_CLR_FD [pid 5855] mkdir("./file0", 0777 [pid 5853] <... ioctl resumed>) = 0 [pid 5856] <... ioctl resumed>) = 0 [pid 5855] <... mkdir resumed>) = 0 [pid 5853] close(4 [pid 5856] close(3 [pid 5855] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5853] <... close resumed>) = 0 [pid 5856] <... close resumed>) = 0 [pid 5853] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5856] mkdir("./file0", 0777) = 0 [pid 5856] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5853] <... openat resumed>) = 4 [pid 5853] unlink("./file1") = 0 [pid 5853] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5857] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5857] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5857] ioctl(4, LOOP_SET_FD, 3 [pid 5850] +++ exited with 0 +++ [ 95.455581][ T5858] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.462766][ T5855] loop5: detected capacity change from 0 to 4096 [ 95.493280][ T5856] loop0: detected capacity change from 0 to 4096 [pid 5857] <... ioctl resumed>) = 0 [pid 5851] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5850, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5851, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5001] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] fstat(3, [pid 5000] <... openat resumed>) = 3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] fstat(3, [pid 5001] getdents64(3, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] getdents64(3, [pid 5001] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] lstat("./69/binderfs", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] lstat("./69/binderfs", [pid 5001] unlink("./69/binderfs" [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5000] unlink("./69/binderfs" [pid 5001] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5857] close(3) = 0 [pid 5857] mkdir("./file0", 0777) = 0 [pid 5857] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5856] <... mount resumed>) = 0 [pid 5855] <... mount resumed>) = 0 [pid 5855] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5856] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5855] <... openat resumed>) = 3 [pid 5855] chdir("./file0" [pid 5856] <... openat resumed>) = 3 [pid 5855] <... chdir resumed>) = 0 [pid 5856] chdir("./file0" [pid 5855] ioctl(4, LOOP_CLR_FD [pid 5856] <... chdir resumed>) = 0 [pid 5856] ioctl(4, LOOP_CLR_FD [pid 5855] <... ioctl resumed>) = 0 [pid 5856] <... ioctl resumed>) = 0 [pid 5855] close(4 [pid 5856] close(4 [pid 5855] <... close resumed>) = 0 [pid 5856] <... close resumed>) = 0 [pid 5855] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5856] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5855] <... openat resumed>) = 4 [pid 5856] <... openat resumed>) = 4 [pid 5855] unlink("./file1" [pid 5856] unlink("./file1") = 0 [pid 5856] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5855] <... unlink resumed>) = 0 [ 95.531950][ T5857] loop1: detected capacity change from 0 to 4096 [ 95.544783][ T5859] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.556722][ T5860] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5855] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] rmdir("./69/file0") = 0 [pid 5001] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] lstat("./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] close(3) = 0 [pid 5001] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5857] <... mount resumed>) = 0 [pid 5857] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5857] chdir("./file0") = 0 [pid 5857] ioctl(4, LOOP_CLR_FD) = 0 [pid 5857] close(4) = 0 [pid 5857] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] rmdir("./69" [pid 5857] unlink("./file1" [pid 5001] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... rmdir resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5001] fstat(4, [pid 5000] mkdir("./70", 0777 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5001] getdents64(4, [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] <... openat resumed>) = 3 [pid 5001] getdents64(4, [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(4 [pid 5000] close(3 [pid 5001] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5001] rmdir("./69/file0" [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5862 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./69") = 0 [pid 5001] mkdir("./70", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 5862 attached ) = 3 [pid 5862] chdir("./70" [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5862] <... chdir resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5862] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] close(3 [pid 5862] <... prctl resumed>) = 0 [pid 5853] <... pwritev resumed>) = 1114112 [pid 5001] <... close resumed>) = 0 [pid 5862] setpgid(0, 0 [pid 5853] exit_group(0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5862] <... setpgid resumed>) = 0 [pid 5853] <... exit_group resumed>) = ? [pid 5862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5863 [pid 5862] <... openat resumed>) = 3 [pid 5862] write(3, "1000", 4) = 4 [pid 5862] close(3) = 0 [pid 5862] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5862] memfd_create("syzkaller", 0) = 3 [ 95.633533][ T5861] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5862] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 ./strace-static-x86_64: Process 5863 attached [pid 5863] chdir("./70") = 0 [pid 5857] <... unlink resumed>) = 0 [pid 5863] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5857] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5863] <... prctl resumed>) = 0 [pid 5862] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5856] <... pwritev resumed>) = 1114112 [pid 5863] setpgid(0, 0 [pid 5853] +++ exited with 0 +++ [pid 5856] exit_group(0 [pid 5863] <... setpgid resumed>) = 0 [pid 5856] <... exit_group resumed>) = ? [pid 5863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5853, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5863] <... openat resumed>) = 3 [pid 5002] <... restart_syscall resumed>) = 0 [pid 5862] <... write resumed>) = 2097152 [pid 5863] write(3, "1000", 4 [pid 5862] munmap(0x7f0ed4ac1000, 2097152 [pid 5863] <... write resumed>) = 4 [pid 5862] <... munmap resumed>) = 0 [pid 5863] close(3 [pid 5002] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5863] <... close resumed>) = 0 [pid 5862] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5863] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5863] <... symlink resumed>) = 0 [pid 5862] <... openat resumed>) = 4 [pid 5002] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5863] memfd_create("syzkaller", 0 [pid 5862] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... openat resumed>) = 3 [pid 5863] <... memfd_create resumed>) = 3 [pid 5863] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] fstat(3, [pid 5862] <... ioctl resumed>) = 0 [pid 5863] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5862] close(3 [pid 5002] getdents64(3, [pid 5862] <... close resumed>) = 0 [pid 5862] mkdir("./file0", 0777 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5862] <... mkdir resumed>) = 0 [pid 5002] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5862] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5856] +++ exited with 0 +++ [pid 5002] lstat("./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./71/binderfs" [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5856, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5002] <... unlink resumed>) = 0 [pid 4998] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 4998] unlink("./69/binderfs" [pid 5862] <... mount resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5862] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5862] <... openat resumed>) = 3 [pid 5855] <... pwritev resumed>) = 1114112 [pid 5862] chdir("./file0" [pid 5855] exit_group(0) = ? [pid 5862] <... chdir resumed>) = 0 [pid 5862] ioctl(4, LOOP_CLR_FD) = 0 [pid 5862] close(4 [pid 5002] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5862] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5862] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5862] <... openat resumed>) = 4 [ 95.783333][ T5862] loop2: detected capacity change from 0 to 4096 [ 95.815677][ T5864] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5862] unlink("./file1" [pid 5002] lstat("./71/file0", [pid 4998] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5863] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./69/file0", [pid 5002] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] getdents64(4, [pid 4998] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 4998] <... openat resumed>) = 4 [pid 5002] <... close resumed>) = 0 [pid 4998] fstat(4, [pid 5002] rmdir("./71/file0" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, [pid 4998] getdents64(4, [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] <... close resumed>) = 0 [pid 4998] getdents64(4, [pid 5002] rmdir("./71" [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 4998] close(4 [pid 5002] mkdir("./72", 0777 [pid 4998] <... close resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 4998] rmdir("./69/file0" [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4998] <... rmdir resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4998] getdents64(3, [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5862] <... unlink resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 4998] close(3 [pid 5862] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... close resumed>) = 0 [pid 5855] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5855, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5003] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] rmdir("./69" [pid 5003] unlink("./70/binderfs" [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5865 [pid 5003] <... unlink resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] mkdir("./70", 0777./strace-static-x86_64: Process 5865 attached ) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 5865] chdir("./72") = 0 [pid 4998] <... close resumed>) = 0 [pid 5865] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5865] <... prctl resumed>) = 0 [pid 5865] setpgid(0, 0) = 0 [pid 5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5863] <... write resumed>) = 2097152 [pid 5857] <... pwritev resumed>) = 1114112 [pid 5865] <... openat resumed>) = 3 [pid 5857] exit_group(0 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5866 [pid 5865] write(3, "1000", 4 [pid 5857] <... exit_group resumed>) = ? [pid 5865] <... write resumed>) = 4 [pid 5863] munmap(0x7f0ed4ac1000, 2097152 [pid 5865] close(3) = 0 [pid 5865] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5865] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5866 attached ) = 3 [pid 5866] chdir("./70" [pid 5865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5866] <... chdir resumed>) = 0 [pid 5865] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5866] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5866] setpgid(0, 0) = 0 [pid 5866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5863] <... munmap resumed>) = 0 [pid 5866] <... openat resumed>) = 3 [pid 5866] write(3, "1000", 4) = 4 [pid 5863] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5866] close(3 [pid 5863] <... openat resumed>) = 4 [pid 5866] <... close resumed>) = 0 [pid 5863] ioctl(4, LOOP_SET_FD, 3 [pid 5866] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5866] memfd_create("syzkaller", 0) = 3 [pid 5866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5003] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5865] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5863] <... ioctl resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5863] close(3 [pid 5003] lstat("./70/file0", [pid 5863] <... close resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5863] mkdir("./file0", 0777 [pid 5003] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5863] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5863] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./70/file0") = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./70") = 0 [pid 5003] mkdir("./71", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5866] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5868 [ 95.943631][ T5863] loop3: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 5868 attached [pid 5863] <... mount resumed>) = 0 [pid 5868] chdir("./71" [pid 5863] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5857] +++ exited with 0 +++ [pid 5868] <... chdir resumed>) = 0 [pid 5863] <... openat resumed>) = 3 [pid 5868] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5863] chdir("./file0" [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5857, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5868] <... prctl resumed>) = 0 [pid 5863] <... chdir resumed>) = 0 [pid 4999] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5868] setpgid(0, 0 [pid 5863] ioctl(4, LOOP_CLR_FD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5868] <... setpgid resumed>) = 0 [pid 5863] <... ioctl resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5863] close(4 [pid 5868] <... openat resumed>) = 3 [pid 5863] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5863] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4999] fstat(3, [pid 5868] write(3, "1000", 4 [pid 5863] <... openat resumed>) = 4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5868] <... write resumed>) = 4 [pid 5863] unlink("./file1" [pid 4999] getdents64(3, [pid 5868] close(3 [pid 5863] <... unlink resumed>) = 0 [pid 5863] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5868] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5868] symlink("/dev/binderfs", "./binderfs" [pid 5865] <... write resumed>) = 2097152 [pid 4999] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5868] <... symlink resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5868] memfd_create("syzkaller", 0 [pid 4999] lstat("./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5868] <... memfd_create resumed>) = 3 [pid 4999] unlink("./70/binderfs" [pid 5868] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... unlink resumed>) = 0 [ 95.987208][ T5867] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5868] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5865] munmap(0x7f0ed4ac1000, 2097152 [pid 4999] <... umount2 resumed>) = 0 [pid 5865] <... munmap resumed>) = 0 [pid 5865] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5865] ioctl(4, LOOP_SET_FD, 3 [pid 4999] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./70/file0") = 0 [pid 4999] getdents64(3, [pid 5868] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 5866] <... write resumed>) = 2097152 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./70") = 0 [pid 4999] mkdir("./71", 0777 [pid 5866] munmap(0x7f0ed4ac1000, 2097152 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5866] <... munmap resumed>) = 0 [pid 5865] <... ioctl resumed>) = 0 [pid 5862] <... pwritev resumed>) = 1114112 [pid 4999] <... close resumed>) = 0 [pid 5862] exit_group(0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5866] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5865] close(3 [pid 5862] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5869 attached [pid 5868] <... write resumed>) = 2097152 [pid 5866] <... openat resumed>) = 4 [pid 5865] <... close resumed>) = 0 [pid 5869] chdir("./71" [pid 5868] munmap(0x7f0ed4ac1000, 2097152 [ 96.075464][ T5865] loop4: detected capacity change from 0 to 4096 [pid 5866] ioctl(4, LOOP_SET_FD, 3 [pid 5865] mkdir("./file0", 0777 [pid 5869] <... chdir resumed>) = 0 [pid 5868] <... munmap resumed>) = 0 [pid 5865] <... mkdir resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5869 [pid 5869] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5868] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5865] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5869] <... prctl resumed>) = 0 [pid 5868] <... openat resumed>) = 4 [pid 5866] <... ioctl resumed>) = 0 [pid 5869] setpgid(0, 0 [pid 5868] ioctl(4, LOOP_SET_FD, 3 [pid 5866] close(3 [pid 5869] <... setpgid resumed>) = 0 [pid 5869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5869] write(3, "1000", 4) = 4 [pid 5862] +++ exited with 0 +++ [pid 5869] close(3 [pid 5868] <... ioctl resumed>) = 0 [pid 5866] <... close resumed>) = 0 [pid 5865] <... mount resumed>) = 0 [pid 5863] <... pwritev resumed>) = 1114112 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5862, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5869] <... close resumed>) = 0 [pid 5868] close(3 [pid 5866] mkdir("./file0", 0777 [pid 5865] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5863] exit_group(0 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5869] symlink("/dev/binderfs", "./binderfs" [pid 5868] <... close resumed>) = 0 [pid 5866] <... mkdir resumed>) = 0 [pid 5865] <... openat resumed>) = 3 [pid 5863] <... exit_group resumed>) = ? [pid 5000] <... restart_syscall resumed>) = 0 [pid 5869] <... symlink resumed>) = 0 [pid 5868] mkdir("./file0", 0777 [pid 5866] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5865] chdir("./file0" [pid 5869] memfd_create("syzkaller", 0 [pid 5865] <... chdir resumed>) = 0 [pid 5869] <... memfd_create resumed>) = 3 [pid 5865] ioctl(4, LOOP_CLR_FD [pid 5869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5865] <... ioctl resumed>) = 0 [pid 5000] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5869] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5865] close(4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5865] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5865] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5865] <... openat resumed>) = 4 [pid 5000] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./70/binderfs", [pid 5865] unlink("./file1" [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./70/binderfs") = 0 [pid 5000] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5865] <... unlink resumed>) = 0 [pid 5865] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5868] <... mkdir resumed>) = 0 [pid 5868] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5863] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5863, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [ 96.117045][ T5866] loop0: detected capacity change from 0 to 4096 [ 96.135474][ T5868] loop5: detected capacity change from 0 to 4096 [ 96.144192][ T5870] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./70/binderfs") = 0 [pid 5001] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5868] <... mount resumed>) = 0 [pid 5868] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5868] chdir("./file0") = 0 [pid 5868] ioctl(4, LOOP_CLR_FD) = 0 [pid 5868] close(4) = 0 [pid 5868] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5866] <... mount resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5868] unlink("./file1" [pid 5866] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5866] <... openat resumed>) = 3 [pid 5866] chdir("./file0" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5866] <... chdir resumed>) = 0 [pid 5001] lstat("./70/file0", [pid 5866] ioctl(4, LOOP_CLR_FD [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5866] <... ioctl resumed>) = 0 [pid 5001] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5866] close(4) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5866] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] <... openat resumed>) = 4 [pid 5000] getdents64(4, [pid 5001] fstat(4, [pid 5866] <... openat resumed>) = 4 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5866] unlink("./file1" [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] close(4 [pid 5001] getdents64(4, [pid 5869] <... write resumed>) = 2097152 [pid 5866] <... unlink resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5866] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [ 96.228017][ T5872] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.230906][ T5871] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] rmdir("./70/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./70") = 0 [pid 5000] mkdir("./71", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5873 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4 [pid 5869] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./70/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5869] <... munmap resumed>) = 0 [pid 5001] close(3) = 0 [pid 5869] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5873 attached ) = 4 [pid 5001] rmdir("./70" [pid 5873] chdir("./71" [pid 5869] ioctl(4, LOOP_SET_FD, 3 [pid 5873] <... chdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5873] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5001] mkdir("./71", 0777 [pid 5873] setpgid(0, 0) = 0 [pid 5873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... mkdir resumed>) = 0 [pid 5873] <... openat resumed>) = 3 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5873] write(3, "1000", 4) = 4 [pid 5001] <... openat resumed>) = 3 [pid 5873] close(3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5873] <... close resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5873] symlink("/dev/binderfs", "./binderfs" [pid 5001] close(3 [pid 5873] <... symlink resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5873] memfd_create("syzkaller", 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5873] <... memfd_create resumed>) = 3 [pid 5873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 ./strace-static-x86_64: Process 5874 attached [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5874 [pid 5874] chdir("./71") = 0 [pid 5874] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5874] setpgid(0, 0) = 0 [pid 5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5869] <... ioctl resumed>) = 0 [pid 5869] close(3) = 0 [pid 5869] mkdir("./file0", 0777 [pid 5874] write(3, "1000", 4) = 4 [pid 5874] close(3 [pid 5869] <... mkdir resumed>) = 0 [pid 5874] <... close resumed>) = 0 [pid 5869] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5874] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5874] memfd_create("syzkaller", 0) = 3 [pid 5874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5868] <... unlink resumed>) = 0 [ 96.297083][ T5869] loop1: detected capacity change from 0 to 4096 [pid 5868] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5874] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5873] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5869] <... mount resumed>) = 0 [pid 5869] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5865] <... pwritev resumed>) = 1114112 [pid 5869] <... openat resumed>) = 3 [pid 5865] exit_group(0 [pid 5869] chdir("./file0" [pid 5865] <... exit_group resumed>) = ? [pid 5869] <... chdir resumed>) = 0 [pid 5869] ioctl(4, LOOP_CLR_FD) = 0 [pid 5869] close(4) = 0 [pid 5869] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5869] unlink("./file1" [pid 5873] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5873] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 96.379222][ T5875] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5873] ioctl(4, LOOP_SET_FD, 3 [pid 5874] <... write resumed>) = 2097152 [pid 5874] munmap(0x7f0ed4ac1000, 2097152 [pid 5869] <... unlink resumed>) = 0 [pid 5869] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5874] <... munmap resumed>) = 0 [pid 5865] +++ exited with 0 +++ [pid 5874] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5865, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5874] <... openat resumed>) = 4 [pid 5874] ioctl(4, LOOP_SET_FD, 3 [pid 5002] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5873] <... ioctl resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5873] close(3 [pid 5002] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5874] <... ioctl resumed>) = 0 [pid 5873] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5873] mkdir("./file0", 0777 [pid 5002] lstat("./72/binderfs", [pid 5874] close(3 [pid 5873] <... mkdir resumed>) = 0 [pid 5866] <... pwritev resumed>) = 1114112 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5874] <... close resumed>) = 0 [pid 5873] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5866] exit_group(0 [pid 5002] unlink("./72/binderfs" [pid 5874] mkdir("./file0", 0777 [pid 5866] <... exit_group resumed>) = ? [pid 5002] <... unlink resumed>) = 0 [pid 5874] <... mkdir resumed>) = 0 [pid 5002] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5874] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] <... umount2 resumed>) = 0 [ 96.420046][ T5873] loop2: detected capacity change from 0 to 4096 [ 96.456521][ T5874] loop3: detected capacity change from 0 to 4096 [pid 5002] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./72/file0", [pid 5874] <... mount resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5874] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5874] <... openat resumed>) = 3 [pid 5873] <... mount resumed>) = 0 [pid 5002] getdents64(4, [pid 5874] chdir("./file0" [pid 5873] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5873] <... openat resumed>) = 3 [pid 5002] getdents64(4, [pid 5873] chdir("./file0") = 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5873] ioctl(4, LOOP_CLR_FD [pid 5874] <... chdir resumed>) = 0 [pid 5873] <... ioctl resumed>) = 0 [pid 5002] close(4 [pid 5873] close(4) = 0 [pid 5002] <... close resumed>) = 0 [pid 5873] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] rmdir("./72/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./72") = 0 [pid 5002] mkdir("./73", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5878 [pid 5874] ioctl(4, LOOP_CLR_FD) = 0 [pid 5873] <... openat resumed>) = 4 [pid 5874] close(4 [pid 5873] unlink("./file1" [pid 5874] <... close resumed>) = 0 [pid 5866] +++ exited with 0 +++ [pid 5874] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5866, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4998] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5874] <... openat resumed>) = 4 [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 5874] unlink("./file1" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5868] <... pwritev resumed>) = 1114112 [pid 4998] getdents64(3, ./strace-static-x86_64: Process 5878 attached [pid 5868] exit_group(0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5878] chdir("./73" [pid 5868] <... exit_group resumed>) = ? [pid 4998] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5878] <... chdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5878] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] lstat("./70/binderfs", [pid 5878] <... prctl resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5878] setpgid(0, 0 [pid 4998] unlink("./70/binderfs" [pid 5878] <... setpgid resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5878] <... openat resumed>) = 3 [pid 5878] write(3, "1000", 4) = 4 [pid 5878] close(3) = 0 [pid 5878] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5878] memfd_create("syzkaller", 0) = 3 [pid 5878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [ 96.511866][ T5876] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.515323][ T5877] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5878] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5873] <... unlink resumed>) = 0 [pid 5873] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5874] <... unlink resumed>) = 0 [pid 5874] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5868] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5868, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5003] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5869] <... pwritev resumed>) = 1114112 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5869] exit_group(0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5869] <... exit_group resumed>) = ? [pid 5003] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./71/binderfs" [pid 4998] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... unlink resumed>) = 0 [pid 5003] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] <... umount2 resumed>) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./70/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./70") = 0 [pid 4998] mkdir("./71", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5878] <... write resumed>) = 2097152 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5879 [pid 5003] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5878] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] lstat("./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5878] <... munmap resumed>) = 0 [pid 5003] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5878] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5003] getdents64(4, ./strace-static-x86_64: Process 5879 attached [pid 5878] <... openat resumed>) = 4 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5879] chdir("./71" [pid 5878] ioctl(4, LOOP_SET_FD, 3 [pid 5003] getdents64(4, [pid 5879] <... chdir resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5879] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] close(4 [pid 5879] <... prctl resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5879] setpgid(0, 0 [pid 5003] rmdir("./71/file0" [pid 5879] <... setpgid resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] getdents64(3, [pid 5879] <... openat resumed>) = 3 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5879] write(3, "1000", 4 [pid 5003] close(3 [pid 5879] <... write resumed>) = 4 [pid 5003] <... close resumed>) = 0 [pid 5879] close(3 [pid 5003] rmdir("./71" [pid 5879] <... close resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5879] symlink("/dev/binderfs", "./binderfs" [pid 5003] mkdir("./72", 0777 [pid 5879] <... symlink resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5879] memfd_create("syzkaller", 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5879] <... memfd_create resumed>) = 3 [pid 5003] <... openat resumed>) = 3 [pid 5879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5879] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5869] +++ exited with 0 +++ [pid 5003] close(3) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5869, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5880 [pid 4999] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./71/binderfs") = 0 [pid 4999] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5878] <... ioctl resumed>) = 0 [pid 5878] close(3) = 0 [pid 5878] mkdir("./file0", 0777) = 0 [pid 5878] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5880 attached [pid 5879] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 96.675188][ T5878] loop4: detected capacity change from 0 to 4096 [pid 5880] chdir("./72") = 0 [pid 5880] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5880] setpgid(0, 0) = 0 [pid 5880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4999] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5880] write(3, "1000", 4) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5880] close(3 [pid 5878] <... mount resumed>) = 0 [pid 5880] <... close resumed>) = 0 [pid 5878] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5880] symlink("/dev/binderfs", "./binderfs" [pid 5878] <... openat resumed>) = 3 [pid 4999] lstat("./71/file0", [pid 5878] chdir("./file0") = 0 [pid 5878] ioctl(4, LOOP_CLR_FD [pid 5880] <... symlink resumed>) = 0 [pid 5878] <... ioctl resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5878] close(4 [pid 5880] memfd_create("syzkaller", 0 [pid 5879] <... write resumed>) = 2097152 [pid 5878] <... close resumed>) = 0 [pid 4999] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5878] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5880] <... memfd_create resumed>) = 3 [pid 4999] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5878] <... openat resumed>) = 4 [pid 4999] <... openat resumed>) = 4 [pid 5880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5878] unlink("./file1" [pid 4999] fstat(4, [pid 5880] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5879] munmap(0x7f0ed4ac1000, 2097152 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [ 96.745002][ T5881] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] rmdir("./71/file0") = 0 [pid 5879] <... munmap resumed>) = 0 [pid 5879] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5873] <... pwritev resumed>) = 1114112 [pid 4999] getdents64(3, [pid 5873] exit_group(0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5873] <... exit_group resumed>) = ? [pid 4999] close(3 [pid 5879] <... openat resumed>) = 4 [pid 5879] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./71") = 0 [pid 4999] mkdir("./72", 0777 [pid 5879] <... ioctl resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5878] <... unlink resumed>) = 0 [pid 5878] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5882 [pid 5879] close(3) = 0 [pid 5879] mkdir("./file0", 0777) = 0 [pid 5879] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, ""./strace-static-x86_64: Process 5882 attached [pid 5882] chdir("./72") = 0 [pid 5882] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5882] setpgid(0, 0 [pid 5880] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5882] <... setpgid resumed>) = 0 [pid 5882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5882] write(3, "1000", 4) = 4 [pid 5882] close(3) = 0 [pid 5882] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5882] memfd_create("syzkaller", 0) = 3 [pid 5882] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [ 96.785324][ T5879] loop0: detected capacity change from 0 to 4096 [pid 5882] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5879] <... mount resumed>) = 0 [pid 5879] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5879] chdir("./file0") = 0 [pid 5879] ioctl(4, LOOP_CLR_FD) = 0 [pid 5879] close(4) = 0 [pid 5879] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5874] <... pwritev resumed>) = 1114112 [pid 5879] unlink("./file1" [pid 5874] exit_group(0) = ? [pid 5873] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5873, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5000] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./71/binderfs") = 0 [pid 5000] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5879] <... unlink resumed>) = 0 [pid 5879] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5880] <... write resumed>) = 2097152 [ 96.852894][ T5883] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5880] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5882] <... write resumed>) = 2097152 [pid 5880] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5874] +++ exited with 0 +++ [pid 5882] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5880] <... openat resumed>) = 4 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5874, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5880] ioctl(4, LOOP_SET_FD, 3 [pid 5001] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] lstat("./71/file0", [pid 5882] <... munmap resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5882] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5882] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5880] <... ioctl resumed>) = 0 [pid 5880] close(3 [pid 5001] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5880] <... close resumed>) = 0 [pid 5001] fstat(3, [pid 5000] fstat(4, [pid 5882] <... ioctl resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5880] mkdir("./file0", 0777 [pid 5882] close(3 [pid 5001] getdents64(3, [pid 5882] <... close resumed>) = 0 [pid 5880] <... mkdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5880] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5882] mkdir("./file0", 0777 [pid 5000] getdents64(4, [pid 5001] lstat("./71/binderfs", [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./71/binderfs" [pid 5000] close(4) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5000] rmdir("./71/file0" [pid 5882] <... mkdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5001] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5882] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] close(3) = 0 [pid 5000] rmdir("./71") = 0 [pid 5000] mkdir("./72", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5884 [pid 5878] <... pwritev resumed>) = 1114112 [pid 5878] exit_group(0) = ? ./strace-static-x86_64: Process 5884 attached [pid 5001] <... umount2 resumed>) = 0 [ 96.935514][ T5880] loop5: detected capacity change from 0 to 4096 [ 96.937373][ T5882] loop1: detected capacity change from 0 to 4096 [pid 5884] chdir("./72" [pid 5880] <... mount resumed>) = 0 [pid 5001] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5880] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5880] chdir("./file0" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5880] <... chdir resumed>) = 0 [pid 5884] <... chdir resumed>) = 0 [pid 5001] lstat("./71/file0", [pid 5884] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5882] <... mount resumed>) = 0 [pid 5880] ioctl(4, LOOP_CLR_FD [pid 5879] <... pwritev resumed>) = 1114112 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5884] <... prctl resumed>) = 0 [pid 5882] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5878] +++ exited with 0 +++ [pid 5880] <... ioctl resumed>) = 0 [pid 5884] setpgid(0, 0 [pid 5882] <... openat resumed>) = 3 [pid 5880] close(4 [pid 5879] exit_group(0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5878, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5001] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5884] <... setpgid resumed>) = 0 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5880] <... close resumed>) = 0 [pid 5002] <... restart_syscall resumed>) = 0 [pid 5002] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./73/binderfs") = 0 [pid 5002] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5882] chdir("./file0" [pid 5880] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5879] <... exit_group resumed>) = ? [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5884] <... openat resumed>) = 3 [pid 5882] <... chdir resumed>) = 0 [pid 5880] <... openat resumed>) = 4 [pid 5002] <... umount2 resumed>) = 0 [pid 5880] unlink("./file1" [pid 5002] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./73/file0" [pid 5884] write(3, "1000", 4 [pid 5882] ioctl(4, LOOP_CLR_FD [pid 5880] <... unlink resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 96.998412][ T5885] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.011069][ T5886] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5880] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5884] <... write resumed>) = 4 [pid 5882] <... ioctl resumed>) = 0 [pid 5879] +++ exited with 0 +++ [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5884] close(3 [pid 5882] close(4 [pid 5002] getdents64(3, [pid 5001] fstat(4, [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5879, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5884] <... close resumed>) = 0 [pid 5882] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5884] symlink("/dev/binderfs", "./binderfs" [pid 5882] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] close(3 [pid 5001] getdents64(4, [pid 5884] <... symlink resumed>) = 0 [pid 5882] <... openat resumed>) = 4 [pid 5002] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5884] memfd_create("syzkaller", 0 [pid 5882] unlink("./file1" [pid 5002] rmdir("./73" [pid 5001] getdents64(4, [pid 4998] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5884] <... memfd_create resumed>) = 3 [pid 5882] <... unlink resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./71/binderfs" [pid 5884] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5882] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] mkdir("./74", 0777 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5884] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] close(4 [pid 5884] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5001] rmdir("./71/file0" [pid 5002] <... openat resumed>) = 3 [pid 5001] <... rmdir resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] getdents64(3, [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] close(3 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./71") = 0 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5887 [pid 5001] mkdir("./72", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 5887 attached [pid 5887] chdir("./74" [pid 4998] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5887] <... chdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5887] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5887] setpgid(0, 0 [pid 4998] fstat(4, [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... close resumed>) = 0 [pid 4998] getdents64(4, [pid 5887] <... setpgid resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5888 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./71/file0" [pid 5887] <... openat resumed>) = 3 [pid 5887] write(3, "1000", 4) = 4 [pid 5887] close(3) = 0 [pid 5887] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4998] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5888 attached [pid 5887] memfd_create("syzkaller", 0 [pid 4998] getdents64(3, [pid 5888] chdir("./72" [pid 5887] <... memfd_create resumed>) = 3 [pid 5884] <... write resumed>) = 2097152 [pid 5887] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5888] <... chdir resumed>) = 0 [pid 5888] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5887] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 4998] close(3 [pid 5888] <... prctl resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./71") = 0 [pid 4998] mkdir("./72", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5888] setpgid(0, 0 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5889 ./strace-static-x86_64: Process 5889 attached [pid 5889] chdir("./72") = 0 [pid 5889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5889] setpgid(0, 0) = 0 [pid 5889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5889] write(3, "1000", 4) = 4 [pid 5889] close(3 [pid 5888] <... setpgid resumed>) = 0 [pid 5888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5889] <... close resumed>) = 0 [pid 5889] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5888] <... openat resumed>) = 3 [pid 5888] write(3, "1000", 4) = 4 [pid 5889] memfd_create("syzkaller", 0 [pid 5888] close(3 [pid 5889] <... memfd_create resumed>) = 3 [pid 5889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5888] <... close resumed>) = 0 [pid 5889] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5888] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5888] memfd_create("syzkaller", 0) = 3 [pid 5888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5887] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5884] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5884] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5884] ioctl(4, LOOP_SET_FD, 3 [pid 5888] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5880] <... pwritev resumed>) = 1114112 [pid 5880] exit_group(0 [pid 5889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5880] <... exit_group resumed>) = ? [pid 5888] <... write resumed>) = 2097152 [pid 5887] <... write resumed>) = 2097152 [pid 5887] munmap(0x7f0ed4ac1000, 2097152 [pid 5888] munmap(0x7f0ed4ac1000, 2097152 [pid 5887] <... munmap resumed>) = 0 [pid 5887] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5888] <... munmap resumed>) = 0 [pid 5888] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5887] <... openat resumed>) = 4 [pid 5887] ioctl(4, LOOP_SET_FD, 3 [pid 5888] <... openat resumed>) = 4 [pid 5888] ioctl(4, LOOP_SET_FD, 3 [pid 5884] <... ioctl resumed>) = 0 [pid 5884] close(3) = 0 [pid 5884] mkdir("./file0", 0777) = 0 [pid 5884] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5887] <... ioctl resumed>) = 0 [pid 5888] <... ioctl resumed>) = 0 [pid 5887] close(3 [pid 5888] close(3 [pid 5887] <... close resumed>) = 0 [pid 5888] <... close resumed>) = 0 [pid 5887] mkdir("./file0", 0777 [pid 5882] <... pwritev resumed>) = 1114112 [pid 5888] mkdir("./file0", 0777 [pid 5887] <... mkdir resumed>) = 0 [pid 5882] exit_group(0 [pid 5888] <... mkdir resumed>) = 0 [pid 5887] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5882] <... exit_group resumed>) = ? [pid 5889] <... write resumed>) = 2097152 [pid 5888] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 97.205688][ T5884] loop2: detected capacity change from 0 to 4096 [ 97.230141][ T5887] loop4: detected capacity change from 0 to 4096 [ 97.237590][ T5888] loop3: detected capacity change from 0 to 4096 [pid 5889] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5880] +++ exited with 0 +++ [pid 5889] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5889] ioctl(4, LOOP_SET_FD, 3 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5880, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5887] <... mount resumed>) = 0 [pid 5884] <... mount resumed>) = 0 [pid 5003] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./72/binderfs", [pid 5887] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5884] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5889] <... ioctl resumed>) = 0 [pid 5888] <... mount resumed>) = 0 [pid 5887] <... openat resumed>) = 3 [pid 5884] <... openat resumed>) = 3 [pid 5003] unlink("./72/binderfs" [pid 5889] close(3 [pid 5888] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5887] chdir("./file0" [pid 5884] chdir("./file0" [pid 5003] <... unlink resumed>) = 0 [pid 5889] <... close resumed>) = 0 [pid 5888] <... openat resumed>) = 3 [pid 5887] <... chdir resumed>) = 0 [pid 5884] <... chdir resumed>) = 0 [pid 5889] mkdir("./file0", 0777 [pid 5887] ioctl(4, LOOP_CLR_FD [pid 5884] ioctl(4, LOOP_CLR_FD [pid 5889] <... mkdir resumed>) = 0 [pid 5888] chdir("./file0" [pid 5887] <... ioctl resumed>) = 0 [pid 5884] <... ioctl resumed>) = 0 [pid 5882] +++ exited with 0 +++ [pid 5003] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5889] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5888] <... chdir resumed>) = 0 [pid 5887] close(4 [pid 5884] close(4 [pid 5887] <... close resumed>) = 0 [pid 5884] <... close resumed>) = 0 [pid 5887] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5884] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5887] <... openat resumed>) = 4 [pid 5884] <... openat resumed>) = 4 [pid 5887] unlink("./file1" [pid 5884] unlink("./file1" [pid 5887] <... unlink resumed>) = 0 [pid 5884] <... unlink resumed>) = 0 [pid 5887] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5884] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5888] ioctl(4, LOOP_CLR_FD [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5882, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5888] <... ioctl resumed>) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5888] close(4) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 5888] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4999] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5888] <... openat resumed>) = 4 [ 97.273948][ T5890] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.277665][ T5889] loop0: detected capacity change from 0 to 4096 [ 97.285236][ T5891] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.303295][ T5892] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] fstat(3, [pid 5888] unlink("./file1" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5888] <... unlink resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5888] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] lstat("./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./72/binderfs") = 0 [pid 4999] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 5889] <... mount resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./72/file0") = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./72") = 0 [pid 5003] mkdir("./73", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5889] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5889] <... openat resumed>) = 3 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3 [pid 5889] chdir("./file0" [pid 5003] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5889] <... chdir resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5889] ioctl(4, LOOP_CLR_FD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5894 attached [pid 5889] <... ioctl resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5894 [pid 4999] lstat("./72/file0", [pid 5889] close(4 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5894] chdir("./73" [pid 5889] <... close resumed>) = 0 [pid 4999] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5894] <... chdir resumed>) = 0 [ 97.401996][ T5893] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5889] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5894] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5894] <... prctl resumed>) = 0 [pid 5894] setpgid(0, 0 [pid 5889] <... openat resumed>) = 4 [pid 4999] <... openat resumed>) = 4 [pid 5894] <... setpgid resumed>) = 0 [pid 5889] unlink("./file1" [pid 4999] fstat(4, [pid 5894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5894] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5894] write(3, "1000", 4 [pid 4999] getdents64(4, [pid 5894] <... write resumed>) = 4 [pid 5889] <... unlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5894] close(3 [pid 5889] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] close(4) = 0 [pid 5894] <... close resumed>) = 0 [pid 5894] symlink("/dev/binderfs", "./binderfs" [pid 4999] rmdir("./72/file0" [pid 5894] <... symlink resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5894] memfd_create("syzkaller", 0 [pid 4999] getdents64(3, [pid 5894] <... memfd_create resumed>) = 3 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] close(3 [pid 5888] <... pwritev resumed>) = 1114112 [pid 4999] <... close resumed>) = 0 [pid 5894] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5888] exit_group(0 [pid 4999] rmdir("./72" [pid 5888] <... exit_group resumed>) = ? [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./73", 0777) = 0 [pid 5884] <... pwritev resumed>) = 1114112 [pid 5884] exit_group(0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5884] <... exit_group resumed>) = ? [pid 4999] <... openat resumed>) = 3 [pid 5887] <... pwritev resumed>) = 1114112 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5887] exit_group(0) = ? [pid 5894] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5895 ./strace-static-x86_64: Process 5895 attached [pid 5895] chdir("./73") = 0 [pid 5895] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5895] setpgid(0, 0) = 0 [pid 5895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5895] write(3, "1000", 4) = 4 [pid 5895] close(3) = 0 [pid 5895] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5895] memfd_create("syzkaller", 0) = 3 [pid 5895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5887] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5887, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5002] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./74/binderfs", [pid 5888] +++ exited with 0 +++ [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./74/binderfs" [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5888, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5001] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./72/binderfs") = 0 [pid 5001] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./74/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./74") = 0 [pid 5002] mkdir("./75", 0777) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5896 [pid 5001] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./72/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5884] +++ exited with 0 +++ [pid 5001] close(3./strace-static-x86_64: Process 5896 attached ) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5884, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5896] chdir("./75" [pid 5001] rmdir("./72" [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5896] <... chdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5896] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] mkdir("./73", 0777 [pid 5896] <... prctl resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5896] setpgid(0, 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5896] <... setpgid resumed>) = 0 [pid 5000] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5896] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5896] write(3, "1000", 4 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... openat resumed>) = 3 [pid 5896] <... write resumed>) = 4 [pid 5001] close(3 [pid 5000] fstat(3, [pid 5896] close(3 [pid 5001] <... close resumed>) = 0 [pid 5896] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5896] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5897 [pid 5896] memfd_create("syzkaller", 0) = 3 [pid 5896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./72/binderfs" [pid 5896] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5894] <... write resumed>) = 2097152 [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5897 attached [pid 5897] chdir("./73") = 0 [pid 5897] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5894] munmap(0x7f0ed4ac1000, 2097152 [pid 5897] setpgid(0, 0) = 0 [pid 5897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5897] write(3, "1000", 4) = 4 [pid 5894] <... munmap resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5897] close(3) = 0 [pid 5897] symlink("/dev/binderfs", "./binderfs" [pid 5894] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5897] <... symlink resumed>) = 0 [pid 5894] <... openat resumed>) = 4 [pid 5897] memfd_create("syzkaller", 0 [pid 5894] ioctl(4, LOOP_SET_FD, 3 [pid 5897] <... memfd_create resumed>) = 3 [pid 5897] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5000] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./72/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./72") = 0 [pid 5000] mkdir("./73", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5889] <... pwritev resumed>) = 1114112 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5889] exit_group(0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5889] <... exit_group resumed>) = ? [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5898 [pid 5895] <... write resumed>) = 2097152 [pid 5894] <... ioctl resumed>) = 0 [pid 5895] munmap(0x7f0ed4ac1000, 2097152 [pid 5894] close(3./strace-static-x86_64: Process 5898 attached [pid 5898] chdir("./73" [pid 5895] <... munmap resumed>) = 0 [pid 5894] <... close resumed>) = 0 [pid 5895] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5898] <... chdir resumed>) = 0 [pid 5897] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5895] <... openat resumed>) = 4 [pid 5894] mkdir("./file0", 0777 [pid 5889] +++ exited with 0 +++ [ 97.667457][ T5894] loop5: detected capacity change from 0 to 4096 [pid 5898] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5896] <... write resumed>) = 2097152 [pid 5895] ioctl(4, LOOP_SET_FD, 3 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5889, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5898] <... prctl resumed>) = 0 [pid 5896] munmap(0x7f0ed4ac1000, 2097152 [pid 5894] <... mkdir resumed>) = 0 [pid 5898] setpgid(0, 0 [pid 5896] <... munmap resumed>) = 0 [pid 5898] <... setpgid resumed>) = 0 [pid 4998] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5898] <... openat resumed>) = 3 [pid 5896] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4998] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5898] write(3, "1000", 4 [pid 5896] <... openat resumed>) = 4 [pid 4998] <... openat resumed>) = 3 [pid 5898] <... write resumed>) = 4 [pid 5896] ioctl(4, LOOP_SET_FD, 3 [pid 4998] fstat(3, [pid 5898] close(3 [pid 5897] <... write resumed>) = 2097152 [pid 5896] <... ioctl resumed>) = 0 [pid 5895] <... ioctl resumed>) = 0 [pid 5894] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5898] <... close resumed>) = 0 [pid 5896] close(3 [pid 4998] getdents64(3, [pid 5898] symlink("/dev/binderfs", "./binderfs" [pid 5896] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5898] <... symlink resumed>) = 0 [pid 5896] mkdir("./file0", 0777 [pid 4998] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5898] memfd_create("syzkaller", 0 [pid 5896] <... mkdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5898] <... memfd_create resumed>) = 3 [pid 5896] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] lstat("./72/binderfs", [pid 5898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5898] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5897] munmap(0x7f0ed4ac1000, 2097152 [pid 5895] close(3 [pid 5894] <... mount resumed>) = 0 [pid 4998] unlink("./72/binderfs" [pid 5894] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] <... unlink resumed>) = 0 [pid 5894] <... openat resumed>) = 3 [pid 4998] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5897] <... munmap resumed>) = 0 [pid 5895] <... close resumed>) = 0 [pid 5894] chdir("./file0" [pid 5897] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5895] mkdir("./file0", 0777 [pid 5894] <... chdir resumed>) = 0 [pid 5897] <... openat resumed>) = 4 [pid 5895] <... mkdir resumed>) = 0 [pid 5894] ioctl(4, LOOP_CLR_FD [pid 5897] ioctl(4, LOOP_SET_FD, 3 [pid 5894] <... ioctl resumed>) = 0 [pid 5894] close(4) = 0 [pid 5894] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5898] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5895] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] <... umount2 resumed>) = 0 [pid 5894] <... openat resumed>) = 4 [pid 5894] unlink("./file1" [pid 5898] <... write resumed>) = 2097152 [pid 5898] munmap(0x7f0ed4ac1000, 2097152 [pid 5896] <... mount resumed>) = 0 [pid 5896] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5896] chdir("./file0") = 0 [pid 5896] ioctl(4, LOOP_CLR_FD) = 0 [pid 5896] close(4) = 0 [pid 5896] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 97.722498][ T5895] loop1: detected capacity change from 0 to 4096 [ 97.725636][ T5896] loop4: detected capacity change from 0 to 4096 [ 97.742313][ T5899] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.757956][ T5897] loop3: detected capacity change from 0 to 4096 [pid 5896] unlink("./file1" [pid 5897] <... ioctl resumed>) = 0 [pid 5894] <... unlink resumed>) = 0 [pid 5894] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5897] close(3) = 0 [pid 5897] mkdir("./file0", 0777 [pid 5895] <... mount resumed>) = 0 [pid 5895] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5897] <... mkdir resumed>) = 0 [pid 5895] chdir("./file0") = 0 [pid 5895] ioctl(4, LOOP_CLR_FD) = 0 [pid 5895] close(4) = 0 [pid 5895] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5898] <... munmap resumed>) = 0 [pid 5897] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5898] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5898] ioctl(4, LOOP_SET_FD, 3 [pid 5895] <... openat resumed>) = 4 [pid 4998] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] unlink("./file1" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./72/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./72") = 0 [pid 4998] mkdir("./73", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5902 [pid 5898] <... ioctl resumed>) = 0 [pid 5898] close(3) = 0 [pid 5898] mkdir("./file0", 0777) = 0 [pid 5898] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, ""./strace-static-x86_64: Process 5902 attached [pid 5902] chdir("./73") = 0 [pid 5902] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5897] <... mount resumed>) = 0 [pid 5902] <... prctl resumed>) = 0 [ 97.798715][ T5900] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.809706][ T5901] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.826609][ T5898] loop2: detected capacity change from 0 to 4096 [pid 5902] setpgid(0, 0 [pid 5897] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5902] <... setpgid resumed>) = 0 [pid 5902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5902] write(3, "1000", 4) = 4 [pid 5902] close(3) = 0 [pid 5902] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5902] memfd_create("syzkaller", 0) = 3 [pid 5902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5897] <... openat resumed>) = 3 [pid 5896] <... unlink resumed>) = 0 [pid 5896] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5898] <... mount resumed>) = 0 [pid 5897] chdir("./file0" [pid 5895] <... unlink resumed>) = 0 [pid 5898] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5895] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5902] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5898] <... openat resumed>) = 3 [pid 5897] <... chdir resumed>) = 0 [pid 5898] chdir("./file0") = 0 [pid 5898] ioctl(4, LOOP_CLR_FD) = 0 [pid 5898] close(4) = 0 [pid 5897] ioctl(4, LOOP_CLR_FD [pid 5898] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5898] unlink("./file1" [pid 5897] <... ioctl resumed>) = 0 [pid 5897] close(4) = 0 [pid 5897] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5897] unlink("./file1") = 0 [ 97.859368][ T5903] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.891494][ T5904] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5897] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5898] <... unlink resumed>) = 0 [pid 5898] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5894] <... pwritev resumed>) = 1114112 [pid 5894] exit_group(0) = ? [pid 5902] <... write resumed>) = 2097152 [pid 5902] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5902] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5902] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5902] close(3) = 0 [pid 5902] mkdir("./file0", 0777) = 0 [ 98.009260][ T5902] loop0: detected capacity change from 0 to 4096 [pid 5902] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5896] <... pwritev resumed>) = 1114112 [pid 5896] exit_group(0) = ? [pid 5902] <... mount resumed>) = 0 [pid 5902] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5902] chdir("./file0") = 0 [pid 5902] ioctl(4, LOOP_CLR_FD) = 0 [pid 5902] close(4) = 0 [pid 5902] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5902] unlink("./file1" [pid 5894] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5894, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5003] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./73/binderfs") = 0 [pid 5003] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] <... pwritev resumed>) = 1114112 [pid 5897] <... pwritev resumed>) = 1114112 [pid 5895] exit_group(0) = ? [pid 5902] <... unlink resumed>) = 0 [pid 5897] exit_group(0 [pid 5902] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5897] <... exit_group resumed>) = ? [pid 5003] <... umount2 resumed>) = 0 [ 98.085664][ T5905] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5003] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5896] +++ exited with 0 +++ [pid 5003] rmdir("./73/file0" [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5896, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5002] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 5003] getdents64(3, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] close(3 [pid 5002] lstat("./75/binderfs", [pid 5003] <... close resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./75/binderfs" [pid 5898] <... pwritev resumed>) = 1114112 [pid 5897] +++ exited with 0 +++ [pid 5003] rmdir("./73" [pid 5002] <... unlink resumed>) = 0 [pid 5898] exit_group(0 [pid 5002] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5898] <... exit_group resumed>) = ? [pid 5003] <... rmdir resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5897, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5003] mkdir("./74", 0777) = 0 [pid 5001] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3 [pid 5001] getdents64(3, [pid 5895] +++ exited with 0 +++ [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5895, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5003] <... close resumed>) = 0 [pid 5001] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./75/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5001] lstat("./73/binderfs", [pid 4999] <... restart_syscall resumed>) = 0 [pid 5898] +++ exited with 0 +++ [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5906 [pid 5001] unlink("./73/binderfs" [pid 4999] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5898, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... unlink resumed>) = 0 [pid 5000] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 4999] fstat(3, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] getdents64(3, [pid 5000] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./73/binderfs" [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] <... unlink resumed>) = 0 [pid 4999] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 5000] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5902] <... pwritev resumed>) = 1114112 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] rmdir("./75/file0" [pid 4999] lstat("./73/binderfs", [pid 5902] exit_group(0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5902] <... exit_group resumed>) = ? [pid 5002] <... rmdir resumed>) = 0 [pid 4999] unlink("./73/binderfs" [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5002] rmdir("./75") = 0 [pid 4999] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5906 attached [pid 5906] chdir("./74" [pid 5002] mkdir("./76", 0777) = 0 [pid 5906] <... chdir resumed>) = 0 [pid 5906] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5906] setpgid(0, 0) = 0 [pid 5906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5906] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5906] write(3, "1000", 4) = 4 [pid 5906] close(3) = 0 [pid 5906] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5906] memfd_create("syzkaller", 0) = 3 [pid 5906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5907 [pid 5001] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./73/file0") = 0 ./strace-static-x86_64: Process 5907 attached [pid 5907] chdir("./76" [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5907] <... chdir resumed>) = 0 [pid 5001] close(3) = 0 [pid 5907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5001] rmdir("./73" [pid 5907] setpgid(0, 0) = 0 [pid 5907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... rmdir resumed>) = 0 [pid 5907] <... openat resumed>) = 3 [pid 5907] write(3, "1000", 4) = 4 [pid 5907] close(3) = 0 [pid 5001] mkdir("./74", 0777 [pid 5907] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5907] memfd_create("syzkaller", 0) = 3 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5907] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... openat resumed>) = 3 [pid 5907] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5908 [pid 4999] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = 0 [pid 4999] lstat("./73/file0", [pid 5000] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] lstat("./73/file0", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5908 attached [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5908] chdir("./74") = 0 [pid 5908] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5000] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 4 [pid 5908] setpgid(0, 0) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] fstat(4, [pid 5908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5908] write(3, "1000", 4) = 4 [pid 5000] <... openat resumed>) = 4 [pid 4999] getdents64(4, [pid 5908] close(3) = 0 [pid 5000] fstat(4, [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5908] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5907] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5908] memfd_create("syzkaller", 0) = 3 [pid 5000] getdents64(4, [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5902] +++ exited with 0 +++ [pid 5908] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] close(4 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5902, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5000] getdents64(4, [pid 4999] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] rmdir("./73/file0" [pid 5000] close(4) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5000] rmdir("./73/file0" [pid 4999] getdents64(3, [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] close(3 [pid 4998] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5000] close(3 [pid 4999] rmdir("./73" [pid 4998] fstat(3, [pid 5000] <... close resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5000] rmdir("./73" [pid 4998] getdents64(3, [pid 5000] <... rmdir resumed>) = 0 [pid 4999] mkdir("./74", 0777 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] mkdir("./74", 0777 [pid 4998] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] lstat("./73/binderfs", [pid 5000] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5907] <... write resumed>) = 2097152 [pid 4998] unlink("./73/binderfs" [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] <... unlink resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 4998] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 5908] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] close(3 [pid 5906] <... write resumed>) = 2097152 [pid 5906] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5909 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5906] <... munmap resumed>) = 0 [pid 5906] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5906] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5910 [pid 5907] munmap(0x7f0ed4ac1000, 2097152./strace-static-x86_64: Process 5909 attached [pid 5909] chdir("./74") = 0 [pid 5909] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5909] setpgid(0, 0) = 0 [pid 5909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5909] write(3, "1000", 4) = 4 [pid 5909] close(3) = 0 [pid 5909] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5909] memfd_create("syzkaller", 0) = 3 [pid 5909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5907] <... munmap resumed>) = 0 [pid 5907] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5910 attached [pid 5910] chdir("./74" [pid 5907] <... openat resumed>) = 4 [pid 5910] <... chdir resumed>) = 0 [pid 5907] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./73/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./73") = 0 [pid 5910] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] mkdir("./74", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5910] <... prctl resumed>) = 0 [pid 5906] <... ioctl resumed>) = 0 [pid 5910] setpgid(0, 0 [pid 5908] <... write resumed>) = 2097152 [pid 5906] close(3 [pid 5910] <... setpgid resumed>) = 0 [pid 5906] <... close resumed>) = 0 [pid 5908] munmap(0x7f0ed4ac1000, 2097152 [pid 5906] mkdir("./file0", 0777) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5911 [pid 5906] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5910] write(3, "1000", 4 [pid 5908] <... munmap resumed>) = 0 [pid 5910] <... write resumed>) = 4 [pid 5908] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5910] close(3 [pid 5908] <... openat resumed>) = 4 [pid 5910] <... close resumed>) = 0 [ 98.358147][ T5906] loop5: detected capacity change from 0 to 4096 [ 98.383031][ T5907] loop4: detected capacity change from 0 to 4096 [pid 5908] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5911 attached [pid 5910] symlink("/dev/binderfs", "./binderfs" [pid 5909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5907] <... ioctl resumed>) = 0 [pid 5910] <... symlink resumed>) = 0 [pid 5908] <... ioctl resumed>) = 0 [pid 5907] close(3 [pid 5908] close(3) = 0 [pid 5910] memfd_create("syzkaller", 0 [pid 5907] <... close resumed>) = 0 [pid 5908] mkdir("./file0", 0777 [pid 5907] mkdir("./file0", 0777 [pid 5910] <... memfd_create resumed>) = 3 [pid 5911] chdir("./74" [pid 5907] <... mkdir resumed>) = 0 [pid 5910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5907] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5910] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5908] <... mkdir resumed>) = 0 [pid 5908] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5911] <... chdir resumed>) = 0 [pid 5911] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5911] setpgid(0, 0) = 0 [pid 5911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5911] write(3, "1000", 4) = 4 [pid 5911] close(3) = 0 [pid 5911] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5911] memfd_create("syzkaller", 0) = 3 [pid 5911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [ 98.404589][ T5908] loop3: detected capacity change from 0 to 4096 [pid 5910] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5907] <... mount resumed>) = 0 [pid 5909] <... write resumed>) = 2097152 [pid 5907] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5906] <... mount resumed>) = 0 [pid 5907] chdir("./file0" [pid 5906] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5907] <... chdir resumed>) = 0 [pid 5906] <... openat resumed>) = 3 [pid 5907] ioctl(4, LOOP_CLR_FD [pid 5906] chdir("./file0" [pid 5907] <... ioctl resumed>) = 0 [pid 5906] <... chdir resumed>) = 0 [pid 5907] close(4 [pid 5906] ioctl(4, LOOP_CLR_FD [pid 5907] <... close resumed>) = 0 [pid 5906] <... ioctl resumed>) = 0 [pid 5907] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5906] close(4 [pid 5907] <... openat resumed>) = 4 [pid 5906] <... close resumed>) = 0 [pid 5907] unlink("./file1" [pid 5906] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5906] unlink("./file1" [pid 5907] <... unlink resumed>) = 0 [pid 5907] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 98.437566][ T5912] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.450456][ T5913] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5911] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5908] <... mount resumed>) = 0 [pid 5908] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5908] chdir("./file0") = 0 [pid 5908] ioctl(4, LOOP_CLR_FD) = 0 [pid 5908] close(4) = 0 [pid 5908] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5908] unlink("./file1" [pid 5909] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5909] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5909] ioctl(4, LOOP_SET_FD, 3 [pid 5906] <... unlink resumed>) = 0 [pid 5906] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5911] <... write resumed>) = 2097152 [pid 5910] <... write resumed>) = 2097152 [pid 5909] <... ioctl resumed>) = 0 [pid 5911] munmap(0x7f0ed4ac1000, 2097152 [pid 5910] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5911] <... munmap resumed>) = 0 [pid 5909] close(3) = 0 [pid 5909] mkdir("./file0", 0777 [pid 5908] <... unlink resumed>) = 0 [pid 5908] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5911] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5910] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5909] <... mkdir resumed>) = 0 [ 98.485952][ T5914] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.512606][ T5909] loop2: detected capacity change from 0 to 4096 [pid 5911] <... openat resumed>) = 4 [pid 5910] <... openat resumed>) = 4 [pid 5909] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5910] ioctl(4, LOOP_SET_FD, 3 [pid 5911] ioctl(4, LOOP_SET_FD, 3 [pid 5910] <... ioctl resumed>) = 0 [pid 5910] close(3 [pid 5911] <... ioctl resumed>) = 0 [pid 5910] <... close resumed>) = 0 [pid 5910] mkdir("./file0", 0777 [pid 5911] close(3) = 0 [pid 5911] mkdir("./file0", 0777 [pid 5910] <... mkdir resumed>) = 0 [pid 5911] <... mkdir resumed>) = 0 [pid 5911] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5910] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5909] <... mount resumed>) = 0 [pid 5909] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5909] chdir("./file0") = 0 [pid 5909] ioctl(4, LOOP_CLR_FD) = 0 [pid 5909] close(4) = 0 [pid 5909] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 98.562272][ T5910] loop1: detected capacity change from 0 to 4096 [ 98.568852][ T5911] loop0: detected capacity change from 0 to 4096 [ 98.595203][ T5915] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5909] unlink("./file1" [pid 5911] <... mount resumed>) = 0 [pid 5910] <... mount resumed>) = 0 [pid 5911] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5910] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5911] <... openat resumed>) = 3 [pid 5910] <... openat resumed>) = 3 [pid 5911] chdir("./file0" [pid 5910] chdir("./file0" [pid 5909] <... unlink resumed>) = 0 [pid 5906] <... pwritev resumed>) = 1114112 [pid 5911] <... chdir resumed>) = 0 [pid 5910] <... chdir resumed>) = 0 [pid 5909] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5906] exit_group(0 [pid 5911] ioctl(4, LOOP_CLR_FD [pid 5910] ioctl(4, LOOP_CLR_FD [pid 5906] <... exit_group resumed>) = ? [pid 5911] <... ioctl resumed>) = 0 [pid 5910] <... ioctl resumed>) = 0 [pid 5911] close(4 [pid 5910] close(4 [pid 5911] <... close resumed>) = 0 [pid 5910] <... close resumed>) = 0 [pid 5911] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [ 98.630807][ T5917] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.634303][ T5916] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5910] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5911] <... openat resumed>) = 4 [pid 5910] <... openat resumed>) = 4 [pid 5911] unlink("./file1" [pid 5910] unlink("./file1" [pid 5911] <... unlink resumed>) = 0 [pid 5910] <... unlink resumed>) = 0 [pid 5911] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5910] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5907] <... pwritev resumed>) = 1114112 [pid 5907] exit_group(0) = ? [pid 5906] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5906, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5003] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./74/binderfs") = 0 [pid 5003] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5907] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5907, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./76/binderfs") = 0 [pid 5002] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5909] <... pwritev resumed>) = 1114112 [pid 5909] exit_group(0) = ? [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./74/file0", [pid 5908] <... pwritev resumed>) = 1114112 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5908] exit_group(0) = ? [pid 5003] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5003] getdents64(4, [pid 5002] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] getdents64(4, [pid 5002] lstat("./76/file0", [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] close(4 [pid 5002] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] rmdir("./74/file0" [pid 5002] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5003] getdents64(3, [pid 5002] fstat(4, [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] close(3 [pid 5002] getdents64(4, [pid 5003] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] rmdir("./74" [pid 5002] getdents64(4, [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] mkdir("./75", 0777 [pid 5002] close(4 [pid 5003] <... mkdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] rmdir("./76/file0" [pid 5003] <... openat resumed>) = 3 [pid 5002] <... rmdir resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] getdents64(3, [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3 [pid 5002] close(3 [pid 5909] +++ exited with 0 +++ [pid 5003] <... close resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] rmdir("./76" [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5909, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5002] <... rmdir resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5918 [pid 5002] mkdir("./77", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5000] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5919 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./74/binderfs"./strace-static-x86_64: Process 5918 attached ) = 0 [pid 5000] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5918] chdir("./75") = 0 [pid 5918] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5918] setpgid(0, 0) = 0 [pid 5918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5918] write(3, "1000", 4) = 4 [pid 5918] close(3) = 0 [pid 5918] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5918] memfd_create("syzkaller", 0) = 3 [pid 5918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5000] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5919 attached [pid 5911] <... pwritev resumed>) = 1114112 [pid 5000] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5911] exit_group(0) = ? [pid 5919] chdir("./77" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5919] <... chdir resumed>) = 0 [pid 5908] +++ exited with 0 +++ [pid 5000] lstat("./74/file0", [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5908, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5919] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5919] <... prctl resumed>) = 0 [pid 5000] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5919] setpgid(0, 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5918] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5919] <... setpgid resumed>) = 0 [pid 5910] <... pwritev resumed>) = 1114112 [pid 5001] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5910] exit_group(0 [pid 5001] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 4 [pid 5919] <... openat resumed>) = 3 [pid 5910] <... exit_group resumed>) = ? [pid 5001] fstat(3, [pid 5000] fstat(4, [pid 5919] write(3, "1000", 4 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5919] <... write resumed>) = 4 [pid 5000] getdents64(4, [pid 5919] close(3 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5919] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 5919] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5919] <... symlink resumed>) = 0 [pid 5918] <... write resumed>) = 2097152 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] close(4 [pid 5919] memfd_create("syzkaller", 0 [pid 5001] getdents64(3, [pid 5000] <... close resumed>) = 0 [pid 5919] <... memfd_create resumed>) = 3 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] rmdir("./74/file0" [pid 5919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... rmdir resumed>) = 0 [pid 5919] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] getdents64(3, [pid 5919] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5918] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] lstat("./74/binderfs", [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5918] <... munmap resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5918] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] unlink("./74/binderfs" [pid 5918] <... openat resumed>) = 4 [pid 5911] +++ exited with 0 +++ [pid 5910] +++ exited with 0 +++ [pid 5001] <... unlink resumed>) = 0 [pid 5000] close(3 [pid 5918] ioctl(4, LOOP_SET_FD, 3 [pid 5001] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5911, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5000] <... close resumed>) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5000] rmdir("./74" [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5910, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] <... restart_syscall resumed>) = 0 [pid 4998] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... rmdir resumed>) = 0 [pid 4999] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 5000] mkdir("./75", 0777 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 4999] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./74/binderfs" [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5918] <... ioctl resumed>) = 0 [pid 5918] close(3) = 0 [pid 5918] mkdir("./file0", 0777) = 0 [pid 5918] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] getdents64(3, [pid 5000] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 4999] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5920 attached [pid 5919] <... write resumed>) = 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 4999] lstat("./74/binderfs", [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5920 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./74/binderfs" [pid 5920] chdir("./75" [pid 4999] <... unlink resumed>) = 0 [pid 5919] munmap(0x7f0ed4ac1000, 2097152 [pid 5920] <... chdir resumed>) = 0 [pid 4999] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5920] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5920] setpgid(0, 0) = 0 [pid 5919] <... munmap resumed>) = 0 [pid 5920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5919] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5920] write(3, "1000", 4) = 4 [pid 5920] close(3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5920] <... close resumed>) = 0 [pid 5919] <... openat resumed>) = 4 [pid 5001] lstat("./74/file0", [pid 5920] symlink("/dev/binderfs", "./binderfs" [ 98.974723][ T5918] loop5: detected capacity change from 0 to 4096 [pid 5919] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5920] <... symlink resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5001] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5920] memfd_create("syzkaller", 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5920] <... memfd_create resumed>) = 3 [pid 5001] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... openat resumed>) = 4 [pid 5920] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5001] fstat(4, [pid 5919] <... ioctl resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] getdents64(4, [pid 4998] <... openat resumed>) = 4 [pid 4998] fstat(4, [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4998] getdents64(4, [pid 5001] close(4 [pid 4999] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./74/file0" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(4, [pid 4999] lstat("./74/file0", [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] close(4 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 5001] close(3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] rmdir("./74/file0" [pid 5001] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... rmdir resumed>) = 0 [pid 5001] rmdir("./74" [pid 4999] <... openat resumed>) = 4 [pid 4998] getdents64(3, [pid 4999] fstat(4, [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] close(3 [pid 5001] mkdir("./75", 0777 [pid 4999] getdents64(4, [pid 4998] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] rmdir("./74" [pid 5001] <... mkdir resumed>) = 0 [pid 4999] getdents64(4, [pid 4998] <... rmdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] mkdir("./75", 0777 [pid 5001] <... openat resumed>) = 3 [pid 4999] close(4 [pid 4998] <... mkdir resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5919] close(3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] rmdir("./74/file0" [pid 4998] <... openat resumed>) = 3 [pid 5919] <... close resumed>) = 0 [pid 5001] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5001] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 4999] close(3 [pid 4998] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] rmdir("./74" [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5922 [pid 4999] mkdir("./75", 0777) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5923 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5919] mkdir("./file0", 0777 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5924 ./strace-static-x86_64: Process 5923 attached [pid 5919] <... mkdir resumed>) = 0 [pid 5923] chdir("./75") = 0 [pid 5923] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5923] setpgid(0, 0) = 0 [pid 5923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5919] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5923] <... openat resumed>) = 3 [pid 5923] write(3, "1000", 4) = 4 [pid 5923] close(3./strace-static-x86_64: Process 5924 attached ) = 0 [ 99.028876][ T5919] loop4: detected capacity change from 0 to 4096 [pid 5923] symlink("/dev/binderfs", "./binderfs" [pid 5924] chdir("./75" [pid 5923] <... symlink resumed>) = 0 [pid 5924] <... chdir resumed>) = 0 [pid 5923] memfd_create("syzkaller", 0 [pid 5918] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5922 attached [pid 5924] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5923] <... memfd_create resumed>) = 3 [pid 5918] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5924] <... prctl resumed>) = 0 [pid 5923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5922] chdir("./75" [pid 5918] <... openat resumed>) = 3 [pid 5924] setpgid(0, 0 [pid 5923] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5922] <... chdir resumed>) = 0 [pid 5918] chdir("./file0" [pid 5924] <... setpgid resumed>) = 0 [pid 5922] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5918] <... chdir resumed>) = 0 [pid 5924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5922] <... prctl resumed>) = 0 [pid 5918] ioctl(4, LOOP_CLR_FD [pid 5924] <... openat resumed>) = 3 [pid 5922] setpgid(0, 0 [pid 5918] <... ioctl resumed>) = 0 [pid 5924] write(3, "1000", 4 [pid 5922] <... setpgid resumed>) = 0 [pid 5918] close(4 [pid 5924] <... write resumed>) = 4 [pid 5922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5918] <... close resumed>) = 0 [pid 5924] close(3 [pid 5922] <... openat resumed>) = 3 [pid 5918] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5924] <... close resumed>) = 0 [pid 5922] write(3, "1000", 4 [pid 5918] <... openat resumed>) = 4 [pid 5924] symlink("/dev/binderfs", "./binderfs" [pid 5922] <... write resumed>) = 4 [pid 5918] unlink("./file1" [pid 5924] <... symlink resumed>) = 0 [pid 5922] close(3 [pid 5924] memfd_create("syzkaller", 0 [pid 5922] <... close resumed>) = 0 [pid 5924] <... memfd_create resumed>) = 3 [pid 5922] symlink("/dev/binderfs", "./binderfs" [pid 5924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5922] <... symlink resumed>) = 0 [pid 5924] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5922] memfd_create("syzkaller", 0 [pid 5924] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5922] <... memfd_create resumed>) = 3 [pid 5922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5920] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 99.069772][ T5921] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5923] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5919] <... mount resumed>) = 0 [pid 5918] <... unlink resumed>) = 0 [pid 5919] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5918] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5919] <... openat resumed>) = 3 [pid 5922] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5919] chdir("./file0") = 0 [pid 5919] ioctl(4, LOOP_CLR_FD) = 0 [pid 5919] close(4) = 0 [pid 5919] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5919] unlink("./file1" [pid 5920] <... write resumed>) = 2097152 [pid 5920] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5920] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5920] ioctl(4, LOOP_SET_FD, 3 [pid 5924] <... write resumed>) = 2097152 [pid 5920] <... ioctl resumed>) = 0 [pid 5920] close(3) = 0 [pid 5920] mkdir("./file0", 0777) = 0 [pid 5920] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5919] <... unlink resumed>) = 0 [pid 5919] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5924] munmap(0x7f0ed4ac1000, 2097152 [pid 5923] <... write resumed>) = 2097152 [pid 5920] <... mount resumed>) = 0 [pid 5920] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5920] chdir("./file0" [pid 5924] <... munmap resumed>) = 0 [pid 5923] munmap(0x7f0ed4ac1000, 2097152 [pid 5920] <... chdir resumed>) = 0 [ 99.119417][ T5925] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.152465][ T5920] loop2: detected capacity change from 0 to 4096 [pid 5920] ioctl(4, LOOP_CLR_FD) = 0 [pid 5920] close(4) = 0 [pid 5920] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5923] <... munmap resumed>) = 0 [pid 5920] <... openat resumed>) = 4 [pid 5920] unlink("./file1" [pid 5924] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5923] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5924] <... openat resumed>) = 4 [pid 5923] <... openat resumed>) = 4 [pid 5924] ioctl(4, LOOP_SET_FD, 3 [pid 5923] ioctl(4, LOOP_SET_FD, 3 [pid 5922] <... write resumed>) = 2097152 [pid 5922] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5922] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5922] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5922] close(3) = 0 [pid 5922] mkdir("./file0", 0777) = 0 [pid 5922] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5924] <... ioctl resumed>) = 0 [pid 5924] close(3) = 0 [pid 5924] mkdir("./file0", 0777) = 0 [pid 5924] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5923] <... ioctl resumed>) = 0 [pid 5923] close(3) = 0 [ 99.201157][ T5926] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.214196][ T5924] loop1: detected capacity change from 0 to 4096 [ 99.218995][ T5922] loop0: detected capacity change from 0 to 4096 [ 99.220806][ T5923] loop3: detected capacity change from 0 to 4096 [pid 5923] mkdir("./file0", 0777 [pid 5920] <... unlink resumed>) = 0 [pid 5920] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5924] <... mount resumed>) = 0 [pid 5923] <... mkdir resumed>) = 0 [pid 5922] <... mount resumed>) = 0 [pid 5918] <... pwritev resumed>) = 1114112 [pid 5922] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5918] exit_group(0 [pid 5922] <... openat resumed>) = 3 [pid 5918] <... exit_group resumed>) = ? [pid 5924] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5923] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5922] chdir("./file0") = 0 [pid 5922] ioctl(4, LOOP_CLR_FD) = 0 [pid 5922] close(4) = 0 [pid 5922] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5924] <... openat resumed>) = 3 [pid 5922] <... openat resumed>) = 4 [pid 5922] unlink("./file1" [pid 5924] chdir("./file0") = 0 [pid 5924] ioctl(4, LOOP_CLR_FD) = 0 [pid 5924] close(4) = 0 [pid 5924] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5924] unlink("./file1" [pid 5922] <... unlink resumed>) = 0 [pid 5922] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5924] <... unlink resumed>) = 0 [ 99.264135][ T5927] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.279395][ T5928] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5924] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5923] <... mount resumed>) = 0 [pid 5923] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5923] chdir("./file0") = 0 [pid 5923] ioctl(4, LOOP_CLR_FD) = 0 [pid 5923] close(4) = 0 [pid 5923] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5923] unlink("./file1" [pid 5919] <... pwritev resumed>) = 1114112 [pid 5919] exit_group(0) = ? [pid 5923] <... unlink resumed>) = 0 [ 99.340493][ T5929] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5923] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5918] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5918, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5924] <... pwritev resumed>) = 1114112 [pid 5920] <... pwritev resumed>) = 1114112 [pid 5003] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5924] exit_group(0 [pid 5920] exit_group(0 [pid 5003] unlink("./75/binderfs" [pid 5924] <... exit_group resumed>) = ? [pid 5920] <... exit_group resumed>) = ? [pid 5003] <... unlink resumed>) = 0 [pid 5003] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5919] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5919, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./77/binderfs") = 0 [pid 5002] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./75/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./75/file0") = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5003] close(3 [pid 5002] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] rmdir("./75" [pid 5002] lstat("./77/file0", [pid 5003] <... rmdir resumed>) = 0 [pid 5003] mkdir("./76", 0777) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] <... openat resumed>) = 3 [pid 5002] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] <... openat resumed>) = 4 [pid 5002] fstat(4, [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] close(3 [pid 5002] getdents64(4, [pid 5920] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5920, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./75/binderfs" [pid 5003] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5930 [pid 5002] close(4) = 0 [pid 5002] rmdir("./77/file0") = 0 ./strace-static-x86_64: Process 5930 attached [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5930] chdir("./76" [pid 5002] close(3) = 0 [pid 5930] <... chdir resumed>) = 0 [pid 5002] rmdir("./77" [pid 5930] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... rmdir resumed>) = 0 [pid 5930] <... prctl resumed>) = 0 [pid 5002] mkdir("./78", 0777 [pid 5930] setpgid(0, 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5930] <... setpgid resumed>) = 0 [pid 5922] <... pwritev resumed>) = 1114112 [pid 5002] <... openat resumed>) = 3 [pid 5930] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5922] exit_group(0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5922] <... exit_group resumed>) = ? [pid 5930] <... openat resumed>) = 3 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5930] write(3, "1000", 4 [pid 5923] <... pwritev resumed>) = 1114112 [pid 5002] close(3 [pid 5000] <... umount2 resumed>) = 0 [pid 5930] <... write resumed>) = 4 [pid 5923] exit_group(0 [pid 5002] <... close resumed>) = 0 [pid 5000] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5930] close(3 [pid 5923] <... exit_group resumed>) = ? [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5930] <... close resumed>) = 0 [pid 5000] lstat("./75/file0", [pid 5930] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5931 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5930] <... symlink resumed>) = 0 [pid 5000] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5930] memfd_create("syzkaller", 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5930] <... memfd_create resumed>) = 3 [pid 5000] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5930] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] <... openat resumed>) = 4 [pid 5930] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5000] fstat(4, [pid 5930] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./75/file0") = 0 [pid 5000] getdents64(3, [pid 5924] +++ exited with 0 +++ [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5924, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- ./strace-static-x86_64: Process 5931 attached [pid 5000] close(3) = 0 [pid 5931] chdir("./78" [pid 5000] rmdir("./75" [pid 5931] <... chdir resumed>) = 0 [pid 5923] +++ exited with 0 +++ [pid 5000] <... rmdir resumed>) = 0 [pid 4999] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5931] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] mkdir("./76", 0777 [pid 5931] <... prctl resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5923, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5931] setpgid(0, 0 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5931] <... setpgid resumed>) = 0 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] <... openat resumed>) = 3 [pid 5931] <... openat resumed>) = 3 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] fstat(3, [pid 5931] write(3, "1000", 4 [pid 5001] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5931] <... write resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5932 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./75/binderfs") = 0 [pid 5001] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5932 attached [pid 5932] chdir("./76" [pid 4999] getdents64(3, [pid 5931] close(3 [pid 5001] <... umount2 resumed>) = 0 [pid 5931] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5931] symlink("/dev/binderfs", "./binderfs" [pid 4999] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5932] <... chdir resumed>) = 0 [pid 5931] <... symlink resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5932] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5931] memfd_create("syzkaller", 0 [pid 5932] <... prctl resumed>) = 0 [pid 5931] <... memfd_create resumed>) = 3 [pid 4999] lstat("./75/binderfs", [pid 5932] setpgid(0, 0 [pid 5931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5932] <... setpgid resumed>) = 0 [pid 5931] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5932] write(3, "1000", 4) = 4 [pid 5932] close(3) = 0 [pid 5932] symlink("/dev/binderfs", "./binderfs" [pid 5922] +++ exited with 0 +++ [pid 5932] <... symlink resumed>) = 0 [pid 5932] memfd_create("syzkaller", 0) = 3 [pid 5932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5931] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5930] <... write resumed>) = 2097152 [pid 5001] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] unlink("./75/binderfs" [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5922, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5930] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... unlink resumed>) = 0 [pid 5930] <... munmap resumed>) = 0 [pid 5001] lstat("./75/file0", [pid 4999] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5930] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5930] <... openat resumed>) = 4 [pid 5001] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5930] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5930] <... ioctl resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 4 [pid 4998] fstat(3, [pid 5001] fstat(4, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 5001] getdents64(4, [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] lstat("./75/binderfs", [pid 5001] close(4 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... close resumed>) = 0 [pid 4998] unlink("./75/binderfs" [pid 5001] rmdir("./75/file0" [pid 4999] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... unlink resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [pid 4999] lstat("./75/file0", [pid 5001] <... close resumed>) = 0 [pid 5932] <... write resumed>) = 2097152 [pid 5931] <... write resumed>) = 2097152 [pid 5930] close(3 [pid 5001] rmdir("./75" [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5932] munmap(0x7f0ed4ac1000, 2097152 [pid 5931] munmap(0x7f0ed4ac1000, 2097152 [pid 5930] <... close resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5932] <... munmap resumed>) = 0 [pid 5931] <... munmap resumed>) = 0 [pid 5930] mkdir("./file0", 0777 [pid 5001] mkdir("./76", 0777 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5932] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5931] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5930] <... mkdir resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5932] <... openat resumed>) = 4 [pid 5931] <... openat resumed>) = 4 [pid 5930] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... openat resumed>) = 4 [ 99.670905][ T5930] loop5: detected capacity change from 0 to 4096 [ 99.709040][ T5932] loop2: detected capacity change from 0 to 4096 [pid 5932] ioctl(4, LOOP_SET_FD, 3 [pid 5931] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... openat resumed>) = 3 [pid 4999] fstat(4, [pid 4998] <... umount2 resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4998] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] close(3 [pid 4998] lstat("./75/file0", [pid 5932] <... ioctl resumed>) = 0 [pid 5931] <... ioctl resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5932] close(3 [pid 5931] close(3 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5934 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./75/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./75") = 0 [pid 4998] mkdir("./76", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3./strace-static-x86_64: Process 5934 attached [pid 5932] <... close resumed>) = 0 [pid 5931] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 4998] <... close resumed>) = 0 [pid 5934] chdir("./76" [pid 5932] mkdir("./file0", 0777 [pid 5931] mkdir("./file0", 0777 [pid 5930] <... mount resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5934] <... chdir resumed>) = 0 [pid 5932] <... mkdir resumed>) = 0 [pid 5931] <... mkdir resumed>) = 0 [pid 5930] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] getdents64(4, [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5934] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5932] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5931] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5930] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5935 attached [pid 5934] <... prctl resumed>) = 0 [pid 5930] chdir("./file0" [pid 5935] chdir("./76" [pid 5930] <... chdir resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5935 [pid 5935] <... chdir resumed>) = 0 [pid 5930] ioctl(4, LOOP_CLR_FD [pid 5935] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5930] <... ioctl resumed>) = 0 [pid 4999] close(4 [pid 5935] <... prctl resumed>) = 0 [pid 5930] close(4 [pid 4999] <... close resumed>) = 0 [pid 5935] setpgid(0, 0 [pid 5934] setpgid(0, 0 [pid 5932] <... mount resumed>) = 0 [pid 5930] <... close resumed>) = 0 [pid 4999] rmdir("./75/file0" [pid 5935] <... setpgid resumed>) = 0 [pid 5930] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5935] write(3, "1000", 4) = 4 [pid 5935] close(3) = 0 [pid 5935] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5935] memfd_create("syzkaller", 0) = 3 [pid 5935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 4999] <... rmdir resumed>) = 0 [pid 5935] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5934] <... setpgid resumed>) = 0 [pid 5932] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5931] <... mount resumed>) = 0 [pid 5930] <... openat resumed>) = 4 [pid 4999] getdents64(3, [pid 5934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5932] <... openat resumed>) = 3 [pid 5931] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5930] unlink("./file1" [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5934] <... openat resumed>) = 3 [pid 5932] chdir("./file0" [pid 5931] <... openat resumed>) = 3 [pid 5930] <... unlink resumed>) = 0 [ 99.716078][ T5931] loop4: detected capacity change from 0 to 4096 [ 99.724454][ T5933] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.754561][ T5936] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] close(3 [pid 5934] write(3, "1000", 4 [pid 5932] <... chdir resumed>) = 0 [pid 5931] chdir("./file0" [pid 5930] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] <... close resumed>) = 0 [pid 5934] <... write resumed>) = 4 [pid 5932] ioctl(4, LOOP_CLR_FD [pid 5931] <... chdir resumed>) = 0 [pid 4999] rmdir("./75" [pid 5934] close(3 [pid 5932] <... ioctl resumed>) = 0 [pid 5931] ioctl(4, LOOP_CLR_FD [pid 4999] <... rmdir resumed>) = 0 [pid 5934] <... close resumed>) = 0 [pid 5931] <... ioctl resumed>) = 0 [pid 5934] symlink("/dev/binderfs", "./binderfs" [pid 5932] close(4 [pid 5931] close(4 [pid 5934] <... symlink resumed>) = 0 [pid 5932] <... close resumed>) = 0 [pid 5931] <... close resumed>) = 0 [pid 4999] mkdir("./76", 0777 [pid 5934] memfd_create("syzkaller", 0 [pid 5932] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5931] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5934] <... memfd_create resumed>) = 3 [pid 4999] <... mkdir resumed>) = 0 [pid 5934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5932] <... openat resumed>) = 4 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5932] unlink("./file1" [pid 5931] <... openat resumed>) = 4 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5931] unlink("./file1" [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5938 [pid 5932] <... unlink resumed>) = 0 [pid 5931] <... unlink resumed>) = 0 [pid 5931] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5932] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5934] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5938 attached [pid 5938] chdir("./76") = 0 [ 99.766531][ T5937] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5938] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5935] <... write resumed>) = 2097152 [pid 5938] setpgid(0, 0) = 0 [pid 5938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5938] write(3, "1000", 4) = 4 [pid 5938] close(3) = 0 [pid 5938] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5938] memfd_create("syzkaller", 0) = 3 [pid 5935] munmap(0x7f0ed4ac1000, 2097152 [pid 5938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5935] <... munmap resumed>) = 0 [pid 5938] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5935] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5935] ioctl(4, LOOP_SET_FD, 3 [pid 5934] <... write resumed>) = 2097152 [pid 5934] munmap(0x7f0ed4ac1000, 2097152 [pid 5938] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5934] <... munmap resumed>) = 0 [pid 5935] <... ioctl resumed>) = 0 [pid 5934] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5935] close(3) = 0 [pid 5935] mkdir("./file0", 0777 [pid 5934] <... openat resumed>) = 4 [pid 5934] ioctl(4, LOOP_SET_FD, 3 [pid 5935] <... mkdir resumed>) = 0 [pid 5935] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5934] <... ioctl resumed>) = 0 [pid 5934] close(3) = 0 [pid 5934] mkdir("./file0", 0777) = 0 [pid 5934] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5938] <... write resumed>) = 2097152 [ 99.851464][ T5935] loop0: detected capacity change from 0 to 4096 [ 99.884043][ T5934] loop3: detected capacity change from 0 to 4096 [pid 5938] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5938] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5938] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5938] close(3) = 0 [pid 5938] mkdir("./file0", 0777) = 0 [pid 5938] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5935] <... mount resumed>) = 0 [pid 5935] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5935] chdir("./file0") = 0 [pid 5935] ioctl(4, LOOP_CLR_FD) = 0 [pid 5935] close(4) = 0 [pid 5935] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5935] unlink("./file1" [pid 5934] <... mount resumed>) = 0 [pid 5934] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5930] <... pwritev resumed>) = 1114112 [pid 5934] <... openat resumed>) = 3 [pid 5930] exit_group(0 [pid 5934] chdir("./file0" [pid 5930] <... exit_group resumed>) = ? [pid 5934] <... chdir resumed>) = 0 [ 99.925618][ T5939] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.930102][ T5938] loop1: detected capacity change from 0 to 4096 [ 99.964001][ T5940] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5934] ioctl(4, LOOP_CLR_FD) = 0 [pid 5938] <... mount resumed>) = 0 [pid 5934] close(4) = 0 [pid 5938] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5934] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5938] <... openat resumed>) = 3 [pid 5938] chdir("./file0" [pid 5934] <... openat resumed>) = 4 [pid 5938] <... chdir resumed>) = 0 [pid 5934] unlink("./file1" [pid 5938] ioctl(4, LOOP_CLR_FD) = 0 [pid 5938] close(4) = 0 [pid 5938] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5938] unlink("./file1" [pid 5931] <... pwritev resumed>) = 1114112 [pid 5931] exit_group(0 [pid 5935] <... unlink resumed>) = 0 [pid 5931] <... exit_group resumed>) = ? [pid 5935] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5934] <... unlink resumed>) = 0 [pid 5932] <... pwritev resumed>) = 1114112 [ 99.982898][ T5941] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5932] exit_group(0) = ? [pid 5938] <... unlink resumed>) = 0 [pid 5934] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5930] +++ exited with 0 +++ [pid 5938] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5930, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5003] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./76/binderfs") = 0 [pid 5003] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5931] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5931, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./78/binderfs") = 0 [pid 5002] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5932] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5932, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./76/file0", [pid 5000] lstat("./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./76/binderfs") = 0 [pid 5000] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 5000] <... umount2 resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./76/file0" [pid 5002] fstat(4, [pid 5003] <... rmdir resumed>) = 0 [pid 5003] getdents64(3, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, [pid 5003] close(3 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] <... close resumed>) = 0 [pid 5002] close(4 [pid 5000] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] rmdir("./76" [pid 5002] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... rmdir resumed>) = 0 [pid 5003] mkdir("./77", 0777 [pid 5002] rmdir("./78/file0" [pid 5000] lstat("./76/file0", [pid 5003] <... mkdir resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] getdents64(3, [pid 5000] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... openat resumed>) = 3 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] close(3 [pid 5000] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... close resumed>) = 0 [pid 5003] close(3 [pid 5002] rmdir("./78" [pid 5000] <... openat resumed>) = 4 [pid 5003] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] fstat(4, [pid 5002] mkdir("./79", 0777 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5000] getdents64(4, [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] <... openat resumed>) = 3 [pid 5000] getdents64(4, [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(4 [pid 5002] close(3 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... close resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] rmdir("./76/file0" [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... rmdir resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5942 [pid 5000] getdents64(3, [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5943 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./76") = 0 [pid 5000] mkdir("./77", 0777) = 0 ./strace-static-x86_64: Process 5942 attached [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5942] chdir("./77" [pid 5000] <... openat resumed>) = 3 [pid 5942] <... chdir resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5942] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5942] <... prctl resumed>) = 0 [pid 5000] close(3 [pid 5942] setpgid(0, 0 [pid 5000] <... close resumed>) = 0 [pid 5942] <... setpgid resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5944 [pid 5942] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5943 attached [pid 5942] close(3) = 0 [pid 5942] symlink("/dev/binderfs", "./binderfs" [pid 5943] chdir("./79" [pid 5942] <... symlink resumed>) = 0 [pid 5942] memfd_create("syzkaller", 0 [pid 5943] <... chdir resumed>) = 0 [pid 5942] <... memfd_create resumed>) = 3 [pid 5943] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5943] <... prctl resumed>) = 0 [pid 5943] setpgid(0, 0) = 0 [pid 5943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5944 attached [pid 5944] chdir("./77") = 0 [pid 5943] <... openat resumed>) = 3 [pid 5944] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5943] write(3, "1000", 4 [pid 5944] <... prctl resumed>) = 0 [pid 5943] <... write resumed>) = 4 [pid 5944] setpgid(0, 0 [pid 5943] close(3 [pid 5944] <... setpgid resumed>) = 0 [pid 5943] <... close resumed>) = 0 [pid 5944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5943] symlink("/dev/binderfs", "./binderfs" [pid 5935] <... pwritev resumed>) = 1114112 [pid 5944] <... openat resumed>) = 3 [pid 5943] <... symlink resumed>) = 0 [pid 5935] exit_group(0 [pid 5944] write(3, "1000", 4 [pid 5943] memfd_create("syzkaller", 0 [pid 5935] <... exit_group resumed>) = ? [pid 5944] <... write resumed>) = 4 [pid 5944] close(3) = 0 [pid 5944] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5944] memfd_create("syzkaller", 0) = 3 [pid 5944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5943] <... memfd_create resumed>) = 3 [pid 5944] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5934] <... pwritev resumed>) = 1114112 [pid 5934] exit_group(0) = ? [pid 5944] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5938] <... pwritev resumed>) = 1114112 [pid 5938] exit_group(0) = ? [pid 5943] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5934] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5934, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5942] <... write resumed>) = 2097152 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5944] <... write resumed>) = 2097152 [pid 5943] <... write resumed>) = 2097152 [pid 5935] +++ exited with 0 +++ [pid 5943] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5935, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5943] <... munmap resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5944] munmap(0x7f0ed4ac1000, 2097152 [pid 5943] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5942] munmap(0x7f0ed4ac1000, 2097152 [pid 5938] +++ exited with 0 +++ [pid 5001] <... openat resumed>) = 3 [pid 4998] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5943] <... openat resumed>) = 4 [pid 5942] <... munmap resumed>) = 0 [pid 5001] fstat(3, [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5938, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4998] <... openat resumed>) = 3 [pid 5944] <... munmap resumed>) = 0 [pid 5943] ioctl(4, LOOP_SET_FD, 3 [pid 5942] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 4998] fstat(3, [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] lstat("./76/binderfs", [pid 4998] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5944] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5943] <... ioctl resumed>) = 0 [pid 5942] <... openat resumed>) = 4 [pid 5001] unlink("./76/binderfs" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./76/binderfs", [pid 5944] <... openat resumed>) = 4 [pid 5943] close(3 [pid 5942] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... unlink resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 3 [pid 4998] unlink("./76/binderfs" [pid 4999] fstat(3, [pid 4998] <... unlink resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./76/binderfs") = 0 [pid 4999] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5944] ioctl(4, LOOP_SET_FD, 3 [pid 5943] <... close resumed>) = 0 [pid 5942] <... ioctl resumed>) = 0 [pid 5943] mkdir("./file0", 0777) = 0 [pid 5943] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5942] close(3) = 0 [pid 5942] mkdir("./file0", 0777 [pid 5944] <... ioctl resumed>) = 0 [pid 5942] <... mkdir resumed>) = 0 [pid 5942] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] <... umount2 resumed>) = 0 [pid 5944] close(3) = 0 [pid 5001] <... umount2 resumed>) = 0 [ 100.320491][ T5943] loop4: detected capacity change from 0 to 4096 [ 100.328623][ T5942] loop5: detected capacity change from 0 to 4096 [ 100.331563][ T5944] loop2: detected capacity change from 0 to 4096 [pid 5944] mkdir("./file0", 0777) = 0 [pid 5944] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./76/file0", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./76/file0", [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] lstat("./76/file0", [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... openat resumed>) = 4 [pid 4999] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... openat resumed>) = 4 [pid 5001] fstat(4, [pid 4999] <... openat resumed>) = 4 [pid 4998] fstat(4, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(4, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(4, [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4 [pid 5001] <... close resumed>) = 0 [pid 4999] close(4 [pid 4998] <... close resumed>) = 0 [pid 5001] rmdir("./76/file0" [pid 4999] <... close resumed>) = 0 [pid 4998] rmdir("./76/file0" [pid 5001] <... rmdir resumed>) = 0 [pid 4999] rmdir("./76/file0" [pid 4998] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 4999] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(3, [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 5001] <... close resumed>) = 0 [pid 4999] close(3 [pid 4998] <... close resumed>) = 0 [pid 5001] rmdir("./76" [pid 4999] <... close resumed>) = 0 [pid 4998] rmdir("./76" [pid 5001] <... rmdir resumed>) = 0 [pid 4999] rmdir("./76" [pid 4998] <... rmdir resumed>) = 0 [pid 5001] mkdir("./77", 0777 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] mkdir("./77", 0777 [pid 5001] <... mkdir resumed>) = 0 [pid 4999] mkdir("./77", 0777 [pid 4998] <... mkdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 5001] <... close resumed>) = 0 [pid 4999] close(3 [pid 4998] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5948 attached [pid 5944] <... mount resumed>) = 0 [pid 5943] <... mount resumed>) = 0 [pid 5942] <... mount resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5944] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5943] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5948 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5949 [pid 5944] <... openat resumed>) = 3 [pid 5943] <... openat resumed>) = 3 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5950 [pid 5944] chdir("./file0" [pid 5943] chdir("./file0" [pid 5944] <... chdir resumed>) = 0 [pid 5943] <... chdir resumed>) = 0 [pid 5944] ioctl(4, LOOP_CLR_FD [pid 5943] ioctl(4, LOOP_CLR_FD [pid 5944] <... ioctl resumed>) = 0 [pid 5943] <... ioctl resumed>) = 0 [pid 5944] close(4 [pid 5943] close(4 [pid 5944] <... close resumed>) = 0 [pid 5943] <... close resumed>) = 0 [pid 5944] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5943] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5944] <... openat resumed>) = 4 [pid 5943] <... openat resumed>) = 4 [pid 5944] unlink("./file1" [pid 5943] unlink("./file1"./strace-static-x86_64: Process 5949 attached [pid 5949] chdir("./77") = 0 [pid 5949] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5949] setpgid(0, 0) = 0 [pid 5949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5949] write(3, "1000", 4) = 4 [pid 5949] close(3) = 0 [pid 5949] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5948] chdir("./77" [pid 5942] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5949] memfd_create("syzkaller", 0 [pid 5948] <... chdir resumed>) = 0 [pid 5942] <... openat resumed>) = 3 [pid 5949] <... memfd_create resumed>) = 3 [pid 5949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5942] chdir("./file0" [pid 5948] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5942] <... chdir resumed>) = 0 [pid 5949] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5948] <... prctl resumed>) = 0 [pid 5942] ioctl(4, LOOP_CLR_FD [pid 5948] setpgid(0, 0 [pid 5942] <... ioctl resumed>) = 0 [pid 5942] close(4) = 0 [pid 5942] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5948] <... setpgid resumed>) = 0 [pid 5942] <... openat resumed>) = 4 [pid 5942] unlink("./file1" [pid 5948] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5948] write(3, "1000", 4) = 4 [pid 5948] close(3) = 0 [pid 5948] symlink("/dev/binderfs", "./binderfs" [pid 5943] <... unlink resumed>) = 0 [pid 5943] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0./strace-static-x86_64: Process 5950 attached [pid 5948] <... symlink resumed>) = 0 [pid 5950] chdir("./77" [pid 5948] memfd_create("syzkaller", 0 [pid 5942] <... unlink resumed>) = 0 [pid 5942] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5950] <... chdir resumed>) = 0 [pid 5948] <... memfd_create resumed>) = 3 [pid 5944] <... unlink resumed>) = 0 [pid 5950] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 100.391160][ T5945] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.406415][ T5946] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.417815][ T5947] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5944] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5950] <... prctl resumed>) = 0 [pid 5948] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5950] setpgid(0, 0) = 0 [pid 5950] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5950] write(3, "1000", 4) = 4 [pid 5950] close(3) = 0 [pid 5950] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5950] memfd_create("syzkaller", 0) = 3 [pid 5950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5949] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5950] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5948] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5950] <... write resumed>) = 2097152 [pid 5948] <... write resumed>) = 2097152 [pid 5949] <... write resumed>) = 2097152 [pid 5948] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5949] munmap(0x7f0ed4ac1000, 2097152 [pid 5950] munmap(0x7f0ed4ac1000, 2097152 [pid 5948] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5949] <... munmap resumed>) = 0 [pid 5948] ioctl(4, LOOP_SET_FD, 3 [pid 5949] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5949] ioctl(4, LOOP_SET_FD, 3 [pid 5950] <... munmap resumed>) = 0 [pid 5950] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5950] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5948] <... ioctl resumed>) = 0 [pid 5950] close(3 [pid 5948] close(3 [pid 5950] <... close resumed>) = 0 [pid 5948] <... close resumed>) = 0 [pid 5950] mkdir("./file0", 0777 [pid 5948] mkdir("./file0", 0777 [pid 5950] <... mkdir resumed>) = 0 [pid 5948] <... mkdir resumed>) = 0 [pid 5948] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5950] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5949] <... ioctl resumed>) = 0 [pid 5949] close(3) = 0 [pid 5949] mkdir("./file0", 0777) = 0 [ 100.550460][ T5948] loop3: detected capacity change from 0 to 4096 [ 100.552746][ T5949] loop0: detected capacity change from 0 to 4096 [ 100.565280][ T5950] loop1: detected capacity change from 0 to 4096 [pid 5949] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5950] <... mount resumed>) = 0 [pid 5950] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5948] <... mount resumed>) = 0 [pid 5950] <... openat resumed>) = 3 [pid 5948] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5943] <... pwritev resumed>) = 1114112 [pid 5950] chdir("./file0") = 0 [pid 5950] ioctl(4, LOOP_CLR_FD) = 0 [pid 5950] close(4) = 0 [pid 5950] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5948] <... openat resumed>) = 3 [pid 5949] <... mount resumed>) = 0 [pid 5950] <... openat resumed>) = 4 [pid 5949] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5950] unlink("./file1" [pid 5949] <... openat resumed>) = 3 [pid 5949] chdir("./file0") = 0 [pid 5949] ioctl(4, LOOP_CLR_FD) = 0 [pid 5949] close(4) = 0 [pid 5949] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5949] unlink("./file1" [pid 5944] <... pwritev resumed>) = 1114112 [pid 5944] exit_group(0 [pid 5943] exit_group(0 [pid 5948] chdir("./file0" [pid 5944] <... exit_group resumed>) = ? [pid 5943] <... exit_group resumed>) = ? [pid 5948] <... chdir resumed>) = 0 [pid 5948] ioctl(4, LOOP_CLR_FD [pid 5942] <... pwritev resumed>) = 1114112 [pid 5942] exit_group(0) = ? [pid 5950] <... unlink resumed>) = 0 [pid 5948] <... ioctl resumed>) = 0 [ 100.625407][ T5952] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.626006][ T5951] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.650312][ T5953] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5950] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5948] close(4 [pid 5949] <... unlink resumed>) = 0 [pid 5948] <... close resumed>) = 0 [pid 5944] +++ exited with 0 +++ [pid 5943] +++ exited with 0 +++ [pid 5949] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5948] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5943, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5942] +++ exited with 0 +++ [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5944, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5942, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5002] <... restart_syscall resumed>) = 0 [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5948] <... openat resumed>) = 4 [pid 5003] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5948] unlink("./file1" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5948] <... unlink resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5002] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5948] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] fstat(3, [pid 5002] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./77/binderfs") = 0 [pid 5000] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] fstat(3, [pid 5003] getdents64(3, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] getdents64(3, [pid 5003] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] lstat("./77/binderfs", [pid 5002] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] unlink("./77/binderfs" [pid 5002] lstat("./79/binderfs", [pid 5003] <... unlink resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] unlink("./79/binderfs") = 0 [pid 5002] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] lstat("./77/file0", [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./77/file0", [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] lstat("./79/file0", [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5950] <... pwritev resumed>) = 1114112 [pid 5003] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5950] exit_group(0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5950] <... exit_group resumed>) = ? [pid 5003] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... openat resumed>) = 4 [pid 5002] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 4 [pid 5003] fstat(4, [pid 5002] <... openat resumed>) = 4 [pid 5000] fstat(4, [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] fstat(4, [pid 5003] getdents64(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, [pid 5000] getdents64(4, [pid 5003] getdents64(4, [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] getdents64(4, [pid 5000] getdents64(4, [pid 5003] close(4 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] <... close resumed>) = 0 [pid 5002] close(4 [pid 5000] close(4 [pid 5003] rmdir("./77/file0" [pid 5002] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] rmdir("./79/file0" [pid 5000] rmdir("./77/file0" [pid 5003] getdents64(3, [pid 5002] <... rmdir resumed>) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] getdents64(3, [pid 5000] <... rmdir resumed>) = 0 [pid 5003] close(3 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(3, [pid 5003] <... close resumed>) = 0 [pid 5002] close(3 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] rmdir("./77" [pid 5002] <... close resumed>) = 0 [pid 5000] close(3 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] rmdir("./79" [pid 5003] mkdir("./78", 0777 [pid 5000] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] mkdir("./80", 0777 [pid 5000] rmdir("./77" [pid 5003] <... openat resumed>) = 3 [pid 5002] <... mkdir resumed>) = 0 [pid 5950] +++ exited with 0 +++ [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] <... rmdir resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... openat resumed>) = 3 [pid 5000] mkdir("./78", 0777 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5950, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5003] close(3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] <... mkdir resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./77/binderfs") = 0 [pid 4999] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5949] <... pwritev resumed>) = 1114112 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] close(3 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5949] exit_group(0 [pid 5002] <... close resumed>) = 0 ./strace-static-x86_64: Process 5954 attached [pid 5949] <... exit_group resumed>) = ? [pid 5948] <... pwritev resumed>) = 1114112 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5954 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... openat resumed>) = 3 [pid 5948] exit_group(0) = ? [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5955 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5954] chdir("./78" [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5956 [pid 5954] <... chdir resumed>) = 0 [pid 5954] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5954] setpgid(0, 0./strace-static-x86_64: Process 5956 attached ./strace-static-x86_64: Process 5955 attached ) = 0 [pid 5956] chdir("./78" [pid 5955] chdir("./80" [pid 5954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5956] <... chdir resumed>) = 0 [pid 5956] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5954] <... openat resumed>) = 3 [pid 5956] <... prctl resumed>) = 0 [pid 5955] <... chdir resumed>) = 0 [pid 5954] write(3, "1000", 4 [pid 5956] setpgid(0, 0 [pid 5954] <... write resumed>) = 4 [pid 5949] +++ exited with 0 +++ [pid 5955] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5949, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5956] <... setpgid resumed>) = 0 [pid 5955] <... prctl resumed>) = 0 [pid 5954] close(3 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5956] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5954] <... close resumed>) = 0 [pid 5955] setpgid(0, 0 [pid 4998] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5954] symlink("/dev/binderfs", "./binderfs" [pid 4998] fstat(3, [pid 5956] <... openat resumed>) = 3 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5954] <... symlink resumed>) = 0 [pid 5956] write(3, "1000", 4 [pid 4998] getdents64(3, [pid 5956] <... write resumed>) = 4 [pid 5954] memfd_create("syzkaller", 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5956] close(3 [pid 5954] <... memfd_create resumed>) = 3 [pid 4998] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5956] <... close resumed>) = 0 [pid 5954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5956] symlink("/dev/binderfs", "./binderfs" [pid 5955] <... setpgid resumed>) = 0 [pid 5954] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 4998] lstat("./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5956] <... symlink resumed>) = 0 [pid 4998] unlink("./77/binderfs" [pid 4999] <... umount2 resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5956] memfd_create("syzkaller", 0 [pid 4999] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5956] <... memfd_create resumed>) = 3 [pid 5955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] lstat("./77/file0", [pid 5955] <... openat resumed>) = 3 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5956] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5955] write(3, "1000", 4 [pid 4999] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./77/file0") = 0 [pid 5956] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5955] <... write resumed>) = 4 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 5955] close(3 [pid 4999] rmdir("./77" [pid 5955] <... close resumed>) = 0 [pid 5955] symlink("/dev/binderfs", "./binderfs" [pid 5954] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./78", 0777 [pid 5955] <... symlink resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5955] memfd_create("syzkaller", 0 [pid 4999] <... openat resumed>) = 3 [pid 5955] <... memfd_create resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5955] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5957 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./77/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./77"./strace-static-x86_64: Process 5957 attached ) = 0 [pid 5957] chdir("./78") = 0 [pid 4998] mkdir("./78", 0777 [pid 5957] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5948] +++ exited with 0 +++ [pid 5957] <... prctl resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5957] setpgid(0, 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5948, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5957] <... setpgid resumed>) = 0 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... restart_syscall resumed>) = 0 [pid 5957] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 5957] write(3, "1000", 4) = 4 [pid 5955] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5957] close(3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5957] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5957] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... openat resumed>) = 3 [pid 4998] close(3 [pid 5957] <... symlink resumed>) = 0 [pid 5001] fstat(3, [pid 4998] <... close resumed>) = 0 [pid 5957] memfd_create("syzkaller", 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5957] <... memfd_create resumed>) = 3 [pid 5001] getdents64(3, [pid 5957] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5958 [pid 5957] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5001] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./77/binderfs") = 0 [pid 5001] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5958 attached [pid 5958] chdir("./78") = 0 [pid 5958] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5958] setpgid(0, 0) = 0 [pid 5958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5957] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5958] <... openat resumed>) = 3 [pid 5958] write(3, "1000", 4) = 4 [pid 5958] close(3) = 0 [pid 5958] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5958] memfd_create("syzkaller", 0) = 3 [pid 5958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5958] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5956] <... write resumed>) = 2097152 [pid 5955] <... write resumed>) = 2097152 [pid 5954] <... write resumed>) = 2097152 [pid 5954] munmap(0x7f0ed4ac1000, 2097152 [pid 5956] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 5954] <... munmap resumed>) = 0 [pid 5956] <... munmap resumed>) = 0 [pid 5955] munmap(0x7f0ed4ac1000, 2097152 [pid 5954] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5956] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5955] <... munmap resumed>) = 0 [pid 5954] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5956] ioctl(4, LOOP_SET_FD, 3 [pid 5954] ioctl(4, LOOP_SET_FD, 3 [pid 5001] lstat("./77/file0", [pid 5955] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5957] <... write resumed>) = 2097152 [pid 5957] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5955] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5955] ioctl(4, LOOP_SET_FD, 3 [pid 5956] <... ioctl resumed>) = 0 [pid 5954] <... ioctl resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5957] <... munmap resumed>) = 0 [pid 5957] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5957] ioctl(4, LOOP_SET_FD, 3 [pid 5956] close(3 [pid 5955] <... ioctl resumed>) = 0 [pid 5954] close(3 [pid 5001] fstat(4, [pid 5956] <... close resumed>) = 0 [pid 5955] close(3 [pid 5954] <... close resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5958] <... write resumed>) = 2097152 [pid 5957] <... ioctl resumed>) = 0 [pid 5956] mkdir("./file0", 0777 [pid 5955] <... close resumed>) = 0 [pid 5954] mkdir("./file0", 0777 [pid 5001] getdents64(4, [pid 5958] munmap(0x7f0ed4ac1000, 2097152 [pid 5957] close(3 [pid 5956] <... mkdir resumed>) = 0 [pid 5955] mkdir("./file0", 0777 [pid 5954] <... mkdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5958] <... munmap resumed>) = 0 [pid 5956] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5955] <... mkdir resumed>) = 0 [pid 5954] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] getdents64(4, [pid 5958] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5955] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5958] <... openat resumed>) = 4 [pid 5001] close(4 [pid 5958] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./77/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./77") = 0 [pid 5001] mkdir("./78", 0777 [pid 5957] <... close resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5957] mkdir("./file0", 0777 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5957] <... mkdir resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5957] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5958] <... ioctl resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5961 [pid 5958] close(3) = 0 [pid 5958] mkdir("./file0", 0777) = 0 [pid 5958] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, ""./strace-static-x86_64: Process 5961 attached [pid 5961] chdir("./78") = 0 [pid 5961] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5961] setpgid(0, 0) = 0 [pid 5961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5961] write(3, "1000", 4) = 4 [pid 5961] close(3) = 0 [pid 5961] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5961] memfd_create("syzkaller", 0) = 3 [pid 5961] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [ 101.047216][ T5956] loop2: detected capacity change from 0 to 4096 [ 101.054000][ T5954] loop5: detected capacity change from 0 to 4096 [ 101.062402][ T5955] loop4: detected capacity change from 0 to 4096 [ 101.066938][ T5957] loop1: detected capacity change from 0 to 4096 [ 101.088765][ T5958] loop0: detected capacity change from 0 to 4096 [pid 5954] <... mount resumed>) = 0 [pid 5954] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5954] chdir("./file0") = 0 [pid 5954] ioctl(4, LOOP_CLR_FD) = 0 [pid 5954] close(4) = 0 [pid 5954] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5954] unlink("./file1" [pid 5957] <... mount resumed>) = 0 [pid 5955] <... mount resumed>) = 0 [pid 5958] <... mount resumed>) = 0 [pid 5957] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 101.114814][ T5960] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.130915][ T5959] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.138915][ T5963] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.147927][ T5962] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5955] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5961] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5958] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5957] <... openat resumed>) = 3 [pid 5955] <... openat resumed>) = 3 [pid 5958] chdir("./file0" [pid 5957] chdir("./file0" [pid 5955] chdir("./file0" [pid 5958] <... chdir resumed>) = 0 [pid 5957] <... chdir resumed>) = 0 [pid 5958] ioctl(4, LOOP_CLR_FD [pid 5955] <... chdir resumed>) = 0 [pid 5957] ioctl(4, LOOP_CLR_FD [pid 5958] <... ioctl resumed>) = 0 [pid 5957] <... ioctl resumed>) = 0 [pid 5956] <... mount resumed>) = 0 [pid 5955] ioctl(4, LOOP_CLR_FD [pid 5958] close(4 [pid 5957] close(4 [pid 5955] <... ioctl resumed>) = 0 [pid 5958] <... close resumed>) = 0 [pid 5957] <... close resumed>) = 0 [pid 5958] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5957] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5955] close(4 [pid 5958] <... openat resumed>) = 4 [pid 5957] <... openat resumed>) = 4 [pid 5956] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5955] <... close resumed>) = 0 [pid 5957] unlink("./file1" [pid 5956] <... openat resumed>) = 3 [pid 5955] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5958] unlink("./file1" [pid 5956] chdir("./file0") = 0 [pid 5955] <... openat resumed>) = 4 [pid 5956] ioctl(4, LOOP_CLR_FD) = 0 [pid 5955] unlink("./file1" [pid 5956] close(4) = 0 [pid 5956] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5958] <... unlink resumed>) = 0 [pid 5957] <... unlink resumed>) = 0 [pid 5956] <... openat resumed>) = 4 [pid 5955] <... unlink resumed>) = 0 [pid 5954] <... unlink resumed>) = 0 [pid 5958] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5957] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5956] unlink("./file1" [pid 5955] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 101.153181][ T5964] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5954] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5956] <... unlink resumed>) = 0 [pid 5956] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5961] <... write resumed>) = 2097152 [pid 5961] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5961] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5961] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5961] close(3) = 0 [pid 5961] mkdir("./file0", 0777) = 0 [ 101.254983][ T5961] loop3: detected capacity change from 0 to 4096 [pid 5961] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 5961] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5961] chdir("./file0") = 0 [pid 5961] ioctl(4, LOOP_CLR_FD) = 0 [pid 5961] close(4) = 0 [pid 5961] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 101.329425][ T5965] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5961] unlink("./file1" [pid 5954] <... pwritev resumed>) = 1114112 [pid 5954] exit_group(0) = ? [pid 5958] <... pwritev resumed>) = 1114112 [pid 5955] <... pwritev resumed>) = 1114112 [pid 5958] exit_group(0 [pid 5955] exit_group(0 [pid 5958] <... exit_group resumed>) = ? [pid 5955] <... exit_group resumed>) = ? [pid 5957] <... pwritev resumed>) = 1114112 [pid 5957] exit_group(0) = ? [pid 5961] <... unlink resumed>) = 0 [pid 5961] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5957] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5957, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5954] +++ exited with 0 +++ [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5954, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4999] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... restart_syscall resumed>) = 0 [pid 4999] lstat("./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./78/binderfs" [pid 5003] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... unlink resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5956] <... pwritev resumed>) = 1114112 [pid 5003] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5956] exit_group(0 [pid 5003] <... openat resumed>) = 3 [pid 5958] +++ exited with 0 +++ [pid 5956] <... exit_group resumed>) = ? [pid 5003] fstat(3, [pid 4999] <... umount2 resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5958, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5961] <... pwritev resumed>) = 1114112 [pid 5003] getdents64(3, [pid 5961] exit_group(0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5961] <... exit_group resumed>) = ? [pid 5003] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./78/binderfs") = 0 [pid 5003] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./78/binderfs") = 0 [pid 4998] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./78/file0", [pid 5003] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5003] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, [pid 4999] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./78/file0") = 0 [pid 4999] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, [pid 5961] +++ exited with 0 +++ [pid 5955] +++ exited with 0 +++ [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5955, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5961, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] close(3) = 0 [pid 4999] getdents64(4, [pid 5003] rmdir("./78" [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] getdents64(4, [pid 5003] mkdir("./79", 0777 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 4999] close(4 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./78/file0") = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(3, [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5956] +++ exited with 0 +++ [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 4999] close(3 [pid 5003] close(3 [pid 5002] fstat(3, [pid 5001] fstat(3, [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5956, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5003] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] rmdir("./78") = 0 [pid 4998] lstat("./78/file0", [pid 4999] mkdir("./79", 0777) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... openat resumed>) = 4 [pid 4999] close(3) = 0 [pid 4998] fstat(4, [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] getdents64(3, [pid 5001] getdents64(3, [pid 5000] <... restart_syscall resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5966 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5967 [pid 5002] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(4, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./78/file0") = 0 [pid 4998] getdents64(3, [pid 5002] lstat("./80/binderfs", [pid 5001] lstat("./78/binderfs", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] close(3./strace-static-x86_64: Process 5967 attached [pid 5002] unlink("./80/binderfs" [pid 5001] unlink("./78/binderfs" [pid 5000] <... openat resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 5967] chdir("./79" [pid 5002] <... unlink resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5000] fstat(3, [pid 4998] rmdir("./78" [pid 5967] <... chdir resumed>) = 0 [pid 5002] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5967] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] getdents64(3, [pid 4998] mkdir("./79", 0777 [pid 5967] <... prctl resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] <... mkdir resumed>) = 0 [pid 5967] setpgid(0, 0 [pid 5000] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5967] <... setpgid resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 3 [pid 5967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5967] <... openat resumed>) = 3 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5967] write(3, "1000", 4 [pid 4998] close(3 [pid 5967] <... write resumed>) = 4 [pid 4998] <... close resumed>) = 0 [pid 5967] close(3 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5967] <... close resumed>) = 0 [pid 5967] symlink("/dev/binderfs", "./binderfs" [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5968 [pid 5967] <... symlink resumed>) = 0 [pid 5967] memfd_create("syzkaller", 0) = 3 [pid 5967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5000] lstat("./78/binderfs", ./strace-static-x86_64: Process 5966 attached [pid 5967] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 5968 attached [pid 5966] chdir("./79" [pid 5000] unlink("./78/binderfs" [pid 5966] <... chdir resumed>) = 0 [pid 5966] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... unlink resumed>) = 0 [pid 5966] <... prctl resumed>) = 0 [pid 5000] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5966] setpgid(0, 0 [pid 5968] chdir("./79") = 0 [pid 5968] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5968] setpgid(0, 0) = 0 [pid 5968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5968] write(3, "1000", 4) = 4 [pid 5968] close(3) = 0 [pid 5968] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5968] memfd_create("syzkaller", 0) = 3 [pid 5968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5966] <... setpgid resumed>) = 0 [pid 5966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5966] write(3, "1000", 4) = 4 [pid 5966] close(3) = 0 [pid 5966] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5966] memfd_create("syzkaller", 0) = 3 [pid 5001] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = 0 [pid 5001] lstat("./78/file0", [pid 5002] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./80/file0", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] fstat(4, [pid 5002] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5001] getdents64(4, [pid 5000] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] fstat(4, [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, [pid 5000] lstat("./78/file0", [pid 5002] getdents64(4, [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] close(4 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 5001] <... close resumed>) = 0 [pid 5000] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] rmdir("./78/file0" [pid 5968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] close(4 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... close resumed>) = 0 [pid 5001] getdents64(3, [pid 5000] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5966] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] rmdir("./80/file0" [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5001] close(3 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] fstat(4, [pid 5002] getdents64(3, [pid 5001] rmdir("./78" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5002] close(3 [pid 5000] getdents64(4, [pid 5002] <... close resumed>) = 0 [pid 5001] mkdir("./79", 0777 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] rmdir("./80" [pid 5001] <... mkdir resumed>) = 0 [pid 5000] getdents64(4, [pid 5002] <... rmdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] mkdir("./81", 0777 [pid 5001] <... openat resumed>) = 3 [pid 5000] close(4 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] <... close resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] rmdir("./78/file0" [pid 5002] <... openat resumed>) = 3 [pid 5001] close(3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] <... close resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] getdents64(3, [pid 5002] close(3 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5969 attached [pid 5968] <... write resumed>) = 2097152 [pid 5966] <... write resumed>) = 2097152 [pid 5002] <... close resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5969 [pid 5000] close(3 [pid 5969] chdir("./79" [pid 5966] munmap(0x7f0ed4ac1000, 2097152 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... close resumed>) = 0 [pid 5969] <... chdir resumed>) = 0 [pid 5969] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] rmdir("./78"./strace-static-x86_64: Process 5970 attached [pid 5969] <... prctl resumed>) = 0 [pid 5968] munmap(0x7f0ed4ac1000, 2097152 [pid 5967] <... write resumed>) = 2097152 [pid 5966] <... munmap resumed>) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5970 [pid 5000] <... rmdir resumed>) = 0 [pid 5969] setpgid(0, 0 [pid 5967] munmap(0x7f0ed4ac1000, 2097152 [pid 5966] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] mkdir("./79", 0777 [pid 5970] chdir("./81" [pid 5969] <... setpgid resumed>) = 0 [pid 5967] <... munmap resumed>) = 0 [pid 5966] <... openat resumed>) = 4 [pid 5000] <... mkdir resumed>) = 0 [pid 5969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5970] <... chdir resumed>) = 0 [pid 5967] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5966] ioctl(4, LOOP_SET_FD, 3 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5969] <... openat resumed>) = 3 [pid 5968] <... munmap resumed>) = 0 [pid 5968] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5968] ioctl(4, LOOP_SET_FD, 3 [pid 5970] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5969] write(3, "1000", 4 [pid 5967] <... openat resumed>) = 4 [pid 5966] <... ioctl resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5970] <... prctl resumed>) = 0 [pid 5969] <... write resumed>) = 4 [pid 5967] ioctl(4, LOOP_SET_FD, 3 [pid 5966] close(3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5970] setpgid(0, 0 [pid 5969] close(3 [pid 5968] <... ioctl resumed>) = 0 [pid 5968] close(3) = 0 [pid 5968] mkdir("./file0", 0777) = 0 [pid 5968] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5966] <... close resumed>) = 0 [pid 5969] <... close resumed>) = 0 [pid 5966] mkdir("./file0", 0777 [pid 5970] <... setpgid resumed>) = 0 [pid 5969] symlink("/dev/binderfs", "./binderfs" [pid 5967] <... ioctl resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5970] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5969] <... symlink resumed>) = 0 [pid 5967] close(3 [pid 5000] close(3 [pid 5970] write(3, "1000", 4 [pid 5969] memfd_create("syzkaller", 0 [pid 5967] <... close resumed>) = 0 [pid 5966] <... mkdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5970] <... write resumed>) = 4 [pid 5969] <... memfd_create resumed>) = 3 [pid 5967] mkdir("./file0", 0777 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5970] close(3 [pid 5969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5970] <... close resumed>) = 0 [pid 5970] symlink("/dev/binderfs", "./binderfs" [pid 5969] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5970] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 5971 attached [pid 5971] chdir("./79") = 0 [pid 5971] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5970] memfd_create("syzkaller", 0 [pid 5967] <... mkdir resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5971 [pid 5970] <... memfd_create resumed>) = 3 [pid 5967] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5971] setpgid(0, 0 [pid 5970] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5971] <... setpgid resumed>) = 0 [pid 5971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5971] write(3, "1000", 4) = 4 [pid 5971] close(3) = 0 [pid 5971] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5971] memfd_create("syzkaller", 0) = 3 [ 101.707505][ T5966] loop5: detected capacity change from 0 to 4096 [ 101.711167][ T5968] loop0: detected capacity change from 0 to 4096 [ 101.715011][ T5967] loop1: detected capacity change from 0 to 4096 [pid 5971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5970] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5966] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5971] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5968] <... mount resumed>) = 0 [pid 5968] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5968] chdir("./file0") = 0 [pid 5968] ioctl(4, LOOP_CLR_FD) = 0 [pid 5968] close(4) = 0 [pid 5968] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5968] unlink("./file1" [pid 5971] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5967] <... mount resumed>) = 0 [pid 5967] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5967] chdir("./file0") = 0 [pid 5969] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5967] ioctl(4, LOOP_CLR_FD) = 0 [pid 5967] close(4) = 0 [pid 5967] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5967] unlink("./file1" [pid 5968] <... unlink resumed>) = 0 [pid 5968] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5969] <... write resumed>) = 2097152 [ 101.750941][ T5972] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.776923][ T5973] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5966] <... mount resumed>) = 0 [pid 5966] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5966] chdir("./file0") = 0 [pid 5966] ioctl(4, LOOP_CLR_FD) = 0 [pid 5966] close(4) = 0 [pid 5966] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5966] unlink("./file1" [pid 5970] <... write resumed>) = 2097152 [pid 5970] munmap(0x7f0ed4ac1000, 2097152 [pid 5969] munmap(0x7f0ed4ac1000, 2097152 [pid 5967] <... unlink resumed>) = 0 [pid 5969] <... munmap resumed>) = 0 [pid 5967] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5971] <... write resumed>) = 2097152 [pid 5969] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5970] <... munmap resumed>) = 0 [pid 5970] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5969] <... openat resumed>) = 4 [pid 5970] <... openat resumed>) = 4 [pid 5969] ioctl(4, LOOP_SET_FD, 3 [pid 5971] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5971] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 101.815301][ T5974] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.855055][ T5969] loop3: detected capacity change from 0 to 4096 [pid 5971] ioctl(4, LOOP_SET_FD, 3 [pid 5970] ioctl(4, LOOP_SET_FD, 3 [pid 5971] <... ioctl resumed>) = 0 [pid 5971] close(3) = 0 [pid 5971] mkdir("./file0", 0777) = 0 [pid 5971] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5966] <... unlink resumed>) = 0 [pid 5966] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5970] <... ioctl resumed>) = 0 [pid 5969] <... ioctl resumed>) = 0 [pid 5970] close(3 [pid 5969] close(3 [pid 5970] <... close resumed>) = 0 [pid 5969] <... close resumed>) = 0 [pid 5970] mkdir("./file0", 0777 [pid 5969] mkdir("./file0", 0777 [pid 5970] <... mkdir resumed>) = 0 [pid 5970] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5969] <... mkdir resumed>) = 0 [ 101.859302][ T5971] loop2: detected capacity change from 0 to 4096 [ 101.868773][ T5970] loop4: detected capacity change from 0 to 4096 [pid 5969] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5970] <... mount resumed>) = 0 [pid 5970] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5971] <... mount resumed>) = 0 [pid 5970] <... openat resumed>) = 3 [pid 5969] <... mount resumed>) = 0 [pid 5969] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5971] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5970] chdir("./file0" [pid 5969] <... openat resumed>) = 3 [pid 5970] <... chdir resumed>) = 0 [pid 5969] chdir("./file0" [pid 5971] <... openat resumed>) = 3 [pid 5970] ioctl(4, LOOP_CLR_FD [pid 5969] <... chdir resumed>) = 0 [pid 5970] <... ioctl resumed>) = 0 [pid 5969] ioctl(4, LOOP_CLR_FD [pid 5970] close(4 [pid 5971] chdir("./file0" [pid 5969] <... ioctl resumed>) = 0 [pid 5970] <... close resumed>) = 0 [pid 5971] <... chdir resumed>) = 0 [pid 5971] ioctl(4, LOOP_CLR_FD) = 0 [pid 5971] close(4) = 0 [pid 5971] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5969] close(4 [pid 5970] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5971] <... openat resumed>) = 4 [pid 5969] <... close resumed>) = 0 [pid 5971] unlink("./file1" [pid 5970] <... openat resumed>) = 4 [pid 5969] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5970] unlink("./file1" [pid 5969] <... openat resumed>) = 4 [pid 5969] unlink("./file1" [pid 5968] <... pwritev resumed>) = 1114112 [pid 5968] exit_group(0) = ? [ 101.930068][ T5977] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.942966][ T5975] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.953934][ T5976] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5971] <... unlink resumed>) = 0 [pid 5971] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5967] <... pwritev resumed>) = 1114112 [pid 5969] <... unlink resumed>) = 0 [pid 5969] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5967] exit_group(0 [pid 5970] <... unlink resumed>) = 0 [pid 5967] <... exit_group resumed>) = ? [pid 5970] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5968] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5968, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4998] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./79/binderfs") = 0 [pid 4998] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 4998] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./79/file0", [pid 5966] <... pwritev resumed>) = 1114112 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5966] exit_group(0) = ? [pid 4998] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5967] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5967, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5969] <... pwritev resumed>) = 1114112 [pid 4998] <... openat resumed>) = 4 [pid 4999] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] exit_group(0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] fstat(4, [pid 5969] <... exit_group resumed>) = ? [pid 4999] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 4998] getdents64(4, [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./79/binderfs", [pid 4998] getdents64(4, [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./79/binderfs") = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(4 [pid 5969] +++ exited with 0 +++ [pid 5966] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5966, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5969, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 4999] <... umount2 resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4999] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] rmdir("./79/file0" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... rmdir resumed>) = 0 [pid 5003] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] lstat("./79/file0", [pid 4998] getdents64(3, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(3 [pid 5003] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... close resumed>) = 0 [pid 5003] fstat(3, [pid 5001] fstat(3, [pid 4999] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] rmdir("./79" [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... openat resumed>) = 4 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] getdents64(3, [pid 5001] getdents64(3, [pid 4999] fstat(4, [pid 4998] mkdir("./80", 0777 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5003] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(4, [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] <... openat resumed>) = 3 [pid 5003] lstat("./79/binderfs", [pid 5001] lstat("./79/binderfs", [pid 4999] getdents64(4, [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] unlink("./79/binderfs" [pid 5001] unlink("./79/binderfs" [pid 4999] close(4 [pid 4998] close(3 [pid 5003] <... unlink resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5001] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./79/file0" [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5978 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./79") = 0 [pid 5003] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] mkdir("./80", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5979 ./strace-static-x86_64: Process 5979 attached [pid 5979] chdir("./80") = 0 [pid 5979] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5979] setpgid(0, 0) = 0 [pid 5979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5971] <... pwritev resumed>) = 1114112 [pid 5971] exit_group(0) = ? ./strace-static-x86_64: Process 5978 attached [pid 5979] <... openat resumed>) = 3 [pid 5970] <... pwritev resumed>) = 1114112 [pid 5001] <... umount2 resumed>) = 0 [pid 5978] chdir("./80" [pid 5970] exit_group(0 [pid 5001] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5978] <... chdir resumed>) = 0 [pid 5970] <... exit_group resumed>) = ? [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5978] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] lstat("./79/file0", [pid 5978] <... prctl resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5978] setpgid(0, 0 [pid 5001] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5979] write(3, "1000", 4 [pid 5978] <... setpgid resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5979] <... write resumed>) = 4 [pid 5978] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5979] close(3 [pid 5978] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 4 [pid 5979] <... close resumed>) = 0 [pid 5978] write(3, "1000", 4 [pid 5001] fstat(4, [pid 5979] symlink("/dev/binderfs", "./binderfs" [pid 5978] <... write resumed>) = 4 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5979] <... symlink resumed>) = 0 [pid 5978] close(3 [pid 5001] getdents64(4, [pid 5979] memfd_create("syzkaller", 0 [pid 5978] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5979] <... memfd_create resumed>) = 3 [pid 5978] symlink("/dev/binderfs", "./binderfs" [pid 5001] getdents64(4, [pid 5979] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5978] <... symlink resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5979] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5978] memfd_create("syzkaller", 0 [pid 5001] close(4 [pid 5978] <... memfd_create resumed>) = 3 [pid 5001] <... close resumed>) = 0 [pid 5978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] rmdir("./79/file0" [pid 5978] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./79") = 0 [pid 5001] mkdir("./80", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5980 [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5980 attached [pid 5980] chdir("./80" [pid 5003] lstat("./79/file0", [pid 5980] <... chdir resumed>) = 0 [pid 5980] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5980] setpgid(0, 0) = 0 [pid 5980] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] <... openat resumed>) = 3 [pid 5980] write(3, "1000", 4 [pid 5979] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5978] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5980] <... write resumed>) = 4 [pid 5003] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5980] close(3) = 0 [pid 5980] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5003] <... openat resumed>) = 4 [pid 5980] memfd_create("syzkaller", 0) = 3 [pid 5003] fstat(4, [pid 5980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./79/file0" [pid 5970] +++ exited with 0 +++ [pid 5003] <... rmdir resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5970, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5003] getdents64(3, [pid 5002] <... restart_syscall resumed>) = 0 [pid 5002] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, [pid 5003] close(3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5980] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5978] <... write resumed>) = 2097152 [pid 5971] +++ exited with 0 +++ [pid 5003] <... close resumed>) = 0 [pid 5002] getdents64(3, [pid 5979] <... write resumed>) = 2097152 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5979] munmap(0x7f0ed4ac1000, 2097152 [pid 5002] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5971, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5979] <... munmap resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./81/binderfs", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] unlink("./81/binderfs" [pid 5000] <... openat resumed>) = 3 [pid 5002] <... unlink resumed>) = 0 [pid 5000] fstat(3, [pid 5979] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5979] <... openat resumed>) = 4 [pid 5003] rmdir("./79" [pid 5002] <... umount2 resumed>) = 0 [pid 5000] getdents64(3, [pid 5979] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5980] <... write resumed>) = 2097152 [pid 5979] <... ioctl resumed>) = 0 [pid 5978] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] munmap(0x7f0ed4ac1000, 2097152 [pid 5979] close(3 [pid 5978] <... munmap resumed>) = 0 [pid 5003] mkdir("./80", 0777 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5980] <... munmap resumed>) = 0 [pid 5979] <... close resumed>) = 0 [pid 5978] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... mkdir resumed>) = 0 [pid 5002] lstat("./81/file0", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5980] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] lstat("./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./79/binderfs") = 0 [pid 5000] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5979] mkdir("./file0", 0777 [pid 5978] <... openat resumed>) = 4 [pid 5980] <... openat resumed>) = 4 [pid 5978] ioctl(4, LOOP_SET_FD, 3 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] ioctl(4, LOOP_SET_FD, 3 [pid 5979] <... mkdir resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5979] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5978] <... ioctl resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5978] close(3 [pid 5000] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5978] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5978] mkdir("./file0", 0777 [pid 5000] lstat("./79/file0", [pid 5978] <... mkdir resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5978] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] <... ioctl resumed>) = 0 [pid 5979] <... mount resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5979] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5979] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 4 [pid 5979] chdir("./file0" [pid 5000] fstat(4, [pid 5979] <... chdir resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5979] ioctl(4, LOOP_CLR_FD [pid 5000] getdents64(4, [pid 5979] <... ioctl resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5979] close(4 [pid 5000] getdents64(4, [pid 5980] close(3 [pid 5979] <... close resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... openat resumed>) = 4 [pid 5980] <... close resumed>) = 0 [pid 5979] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] close(3 [pid 5002] fstat(4, [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5980] mkdir("./file0", 0777 [pid 5979] <... openat resumed>) = 4 [pid 5003] <... close resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] close(4 [pid 5980] <... mkdir resumed>) = 0 [pid 5979] unlink("./file1" [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] getdents64(4, [pid 5000] <... close resumed>) = 0 [pid 5980] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5979] <... unlink resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] rmdir("./79/file0" [pid 5979] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5983 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./81/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./81") = 0 [pid 5002] mkdir("./82", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] getdents64(3, [pid 5002] close(3 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] close(3./strace-static-x86_64: Process 5983 attached [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... close resumed>) = 0 [pid 5978] <... mount resumed>) = 0 [ 102.346331][ T5979] loop1: detected capacity change from 0 to 4096 [ 102.359386][ T5978] loop0: detected capacity change from 0 to 4096 [ 102.374757][ T5980] loop3: detected capacity change from 0 to 4096 [ 102.382541][ T5981] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] rmdir("./79" [pid 5978] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5985 [pid 5000] <... rmdir resumed>) = 0 [pid 5978] <... openat resumed>) = 3 [pid 5000] mkdir("./80", 0777 [pid 5978] chdir("./file0" [pid 5000] <... mkdir resumed>) = 0 [pid 5978] <... chdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5978] ioctl(4, LOOP_CLR_FD [pid 5000] <... openat resumed>) = 3 [pid 5978] <... ioctl resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5978] close(4 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5978] <... close resumed>) = 0 [pid 5000] close(3 [pid 5978] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] <... close resumed>) = 0 [pid 5978] <... openat resumed>) = 4 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5983] chdir("./80" [pid 5978] unlink("./file1" [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5986 [pid 5983] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5985 attached [pid 5985] chdir("./82" [pid 5983] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5985] <... chdir resumed>) = 0 [pid 5983] <... prctl resumed>) = 0 [pid 5980] <... mount resumed>) = 0 [pid 5985] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5980] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5985] <... prctl resumed>) = 0 [pid 5980] <... openat resumed>) = 3 [pid 5985] setpgid(0, 0 [pid 5980] chdir("./file0" [pid 5985] <... setpgid resumed>) = 0 [pid 5980] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5986 attached [pid 5985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5980] ioctl(4, LOOP_CLR_FD [pid 5986] chdir("./80" [pid 5985] <... openat resumed>) = 3 [pid 5980] <... ioctl resumed>) = 0 [pid 5986] <... chdir resumed>) = 0 [pid 5985] write(3, "1000", 4 [pid 5980] close(4 [pid 5986] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5985] <... write resumed>) = 4 [pid 5980] <... close resumed>) = 0 [pid 5986] <... prctl resumed>) = 0 [pid 5985] close(3 [pid 5980] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5986] setpgid(0, 0 [pid 5985] <... close resumed>) = 0 [pid 5980] <... openat resumed>) = 4 [pid 5986] <... setpgid resumed>) = 0 [pid 5985] symlink("/dev/binderfs", "./binderfs" [pid 5980] unlink("./file1" [pid 5986] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5985] <... symlink resumed>) = 0 [pid 5983] setpgid(0, 0 [pid 5986] <... openat resumed>) = 3 [pid 5985] memfd_create("syzkaller", 0 [pid 5983] <... setpgid resumed>) = 0 [pid 5986] write(3, "1000", 4 [pid 5985] <... memfd_create resumed>) = 3 [pid 5983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5986] <... write resumed>) = 4 [pid 5985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5983] <... openat resumed>) = 3 [pid 5986] close(3 [pid 5985] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5983] write(3, "1000", 4 [pid 5986] <... close resumed>) = 0 [pid 5983] <... write resumed>) = 4 [pid 5986] symlink("/dev/binderfs", "./binderfs" [pid 5983] close(3 [pid 5986] <... symlink resumed>) = 0 [pid 5983] <... close resumed>) = 0 [pid 5986] memfd_create("syzkaller", 0 [pid 5983] symlink("/dev/binderfs", "./binderfs" [pid 5986] <... memfd_create resumed>) = 3 [pid 5983] <... symlink resumed>) = 0 [pid 5986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5985] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5983] memfd_create("syzkaller", 0) = 3 [pid 5983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5978] <... unlink resumed>) = 0 [ 102.425394][ T5982] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.440066][ T5984] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5983] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5978] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5980] <... unlink resumed>) = 0 [pid 5980] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5983] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5983] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5986] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5983] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5983] ioctl(4, LOOP_SET_FD, 3 [pid 5986] <... write resumed>) = 2097152 [pid 5983] <... ioctl resumed>) = 0 [pid 5986] munmap(0x7f0ed4ac1000, 2097152 [pid 5983] close(3) = 0 [pid 5986] <... munmap resumed>) = 0 [pid 5983] mkdir("./file0", 0777 [pid 5986] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5983] <... mkdir resumed>) = 0 [pid 5986] ioctl(4, LOOP_SET_FD, 3 [pid 5983] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5985] <... write resumed>) = 2097152 [pid 5985] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5985] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5985] ioctl(4, LOOP_SET_FD, 3 [pid 5979] <... pwritev resumed>) = 1114112 [pid 5979] exit_group(0) = ? [pid 5985] <... ioctl resumed>) = 0 [pid 5985] close(3) = 0 [pid 5985] mkdir("./file0", 0777) = 0 [pid 5985] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5986] <... ioctl resumed>) = 0 [pid 5986] close(3) = 0 [pid 5986] mkdir("./file0", 0777) = 0 [ 102.569216][ T5983] loop5: detected capacity change from 0 to 4096 [ 102.585291][ T5986] loop2: detected capacity change from 0 to 4096 [ 102.595363][ T5985] loop4: detected capacity change from 0 to 4096 [pid 5986] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5983] <... mount resumed>) = 0 [pid 5983] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5983] chdir("./file0") = 0 [pid 5980] <... pwritev resumed>) = 1114112 [pid 5983] ioctl(4, LOOP_CLR_FD) = 0 [pid 5980] exit_group(0 [pid 5983] close(4 [pid 5980] <... exit_group resumed>) = ? [pid 5983] <... close resumed>) = 0 [pid 5985] <... mount resumed>) = 0 [pid 5985] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5985] chdir("./file0") = 0 [pid 5983] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5985] ioctl(4, LOOP_CLR_FD) = 0 [pid 5983] <... openat resumed>) = 4 [pid 5985] close(4) = 0 [pid 5985] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5983] unlink("./file1" [pid 5985] <... openat resumed>) = 4 [pid 5985] unlink("./file1" [pid 5978] <... pwritev resumed>) = 1114112 [pid 5978] exit_group(0) = ? [pid 5986] <... mount resumed>) = 0 [ 102.632585][ T5987] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.664664][ T5988] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5986] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5986] chdir("./file0") = 0 [pid 5986] ioctl(4, LOOP_CLR_FD) = 0 [pid 5986] close(4) = 0 [pid 5986] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5986] unlink("./file1" [pid 5985] <... unlink resumed>) = 0 [pid 5985] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5979] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5979, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5983] <... unlink resumed>) = 0 [pid 5983] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5986] <... unlink resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5986] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] <... openat resumed>) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [ 102.692199][ T5989] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./80/binderfs") = 0 [pid 4999] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] +++ exited with 0 +++ [pid 4999] <... umount2 resumed>) = 0 [pid 5978] +++ exited with 0 +++ [pid 4999] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5980, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5978, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5001] <... restart_syscall resumed>) = 0 [pid 4999] lstat("./80/file0", [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... restart_syscall resumed>) = 0 [pid 4999] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... openat resumed>) = 3 [pid 4999] fstat(4, [pid 4998] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] fstat(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 4998] fstat(3, [pid 5001] getdents64(3, [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] getdents64(4, [pid 4998] getdents64(3, [pid 5001] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] close(4 [pid 4998] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] lstat("./80/binderfs", [pid 4999] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] rmdir("./80/file0" [pid 4998] lstat("./80/binderfs", [pid 5001] unlink("./80/binderfs" [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] unlink("./80/binderfs" [pid 5001] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, [pid 4998] <... unlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] close(3) = 0 [pid 4999] rmdir("./80") = 0 [pid 4999] mkdir("./81", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5990 ./strace-static-x86_64: Process 5990 attached [pid 5990] chdir("./81") = 0 [pid 5990] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5990] setpgid(0, 0) = 0 [pid 5990] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5990] write(3, "1000", 4) = 4 [pid 5990] close(3) = 0 [pid 5990] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5990] memfd_create("syzkaller", 0) = 3 [pid 5990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 5990] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] lstat("./80/file0", [pid 5001] <... openat resumed>) = 4 [pid 5983] <... pwritev resumed>) = 1114112 [pid 5001] fstat(4, [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5983] exit_group(0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5986] <... pwritev resumed>) = 1114112 [pid 5983] <... exit_group resumed>) = ? [pid 5001] getdents64(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5990] <... write resumed>) = 2097152 [pid 5986] exit_group(0 [pid 5985] <... pwritev resumed>) = 1114112 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] getdents64(4, [pid 4998] <... openat resumed>) = 4 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] fstat(4, [pid 5986] <... exit_group resumed>) = ? [pid 5985] exit_group(0 [pid 5001] close(4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... close resumed>) = 0 [pid 4998] getdents64(4, [pid 5001] rmdir("./80/file0" [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] getdents64(4, [pid 5001] getdents64(3, [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(4 [pid 5001] close(3 [pid 4998] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4998] rmdir("./80/file0" [pid 5001] rmdir("./80" [pid 4998] <... rmdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5001] mkdir("./81", 0777 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 4998] close(3 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] <... close resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 4998] rmdir("./80" [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4998] <... rmdir resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] mkdir("./81", 0777 [pid 5001] close(3 [pid 4998] <... mkdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5991 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 5992 [pid 5990] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5990] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5985] <... exit_group resumed>) = ? [pid 5990] <... openat resumed>) = 4 [pid 5990] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5990] close(3) = 0 [pid 5990] mkdir("./file0", 0777) = 0 [pid 5990] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, ""./strace-static-x86_64: Process 5992 attached ./strace-static-x86_64: Process 5991 attached [pid 5992] chdir("./81" [pid 5991] chdir("./81" [pid 5992] <... chdir resumed>) = 0 [pid 5991] <... chdir resumed>) = 0 [pid 5992] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5991] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5992] setpgid(0, 0 [pid 5991] <... prctl resumed>) = 0 [pid 5992] <... setpgid resumed>) = 0 [pid 5991] setpgid(0, 0) = 0 [pid 5991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5991] <... openat resumed>) = 3 [pid 5992] write(3, "1000", 4 [pid 5991] write(3, "1000", 4 [pid 5992] <... write resumed>) = 4 [pid 5991] <... write resumed>) = 4 [pid 5992] close(3 [pid 5991] close(3 [pid 5992] <... close resumed>) = 0 [pid 5991] <... close resumed>) = 0 [pid 5992] symlink("/dev/binderfs", "./binderfs" [pid 5991] symlink("/dev/binderfs", "./binderfs" [pid 5992] <... symlink resumed>) = 0 [pid 5991] <... symlink resumed>) = 0 [pid 5985] +++ exited with 0 +++ [pid 5992] memfd_create("syzkaller", 0 [pid 5991] memfd_create("syzkaller", 0 [pid 5992] <... memfd_create resumed>) = 3 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5985, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5991] <... memfd_create resumed>) = 3 [pid 5992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5991] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5992] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5991] <... mmap resumed>) = 0x7f0ed4ac1000 [ 102.931425][ T5990] loop1: detected capacity change from 0 to 4096 [ 102.969264][ T5985] syz-executor477 (5985) used greatest stack depth: 21520 bytes left [pid 5990] <... mount resumed>) = 0 [pid 5990] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5990] chdir("./file0") = 0 [pid 5002] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5990] ioctl(4, LOOP_CLR_FD [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5990] <... ioctl resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5990] close(4) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5990] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] fstat(3, [pid 5992] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5991] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5990] <... openat resumed>) = 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5990] unlink("./file1" [pid 5986] +++ exited with 0 +++ [pid 5992] <... write resumed>) = 2097152 [pid 5992] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5992] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 102.982378][ T5993] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5992] ioctl(4, LOOP_SET_FD, 3 [pid 5991] <... write resumed>) = 2097152 [pid 5983] +++ exited with 0 +++ [pid 5002] getdents64(3, [pid 5992] <... ioctl resumed>) = 0 [pid 5992] close(3 [pid 5991] munmap(0x7f0ed4ac1000, 2097152 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5986, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5002] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5992] <... close resumed>) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5983, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... restart_syscall resumed>) = 0 [pid 5992] mkdir("./file0", 0777 [pid 5003] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./82/binderfs", [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5992] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] unlink("./82/binderfs" [pid 5000] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5992] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] <... openat resumed>) = 3 [pid 5002] <... unlink resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] fstat(3, [pid 5002] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5991] <... munmap resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5003] getdents64(3, [pid 5000] fstat(3, [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./80/binderfs" [pid 5991] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5990] <... unlink resumed>) = 0 [pid 5003] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... unlink resumed>) = 0 [pid 5991] <... openat resumed>) = 4 [pid 5990] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5991] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... umount2 resumed>) = 0 [pid 5003] lstat("./80/binderfs", [pid 5991] <... ioctl resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5991] close(3 [pid 5002] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5991] <... close resumed>) = 0 [pid 5003] unlink("./80/binderfs" [pid 5991] mkdir("./file0", 0777 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5992] <... mount resumed>) = 0 [pid 5991] <... mkdir resumed>) = 0 [pid 5002] lstat("./82/file0", [pid 5003] <... unlink resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5992] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5991] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5992] <... openat resumed>) = 3 [pid 5002] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5992] chdir("./file0" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5992] <... chdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5992] ioctl(4, LOOP_CLR_FD) = 0 [pid 5002] <... openat resumed>) = 4 [ 103.029380][ T5992] loop0: detected capacity change from 0 to 4096 [ 103.062570][ T5994] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.073445][ T5991] loop3: detected capacity change from 0 to 4096 [pid 5992] close(4 [pid 5002] fstat(4, [pid 5992] <... close resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5992] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5992] <... openat resumed>) = 4 [pid 5002] getdents64(4, [pid 5992] unlink("./file1" [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 5992] <... unlink resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5992] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] rmdir("./82/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 5991] <... mount resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5991] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5991] chdir("./file0") = 0 [pid 5002] rmdir("./82" [pid 5000] <... umount2 resumed>) = 0 [pid 5991] ioctl(4, LOOP_CLR_FD) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5991] close(4 [pid 5003] <... umount2 resumed>) = 0 [pid 5002] mkdir("./83", 0777 [pid 5991] <... close resumed>) = 0 [pid 5991] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... mkdir resumed>) = 0 [pid 5991] <... openat resumed>) = 4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5991] unlink("./file1" [pid 5003] lstat("./80/file0", [pid 5002] <... openat resumed>) = 3 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5003] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] close(3 [pid 5003] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... close resumed>) = 0 [pid 5003] <... openat resumed>) = 4 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5996 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] close(4) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5996 attached [pid 5003] rmdir("./80/file0") = 0 [pid 5000] lstat("./80/file0", [pid 5996] chdir("./83" [pid 5003] getdents64(3, [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5996] <... chdir resumed>) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5996] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] close(3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5996] <... prctl resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5996] setpgid(0, 0 [pid 5003] rmdir("./80" [pid 5000] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5991] <... unlink resumed>) = 0 [pid 5996] <... setpgid resumed>) = 0 [pid 5991] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5990] <... pwritev resumed>) = 1114112 [pid 5003] <... rmdir resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5996] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5990] exit_group(0 [pid 5003] mkdir("./81", 0777 [pid 5000] fstat(4, [pid 5996] <... openat resumed>) = 3 [pid 5990] <... exit_group resumed>) = ? [pid 5003] <... mkdir resumed>) = 0 [ 103.133463][ T5995] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5996] write(3, "1000", 4 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] getdents64(4, [pid 5003] <... openat resumed>) = 3 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5000] getdents64(4, [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5996] <... write resumed>) = 4 [pid 5003] close(3 [pid 5000] close(4 [pid 5996] close(3 [pid 5003] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5996] <... close resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] rmdir("./80/file0" [pid 5996] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... rmdir resumed>) = 0 [pid 5996] <... symlink resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5997 [pid 5000] getdents64(3, [pid 5996] memfd_create("syzkaller", 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5997 attached [pid 5996] <... memfd_create resumed>) = 3 [pid 5000] close(3 [pid 5997] chdir("./81" [pid 5996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] <... close resumed>) = 0 [pid 5997] <... chdir resumed>) = 0 [pid 5996] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5000] rmdir("./80") = 0 [pid 5000] mkdir("./81", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5997] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5997] <... prctl resumed>) = 0 [pid 5997] setpgid(0, 0 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 5998 [pid 5997] <... setpgid resumed>) = 0 [pid 5997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5997] write(3, "1000", 4) = 4 [pid 5997] close(3./strace-static-x86_64: Process 5998 attached ) = 0 [pid 5998] chdir("./81" [pid 5997] symlink("/dev/binderfs", "./binderfs" [pid 5998] <... chdir resumed>) = 0 [pid 5997] <... symlink resumed>) = 0 [pid 5996] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5998] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5997] memfd_create("syzkaller", 0 [pid 5998] <... prctl resumed>) = 0 [pid 5997] <... memfd_create resumed>) = 3 [pid 5998] setpgid(0, 0 [pid 5997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5998] <... setpgid resumed>) = 0 [pid 5997] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5998] write(3, "1000", 4) = 4 [pid 5998] close(3) = 0 [pid 5998] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5998] memfd_create("syzkaller", 0) = 3 [pid 5998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5997] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5990] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5990, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5992] <... pwritev resumed>) = 1114112 [pid 4999] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5992] exit_group(0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5996] <... write resumed>) = 2097152 [pid 5992] <... exit_group resumed>) = ? [pid 4999] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5996] munmap(0x7f0ed4ac1000, 2097152 [pid 4999] <... openat resumed>) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./81/binderfs") = 0 [pid 4999] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5996] <... munmap resumed>) = 0 [pid 5996] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5996] ioctl(4, LOOP_SET_FD, 3 [pid 5997] <... write resumed>) = 2097152 [pid 4999] <... umount2 resumed>) = 0 [pid 5998] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5997] munmap(0x7f0ed4ac1000, 2097152 [pid 4999] <... openat resumed>) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5997] <... munmap resumed>) = 0 [pid 5996] <... ioctl resumed>) = 0 [pid 5997] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5996] close(3 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5997] <... openat resumed>) = 4 [pid 5992] +++ exited with 0 +++ [pid 4999] getdents64(4, [pid 5997] ioctl(4, LOOP_SET_FD, 3 [pid 5996] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5998] <... write resumed>) = 2097152 [pid 4999] close(4 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5992, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4999] <... close resumed>) = 0 [pid 4998] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5996] mkdir("./file0", 0777 [pid 4999] rmdir("./81/file0" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5996] <... mkdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5996] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] getdents64(3, [pid 4998] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] fstat(3, [pid 4999] close(3 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] getdents64(3, [pid 4999] rmdir("./81" [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5997] <... ioctl resumed>) = 0 [pid 4999] mkdir("./82", 0777 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5997] close(3 [pid 4999] <... mkdir resumed>) = 0 [pid 4998] lstat("./81/binderfs", [pid 5997] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4998] unlink("./81/binderfs" [pid 5997] mkdir("./file0", 0777 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] <... unlink resumed>) = 0 [pid 5997] <... mkdir resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5998] munmap(0x7f0ed4ac1000, 2097152 [pid 5997] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] close(3 [pid 5998] <... munmap resumed>) = 0 [pid 5998] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 103.307314][ T5996] loop4: detected capacity change from 0 to 4096 [ 103.329630][ T5997] loop5: detected capacity change from 0 to 4096 [pid 5998] ioctl(4, LOOP_SET_FD, 3 [pid 5991] <... pwritev resumed>) = 1114112 [pid 5997] <... mount resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5997] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5991] exit_group(0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... umount2 resumed>) = 0 [pid 5997] <... openat resumed>) = 3 [pid 5991] <... exit_group resumed>) = ? [pid 4998] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6001 attached [pid 5998] <... ioctl resumed>) = 0 [pid 5997] chdir("./file0" [pid 6001] chdir("./82" [pid 5998] close(3 [pid 6001] <... chdir resumed>) = 0 [pid 5998] <... close resumed>) = 0 [pid 6001] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5998] mkdir("./file0", 0777 [pid 6001] <... prctl resumed>) = 0 [pid 5998] <... mkdir resumed>) = 0 [pid 6001] setpgid(0, 0) = 0 [pid 5998] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6001] write(3, "1000", 4) = 4 [pid 6001] close(3) = 0 [pid 6001] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6001] memfd_create("syzkaller", 0) = 3 [pid 6001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5997] <... chdir resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6001 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5997] ioctl(4, LOOP_CLR_FD [pid 5996] <... mount resumed>) = 0 [pid 4998] lstat("./81/file0", [pid 5997] <... ioctl resumed>) = 0 [pid 5996] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5997] close(4 [pid 5996] <... openat resumed>) = 3 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5996] chdir("./file0" [pid 5997] <... close resumed>) = 0 [pid 5996] <... chdir resumed>) = 0 [pid 4998] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5997] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5996] ioctl(4, LOOP_CLR_FD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5997] <... openat resumed>) = 4 [pid 5996] <... ioctl resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5997] unlink("./file1" [pid 5996] close(4 [pid 4998] <... openat resumed>) = 4 [pid 5997] <... unlink resumed>) = 0 [pid 4998] fstat(4, [pid 5997] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5996] <... close resumed>) = 0 [pid 4998] getdents64(4, [pid 5996] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5996] <... openat resumed>) = 4 [pid 4998] close(4 [pid 5996] unlink("./file1" [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./81/file0" [pid 5996] <... unlink resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5996] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./81") = 0 [pid 4998] mkdir("./82", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6003 ./strace-static-x86_64: Process 6003 attached [pid 6003] chdir("./82") = 0 [ 103.376621][ T6000] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.384296][ T5998] loop2: detected capacity change from 0 to 4096 [ 103.393700][ T5999] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6001] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6003] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6003] setpgid(0, 0) = 0 [pid 6003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6003] write(3, "1000", 4) = 4 [pid 6003] close(3) = 0 [pid 6003] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6003] memfd_create("syzkaller", 0) = 3 [pid 6003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5998] <... mount resumed>) = 0 [pid 5998] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5998] chdir("./file0") = 0 [pid 5998] ioctl(4, LOOP_CLR_FD) = 0 [pid 5998] close(4) = 0 [pid 5998] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5998] unlink("./file1" [pid 6003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5991] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5991, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5001] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6001] <... write resumed>) = 2097152 [pid 5001] getdents64(3, [pid 6001] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [ 103.462768][ T6002] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6001] <... munmap resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./81/binderfs", [pid 6001] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6001] <... openat resumed>) = 4 [pid 5001] unlink("./81/binderfs" [pid 6001] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... unlink resumed>) = 0 [pid 5001] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5998] <... unlink resumed>) = 0 [pid 5998] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6003] <... write resumed>) = 2097152 [pid 6001] <... ioctl resumed>) = 0 [pid 6003] munmap(0x7f0ed4ac1000, 2097152 [pid 6001] close(3 [pid 6003] <... munmap resumed>) = 0 [pid 6001] <... close resumed>) = 0 [pid 5997] <... pwritev resumed>) = 1114112 [pid 6003] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6001] mkdir("./file0", 0777 [pid 6003] <... openat resumed>) = 4 [pid 6001] <... mkdir resumed>) = 0 [pid 5997] exit_group(0 [pid 6003] ioctl(4, LOOP_SET_FD, 3 [pid 6001] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5997] <... exit_group resumed>) = ? [pid 6003] <... ioctl resumed>) = 0 [pid 6003] close(3) = 0 [pid 6003] mkdir("./file0", 0777) = 0 [pid 6003] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [ 103.535960][ T6001] loop1: detected capacity change from 0 to 4096 [ 103.569999][ T6003] loop0: detected capacity change from 0 to 4096 [pid 5001] close(4) = 0 [pid 5001] rmdir("./81/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./81") = 0 [pid 5001] mkdir("./82", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6006 ./strace-static-x86_64: Process 6006 attached [pid 6006] chdir("./82") = 0 [pid 6006] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6006] setpgid(0, 0) = 0 [pid 6006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6006] write(3, "1000", 4) = 4 [pid 6006] close(3) = 0 [pid 6006] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6006] memfd_create("syzkaller", 0) = 3 [pid 6006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6003] <... mount resumed>) = 0 [pid 6003] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6003] chdir("./file0") = 0 [pid 6003] ioctl(4, LOOP_CLR_FD) = 0 [pid 6003] close(4) = 0 [pid 6003] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6001] <... mount resumed>) = 0 [pid 6003] <... openat resumed>) = 4 [pid 6001] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6003] unlink("./file1" [pid 6001] <... openat resumed>) = 3 [pid 6001] chdir("./file0") = 0 [pid 6001] ioctl(4, LOOP_CLR_FD) = 0 [pid 6001] close(4) = 0 [pid 6001] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6001] unlink("./file1" [pid 6003] <... unlink resumed>) = 0 [ 103.599798][ T6005] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.610771][ T6004] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6003] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5997] +++ exited with 0 +++ [pid 5996] <... pwritev resumed>) = 1114112 [pid 5996] exit_group(0) = ? [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5997, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6001] <... unlink resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6001] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] <... openat resumed>) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./81/binderfs") = 0 [pid 5003] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6006] <... write resumed>) = 2097152 [pid 6006] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6006] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6006] ioctl(4, LOOP_SET_FD, 3 [pid 5003] lstat("./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4 [pid 5996] +++ exited with 0 +++ [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./81/file0" [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5996, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5003] <... rmdir resumed>) = 0 [pid 5002] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] getdents64(3, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6006] <... ioctl resumed>) = 0 [pid 6006] close(3) = 0 [pid 6006] mkdir("./file0", 0777) = 0 [pid 6006] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] <... openat resumed>) = 3 [pid 5003] close(3 [pid 5002] fstat(3, [pid 5003] <... close resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] rmdir("./81" [pid 5002] getdents64(3, [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] mkdir("./82", 0777 [pid 5002] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] <... mkdir resumed>) = 0 [pid 5002] lstat("./83/binderfs", [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./83/binderfs" [pid 5003] <... openat resumed>) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] <... unlink resumed>) = 0 [ 103.738214][ T6006] loop3: detected capacity change from 0 to 4096 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6007 attached [pid 6007] chdir("./82") = 0 [pid 6007] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6007] setpgid(0, 0) = 0 [pid 6007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6007] write(3, "1000", 4) = 4 [pid 6007] close(3) = 0 [pid 6007] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6007] memfd_create("syzkaller", 0) = 3 [pid 6007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6007 [pid 5998] <... pwritev resumed>) = 1114112 [pid 5998] exit_group(0) = ? [pid 6003] <... pwritev resumed>) = 1114112 [pid 6003] exit_group(0 [pid 6006] <... mount resumed>) = 0 [pid 6003] <... exit_group resumed>) = ? [pid 6006] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6006] chdir("./file0") = 0 [pid 6006] ioctl(4, LOOP_CLR_FD) = 0 [pid 6006] close(4) = 0 [pid 6006] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6006] unlink("./file1" [pid 6007] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6006] <... unlink resumed>) = 0 [pid 6006] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6003] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6003, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 4998] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6007] <... write resumed>) = 2097152 [pid 4998] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6007] munmap(0x7f0ed4ac1000, 2097152 [pid 4998] <... openat resumed>) = 3 [pid 5002] lstat("./83/file0", [pid 5998] +++ exited with 0 +++ [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6007] <... munmap resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5998, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4998] fstat(3, [pid 6007] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6007] <... openat resumed>) = 4 [ 103.820662][ T6008] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6007] ioctl(4, LOOP_SET_FD, 3 [pid 4998] getdents64(3, [pid 5002] <... openat resumed>) = 4 [pid 5000] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./83/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./83") = 0 [pid 5002] mkdir("./84", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 6007] <... ioctl resumed>) = 0 [pid 6001] <... pwritev resumed>) = 1114112 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6007] close(3 [pid 6001] exit_group(0 [pid 5002] close(3 [pid 6007] <... close resumed>) = 0 [pid 6001] <... exit_group resumed>) = ? [pid 5002] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6007] mkdir("./file0", 0777 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6007] <... mkdir resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4998] lstat("./82/binderfs", [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6009 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 6009 attached [pid 6009] chdir("./84") = 0 [pid 6009] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6009] setpgid(0, 0) = 0 [pid 6009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6009] write(3, "1000", 4) = 4 [pid 6009] close(3) = 0 [pid 6009] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6009] memfd_create("syzkaller", 0) = 3 [pid 6009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6007] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] fstat(3, [pid 4998] unlink("./82/binderfs" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 4998] <... unlink resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./81/binderfs") = 0 [ 103.882587][ T6007] loop5: detected capacity change from 0 to 4096 [pid 5000] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 6007] <... mount resumed>) = 0 [pid 6007] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6007] chdir("./file0") = 0 [pid 6007] ioctl(4, LOOP_CLR_FD [pid 5000] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6007] <... ioctl resumed>) = 0 [pid 4998] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] lstat("./81/file0", [pid 6007] close(4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6007] <... close resumed>) = 0 [pid 5000] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] lstat("./82/file0", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6007] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] <... openat resumed>) = 4 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6007] <... openat resumed>) = 4 [pid 6009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6007] unlink("./file1" [pid 5000] getdents64(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5000] rmdir("./81/file0" [pid 4998] fstat(4, [pid 5000] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./81" [pid 4998] getdents64(4, [pid 6007] <... unlink resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6007] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] mkdir("./82", 0777 [pid 4998] getdents64(4, [pid 5000] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6001] +++ exited with 0 +++ [pid 4998] close(4 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6011 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6001, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./82/file0") = 0 [ 103.954804][ T6010] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 4999] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] rmdir("./82"./strace-static-x86_64: Process 6011 attached [pid 4999] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... rmdir resumed>) = 0 [pid 6011] chdir("./82") = 0 [pid 6009] <... write resumed>) = 2097152 [pid 4999] <... openat resumed>) = 3 [pid 4998] mkdir("./83", 0777 [pid 6011] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] fstat(3, [pid 6011] <... prctl resumed>) = 0 [pid 6011] setpgid(0, 0) = 0 [pid 6011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 4999] getdents64(3, [pid 6011] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6011] write(3, "1000", 4 [pid 4999] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6011] <... write resumed>) = 4 [pid 4998] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6011] close(3 [pid 4999] lstat("./82/binderfs", [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6011] <... close resumed>) = 0 [pid 6011] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6011] <... symlink resumed>) = 0 [pid 4999] unlink("./82/binderfs" [pid 4998] close(3 [pid 6011] memfd_create("syzkaller", 0) = 3 [pid 6006] <... pwritev resumed>) = 1114112 [pid 4999] <... unlink resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 6011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6006] exit_group(0 [pid 4999] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6006] <... exit_group resumed>) = ? [pid 6009] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6009] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6009] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6012 attached [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6012 [pid 6012] chdir("./83" [pid 6011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6012] <... chdir resumed>) = 0 [pid 6012] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6012] setpgid(0, 0) = 0 [pid 6012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6012] write(3, "1000", 4) = 4 [pid 6012] close(3) = 0 [pid 6012] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6012] memfd_create("syzkaller", 0) = 3 [pid 6012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 4999] <... umount2 resumed>) = 0 [pid 6009] <... ioctl resumed>) = 0 [pid 6009] close(3) = 0 [pid 6009] mkdir("./file0", 0777) = 0 [pid 4999] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6009] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6006] +++ exited with 0 +++ [pid 4999] getdents64(4, [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6006, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5001] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] getdents64(4, [pid 5001] fstat(3, [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 4999] close(4 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] rmdir("./82/file0" [ 104.056884][ T6009] loop4: detected capacity change from 0 to 4096 [pid 5001] unlink("./82/binderfs") = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5001] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, [pid 6009] <... mount resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6009] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] close(3 [pid 6009] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 6011] <... write resumed>) = 2097152 [pid 6009] chdir("./file0" [pid 4999] rmdir("./82" [pid 6011] munmap(0x7f0ed4ac1000, 2097152 [pid 6009] <... chdir resumed>) = 0 [pid 6011] <... munmap resumed>) = 0 [pid 6009] ioctl(4, LOOP_CLR_FD [pid 4999] <... rmdir resumed>) = 0 [pid 6009] <... ioctl resumed>) = 0 [pid 6009] close(4 [pid 4999] mkdir("./83", 0777 [pid 6012] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6009] <... close resumed>) = 0 [pid 6011] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6009] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6011] <... openat resumed>) = 4 [pid 6009] <... openat resumed>) = 4 [pid 4999] <... mkdir resumed>) = 0 [pid 6011] ioctl(4, LOOP_SET_FD, 3 [pid 6009] unlink("./file1" [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6014 ./strace-static-x86_64: Process 6014 attached [pid 6014] chdir("./83") = 0 [pid 6014] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6014] setpgid(0, 0 [pid 6011] <... ioctl resumed>) = 0 [pid 6011] close(3) = 0 [pid 6011] mkdir("./file0", 0777 [pid 6014] <... setpgid resumed>) = 0 [pid 6014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6011] <... mkdir resumed>) = 0 [pid 6011] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6014] write(3, "1000", 4) = 4 [pid 6014] close(3) = 0 [pid 6014] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... umount2 resumed>) = 0 [pid 6014] <... symlink resumed>) = 0 [pid 6012] <... write resumed>) = 2097152 [pid 6014] memfd_create("syzkaller", 0) = 3 [pid 6014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6012] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6009] <... unlink resumed>) = 0 [ 104.121078][ T6013] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.146272][ T6011] loop2: detected capacity change from 0 to 4096 [pid 6009] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6007] <... pwritev resumed>) = 1114112 [pid 5001] <... openat resumed>) = 4 [pid 5001] fstat(4, [pid 6007] exit_group(0) = ? [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./82/file0" [pid 6012] <... munmap resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./82") = 0 [pid 5001] mkdir("./83", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 6012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6012] <... openat resumed>) = 4 [pid 6012] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6016 ./strace-static-x86_64: Process 6016 attached [pid 6016] chdir("./83") = 0 [pid 6016] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6016] setpgid(0, 0) = 0 [pid 6016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6016] write(3, "1000", 4) = 4 [pid 6016] close(3) = 0 [pid 6016] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6016] memfd_create("syzkaller", 0) = 3 [pid 6016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6011] <... mount resumed>) = 0 [pid 6011] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6011] chdir("./file0") = 0 [pid 6011] ioctl(4, LOOP_CLR_FD) = 0 [pid 6011] close(4) = 0 [pid 6011] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6011] unlink("./file1" [pid 6012] <... ioctl resumed>) = 0 [pid 6012] close(3) = 0 [pid 6012] mkdir("./file0", 0777) = 0 [pid 6016] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6012] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6007] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6007, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5003] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6011] <... unlink resumed>) = 0 [pid 5003] getdents64(3, [ 104.229755][ T6012] loop0: detected capacity change from 0 to 4096 [ 104.239252][ T6015] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6011] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6016] <... write resumed>) = 2097152 [pid 6012] <... mount resumed>) = 0 [pid 5003] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6012] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6012] <... openat resumed>) = 3 [pid 5003] lstat("./82/binderfs", [pid 6012] chdir("./file0" [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6012] <... chdir resumed>) = 0 [pid 5003] unlink("./82/binderfs" [pid 6012] ioctl(4, LOOP_CLR_FD [pid 5003] <... unlink resumed>) = 0 [pid 6012] <... ioctl resumed>) = 0 [pid 5003] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6012] close(4) = 0 [pid 6012] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6014] <... write resumed>) = 2097152 [pid 6012] <... openat resumed>) = 4 [pid 5003] <... umount2 resumed>) = 0 [pid 6012] unlink("./file1" [pid 5003] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6012] <... unlink resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 104.290492][ T6017] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6012] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6016] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] lstat("./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6014] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6014] <... munmap resumed>) = 0 [pid 5003] <... openat resumed>) = 4 [pid 6016] <... munmap resumed>) = 0 [pid 5003] fstat(4, [pid 6016] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6016] ioctl(4, LOOP_SET_FD, 3 [pid 6014] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] getdents64(4, [pid 6014] <... openat resumed>) = 4 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6014] ioctl(4, LOOP_SET_FD, 3 [pid 5003] getdents64(4, [pid 6011] <... pwritev resumed>) = 1114112 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4 [pid 6011] exit_group(0) = ? [pid 5003] <... close resumed>) = 0 [pid 6016] <... ioctl resumed>) = 0 [pid 6016] close(3) = 0 [pid 6016] mkdir("./file0", 0777) = 0 [pid 6014] <... ioctl resumed>) = 0 [pid 6014] close(3) = 0 [pid 6014] mkdir("./file0", 0777) = 0 [pid 6016] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] rmdir("./82/file0" [pid 6014] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] <... rmdir resumed>) = 0 [pid 6009] <... pwritev resumed>) = 1114112 [pid 6009] exit_group(0 [pid 5003] getdents64(3, [pid 6009] <... exit_group resumed>) = ? [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./82") = 0 [pid 5003] mkdir("./83", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6018 ./strace-static-x86_64: Process 6018 attached [pid 6018] chdir("./83") = 0 [pid 6018] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6018] setpgid(0, 0) = 0 [ 104.379718][ T6016] loop3: detected capacity change from 0 to 4096 [ 104.387541][ T6014] loop1: detected capacity change from 0 to 4096 [pid 6018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6016] <... mount resumed>) = 0 [pid 6016] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6018] write(3, "1000", 4 [pid 6016] <... openat resumed>) = 3 [pid 6018] <... write resumed>) = 4 [pid 6016] chdir("./file0") = 0 [pid 6018] close(3 [pid 6016] ioctl(4, LOOP_CLR_FD) = 0 [pid 6016] close(4 [pid 6018] <... close resumed>) = 0 [pid 6016] <... close resumed>) = 0 [pid 6016] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6018] symlink("/dev/binderfs", "./binderfs" [pid 6016] <... openat resumed>) = 4 [pid 6014] <... mount resumed>) = 0 [pid 6018] <... symlink resumed>) = 0 [pid 6016] unlink("./file1" [pid 6014] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6009] +++ exited with 0 +++ [pid 6011] +++ exited with 0 +++ [pid 6018] memfd_create("syzkaller", 0 [pid 6014] <... openat resumed>) = 3 [pid 6014] chdir("./file0" [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6009, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6011, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6018] <... memfd_create resumed>) = 3 [pid 6014] <... chdir resumed>) = 0 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 6014] ioctl(4, LOOP_CLR_FD [pid 5002] <... restart_syscall resumed>) = 0 [pid 5000] <... restart_syscall resumed>) = 0 [pid 6018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6014] <... ioctl resumed>) = 0 [pid 6018] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6014] close(4) = 0 [pid 5002] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6014] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6014] <... openat resumed>) = 4 [pid 5002] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6014] unlink("./file1" [pid 5002] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 5000] fstat(3, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5000] getdents64(3, [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./84/binderfs", [pid 5000] lstat("./82/binderfs", [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./84/binderfs" [pid 5000] unlink("./82/binderfs" [pid 5002] <... unlink resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 5002] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [ 104.450198][ T6020] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.452076][ T6019] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./84/file0", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] lstat("./82/file0", [pid 5002] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6014] <... unlink resumed>) = 0 [pid 6012] <... pwritev resumed>) = 1114112 [pid 5002] fstat(4, [pid 5000] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6018] <... write resumed>) = 2097152 [pid 6016] <... unlink resumed>) = 0 [pid 6014] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6012] exit_group(0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... openat resumed>) = 4 [pid 6018] munmap(0x7f0ed4ac1000, 2097152 [pid 6016] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6012] <... exit_group resumed>) = ? [pid 5002] getdents64(4, [pid 5000] fstat(4, [pid 6018] <... munmap resumed>) = 0 [pid 6012] +++ exited with 0 +++ [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6018] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6012, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5002] getdents64(4, [pid 6018] <... openat resumed>) = 4 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 6018] ioctl(4, LOOP_SET_FD, 3 [pid 5002] close(4) = 0 [pid 5002] rmdir("./84/file0" [pid 5000] getdents64(4, [pid 4998] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] close(4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 5002] getdents64(3, [pid 4998] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] rmdir("./82/file0" [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] fstat(3, [pid 5002] close(3 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 5002] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] getdents64(3, [pid 5002] rmdir("./84" [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] close(3 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4998] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] mkdir("./85", 0777 [pid 5000] rmdir("./82" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... rmdir resumed>) = 0 [pid 4998] lstat("./83/binderfs", [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] mkdir("./83", 0777 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4998] unlink("./83/binderfs" [pid 5002] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] <... openat resumed>) = 3 [pid 4998] <... unlink resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4998] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5000] close(3 [pid 5002] <... close resumed>) = 0 [pid 6018] <... ioctl resumed>) = 0 [pid 6018] close(3) = 0 [pid 6018] mkdir("./file0", 0777 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... close resumed>) = 0 [pid 6018] <... mkdir resumed>) = 0 [pid 6018] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6021 ./strace-static-x86_64: Process 6021 attached [pid 6021] chdir("./85") = 0 [pid 6021] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6021] setpgid(0, 0) = 0 [pid 6021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6022 ./strace-static-x86_64: Process 6022 attached [pid 6021] <... openat resumed>) = 3 [pid 6021] write(3, "1000", 4) = 4 [pid 6021] close(3) = 0 [ 104.567646][ T6018] loop5: detected capacity change from 0 to 4096 [pid 6021] symlink("/dev/binderfs", "./binderfs" [pid 6022] chdir("./83" [pid 4998] <... umount2 resumed>) = 0 [pid 6022] <... chdir resumed>) = 0 [pid 6021] <... symlink resumed>) = 0 [pid 6022] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6021] memfd_create("syzkaller", 0 [pid 4998] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6022] <... prctl resumed>) = 0 [pid 6021] <... memfd_create resumed>) = 3 [pid 6021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6022] setpgid(0, 0 [pid 6021] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6022] <... setpgid resumed>) = 0 [pid 4998] lstat("./83/file0", [pid 6022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6022] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6022] write(3, "1000", 4 [pid 4998] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6022] <... write resumed>) = 4 [pid 6022] close(3 [pid 4998] <... openat resumed>) = 4 [pid 6022] <... close resumed>) = 0 [pid 4998] fstat(4, [pid 6022] symlink("/dev/binderfs", "./binderfs" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6022] <... symlink resumed>) = 0 [pid 4998] getdents64(4, [pid 6016] <... pwritev resumed>) = 1114112 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6022] memfd_create("syzkaller", 0 [pid 6016] exit_group(0 [pid 6022] <... memfd_create resumed>) = 3 [pid 4998] getdents64(4, [pid 6022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6016] <... exit_group resumed>) = ? [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6022] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6018] <... mount resumed>) = 0 [pid 4998] close(4 [pid 6018] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6018] chdir("./file0") = 0 [pid 6018] ioctl(4, LOOP_CLR_FD) = 0 [pid 6018] close(4) = 0 [pid 6018] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6018] unlink("./file1" [pid 4998] <... close resumed>) = 0 [pid 6021] <... write resumed>) = 2097152 [pid 6021] munmap(0x7f0ed4ac1000, 2097152 [pid 4998] rmdir("./83/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./83" [pid 6021] <... munmap resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./84", 0777) = 0 [pid 6021] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6021] ioctl(4, LOOP_SET_FD, 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6024 [pid 6018] <... unlink resumed>) = 0 [pid 6018] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6022] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 6024 attached [pid 6024] chdir("./84") = 0 [pid 6024] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6024] setpgid(0, 0) = 0 [pid 6024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6024] write(3, "1000", 4) = 4 [pid 6024] close(3) = 0 [pid 6024] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6024] memfd_create("syzkaller", 0) = 3 [pid 6024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6014] <... pwritev resumed>) = 1114112 [ 104.660701][ T6023] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.697209][ T6021] loop4: detected capacity change from 0 to 4096 [pid 6016] +++ exited with 0 +++ [pid 6014] exit_group(0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6016, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6014] <... exit_group resumed>) = ? [pid 5001] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 6021] <... ioctl resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6021] close(3 [pid 5001] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6021] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6021] mkdir("./file0", 0777 [pid 5001] lstat("./83/binderfs", [pid 6021] <... mkdir resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6021] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] unlink("./83/binderfs") = 0 [pid 5001] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6022] <... write resumed>) = 2097152 [pid 6022] munmap(0x7f0ed4ac1000, 2097152 [pid 6024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6022] <... munmap resumed>) = 0 [pid 6022] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5001] <... umount2 resumed>) = 0 [pid 6022] <... openat resumed>) = 4 [pid 5001] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6021] <... mount resumed>) = 0 [pid 6021] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6021] chdir("./file0") = 0 [pid 6021] ioctl(4, LOOP_CLR_FD) = 0 [pid 6021] close(4) = 0 [pid 6021] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6021] unlink("./file1" [pid 6022] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./83/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4 [pid 6022] <... ioctl resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 6022] close(3 [pid 5001] rmdir("./83/file0" [pid 6022] <... close resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 6022] mkdir("./file0", 0777) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [pid 6022] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./83") = 0 [ 104.781038][ T6025] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.799715][ T6022] loop2: detected capacity change from 0 to 4096 [pid 5001] mkdir("./84", 0777 [pid 6021] <... unlink resumed>) = 0 [pid 6014] +++ exited with 0 +++ [pid 5001] <... mkdir resumed>) = 0 [pid 6024] <... write resumed>) = 2097152 [pid 6021] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6014, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6022] <... mount resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6022] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5001] <... openat resumed>) = 3 [pid 6022] chdir("./file0" [pid 5001] ioctl(3, LOOP_CLR_FD [pid 6022] <... chdir resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6024] munmap(0x7f0ed4ac1000, 2097152 [pid 6022] ioctl(4, LOOP_CLR_FD [pid 5001] close(3 [pid 6024] <... munmap resumed>) = 0 [pid 6022] <... ioctl resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4999] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6022] close(4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6022] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6022] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4999] <... openat resumed>) = 3 [pid 6024] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6022] <... openat resumed>) = 4 [pid 6018] <... pwritev resumed>) = 1114112 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] fstat(3, [pid 6024] <... openat resumed>) = 4 [pid 6022] unlink("./file1" [pid 6018] exit_group(0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6024] ioctl(4, LOOP_SET_FD, 3 [pid 6018] <... exit_group resumed>) = ? [pid 4999] getdents64(3, [pid 6022] <... unlink resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6027 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6024] <... ioctl resumed>) = 0 [pid 6022] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6024] close(3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6024] <... close resumed>) = 0 [pid 4999] lstat("./83/binderfs", [pid 6024] mkdir("./file0", 0777 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 6027 attached [pid 4999] unlink("./83/binderfs" [pid 6027] chdir("./84" [pid 6024] <... mkdir resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 6027] <... chdir resumed>) = 0 [pid 6024] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6027] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6027] setpgid(0, 0) = 0 [pid 6027] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 104.829967][ T6026] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.868046][ T6024] loop0: detected capacity change from 0 to 4096 [pid 6027] write(3, "1000", 4) = 4 [pid 6027] close(3) = 0 [pid 6027] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6027] memfd_create("syzkaller", 0) = 3 [pid 6027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 4999] <... umount2 resumed>) = 0 [pid 6024] <... mount resumed>) = 0 [pid 6024] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6024] chdir("./file0") = 0 [pid 6024] ioctl(4, LOOP_CLR_FD) = 0 [pid 6021] <... pwritev resumed>) = 1114112 [pid 6024] close(4 [pid 6021] exit_group(0) = ? [pid 6027] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6024] <... close resumed>) = 0 [pid 6024] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4999] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./83/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6024] <... openat resumed>) = 4 [pid 4999] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, [pid 6024] unlink("./file1" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6018] +++ exited with 0 +++ [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6018, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4999] getdents64(4, [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] <... restart_syscall resumed>) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./83/file0" [pid 5003] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... rmdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(3, [pid 5003] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] fstat(3, [pid 4999] close(3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 6021] +++ exited with 0 +++ [pid 5003] getdents64(3, [pid 4999] rmdir("./83" [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6021, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6024] <... unlink resumed>) = 0 [pid 5003] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 6024] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6027] <... write resumed>) = 2097152 [pid 5003] lstat("./83/binderfs", [pid 4999] mkdir("./84", 0777 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] unlink("./83/binderfs" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... mkdir resumed>) = 0 [pid 5003] <... unlink resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [ 104.943031][ T6028] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] fstat(3, [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] close(3 [pid 6027] munmap(0x7f0ed4ac1000, 2097152 [pid 6022] <... pwritev resumed>) = 1114112 [pid 5003] <... umount2 resumed>) = 0 [pid 5002] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 6022] exit_group(0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] lstat("./85/binderfs", [pid 6022] <... exit_group resumed>) = ? [pid 5003] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./85/binderfs" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... unlink resumed>) = 0 [pid 5003] lstat("./83/file0", [pid 5002] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6029 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 6027] <... munmap resumed>) = 0 [pid 5003] close(4 [pid 6027] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./83/file0" [pid 6027] <... openat resumed>) = 4 [pid 5003] <... rmdir resumed>) = 0 [pid 5003] getdents64(3, [pid 6027] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./83") = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5003] mkdir("./84", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 6022] +++ exited with 0 +++ [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6022, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5000] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6029 attached [pid 6029] chdir("./84") = 0 [pid 6029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6029] setpgid(0, 0) = 0 [pid 6029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6029] write(3, "1000", 4) = 4 [pid 6029] close(3) = 0 [pid 6029] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6029] memfd_create("syzkaller", 0) = 3 [pid 6029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6030 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6029] <... mmap resumed>) = 0x7f0ed4ac1000 ./strace-static-x86_64: Process 6030 attached [pid 5000] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6030] chdir("./84" [pid 5000] <... openat resumed>) = 3 [pid 6030] <... chdir resumed>) = 0 [pid 6030] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] fstat(3, [pid 6030] <... prctl resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6030] setpgid(0, 0 [pid 5000] getdents64(3, [pid 6030] <... setpgid resumed>) = 0 [pid 6024] <... pwritev resumed>) = 1114112 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6030] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6024] exit_group(0 [pid 5000] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6030] <... openat resumed>) = 3 [pid 6030] write(3, "1000", 4 [pid 6024] <... exit_group resumed>) = ? [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6030] <... write resumed>) = 4 [pid 6027] <... ioctl resumed>) = 0 [pid 5002] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] lstat("./83/binderfs", [pid 6030] close(3 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6030] <... close resumed>) = 0 [pid 5000] unlink("./83/binderfs" [pid 6030] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5000] <... unlink resumed>) = 0 [pid 6030] memfd_create("syzkaller", 0 [pid 5000] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6030] <... memfd_create resumed>) = 3 [pid 6030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [ 105.048247][ T6027] loop3: detected capacity change from 0 to 4096 [pid 6029] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./85/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./85" [pid 6030] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./86", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6027] close(3) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6031 [pid 6027] mkdir("./file0", 0777) = 0 [pid 6029] <... write resumed>) = 2097152 [pid 6027] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, ""./strace-static-x86_64: Process 6031 attached [pid 6031] chdir("./86") = 0 [pid 6031] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6024] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6024, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6031] <... prctl resumed>) = 0 [pid 6030] <... write resumed>) = 2097152 [pid 6031] setpgid(0, 0 [pid 6030] munmap(0x7f0ed4ac1000, 2097152 [pid 6029] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] <... umount2 resumed>) = 0 [pid 6031] <... setpgid resumed>) = 0 [pid 6030] <... munmap resumed>) = 0 [pid 4998] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6030] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6031] <... openat resumed>) = 3 [pid 6030] <... openat resumed>) = 4 [pid 6029] <... munmap resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6031] write(3, "1000", 4 [pid 6030] ioctl(4, LOOP_SET_FD, 3 [pid 5000] lstat("./83/file0", [pid 6031] <... write resumed>) = 4 [pid 4998] <... openat resumed>) = 3 [pid 6029] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6029] ioctl(4, LOOP_SET_FD, 3 [pid 6031] close(3 [pid 6030] <... ioctl resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] fstat(3, [pid 6031] <... close resumed>) = 0 [pid 5000] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6031] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(3, [pid 6031] <... symlink resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6031] memfd_create("syzkaller", 0 [pid 5000] <... openat resumed>) = 4 [pid 4998] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6031] <... memfd_create resumed>) = 3 [pid 5000] fstat(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] lstat("./84/binderfs", [pid 6031] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6027] <... mount resumed>) = 0 [pid 5000] getdents64(4, [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6031] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] unlink("./84/binderfs" [pid 5000] getdents64(4, [pid 4998] <... unlink resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(4) = 0 [pid 6027] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] rmdir("./83/file0" [pid 6027] <... openat resumed>) = 3 [pid 5000] <... rmdir resumed>) = 0 [pid 6030] close(3 [pid 5000] getdents64(3, [pid 6030] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6030] mkdir("./file0", 0777 [pid 6027] chdir("./file0" [pid 5000] close(3 [pid 6030] <... mkdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 6030] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] rmdir("./83" [pid 6027] <... chdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5000] mkdir("./84", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6029] <... ioctl resumed>) = 0 [pid 6027] ioctl(4, LOOP_CLR_FD [pid 5000] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 6029] close(3 [pid 6027] <... ioctl resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(3 [pid 6029] <... close resumed>) = 0 [pid 6027] close(4 [pid 5000] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6033 attached [pid 6031] <... write resumed>) = 2097152 [pid 6029] mkdir("./file0", 0777 [pid 6027] <... close resumed>) = 0 [pid 4998] lstat("./84/file0", [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6033 [pid 6033] chdir("./84" [pid 6031] munmap(0x7f0ed4ac1000, 2097152 [pid 6029] <... mkdir resumed>) = 0 [pid 6027] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6029] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6027] <... openat resumed>) = 4 [pid 4998] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6031] <... munmap resumed>) = 0 [pid 6027] unlink("./file1" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6033] <... chdir resumed>) = 0 [pid 6031] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6027] <... unlink resumed>) = 0 [ 105.159795][ T6030] loop5: detected capacity change from 0 to 4096 [ 105.163930][ T6029] loop1: detected capacity change from 0 to 4096 [ 105.176856][ T6032] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6027] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6031] <... openat resumed>) = 4 [pid 6033] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] <... openat resumed>) = 4 [pid 6033] <... prctl resumed>) = 0 [pid 6031] ioctl(4, LOOP_SET_FD, 3 [pid 6030] <... mount resumed>) = 0 [pid 6029] <... mount resumed>) = 0 [pid 4998] fstat(4, [pid 6033] setpgid(0, 0 [pid 6030] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6029] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6033] <... setpgid resumed>) = 0 [pid 6031] <... ioctl resumed>) = 0 [pid 6030] <... openat resumed>) = 3 [pid 6029] <... openat resumed>) = 3 [pid 4998] getdents64(4, [pid 6033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6031] close(3 [pid 6030] chdir("./file0" [pid 6029] chdir("./file0" [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6033] <... openat resumed>) = 3 [pid 6031] <... close resumed>) = 0 [pid 6030] <... chdir resumed>) = 0 [pid 6029] <... chdir resumed>) = 0 [pid 4998] getdents64(4, [pid 6033] write(3, "1000", 4 [pid 6031] mkdir("./file0", 0777 [pid 6030] ioctl(4, LOOP_CLR_FD [pid 6029] ioctl(4, LOOP_CLR_FD [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6033] <... write resumed>) = 4 [pid 6030] <... ioctl resumed>) = 0 [pid 6029] <... ioctl resumed>) = 0 [pid 6030] close(4 [pid 6029] close(4 [pid 6033] close(3 [pid 6031] <... mkdir resumed>) = 0 [pid 6030] <... close resumed>) = 0 [pid 6029] <... close resumed>) = 0 [pid 4998] close(4 [pid 6033] <... close resumed>) = 0 [pid 6031] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6030] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6029] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] <... close resumed>) = 0 [pid 6033] symlink("/dev/binderfs", "./binderfs" [pid 6027] <... pwritev resumed>) = 1114112 [pid 4998] rmdir("./84/file0" [pid 6033] <... symlink resumed>) = 0 [pid 6030] <... openat resumed>) = 4 [pid 6029] <... openat resumed>) = 4 [pid 6027] exit_group(0 [pid 4998] <... rmdir resumed>) = 0 [pid 6033] memfd_create("syzkaller", 0 [pid 6030] unlink("./file1" [pid 6029] unlink("./file1" [pid 4998] getdents64(3, [pid 6033] <... memfd_create resumed>) = 3 [pid 6030] <... unlink resumed>) = 0 [pid 6027] <... exit_group resumed>) = ? [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6033] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6030] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6029] <... unlink resumed>) = 0 [pid 4998] close(3 [ 105.231077][ T6034] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.241983][ T6035] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.254759][ T6031] loop4: detected capacity change from 0 to 4096 [pid 6033] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6029] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./84") = 0 [pid 4998] mkdir("./85", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6037 [pid 6031] <... mount resumed>) = 0 [pid 6031] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6031] chdir("./file0") = 0 [pid 6031] ioctl(4, LOOP_CLR_FD) = 0 [pid 6031] close(4) = 0 [pid 6031] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000./strace-static-x86_64: Process 6037 attached [pid 6037] chdir("./85" [pid 6031] <... openat resumed>) = 4 [pid 6031] unlink("./file1" [pid 6037] <... chdir resumed>) = 0 [pid 6033] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6037] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6037] setpgid(0, 0) = 0 [pid 6037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6037] write(3, "1000", 4) = 4 [pid 6037] close(3) = 0 [pid 6037] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6037] memfd_create("syzkaller", 0) = 3 [pid 6037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6037] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6033] <... write resumed>) = 2097152 [pid 6033] munmap(0x7f0ed4ac1000, 2097152 [pid 6031] <... unlink resumed>) = 0 [pid 6031] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6033] <... munmap resumed>) = 0 [pid 6033] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 105.326855][ T6036] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6033] ioctl(4, LOOP_SET_FD, 3 [pid 6027] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6027, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5001] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./84/binderfs") = 0 [pid 5001] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6033] <... ioctl resumed>) = 0 [pid 6033] close(3) = 0 [pid 6033] mkdir("./file0", 0777) = 0 [pid 6033] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6037] <... write resumed>) = 2097152 [pid 6037] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 6037] <... munmap resumed>) = 0 [ 105.391135][ T6033] loop2: detected capacity change from 0 to 4096 [pid 6037] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6037] ioctl(4, LOOP_SET_FD, 3 [pid 5001] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./84/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 6037] <... ioctl resumed>) = 0 [pid 6029] <... pwritev resumed>) = 1114112 [pid 5001] close(4 [pid 6037] close(3 [pid 6033] <... mount resumed>) = 0 [pid 6030] <... pwritev resumed>) = 1114112 [pid 6029] exit_group(0 [pid 6037] <... close resumed>) = 0 [pid 6029] <... exit_group resumed>) = ? [pid 6030] exit_group(0 [pid 6037] mkdir("./file0", 0777 [pid 6033] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6031] <... pwritev resumed>) = 1114112 [pid 6030] <... exit_group resumed>) = ? [pid 5001] <... close resumed>) = 0 [pid 6037] <... mkdir resumed>) = 0 [pid 6033] <... openat resumed>) = 3 [pid 6031] exit_group(0 [pid 6029] +++ exited with 0 +++ [pid 6037] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6031] <... exit_group resumed>) = ? [ 105.455542][ T6037] loop0: detected capacity change from 0 to 4096 [ 105.485239][ T6038] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6029, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6037] <... mount resumed>) = 0 [pid 6033] chdir("./file0" [pid 5001] rmdir("./84/file0" [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 6037] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] <... restart_syscall resumed>) = 0 [pid 6037] <... openat resumed>) = 3 [pid 6037] chdir("./file0") = 0 [pid 4999] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6037] ioctl(4, LOOP_CLR_FD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6037] <... ioctl resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6037] close(4 [pid 4999] <... openat resumed>) = 3 [pid 6037] <... close resumed>) = 0 [pid 6033] <... chdir resumed>) = 0 [pid 6031] +++ exited with 0 +++ [pid 6030] +++ exited with 0 +++ [pid 5001] <... rmdir resumed>) = 0 [pid 4999] fstat(3, [pid 6033] ioctl(4, LOOP_CLR_FD [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6030, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5001] getdents64(3, [pid 6037] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6033] <... ioctl resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6031, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6037] <... openat resumed>) = 4 [pid 6033] close(4 [pid 5001] close(3 [pid 6037] unlink("./file1" [pid 6033] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 6033] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] rmdir("./84" [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6033] <... openat resumed>) = 4 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6033] unlink("./file1" [pid 5003] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] mkdir("./85", 0777 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] lstat("./84/binderfs", [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... mkdir resumed>) = 0 [pid 4999] unlink("./84/binderfs" [pid 5002] <... openat resumed>) = 3 [pid 4999] <... unlink resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6033] <... unlink resumed>) = 0 [pid 4999] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6037] <... unlink resumed>) = 0 [pid 6033] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] fstat(3, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5003] getdents64(3, [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] close(3 [pid 6037] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] <... close resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] lstat("./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6040 [pid 5003] unlink("./84/binderfs") = 0 [pid 5003] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./86/binderfs") = 0 [ 105.538527][ T6039] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6040 attached [pid 5003] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6040] chdir("./85" [pid 4999] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6040] <... chdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6040] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] lstat("./86/file0", [pid 4999] lstat("./84/file0", [pid 6040] <... prctl resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6040] setpgid(0, 0 [pid 5003] lstat("./84/file0", [pid 5002] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6040] <... setpgid resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6040] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 4 [pid 4999] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6040] write(3, "1000", 4 [pid 5003] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] fstat(4, [pid 4999] <... openat resumed>) = 4 [pid 6040] <... write resumed>) = 4 [pid 5003] <... openat resumed>) = 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(4, [pid 6040] close(3 [pid 5003] fstat(4, [pid 5002] getdents64(4, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6040] <... close resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, [pid 6040] symlink("/dev/binderfs", "./binderfs" [pid 5003] getdents64(4, [pid 5002] getdents64(4, [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6040] <... symlink resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(4, [pid 6040] memfd_create("syzkaller", 0 [pid 5003] getdents64(4, [pid 5002] close(4 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6040] <... memfd_create resumed>) = 3 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 4999] close(4 [pid 6040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] close(4 [pid 5002] rmdir("./86/file0" [pid 4999] <... close resumed>) = 0 [pid 6040] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] rmdir("./84/file0" [pid 5003] rmdir("./84/file0") = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./84") = 0 [pid 5003] mkdir("./85", 0777) = 0 [pid 5002] getdents64(3, [pid 4999] <... rmdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(3, [pid 5003] <... openat resumed>) = 3 [pid 5002] close(3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] rmdir("./86" [pid 4999] close(3 [pid 6040] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] close(3 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5002] mkdir("./87", 0777 [pid 4999] rmdir("./84" [pid 5003] <... close resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] mkdir("./85", 0777 [pid 5002] <... openat resumed>) = 3 [pid 4999] <... mkdir resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... openat resumed>) = 3 [pid 5002] close(3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5002] <... close resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] close(3) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6041 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6042 [pid 6040] <... write resumed>) = 2097152 [pid 6040] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6043 ./strace-static-x86_64: Process 6042 attached [pid 6042] chdir("./85" [pid 6040] <... munmap resumed>) = 0 [pid 6042] <... chdir resumed>) = 0 [pid 6042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6042] setpgid(0, 0) = 0 [pid 6042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6040] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6042] <... openat resumed>) = 3 [pid 6040] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6043 attached ./strace-static-x86_64: Process 6041 attached [pid 6042] write(3, "1000", 4) = 4 [pid 6042] close(3) = 0 [pid 6042] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6042] memfd_create("syzkaller", 0) = 3 [pid 6042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6043] chdir("./85" [pid 6042] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6043] <... chdir resumed>) = 0 [pid 6041] chdir("./87" [pid 6043] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6041] <... chdir resumed>) = 0 [pid 6043] setpgid(0, 0 [pid 6041] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6043] <... setpgid resumed>) = 0 [pid 6041] <... prctl resumed>) = 0 [pid 6043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6041] setpgid(0, 0 [pid 6043] <... openat resumed>) = 3 [pid 6041] <... setpgid resumed>) = 0 [pid 6043] write(3, "1000", 4) = 4 [pid 6041] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6033] <... pwritev resumed>) = 1114112 [pid 6043] close(3 [pid 6041] <... openat resumed>) = 3 [pid 6037] <... pwritev resumed>) = 1114112 [pid 6033] exit_group(0 [pid 6037] exit_group(0 [pid 6033] <... exit_group resumed>) = ? [pid 6043] <... close resumed>) = 0 [pid 6042] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6041] write(3, "1000", 4 [pid 6040] <... ioctl resumed>) = 0 [pid 6037] <... exit_group resumed>) = ? [pid 6043] symlink("/dev/binderfs", "./binderfs" [pid 6042] <... write resumed>) = 2097152 [pid 6041] <... write resumed>) = 4 [pid 6040] close(3 [pid 6043] <... symlink resumed>) = 0 [pid 6041] close(3 [pid 6040] <... close resumed>) = 0 [pid 6043] memfd_create("syzkaller", 0 [pid 6041] <... close resumed>) = 0 [pid 6040] mkdir("./file0", 0777 [pid 6043] <... memfd_create resumed>) = 3 [pid 6041] symlink("/dev/binderfs", "./binderfs" [pid 6040] <... mkdir resumed>) = 0 [pid 6043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6041] <... symlink resumed>) = 0 [pid 6040] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6043] <... mmap resumed>) = 0x7f0ed4ac1000 [ 105.719167][ T6040] loop3: detected capacity change from 0 to 4096 [pid 6042] munmap(0x7f0ed4ac1000, 2097152 [pid 6041] memfd_create("syzkaller", 0 [pid 6033] +++ exited with 0 +++ [pid 6042] <... munmap resumed>) = 0 [pid 6041] <... memfd_create resumed>) = 3 [pid 6037] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6033, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6037, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6042] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6042] <... openat resumed>) = 4 [pid 6043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6042] ioctl(4, LOOP_SET_FD, 3 [pid 6041] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6040] <... mount resumed>) = 0 [pid 6040] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6042] <... ioctl resumed>) = 0 [pid 6041] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6040] <... openat resumed>) = 3 [pid 6043] <... write resumed>) = 2097152 [pid 6042] close(3 [pid 6040] chdir("./file0" [pid 5000] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6043] munmap(0x7f0ed4ac1000, 2097152 [pid 6042] <... close resumed>) = 0 [pid 6040] <... chdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6043] <... munmap resumed>) = 0 [pid 6042] mkdir("./file0", 0777 [pid 6040] ioctl(4, LOOP_CLR_FD [pid 5000] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6043] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6042] <... mkdir resumed>) = 0 [pid 6040] <... ioctl resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 6043] <... openat resumed>) = 4 [pid 6042] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 105.783452][ T6044] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.794528][ T6042] loop1: detected capacity change from 0 to 4096 [pid 6040] close(4 [pid 5000] fstat(3, [pid 4998] fstat(3, [pid 6043] ioctl(4, LOOP_SET_FD, 3 [pid 6041] <... write resumed>) = 2097152 [pid 6040] <... close resumed>) = 0 [pid 6041] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6040] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 4998] getdents64(3, [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6041] <... munmap resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6041] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 4998] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6041] ioctl(4, LOOP_SET_FD, 3 [pid 5000] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./85/binderfs", [pid 6040] <... openat resumed>) = 4 [pid 5000] lstat("./84/binderfs", [pid 6040] unlink("./file1" [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./84/binderfs" [pid 4998] unlink("./85/binderfs" [pid 6043] <... ioctl resumed>) = 0 [pid 6042] <... mount resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 6043] close(3 [pid 6042] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6043] <... close resumed>) = 0 [pid 6042] <... openat resumed>) = 3 [pid 6043] mkdir("./file0", 0777 [pid 6042] chdir("./file0" [pid 6043] <... mkdir resumed>) = 0 [pid 6042] <... chdir resumed>) = 0 [pid 6043] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6042] ioctl(4, LOOP_CLR_FD) = 0 [pid 6040] <... unlink resumed>) = 0 [pid 6042] close(4 [pid 6040] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6042] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 6042] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6042] unlink("./file1") = 0 [pid 6042] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./84/file0", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6041] <... ioctl resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 105.825104][ T6043] loop5: detected capacity change from 0 to 4096 [ 105.831945][ T6045] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.834604][ T6041] loop4: detected capacity change from 0 to 4096 [pid 6041] close(3 [pid 5000] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] lstat("./85/file0", [pid 6041] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6041] mkdir("./file0", 0777 [pid 5000] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6041] <... mkdir resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 4998] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6041] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] fstat(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] <... openat resumed>) = 4 [pid 5000] getdents64(4, [pid 4998] fstat(4, [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... close resumed>) = 0 [pid 4998] getdents64(4, [pid 5000] rmdir("./84/file0" [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6043] <... mount resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] getdents64(4, [pid 6043] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6043] chdir("./file0") = 0 [pid 6043] ioctl(4, LOOP_CLR_FD) = 0 [pid 6043] close(4) = 0 [pid 6043] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6043] unlink("./file1" [pid 5000] getdents64(3, [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6041] <... mount resumed>) = 0 [pid 6041] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6041] chdir("./file0") = 0 [pid 6041] ioctl(4, LOOP_CLR_FD) = 0 [pid 6041] close(4) = 0 [pid 6041] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6041] unlink("./file1" [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(4 [pid 5000] close(3 [pid 4998] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4998] rmdir("./85/file0" [pid 5000] rmdir("./84" [pid 4998] <... rmdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5000] mkdir("./85", 0777 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4998] close(3 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] <... close resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4998] rmdir("./85" [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4998] <... rmdir resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] mkdir("./86", 0777 [pid 5000] close(3 [pid 4998] <... mkdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6048 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6049 ./strace-static-x86_64: Process 6048 attached [pid 6048] chdir("./85") = 0 [ 105.918946][ T6046] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.931177][ T6047] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6048] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6049 attached ) = 0 [pid 6049] chdir("./86" [pid 6048] setpgid(0, 0 [pid 6049] <... chdir resumed>) = 0 [pid 6048] <... setpgid resumed>) = 0 [pid 6049] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6049] <... prctl resumed>) = 0 [pid 6048] <... openat resumed>) = 3 [pid 6049] setpgid(0, 0 [pid 6048] write(3, "1000", 4 [pid 6049] <... setpgid resumed>) = 0 [pid 6048] <... write resumed>) = 4 [pid 6049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6048] close(3 [pid 6043] <... unlink resumed>) = 0 [pid 6041] <... unlink resumed>) = 0 [pid 6049] <... openat resumed>) = 3 [pid 6048] <... close resumed>) = 0 [pid 6043] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6041] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6049] write(3, "1000", 4 [pid 6048] symlink("/dev/binderfs", "./binderfs" [pid 6040] <... pwritev resumed>) = 1114112 [pid 6049] <... write resumed>) = 4 [pid 6048] <... symlink resumed>) = 0 [pid 6040] exit_group(0 [pid 6049] close(3 [pid 6048] memfd_create("syzkaller", 0 [pid 6040] <... exit_group resumed>) = ? [pid 6049] <... close resumed>) = 0 [pid 6048] <... memfd_create resumed>) = 3 [pid 6049] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6049] memfd_create("syzkaller", 0) = 3 [pid 6049] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6048] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6049] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6048] <... write resumed>) = 2097152 [pid 6048] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6042] <... pwritev resumed>) = 1114112 [pid 6048] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6042] exit_group(0 [pid 6048] <... openat resumed>) = 4 [pid 6042] <... exit_group resumed>) = ? [pid 6048] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6048] close(3) = 0 [pid 6048] mkdir("./file0", 0777) = 0 [pid 6048] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6040] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6040, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6049] <... write resumed>) = 2097152 [pid 6049] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6049] <... munmap resumed>) = 0 [pid 5001] getdents64(3, [pid 6049] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6049] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6049] ioctl(4, LOOP_SET_FD, 3 [pid 5001] lstat("./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./85/binderfs") = 0 [pid 5001] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6049] <... ioctl resumed>) = 0 [pid 6049] close(3) = 0 [pid 6049] mkdir("./file0", 0777) = 0 [pid 6049] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6042] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6042, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6048] <... mount resumed>) = 0 [pid 4999] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6048] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6048] chdir("./file0") = 0 [pid 6048] ioctl(4, LOOP_CLR_FD) = 0 [pid 6048] close(4) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./85/binderfs", [pid 6048] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./85/binderfs" [pid 6048] <... openat resumed>) = 4 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 106.090699][ T6048] loop2: detected capacity change from 0 to 4096 [ 106.110110][ T6049] loop0: detected capacity change from 0 to 4096 [ 106.126607][ T6050] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6048] unlink("./file1" [pid 5001] <... umount2 resumed>) = 0 [pid 6041] <... pwritev resumed>) = 1114112 [pid 6041] exit_group(0) = ? [pid 6048] <... unlink resumed>) = 0 [pid 5001] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6048] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6049] <... mount resumed>) = 0 [pid 6043] <... pwritev resumed>) = 1114112 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = 0 [pid 6049] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6043] exit_group(0 [pid 5001] lstat("./85/file0", [pid 4999] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6049] <... openat resumed>) = 3 [pid 6043] <... exit_group resumed>) = ? [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6049] chdir("./file0" [pid 6041] +++ exited with 0 +++ [pid 5001] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] lstat("./85/file0", [pid 6049] <... chdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6049] ioctl(4, LOOP_CLR_FD [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6041, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5001] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6049] <... ioctl resumed>) = 0 [pid 5002] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6049] close(4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6049] <... close resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] fstat(4, [pid 4999] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6049] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] <... openat resumed>) = 3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... openat resumed>) = 4 [pid 6049] <... openat resumed>) = 4 [pid 5002] fstat(3, [pid 6049] unlink("./file1" [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5001] getdents64(4, [pid 4999] fstat(4, [pid 6049] <... unlink resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 106.204731][ T6051] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6049] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, [pid 4999] getdents64(4, [pid 6048] <... pwritev resumed>) = 1114112 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6048] exit_group(0 [pid 6043] +++ exited with 0 +++ [pid 5002] lstat("./87/binderfs", [pid 5001] close(4 [pid 4999] getdents64(4, [pid 6048] <... exit_group resumed>) = ? [pid 5001] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6043, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] rmdir("./85/file0" [pid 4999] close(4 [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 5002] unlink("./87/binderfs" [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5003] <... restart_syscall resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5001] getdents64(3, [pid 4999] rmdir("./85/file0" [pid 5002] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./85" [pid 5003] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, [pid 6048] +++ exited with 0 +++ [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] mkdir("./86", 0777 [pid 4999] close(3 [pid 5003] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6048, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4999] <... close resumed>) = 0 [pid 5003] fstat(3, [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] rmdir("./85" [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5003] getdents64(3, [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] <... rmdir resumed>) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] mkdir("./86", 0777 [pid 5003] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] close(3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... close resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./85/binderfs") = 0 [pid 5000] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] lstat("./85/binderfs", [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6052 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./85/binderfs" [pid 4999] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6052 attached [pid 5003] <... unlink resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6052] chdir("./86") = 0 [pid 6052] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6052] setpgid(0, 0) = 0 [pid 6052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6052] <... openat resumed>) = 3 [pid 6052] write(3, "1000", 4) = 4 [pid 6052] close(3 [pid 4999] close(3 [pid 6052] <... close resumed>) = 0 [pid 6052] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6052] memfd_create("syzkaller", 0 [pid 5002] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6052] <... memfd_create resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./87/file0", [pid 6052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6052] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5002] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6053 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./87/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./87") = 0 [pid 5002] mkdir("./88", 0777 [pid 6052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6053 attached [pid 6053] chdir("./86" [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6053] <... chdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 6053] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] ioctl(3, LOOP_CLR_FD [pid 6053] <... prctl resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6053] setpgid(0, 0 [pid 5002] close(3 [pid 6053] <... setpgid resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 6053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6053] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = 0 [pid 6053] write(3, "1000", 4) = 4 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6054 [pid 6053] close(3 [pid 5003] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6054 attached [pid 6053] <... close resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] lstat("./85/file0", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6054] chdir("./88" [pid 6053] symlink("/dev/binderfs", "./binderfs" [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] lstat("./85/file0", [pid 5003] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6054] <... chdir resumed>) = 0 [pid 6053] <... symlink resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6054] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6053] memfd_create("syzkaller", 0 [pid 5003] <... openat resumed>) = 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] fstat(4, [pid 5000] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6054] <... prctl resumed>) = 0 [pid 6053] <... memfd_create resumed>) = 3 [pid 5003] getdents64(4, [pid 5000] <... openat resumed>) = 4 [pid 6054] setpgid(0, 0 [pid 6053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] fstat(4, [pid 6054] <... setpgid resumed>) = 0 [pid 6053] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] getdents64(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(4, [pid 6054] <... openat resumed>) = 3 [pid 5003] close(4 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6054] write(3, "1000", 4 [pid 6049] <... pwritev resumed>) = 1114112 [pid 5003] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 6054] <... write resumed>) = 4 [pid 6049] exit_group(0 [pid 5003] rmdir("./85/file0" [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6054] close(3 [pid 6049] <... exit_group resumed>) = ? [pid 5003] <... rmdir resumed>) = 0 [pid 5000] close(4 [pid 6054] <... close resumed>) = 0 [pid 6054] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6054] memfd_create("syzkaller", 0) = 3 [pid 6054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6054] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] getdents64(3, [pid 5000] <... close resumed>) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] rmdir("./85/file0" [pid 5003] close(3 [pid 6052] <... write resumed>) = 2097152 [pid 5003] <... close resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5003] rmdir("./85" [pid 5000] getdents64(3, [pid 6052] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] <... rmdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] mkdir("./86", 0777 [pid 5000] close(3 [pid 6052] <... munmap resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] rmdir("./85" [pid 5003] <... openat resumed>) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5000] <... rmdir resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] mkdir("./86", 0777 [pid 6052] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] close(3 [pid 6052] <... openat resumed>) = 4 [pid 5000] <... mkdir resumed>) = 0 [pid 6052] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6055 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6056 ./strace-static-x86_64: Process 6055 attached ./strace-static-x86_64: Process 6056 attached [pid 6055] chdir("./86" [pid 6056] chdir("./86" [pid 6055] <... chdir resumed>) = 0 [pid 6056] <... chdir resumed>) = 0 [pid 6055] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6056] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6055] <... prctl resumed>) = 0 [pid 6056] <... prctl resumed>) = 0 [pid 6055] setpgid(0, 0 [pid 6054] <... write resumed>) = 2097152 [pid 6056] setpgid(0, 0 [pid 6055] <... setpgid resumed>) = 0 [pid 6056] <... setpgid resumed>) = 0 [pid 6055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6056] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6055] write(3, "1000", 4 [pid 6056] <... openat resumed>) = 3 [pid 6055] <... write resumed>) = 4 [pid 6049] +++ exited with 0 +++ [pid 6056] write(3, "1000", 4 [pid 6055] close(3 [pid 6052] <... ioctl resumed>) = 0 [pid 6054] munmap(0x7f0ed4ac1000, 2097152 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6049, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6056] <... write resumed>) = 4 [pid 6055] <... close resumed>) = 0 [pid 6052] close(3 [pid 6056] close(3 [pid 6055] symlink("/dev/binderfs", "./binderfs" [pid 6052] <... close resumed>) = 0 [pid 6056] <... close resumed>) = 0 [pid 6055] <... symlink resumed>) = 0 [pid 6052] mkdir("./file0", 0777 [pid 6056] symlink("/dev/binderfs", "./binderfs" [pid 6055] memfd_create("syzkaller", 0 [pid 6052] <... mkdir resumed>) = 0 [pid 6056] <... symlink resumed>) = 0 [pid 6055] <... memfd_create resumed>) = 3 [pid 6052] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6056] memfd_create("syzkaller", 0 [pid 6055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6056] <... memfd_create resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 6056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6055] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 4998] fstat(3, [pid 6056] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./86/binderfs") = 0 [pid 4998] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 106.421415][ T6052] loop3: detected capacity change from 0 to 4096 [pid 6052] <... mount resumed>) = 0 [pid 6052] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6052] chdir("./file0") = 0 [pid 6052] ioctl(4, LOOP_CLR_FD) = 0 [pid 6052] close(4) = 0 [pid 6052] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6056] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6052] <... openat resumed>) = 4 [pid 6054] <... munmap resumed>) = 0 [pid 6052] unlink("./file1" [pid 6054] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6054] <... openat resumed>) = 4 [pid 6055] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6054] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./86/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./86") = 0 [pid 4998] mkdir("./87", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6053] <... write resumed>) = 2097152 [pid 6053] munmap(0x7f0ed4ac1000, 2097152 [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6058 ./strace-static-x86_64: Process 6058 attached [pid 6058] chdir("./87") = 0 [pid 6058] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6058] setpgid(0, 0) = 0 [pid 6058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6055] <... write resumed>) = 2097152 [pid 6053] <... munmap resumed>) = 0 [pid 6054] <... ioctl resumed>) = 0 [pid 6058] <... openat resumed>) = 3 [pid 6054] close(3 [pid 6053] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6054] <... close resumed>) = 0 [pid 6058] write(3, "1000", 4 [pid 6054] mkdir("./file0", 0777 [pid 6053] <... openat resumed>) = 4 [pid 6058] <... write resumed>) = 4 [pid 6058] close(3 [pid 6054] <... mkdir resumed>) = 0 [pid 6053] ioctl(4, LOOP_SET_FD, 3 [pid 6058] <... close resumed>) = 0 [pid 6054] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 106.488223][ T6057] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.509935][ T6054] loop4: detected capacity change from 0 to 4096 [pid 6058] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6058] memfd_create("syzkaller", 0) = 3 [pid 6058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6053] <... ioctl resumed>) = 0 [pid 6056] <... write resumed>) = 2097152 [pid 6052] <... unlink resumed>) = 0 [pid 6056] munmap(0x7f0ed4ac1000, 2097152 [pid 6055] munmap(0x7f0ed4ac1000, 2097152 [pid 6053] close(3 [pid 6052] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6058] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6056] <... munmap resumed>) = 0 [pid 6055] <... munmap resumed>) = 0 [pid 6054] <... mount resumed>) = 0 [pid 6053] <... close resumed>) = 0 [pid 6054] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6054] chdir("./file0") = 0 [pid 6054] ioctl(4, LOOP_CLR_FD) = 0 [pid 6054] close(4 [pid 6058] <... write resumed>) = 2097152 [pid 6056] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6055] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6054] <... close resumed>) = 0 [pid 6053] mkdir("./file0", 0777 [pid 6056] <... openat resumed>) = 4 [pid 6055] <... openat resumed>) = 4 [pid 6054] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6053] <... mkdir resumed>) = 0 [pid 6056] ioctl(4, LOOP_SET_FD, 3 [ 106.543615][ T6053] loop1: detected capacity change from 0 to 4096 [ 106.564325][ T6059] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6055] ioctl(4, LOOP_SET_FD, 3 [pid 6053] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6054] <... openat resumed>) = 4 [pid 6054] unlink("./file1" [pid 6056] <... ioctl resumed>) = 0 [pid 6055] <... ioctl resumed>) = 0 [pid 6056] close(3 [pid 6055] close(3 [pid 6056] <... close resumed>) = 0 [pid 6055] <... close resumed>) = 0 [pid 6056] mkdir("./file0", 0777 [pid 6055] mkdir("./file0", 0777 [pid 6056] <... mkdir resumed>) = 0 [pid 6055] <... mkdir resumed>) = 0 [pid 6056] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6055] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6054] <... unlink resumed>) = 0 [pid 6054] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6058] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6058] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6058] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6058] close(3) = 0 [pid 6058] mkdir("./file0", 0777) = 0 [pid 6058] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6053] <... mount resumed>) = 0 [pid 6053] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6053] chdir("./file0") = 0 [pid 6053] ioctl(4, LOOP_CLR_FD) = 0 [ 106.588112][ T6056] loop2: detected capacity change from 0 to 4096 [ 106.594926][ T6055] loop5: detected capacity change from 0 to 4096 [ 106.610318][ T6058] loop0: detected capacity change from 0 to 4096 [ 106.625130][ T6060] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6053] close(4) = 0 [pid 6056] <... mount resumed>) = 0 [pid 6056] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6056] chdir("./file0") = 0 [pid 6056] ioctl(4, LOOP_CLR_FD) = 0 [pid 6056] close(4) = 0 [pid 6056] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6056] unlink("./file1" [pid 6053] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6053] unlink("./file1" [pid 6055] <... mount resumed>) = 0 [pid 6055] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6055] chdir("./file0") = 0 [pid 6055] ioctl(4, LOOP_CLR_FD) = 0 [pid 6055] close(4) = 0 [ 106.646282][ T6061] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.668259][ T6062] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6055] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6058] <... mount resumed>) = 0 [pid 6058] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6058] chdir("./file0") = 0 [pid 6058] ioctl(4, LOOP_CLR_FD) = 0 [pid 6058] close(4) = 0 [pid 6058] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6058] unlink("./file1" [pid 6055] <... openat resumed>) = 4 [pid 6055] unlink("./file1" [pid 6056] <... unlink resumed>) = 0 [pid 6053] <... unlink resumed>) = 0 [ 106.687284][ T6063] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6056] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6053] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6058] <... unlink resumed>) = 0 [pid 6055] <... unlink resumed>) = 0 [pid 6052] <... pwritev resumed>) = 1114112 [pid 6058] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6055] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6052] exit_group(0) = ? [pid 6052] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6052, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./86/binderfs") = 0 [pid 5001] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6054] <... pwritev resumed>) = 1114112 [pid 6054] exit_group(0) = ? [pid 6058] <... pwritev resumed>) = 1114112 [pid 5001] <... umount2 resumed>) = 0 [pid 6058] exit_group(0) = ? [pid 6055] <... pwritev resumed>) = 1114112 [pid 6055] exit_group(0) = ? [pid 5001] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./86/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./86") = 0 [pid 5001] mkdir("./87", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6064 ./strace-static-x86_64: Process 6064 attached [pid 6064] chdir("./87") = 0 [pid 6064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6064] setpgid(0, 0) = 0 [pid 6064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6064] write(3, "1000", 4) = 4 [pid 6064] close(3 [pid 6053] <... pwritev resumed>) = 1114112 [pid 6064] <... close resumed>) = 0 [pid 6064] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6053] exit_group(0 [pid 6064] memfd_create("syzkaller", 0 [pid 6053] <... exit_group resumed>) = ? [pid 6064] <... memfd_create resumed>) = 3 [pid 6064] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6058] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6058, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 6054] +++ exited with 0 +++ [pid 4998] <... restart_syscall resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6054, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 3 [pid 5002] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] fstat(3, [pid 6064] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./88/binderfs", [pid 4998] lstat("./87/binderfs", [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./88/binderfs" [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 4998] unlink("./87/binderfs" [pid 5002] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6056] <... pwritev resumed>) = 1114112 [pid 6056] exit_group(0) = ? [pid 6064] <... write resumed>) = 2097152 [pid 6064] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6064] ioctl(4, LOOP_SET_FD, 3 [pid 6055] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6055, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5003] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./86/binderfs") = 0 [pid 5003] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6064] <... ioctl resumed>) = 0 [pid 6064] close(3) = 0 [pid 6064] mkdir("./file0", 0777) = 0 [pid 6064] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6053] +++ exited with 0 +++ [pid 4998] <... umount2 resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6053, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6056] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6056, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4999] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [pid 4998] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./87/file0", [pid 5002] lstat("./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 3 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 3 [pid 4999] fstat(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 4 [pid 5000] fstat(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] fstat(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 4998] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] getdents64(4, [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... openat resumed>) = 4 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] fstat(4, [ 106.995854][ T6064] loop3: detected capacity change from 0 to 4096 [ 107.002342][ T6055] syz-executor477 (6055) used greatest stack depth: 21440 bytes left [pid 5002] getdents64(4, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./86/binderfs", [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] lstat("./86/binderfs", [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] close(4 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./86/binderfs" [pid 5002] <... close resumed>) = 0 [pid 5000] unlink("./86/binderfs" [pid 4999] <... unlink resumed>) = 0 [pid 4998] getdents64(4, [pid 5000] <... unlink resumed>) = 0 [pid 4999] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] rmdir("./88/file0" [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] <... rmdir resumed>) = 0 [pid 4998] getdents64(4, [pid 5002] getdents64(3, [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(4 [pid 5002] close(3) = 0 [pid 4998] <... close resumed>) = 0 [pid 5002] rmdir("./88" [pid 4998] rmdir("./87/file0" [pid 5002] <... rmdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5002] mkdir("./89", 0777 [pid 4998] getdents64(3, [pid 5002] <... mkdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4998] close(3 [pid 5002] <... openat resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4998] rmdir("./87" [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] <... umount2 resumed>) = 0 [pid 5002] close(3 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... close resumed>) = 0 [pid 4998] mkdir("./88", 0777 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... mkdir resumed>) = 0 [pid 5003] lstat("./86/file0", [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6066 [pid 4998] <... openat resumed>) = 3 [pid 5003] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] close(3 [pid 5003] <... openat resumed>) = 4 [pid 4998] <... close resumed>) = 0 [pid 5003] fstat(4, [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6067 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./86/file0") = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./86") = 0 [pid 5003] mkdir("./87", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6064] <... mount resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 6064] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6068 [pid 6064] <... openat resumed>) = 3 [pid 6064] chdir("./file0") = 0 ./strace-static-x86_64: Process 6068 attached [pid 6064] ioctl(4, LOOP_CLR_FD) = 0 [pid 6068] chdir("./87" [pid 6064] close(4) = 0 [pid 6064] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6068] <... chdir resumed>) = 0 [pid 6068] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6067 attached ) = 0 [pid 6068] setpgid(0, 0) = 0 [pid 6067] chdir("./88" [pid 6064] <... openat resumed>) = 4 [pid 6064] unlink("./file1" [pid 6068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6067] <... chdir resumed>) = 0 [pid 6068] <... openat resumed>) = 3 [pid 6067] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6064] <... unlink resumed>) = 0 [pid 6068] write(3, "1000", 4 [pid 6067] <... prctl resumed>) = 0 [pid 6064] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6068] <... write resumed>) = 4 [pid 6067] setpgid(0, 0 [pid 6068] close(3 [pid 6067] <... setpgid resumed>) = 0 [pid 6068] <... close resumed>) = 0 [pid 6067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6068] symlink("/dev/binderfs", "./binderfs" [pid 6067] <... openat resumed>) = 3 [pid 6068] <... symlink resumed>) = 0 [pid 6067] write(3, "1000", 4 [pid 6068] memfd_create("syzkaller", 0 [pid 6067] <... write resumed>) = 4 [pid 6068] <... memfd_create resumed>) = 3 [pid 6067] close(3 [pid 6068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6067] <... close resumed>) = 0 [pid 6068] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6067] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6067] memfd_create("syzkaller", 0) = 3 [pid 6067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 4999] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6066 attached [pid 4999] lstat("./86/file0", [pid 6066] chdir("./89" [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6066] <... chdir resumed>) = 0 [pid 4999] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6066] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4999] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6066] setpgid(0, 0 [pid 4999] <... openat resumed>) = 4 [pid 6066] <... setpgid resumed>) = 0 [pid 4999] fstat(4, [pid 6066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 6066] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6066] write(3, "1000", 4 [pid 4999] getdents64(4, [pid 6066] <... write resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6066] close(3 [ 107.070302][ T6065] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] close(4 [pid 6066] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 6066] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4999] rmdir("./86/file0" [pid 6066] memfd_create("syzkaller", 0 [pid 4999] <... rmdir resumed>) = 0 [pid 6066] <... memfd_create resumed>) = 3 [pid 4999] getdents64(3, [pid 6066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6066] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 4999] close(3) = 0 [pid 4999] rmdir("./86") = 0 [pid 6067] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] mkdir("./87", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6069 ./strace-static-x86_64: Process 6069 attached [pid 6069] chdir("./87") = 0 [pid 6069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 6069] setpgid(0, 0) = 0 [pid 6069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6069] <... openat resumed>) = 3 [pid 6066] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6069] write(3, "1000", 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6069] <... write resumed>) = 4 [pid 6069] close(3) = 0 [pid 5000] lstat("./86/file0", [pid 6069] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6069] memfd_create("syzkaller", 0 [pid 5000] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6069] <... memfd_create resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6069] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6066] <... write resumed>) = 2097152 [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./86/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./86") = 0 [pid 5000] mkdir("./87", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 6067] <... write resumed>) = 2097152 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6067] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6068] <... write resumed>) = 2097152 [pid 6068] munmap(0x7f0ed4ac1000, 2097152 [pid 6067] <... munmap resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6070 [pid 6068] <... munmap resumed>) = 0 [pid 6067] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6067] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6070 attached [pid 6068] ioctl(4, LOOP_SET_FD, 3 [pid 6070] chdir("./87") = 0 [pid 6068] <... ioctl resumed>) = 0 [pid 6067] <... ioctl resumed>) = 0 [pid 6066] munmap(0x7f0ed4ac1000, 2097152 [pid 6070] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6068] close(3 [pid 6067] close(3 [pid 6070] <... prctl resumed>) = 0 [pid 6068] <... close resumed>) = 0 [pid 6067] <... close resumed>) = 0 [pid 6066] <... munmap resumed>) = 0 [pid 6070] setpgid(0, 0 [pid 6068] mkdir("./file0", 0777 [pid 6067] mkdir("./file0", 0777 [pid 6066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6070] <... setpgid resumed>) = 0 [pid 6070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6068] <... mkdir resumed>) = 0 [pid 6067] <... mkdir resumed>) = 0 [pid 6066] <... openat resumed>) = 4 [pid 6070] <... openat resumed>) = 3 [pid 6068] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6067] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 107.205418][ T6067] loop0: detected capacity change from 0 to 4096 [ 107.216438][ T6068] loop5: detected capacity change from 0 to 4096 [pid 6066] ioctl(4, LOOP_SET_FD, 3 [pid 6070] write(3, "1000", 4) = 4 [pid 6068] <... mount resumed>) = 0 [pid 6070] close(3 [pid 6068] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6070] <... close resumed>) = 0 [pid 6068] <... openat resumed>) = 3 [pid 6068] chdir("./file0") = 0 [pid 6068] ioctl(4, LOOP_CLR_FD) = 0 [pid 6068] close(4 [pid 6070] symlink("/dev/binderfs", "./binderfs" [pid 6069] <... write resumed>) = 2097152 [pid 6068] <... close resumed>) = 0 [pid 6066] <... ioctl resumed>) = 0 [pid 6068] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6068] unlink("./file1" [pid 6067] <... mount resumed>) = 0 [pid 6067] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6067] chdir("./file0") = 0 [pid 6067] ioctl(4, LOOP_CLR_FD) = 0 [pid 6067] close(4) = 0 [pid 6067] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6070] <... symlink resumed>) = 0 [pid 6069] munmap(0x7f0ed4ac1000, 2097152 [pid 6067] <... openat resumed>) = 4 [pid 6066] close(3 [pid 6067] unlink("./file1" [pid 6066] <... close resumed>) = 0 [pid 6069] <... munmap resumed>) = 0 [pid 6066] mkdir("./file0", 0777 [pid 6070] memfd_create("syzkaller", 0) = 3 [pid 6069] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6066] <... mkdir resumed>) = 0 [pid 6070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6069] <... openat resumed>) = 4 [pid 6066] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6070] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6064] <... pwritev resumed>) = 1114112 [pid 6069] ioctl(4, LOOP_SET_FD, 3 [pid 6064] exit_group(0 [pid 6068] <... unlink resumed>) = 0 [ 107.249656][ T6066] loop4: detected capacity change from 0 to 4096 [ 107.269557][ T6071] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.284237][ T6072] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6068] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6069] <... ioctl resumed>) = 0 [pid 6064] <... exit_group resumed>) = ? [pid 6067] <... unlink resumed>) = 0 [pid 6067] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6069] close(3) = 0 [pid 6069] mkdir("./file0", 0777) = 0 [ 107.300645][ T6069] loop1: detected capacity change from 0 to 4096 [pid 6069] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6066] <... mount resumed>) = 0 [pid 6066] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6066] chdir("./file0" [pid 6064] +++ exited with 0 +++ [pid 6066] <... chdir resumed>) = 0 [pid 6070] <... write resumed>) = 2097152 [pid 6069] <... mount resumed>) = 0 [pid 6066] ioctl(4, LOOP_CLR_FD [pid 6070] munmap(0x7f0ed4ac1000, 2097152 [pid 6069] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6066] <... ioctl resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6064, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 6070] <... munmap resumed>) = 0 [pid 6069] <... openat resumed>) = 3 [pid 6066] close(4 [pid 5001] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6070] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6069] chdir("./file0" [pid 6066] <... close resumed>) = 0 [pid 6070] <... openat resumed>) = 4 [pid 6069] <... chdir resumed>) = 0 [pid 6066] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6070] ioctl(4, LOOP_SET_FD, 3 [pid 6069] ioctl(4, LOOP_CLR_FD [pid 5001] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6066] <... openat resumed>) = 4 [ 107.344766][ T6073] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.367605][ T6074] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6069] <... ioctl resumed>) = 0 [pid 6069] close(4 [pid 5001] <... openat resumed>) = 3 [pid 6069] <... close resumed>) = 0 [pid 5001] fstat(3, [pid 6069] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6066] unlink("./file1" [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./87/binderfs", [pid 6069] <... openat resumed>) = 4 [pid 6069] unlink("./file1" [pid 6066] <... unlink resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6066] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] unlink("./87/binderfs") = 0 [pid 5001] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6068] <... pwritev resumed>) = 1114112 [pid 6068] exit_group(0) = ? [pid 6069] <... unlink resumed>) = 0 [pid 6069] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6070] <... ioctl resumed>) = 0 [pid 6070] close(3) = 0 [pid 6070] mkdir("./file0", 0777) = 0 [ 107.405993][ T6070] loop2: detected capacity change from 0 to 4096 [pid 6070] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./87/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./87/file0") = 0 [pid 5001] getdents64(3, [pid 6068] +++ exited with 0 +++ [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [pid 6070] <... mount resumed>) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6068, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6070] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 6070] <... openat resumed>) = 3 [pid 5003] <... restart_syscall resumed>) = 0 [pid 6070] chdir("./file0") = 0 [pid 6070] ioctl(4, LOOP_CLR_FD [pid 5003] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6070] <... ioctl resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6070] close(4 [pid 5003] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6070] <... close resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5001] <... close resumed>) = 0 [pid 6070] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] fstat(3, [pid 5001] rmdir("./87" [pid 6070] <... openat resumed>) = 4 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6070] unlink("./file1" [pid 5003] getdents64(3, [pid 5001] <... rmdir resumed>) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] mkdir("./88", 0777 [pid 5003] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] <... mkdir resumed>) = 0 [pid 5003] lstat("./87/binderfs", [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5003] unlink("./87/binderfs" [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5003] <... unlink resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6067] <... pwritev resumed>) = 1114112 [pid 6067] exit_group(0) = ? [pid 5003] <... umount2 resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6076 ./strace-static-x86_64: Process 6076 attached [ 107.501598][ T6075] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6076] chdir("./88" [pid 5003] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6076] <... chdir resumed>) = 0 [pid 6076] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6076] setpgid(0, 0) = 0 [pid 6076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] lstat("./87/file0", [pid 6076] <... openat resumed>) = 3 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6076] write(3, "1000", 4 [pid 5003] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6076] <... write resumed>) = 4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6076] close(3 [pid 5003] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6076] <... close resumed>) = 0 [pid 5003] <... openat resumed>) = 4 [pid 6076] symlink("/dev/binderfs", "./binderfs" [pid 5003] fstat(4, [pid 6076] <... symlink resumed>) = 0 [pid 6070] <... unlink resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6076] memfd_create("syzkaller", 0 [pid 6070] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] getdents64(4, [pid 6076] <... memfd_create resumed>) = 3 [pid 6066] <... pwritev resumed>) = 1114112 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6066] exit_group(0 [pid 5003] getdents64(4, [pid 6076] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6066] <... exit_group resumed>) = ? [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4 [pid 6067] +++ exited with 0 +++ [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./87/file0" [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6067, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5003] <... rmdir resumed>) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5003] getdents64(3, [pid 4998] <... restart_syscall resumed>) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 4998] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] rmdir("./87" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... rmdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] mkdir("./88", 0777 [pid 4998] <... openat resumed>) = 3 [pid 5003] <... mkdir resumed>) = 0 [pid 4998] fstat(3, [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... openat resumed>) = 3 [pid 4998] getdents64(3, [pid 5003] ioctl(3, LOOP_CLR_FD [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] close(3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... close resumed>) = 0 [pid 4998] lstat("./88/binderfs", [pid 6076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./88/binderfs") = 0 [pid 4998] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6066] +++ exited with 0 +++ [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6077 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6066, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5002] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, ./strace-static-x86_64: Process 6077 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 6077] chdir("./88" [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6077] <... chdir resumed>) = 0 [pid 5002] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6077] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6077] <... prctl resumed>) = 0 [pid 5002] lstat("./89/binderfs", [pid 6077] setpgid(0, 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6077] <... setpgid resumed>) = 0 [pid 5002] unlink("./89/binderfs" [pid 6077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6077] <... openat resumed>) = 3 [pid 4998] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./88/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./88" [pid 5002] <... umount2 resumed>) = 0 [pid 6077] write(3, "1000", 4 [pid 6069] <... pwritev resumed>) = 1114112 [pid 4998] <... rmdir resumed>) = 0 [pid 6077] <... write resumed>) = 4 [pid 6069] exit_group(0) = ? [pid 6077] close(3 [pid 6076] <... write resumed>) = 2097152 [pid 4998] mkdir("./89", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 6077] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 6077] symlink("/dev/binderfs", "./binderfs" [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6077] <... symlink resumed>) = 0 [pid 6077] memfd_create("syzkaller", 0) = 3 [pid 6077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6078 ./strace-static-x86_64: Process 6078 attached [pid 6078] chdir("./89") = 0 [pid 6078] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6078] setpgid(0, 0) = 0 [pid 6078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6078] write(3, "1000", 4) = 4 [pid 6078] close(3) = 0 [pid 6076] munmap(0x7f0ed4ac1000, 2097152 [pid 6078] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6078] memfd_create("syzkaller", 0) = 3 [pid 6076] <... munmap resumed>) = 0 [pid 6078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6076] ioctl(4, LOOP_SET_FD, 3 [pid 5002] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./89/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6070] <... pwritev resumed>) = 1114112 [pid 5002] fstat(4, [pid 6077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6070] exit_group(0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6070] <... exit_group resumed>) = ? [pid 5002] getdents64(4, [pid 6076] <... ioctl resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6076] close(3 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./89/file0" [pid 6076] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./89" [pid 6076] mkdir("./file0", 0777 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./90", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6076] <... mkdir resumed>) = 0 [pid 6076] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6069] +++ exited with 0 +++ [pid 5002] close(3 [pid 6078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6069, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6079 [pid 4999] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 6079 attached ) = 0 [pid 6079] chdir("./90") = 0 [pid 6079] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6079] <... prctl resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6079] setpgid(0, 0 [pid 4999] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6079] <... setpgid resumed>) = 0 [pid 6077] <... write resumed>) = 2097152 [pid 4999] <... openat resumed>) = 3 [pid 6079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 107.729188][ T6076] loop3: detected capacity change from 0 to 4096 [pid 6077] munmap(0x7f0ed4ac1000, 2097152 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6079] <... openat resumed>) = 3 [pid 6070] +++ exited with 0 +++ [pid 4999] getdents64(3, [pid 6079] write(3, "1000", 4 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6070, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6079] <... write resumed>) = 4 [pid 6077] <... munmap resumed>) = 0 [pid 4999] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6079] close(3 [pid 6077] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6079] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6079] symlink("/dev/binderfs", "./binderfs" [pid 6077] <... openat resumed>) = 4 [pid 4999] lstat("./87/binderfs", [pid 6079] <... symlink resumed>) = 0 [pid 6077] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6079] memfd_create("syzkaller", 0 [pid 4999] unlink("./87/binderfs" [pid 6076] <... mount resumed>) = 0 [pid 6076] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6076] chdir("./file0") = 0 [pid 6076] ioctl(4, LOOP_CLR_FD) = 0 [pid 6076] close(4 [pid 6079] <... memfd_create resumed>) = 3 [pid 6076] <... close resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 6076] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6078] <... write resumed>) = 2097152 [pid 6077] <... ioctl resumed>) = 0 [pid 6076] <... openat resumed>) = 4 [pid 5000] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6079] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6078] munmap(0x7f0ed4ac1000, 2097152 [pid 6077] close(3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6078] <... munmap resumed>) = 0 [pid 6077] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6077] mkdir("./file0", 0777 [pid 5000] <... openat resumed>) = 3 [pid 6078] <... openat resumed>) = 4 [pid 6077] <... mkdir resumed>) = 0 [pid 5000] fstat(3, [pid 6078] ioctl(4, LOOP_SET_FD, 3 [pid 6077] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6076] unlink("./file1" [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5000] unlink("./87/binderfs") = 0 [pid 4999] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] lstat("./87/file0", [pid 6078] <... ioctl resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6078] close(3 [pid 6076] <... unlink resumed>) = 0 [pid 4999] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6078] <... close resumed>) = 0 [pid 6076] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6078] mkdir("./file0", 0777 [pid 4999] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6078] <... mkdir resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 6078] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 107.796514][ T6077] loop5: detected capacity change from 0 to 4096 [ 107.811319][ T6080] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.824883][ T6078] loop0: detected capacity change from 0 to 4096 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./87/file0" [pid 5000] <... umount2 resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 5000] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6078] <... mount resumed>) = 0 [pid 6077] <... mount resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] close(3) = 0 [pid 4999] rmdir("./87") = 0 [pid 4999] mkdir("./88", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6083 ./strace-static-x86_64: Process 6083 attached [pid 6083] chdir("./88") = 0 [pid 6083] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6077] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6083] <... prctl resumed>) = 0 [pid 6083] setpgid(0, 0) = 0 [pid 6083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6077] <... openat resumed>) = 3 [pid 5000] lstat("./87/file0", [pid 6077] chdir("./file0") = 0 [pid 6077] ioctl(4, LOOP_CLR_FD [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6078] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6077] <... ioctl resumed>) = 0 [pid 6077] close(4 [pid 6078] <... openat resumed>) = 3 [pid 5000] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6083] <... openat resumed>) = 3 [pid 6078] chdir("./file0" [pid 6077] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6083] write(3, "1000", 4 [pid 6078] <... chdir resumed>) = 0 [pid 6077] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6078] ioctl(4, LOOP_CLR_FD [pid 6083] <... write resumed>) = 4 [pid 6078] <... ioctl resumed>) = 0 [pid 6077] <... openat resumed>) = 4 [pid 5000] <... openat resumed>) = 4 [pid 6083] close(3 [pid 6078] close(4 [pid 6077] unlink("./file1" [pid 5000] fstat(4, [pid 6083] <... close resumed>) = 0 [pid 6078] <... close resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6083] symlink("/dev/binderfs", "./binderfs" [pid 6078] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] getdents64(4, [pid 6083] <... symlink resumed>) = 0 [pid 6078] <... openat resumed>) = 4 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6083] memfd_create("syzkaller", 0 [pid 6078] unlink("./file1" [pid 5000] getdents64(4, [pid 6083] <... memfd_create resumed>) = 3 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] close(4 [pid 6083] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5000] <... close resumed>) = 0 [pid 6083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6079] <... write resumed>) = 2097152 [pid 5000] rmdir("./87/file0" [pid 6079] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] <... rmdir resumed>) = 0 [pid 6079] <... munmap resumed>) = 0 [pid 5000] getdents64(3, [pid 6079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6079] <... openat resumed>) = 4 [pid 5000] close(3 [pid 6079] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... close resumed>) = 0 [ 107.886605][ T6081] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.891242][ T6082] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6077] <... unlink resumed>) = 0 [pid 6077] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] rmdir("./87") = 0 [pid 5000] mkdir("./88", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6079] <... ioctl resumed>) = 0 [pid 5000] close(3 [pid 6079] close(3 [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6079] <... close resumed>) = 0 [pid 6079] mkdir("./file0", 0777 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6084 [pid 6079] <... mkdir resumed>) = 0 [pid 6079] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6078] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6084 attached [pid 6078] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 107.946141][ T6079] loop4: detected capacity change from 0 to 4096 [pid 6084] chdir("./88") = 0 [pid 6084] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6084] setpgid(0, 0) = 0 [pid 6084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6084] write(3, "1000", 4) = 4 [pid 6084] close(3) = 0 [pid 6084] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6084] memfd_create("syzkaller", 0) = 3 [pid 6084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6079] <... mount resumed>) = 0 [pid 6079] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6079] chdir("./file0") = 0 [pid 6079] ioctl(4, LOOP_CLR_FD) = 0 [pid 6079] close(4 [pid 6083] <... write resumed>) = 2097152 [pid 6079] <... close resumed>) = 0 [pid 6083] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6083] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6083] ioctl(4, LOOP_SET_FD, 3 [pid 6084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6079] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6083] <... ioctl resumed>) = 0 [pid 6083] close(3) = 0 [pid 6083] mkdir("./file0", 0777) = 0 [pid 6083] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6079] <... openat resumed>) = 4 [pid 6076] <... pwritev resumed>) = 1114112 [pid 6079] unlink("./file1" [pid 6076] exit_group(0 [pid 6084] <... write resumed>) = 2097152 [pid 6079] <... unlink resumed>) = 0 [pid 6076] <... exit_group resumed>) = ? [pid 6084] munmap(0x7f0ed4ac1000, 2097152 [ 108.025128][ T6085] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.047937][ T6083] loop1: detected capacity change from 0 to 4096 [pid 6079] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6084] <... munmap resumed>) = 0 [pid 6084] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6084] ioctl(4, LOOP_SET_FD, 3 [pid 6077] <... pwritev resumed>) = 1114112 [pid 6077] exit_group(0) = ? [pid 6083] <... mount resumed>) = 0 [pid 6083] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6083] chdir("./file0") = 0 [pid 6083] ioctl(4, LOOP_CLR_FD) = 0 [pid 6083] close(4) = 0 [pid 6084] <... ioctl resumed>) = 0 [pid 6083] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6084] close(3 [pid 6083] <... openat resumed>) = 4 [pid 6078] <... pwritev resumed>) = 1114112 [pid 6084] <... close resumed>) = 0 [pid 6083] unlink("./file1" [pid 6078] exit_group(0 [pid 6084] mkdir("./file0", 0777 [pid 6078] <... exit_group resumed>) = ? [pid 6084] <... mkdir resumed>) = 0 [ 108.110296][ T6084] loop2: detected capacity change from 0 to 4096 [pid 6084] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6078] +++ exited with 0 +++ [pid 6077] +++ exited with 0 +++ [pid 6076] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6077, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6076, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6078, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6084] <... mount resumed>) = 0 [pid 6083] <... unlink resumed>) = 0 [pid 6079] <... pwritev resumed>) = 1114112 [pid 5003] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6084] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6079] exit_group(0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6084] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6079] <... exit_group resumed>) = ? [pid 5003] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6084] chdir("./file0" [pid 4998] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6083] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] <... openat resumed>) = 3 [pid 6084] <... chdir resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 6084] ioctl(4, LOOP_CLR_FD [pid 5003] fstat(3, [pid 5001] fstat(3, [pid 6084] <... ioctl resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 5001] getdents64(3, [pid 5003] getdents64(3, [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6084] close(4 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6084] <... close resumed>) = 0 [pid 6084] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./88/binderfs", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./88/binderfs", [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] lstat("./89/binderfs", [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./88/binderfs" [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./88/binderfs" [pid 6084] <... openat resumed>) = 4 [pid 5003] <... unlink resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 4998] unlink("./89/binderfs" [pid 5003] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6084] unlink("./file1" [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [ 108.166993][ T6086] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.183440][ T6087] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6084] <... unlink resumed>) = 0 [pid 6084] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5001] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 5003] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./88/file0", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./88/file0", [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] lstat("./89/file0", [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6079] +++ exited with 0 +++ [pid 5003] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6079, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5001] <... openat resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... openat resumed>) = 4 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5001] fstat(4, [pid 4998] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] fstat(4, [pid 5002] <... restart_syscall resumed>) = 0 [pid 5001] getdents64(4, [pid 4998] <... openat resumed>) = 4 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] fstat(4, [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 5002] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] getdents64(4, [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] close(4 [pid 5003] close(4 [pid 5002] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] <... close resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] rmdir("./88/file0" [pid 4998] getdents64(4, [pid 5003] rmdir("./88/file0" [pid 5002] fstat(3, [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] getdents64(3, [pid 5002] getdents64(3, [pid 5001] getdents64(3, [pid 4998] close(4 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3 [pid 5002] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] close(3 [pid 4998] <... close resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... close resumed>) = 0 [pid 5003] rmdir("./88" [pid 5002] lstat("./90/binderfs", [pid 5001] rmdir("./88" [pid 4998] rmdir("./89/file0" [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] mkdir("./89", 0777 [pid 5002] unlink("./90/binderfs" [pid 5001] mkdir("./89", 0777 [pid 4998] getdents64(3, [pid 5003] <... mkdir resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5002] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] <... openat resumed>) = 3 [pid 4998] close(3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] <... openat resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4998] rmdir("./89") = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] mkdir("./90", 0777 [pid 5003] close(3 [pid 5001] close(3 [pid 4998] <... mkdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... openat resumed>) = 3 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6089 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6088 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 ./strace-static-x86_64: Process 6088 attached [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6088] chdir("./89" [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6090 [pid 6088] <... chdir resumed>) = 0 [pid 6088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6088] setpgid(0, 0) = 0 [pid 6088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 6089 attached [pid 6089] chdir("./89" [pid 6088] write(3, "1000", 4) = 4 [pid 6088] close(3) = 0 [pid 6089] <... chdir resumed>) = 0 [pid 6088] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6089] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6089] setpgid(0, 0) = 0 [pid 6089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6088] memfd_create("syzkaller", 0 [pid 6089] <... openat resumed>) = 3 [pid 6088] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 6090 attached [pid 6089] write(3, "1000", 4 [pid 6088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6089] <... write resumed>) = 4 [pid 6090] chdir("./90" [pid 6089] close(3 [pid 6088] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6090] <... chdir resumed>) = 0 [pid 6090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6090] setpgid(0, 0 [pid 6089] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 6090] <... setpgid resumed>) = 0 [pid 6089] symlink("/dev/binderfs", "./binderfs" [pid 5002] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6089] <... symlink resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6090] <... openat resumed>) = 3 [pid 6089] memfd_create("syzkaller", 0 [pid 5002] lstat("./90/file0", [pid 6090] write(3, "1000", 4 [pid 6089] <... memfd_create resumed>) = 3 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6090] <... write resumed>) = 4 [pid 6089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6089] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6090] close(3 [pid 6089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6090] <... close resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6090] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... openat resumed>) = 4 [pid 6090] <... symlink resumed>) = 0 [pid 5002] fstat(4, [pid 6090] memfd_create("syzkaller", 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6090] <... memfd_create resumed>) = 3 [pid 5002] getdents64(4, [pid 6090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6090] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6083] <... pwritev resumed>) = 1114112 [pid 5002] getdents64(4, [pid 6083] exit_group(0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6083] <... exit_group resumed>) = ? [pid 5002] close(4 [pid 6088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./90/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./90") = 0 [pid 5002] mkdir("./91", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6091 [pid 6084] <... pwritev resumed>) = 1114112 [pid 6084] exit_group(0) = ? [pid 6090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 6091 attached [pid 6091] chdir("./91") = 0 [pid 6091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6091] setpgid(0, 0) = 0 [pid 6091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6091] write(3, "1000", 4) = 4 [pid 6091] close(3) = 0 [pid 6089] <... write resumed>) = 2097152 [pid 6091] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6091] memfd_create("syzkaller", 0) = 3 [pid 6091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6090] <... write resumed>) = 2097152 [pid 6083] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6083, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6090] munmap(0x7f0ed4ac1000, 2097152 [pid 6088] <... write resumed>) = 2097152 [pid 6089] munmap(0x7f0ed4ac1000, 2097152 [pid 4999] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6090] <... munmap resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6090] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6090] <... openat resumed>) = 4 [pid 6090] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... openat resumed>) = 3 [pid 6088] munmap(0x7f0ed4ac1000, 2097152 [pid 6084] +++ exited with 0 +++ [pid 6088] <... munmap resumed>) = 0 [pid 6089] <... munmap resumed>) = 0 [pid 6089] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6088] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6089] ioctl(4, LOOP_SET_FD, 3 [pid 6091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6090] <... ioctl resumed>) = 0 [pid 6088] ioctl(4, LOOP_SET_FD, 3 [pid 4999] fstat(3, [pid 6091] <... write resumed>) = 2097152 [pid 6090] close(3 [pid 6089] <... ioctl resumed>) = 0 [pid 6088] <... ioctl resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6084, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6091] munmap(0x7f0ed4ac1000, 2097152 [pid 6090] <... close resumed>) = 0 [pid 6089] close(3 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 4999] getdents64(3, [pid 6091] <... munmap resumed>) = 0 [pid 6090] mkdir("./file0", 0777 [pid 6089] <... close resumed>) = 0 [pid 6088] close(3) = 0 [pid 6088] mkdir("./file0", 0777 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6090] <... mkdir resumed>) = 0 [pid 6088] <... mkdir resumed>) = 0 [pid 5000] <... restart_syscall resumed>) = 0 [pid 4999] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6091] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6089] mkdir("./file0", 0777 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6091] ioctl(4, LOOP_SET_FD, 3 [pid 6090] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6088] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] lstat("./88/binderfs", [pid 6091] <... ioctl resumed>) = 0 [pid 6089] <... mkdir resumed>) = 0 [pid 5000] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6091] close(3 [pid 6089] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] unlink("./88/binderfs" [pid 6091] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... unlink resumed>) = 0 [pid 6091] mkdir("./file0", 0777 [pid 5000] <... openat resumed>) = 3 [pid 4999] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6091] <... mkdir resumed>) = 0 [pid 5000] fstat(3, [ 108.468659][ T6090] loop0: detected capacity change from 0 to 4096 [ 108.473702][ T6089] loop5: detected capacity change from 0 to 4096 [ 108.482210][ T6088] loop3: detected capacity change from 0 to 4096 [ 108.495305][ T6091] loop4: detected capacity change from 0 to 4096 [pid 6091] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6089] <... mount resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5000] getdents64(3, [pid 6089] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] fstat(4, [pid 6090] <... mount resumed>) = 0 [pid 6089] <... openat resumed>) = 3 [pid 6088] <... mount resumed>) = 0 [pid 5000] lstat("./88/binderfs", [pid 6090] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6089] chdir("./file0" [pid 6088] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6090] <... openat resumed>) = 3 [pid 6089] <... chdir resumed>) = 0 [pid 6088] <... openat resumed>) = 3 [pid 5000] unlink("./88/binderfs" [pid 6090] chdir("./file0" [pid 6089] ioctl(4, LOOP_CLR_FD [pid 6088] chdir("./file0" [pid 5000] <... unlink resumed>) = 0 [pid 6090] <... chdir resumed>) = 0 [pid 6089] <... ioctl resumed>) = 0 [pid 6088] <... chdir resumed>) = 0 [pid 5000] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6090] ioctl(4, LOOP_CLR_FD [pid 6089] close(4 [pid 6088] ioctl(4, LOOP_CLR_FD [pid 6090] <... ioctl resumed>) = 0 [pid 6089] <... close resumed>) = 0 [pid 6088] <... ioctl resumed>) = 0 [pid 6090] close(4 [pid 6089] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6088] close(4 [pid 6090] <... close resumed>) = 0 [pid 6089] <... openat resumed>) = 4 [pid 6088] <... close resumed>) = 0 [pid 6090] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6089] unlink("./file1" [pid 6088] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6090] <... openat resumed>) = 4 [pid 6089] <... unlink resumed>) = 0 [pid 6088] <... openat resumed>) = 4 [pid 6090] unlink("./file1" [pid 6089] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6088] unlink("./file1" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./88/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./88") = 0 [pid 4999] mkdir("./89", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 6091] <... mount resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6091] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6096 [pid 6091] chdir("./file0") = 0 [pid 6091] ioctl(4, LOOP_CLR_FD) = 0 [pid 6091] close(4) = 0 [pid 6091] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6091] unlink("./file1" [pid 6088] <... unlink resumed>) = 0 [pid 6088] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0./strace-static-x86_64: Process 6096 attached [pid 6096] chdir("./89") = 0 [pid 6096] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 6096] setpgid(0, 0) = 0 [pid 6096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6096] write(3, "1000", 4) = 4 [ 108.524055][ T6092] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.535671][ T6094] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.547885][ T6093] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.563010][ T6095] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6096] close(3) = 0 [pid 6096] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6096] memfd_create("syzkaller", 0) = 3 [pid 6096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6091] <... unlink resumed>) = 0 [pid 5000] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6091] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6090] <... unlink resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 6090] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./88/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./88") = 0 [pid 5000] mkdir("./89", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6097 ./strace-static-x86_64: Process 6097 attached [pid 6097] chdir("./89") = 0 [pid 6097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6097] setpgid(0, 0) = 0 [pid 6097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6097] write(3, "1000", 4) = 4 [pid 6097] close(3) = 0 [pid 6097] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6097] memfd_create("syzkaller", 0) = 3 [pid 6097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6097] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6096] <... write resumed>) = 2097152 [pid 6096] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6096] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6088] <... pwritev resumed>) = 1114112 [pid 6096] <... openat resumed>) = 4 [pid 6089] <... pwritev resumed>) = 1114112 [pid 6088] exit_group(0 [pid 6096] ioctl(4, LOOP_SET_FD, 3 [pid 6089] exit_group(0) = ? [pid 6088] <... exit_group resumed>) = ? [pid 6096] <... ioctl resumed>) = 0 [pid 6096] close(3) = 0 [pid 6096] mkdir("./file0", 0777) = 0 [ 108.745120][ T6096] loop1: detected capacity change from 0 to 4096 [pid 6096] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6097] <... write resumed>) = 2097152 [pid 6097] munmap(0x7f0ed4ac1000, 2097152 [pid 6090] <... pwritev resumed>) = 1114112 [pid 6090] exit_group(0) = ? [pid 6096] <... mount resumed>) = 0 [pid 6096] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6096] chdir("./file0") = 0 [pid 6096] ioctl(4, LOOP_CLR_FD) = 0 [pid 6096] close(4) = 0 [pid 6096] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6097] <... munmap resumed>) = 0 [pid 6096] unlink("./file1" [pid 6097] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6097] ioctl(4, LOOP_SET_FD, 3 [pid 6091] <... pwritev resumed>) = 1114112 [pid 6089] +++ exited with 0 +++ [pid 6088] +++ exited with 0 +++ [pid 6091] exit_group(0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6089, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6088, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6091] <... exit_group resumed>) = ? [pid 5003] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 5003] fstat(3, [pid 5001] fstat(3, [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, [pid 5001] getdents64(3, [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./89/binderfs", [pid 5001] lstat("./89/binderfs", [pid 6090] +++ exited with 0 +++ [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./89/binderfs" [pid 5001] unlink("./89/binderfs" [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6090, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5003] <... unlink resumed>) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5003] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... unlink resumed>) = 0 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5001] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6097] <... ioctl resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6097] close(3 [pid 4998] <... openat resumed>) = 3 [pid 6097] <... close resumed>) = 0 [pid 4998] fstat(3, [pid 6097] mkdir("./file0", 0777 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6097] <... mkdir resumed>) = 0 [pid 4998] getdents64(3, [pid 6097] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./90/binderfs") = 0 [ 108.836899][ T6098] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.860661][ T6097] loop2: detected capacity change from 0 to 4096 [pid 4998] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./89/file0", [pid 6091] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6091, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5002] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./91/binderfs", [pid 5003] <... umount2 resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6097] <... mount resumed>) = 0 [pid 6096] <... unlink resumed>) = 0 [pid 5003] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] unlink("./91/binderfs" [pid 4998] <... umount2 resumed>) = 0 [pid 6097] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6096] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... unlink resumed>) = 0 [pid 6097] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6097] chdir("./file0" [pid 5003] lstat("./89/file0", [pid 5001] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... openat resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(4, [pid 6097] <... chdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] lstat("./90/file0", [pid 6097] ioctl(4, LOOP_CLR_FD [pid 5003] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] getdents64(4, [pid 6097] <... ioctl resumed>) = 0 [pid 5003] <... openat resumed>) = 4 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6097] close(4 [pid 5003] fstat(4, [pid 5002] <... umount2 resumed>) = 0 [pid 5001] getdents64(4, [pid 4998] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6097] <... close resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] getdents64(4, [pid 5001] close(4 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] <... close resumed>) = 0 [pid 5003] getdents64(4, [pid 5001] rmdir("./89/file0" [pid 6097] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] close(4 [pid 5001] getdents64(3, [pid 6097] <... openat resumed>) = 4 [pid 5003] <... close resumed>) = 0 [pid 5002] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6097] unlink("./file1" [pid 5003] rmdir("./89/file0" [pid 5001] close(3 [pid 5003] <... rmdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5003] getdents64(3, [pid 5001] rmdir("./89" [pid 6097] <... unlink resumed>) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 6097] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] close(3 [pid 5001] mkdir("./90", 0777 [pid 4998] fstat(4, [pid 5003] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... mkdir resumed>) = 0 [pid 5003] rmdir("./89" [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] <... rmdir resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5003] mkdir("./90", 0777 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5003] <... mkdir resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] close(3 [pid 5003] <... openat resumed>) = 3 [pid 5002] lstat("./91/file0", [pid 5001] <... close resumed>) = 0 [pid 4998] getdents64(4, [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] close(3 [pid 5002] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6100 [pid 4998] getdents64(4, [pid 5003] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 108.935899][ T6099] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] close(4 [pid 5002] <... openat resumed>) = 4 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6101 [pid 4998] <... close resumed>) = 0 [pid 5002] fstat(4, [pid 4998] rmdir("./90/file0" [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 4998] <... rmdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(3, [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 4998] close(3 [pid 5002] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 ./strace-static-x86_64: Process 6100 attached [pid 5002] rmdir("./91/file0" [pid 4998] rmdir("./90" [pid 6100] chdir("./90") = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 6100] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] getdents64(3, [pid 4998] mkdir("./91", 0777 [pid 6100] <... prctl resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6100] setpgid(0, 0./strace-static-x86_64: Process 6101 attached ) = 0 [pid 5002] close(3 [pid 4998] <... mkdir resumed>) = 0 [pid 6100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6101] chdir("./90" [pid 6100] <... openat resumed>) = 3 [pid 5002] rmdir("./91" [pid 6100] write(3, "1000", 4 [pid 4998] <... openat resumed>) = 3 [pid 5002] <... rmdir resumed>) = 0 [pid 6101] <... chdir resumed>) = 0 [pid 6100] <... write resumed>) = 4 [pid 5002] mkdir("./92", 0777 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6100] close(3 [pid 5002] <... mkdir resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6101] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6100] <... close resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4998] close(3 [pid 6101] <... prctl resumed>) = 0 [pid 6100] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... openat resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 6101] setpgid(0, 0 [pid 6100] <... symlink resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6101] <... setpgid resumed>) = 0 [pid 6100] memfd_create("syzkaller", 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6100] <... memfd_create resumed>) = 3 [pid 5002] close(3 [pid 6101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... close resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6102 [pid 6101] <... openat resumed>) = 3 [pid 6100] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6101] write(3, "1000", 4 [pid 6100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6101] <... write resumed>) = 4 [pid 6101] close(3 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6103 [pid 6101] <... close resumed>) = 0 [pid 6101] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6102 attached ) = 0 [pid 6102] chdir("./91" [pid 6101] memfd_create("syzkaller", 0 [pid 6102] <... chdir resumed>) = 0 [pid 6101] <... memfd_create resumed>) = 3 [pid 6102] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6102] <... prctl resumed>) = 0 [pid 6101] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6102] setpgid(0, 0) = 0 [pid 6102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6102] write(3, "1000", 4) = 4 [pid 6102] close(3) = 0 [pid 6102] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6103 attached ) = 0 [pid 6102] memfd_create("syzkaller", 0 [pid 6103] chdir("./92" [pid 6102] <... memfd_create resumed>) = 3 [pid 6103] <... chdir resumed>) = 0 [pid 6102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6103] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6102] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6103] <... prctl resumed>) = 0 [pid 6102] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6103] setpgid(0, 0) = 0 [pid 6103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6103] write(3, "1000", 4) = 4 [pid 6103] close(3) = 0 [pid 6103] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6103] memfd_create("syzkaller", 0) = 3 [pid 6103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6100] <... write resumed>) = 2097152 [pid 6100] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6100] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6100] ioctl(4, LOOP_SET_FD, 3 [pid 6103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6102] <... write resumed>) = 2097152 [pid 6103] <... write resumed>) = 2097152 [pid 6103] munmap(0x7f0ed4ac1000, 2097152 [pid 6102] munmap(0x7f0ed4ac1000, 2097152 [pid 6101] <... write resumed>) = 2097152 [pid 6100] <... ioctl resumed>) = 0 [pid 6096] <... pwritev resumed>) = 1114112 [pid 6101] munmap(0x7f0ed4ac1000, 2097152 [pid 6096] exit_group(0 [pid 6103] <... munmap resumed>) = 0 [pid 6102] <... munmap resumed>) = 0 [pid 6100] close(3 [pid 6096] <... exit_group resumed>) = ? [pid 6103] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6102] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6101] <... munmap resumed>) = 0 [pid 6100] <... close resumed>) = 0 [pid 6103] <... openat resumed>) = 4 [pid 6102] <... openat resumed>) = 4 [pid 6101] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6100] mkdir("./file0", 0777 [ 109.109011][ T6100] loop3: detected capacity change from 0 to 4096 [pid 6103] ioctl(4, LOOP_SET_FD, 3 [pid 6102] ioctl(4, LOOP_SET_FD, 3 [pid 6101] <... openat resumed>) = 4 [pid 6100] <... mkdir resumed>) = 0 [pid 6103] <... ioctl resumed>) = 0 [pid 6097] <... pwritev resumed>) = 1114112 [pid 6103] close(3 [pid 6097] exit_group(0 [pid 6103] <... close resumed>) = 0 [pid 6097] <... exit_group resumed>) = ? [pid 6103] mkdir("./file0", 0777 [pid 6102] <... ioctl resumed>) = 0 [pid 6101] ioctl(4, LOOP_SET_FD, 3 [pid 6100] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6102] close(3 [pid 6101] <... ioctl resumed>) = 0 [pid 6102] <... close resumed>) = 0 [pid 6101] close(3 [pid 6103] <... mkdir resumed>) = 0 [pid 6096] +++ exited with 0 +++ [pid 6102] mkdir("./file0", 0777 [pid 6101] <... close resumed>) = 0 [pid 6102] <... mkdir resumed>) = 0 [pid 6101] mkdir("./file0", 0777 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6096, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6103] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6102] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6101] <... mkdir resumed>) = 0 [pid 6101] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6100] <... mount resumed>) = 0 [pid 6100] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6100] chdir("./file0") = 0 [ 109.156791][ T6103] loop4: detected capacity change from 0 to 4096 [ 109.165444][ T6102] loop0: detected capacity change from 0 to 4096 [ 109.173825][ T6101] loop5: detected capacity change from 0 to 4096 [ 109.194131][ T6104] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6103] <... mount resumed>) = 0 [pid 6100] ioctl(4, LOOP_CLR_FD [pid 6103] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6100] <... ioctl resumed>) = 0 [pid 6103] <... openat resumed>) = 3 [pid 6100] close(4 [pid 6103] chdir("./file0" [pid 6100] <... close resumed>) = 0 [pid 6103] <... chdir resumed>) = 0 [pid 6100] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6103] ioctl(4, LOOP_CLR_FD [pid 6100] <... openat resumed>) = 4 [pid 6103] <... ioctl resumed>) = 0 [pid 6100] unlink("./file1" [pid 6103] close(4) = 0 [pid 6103] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6103] unlink("./file1" [pid 4999] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./89/binderfs") = 0 [pid 4999] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6097] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6097, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5000] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6102] <... mount resumed>) = 0 [pid 6102] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6102] chdir("./file0") = 0 [pid 6102] ioctl(4, LOOP_CLR_FD) = 0 [pid 6102] close(4) = 0 [pid 6102] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6102] unlink("./file1" [pid 5000] getdents64(3, [pid 4999] <... umount2 resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6101] <... mount resumed>) = 0 [pid 6101] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6101] chdir("./file0") = 0 [pid 6101] ioctl(4, LOOP_CLR_FD) = 0 [pid 6101] close(4) = 0 [pid 6101] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6101] unlink("./file1" [pid 6102] <... unlink resumed>) = 0 [pid 6102] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 109.207373][ T6105] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.235417][ T6106] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] lstat("./89/binderfs", [pid 6100] <... unlink resumed>) = 0 [pid 6100] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./89/binderfs" [pid 4999] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... unlink resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./89/file0", [pid 5000] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6103] <... unlink resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6103] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6101] <... unlink resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 109.247899][ T6107] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6101] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./89/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./89") = 0 [pid 4999] mkdir("./90", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6108 ./strace-static-x86_64: Process 6108 attached [pid 6108] chdir("./90") = 0 [pid 6108] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5000] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./89/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 6108] setpgid(0, 0 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./89/file0") = 0 [pid 6108] <... setpgid resumed>) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 6108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] rmdir("./89") = 0 [pid 6108] <... openat resumed>) = 3 [pid 5000] mkdir("./90", 0777 [pid 6108] write(3, "1000", 4 [pid 5000] <... mkdir resumed>) = 0 [pid 6108] <... write resumed>) = 4 [pid 6108] close(3) = 0 [pid 6108] symlink("/dev/binderfs", "./binderfs" [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 6108] <... symlink resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6108] memfd_create("syzkaller", 0 [pid 5000] close(3 [pid 6108] <... memfd_create resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6109 ./strace-static-x86_64: Process 6109 attached [pid 6109] chdir("./90") = 0 [pid 6109] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6109] setpgid(0, 0) = 0 [pid 6109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6109] write(3, "1000", 4) = 4 [pid 6109] close(3) = 0 [pid 6109] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6109] memfd_create("syzkaller", 0) = 3 [pid 6109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6108] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6102] <... pwritev resumed>) = 1114112 [pid 6102] exit_group(0) = ? [pid 6109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6109] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6109] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6109] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6109] close(3) = 0 [pid 6109] mkdir("./file0", 0777 [pid 6100] <... pwritev resumed>) = 1114112 [pid 6100] exit_group(0) = ? [pid 6108] <... write resumed>) = 2097152 [pid 6103] <... pwritev resumed>) = 1114112 [pid 6109] <... mkdir resumed>) = 0 [pid 6108] munmap(0x7f0ed4ac1000, 2097152 [pid 6103] exit_group(0 [pid 6109] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6103] <... exit_group resumed>) = ? [ 109.453485][ T6109] loop2: detected capacity change from 0 to 4096 [pid 6108] <... munmap resumed>) = 0 [pid 6102] +++ exited with 0 +++ [pid 6101] <... pwritev resumed>) = 1114112 [pid 6101] exit_group(0) = ? [pid 6108] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6100] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6102, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6108] <... openat resumed>) = 4 [pid 6108] ioctl(4, LOOP_SET_FD, 3 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6100, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5001] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... openat resumed>) = 3 [pid 4998] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] fstat(3, [pid 4998] <... openat resumed>) = 3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6108] <... ioctl resumed>) = 0 [pid 5001] getdents64(3, [pid 4998] getdents64(3, [pid 6108] close(3 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6108] <... close resumed>) = 0 [pid 5001] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./90/binderfs", [pid 4998] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./90/binderfs" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6108] mkdir("./file0", 0777 [pid 5001] <... unlink resumed>) = 0 [pid 4998] lstat("./91/binderfs", [pid 5001] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./91/binderfs") = 0 [pid 4998] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6109] <... mount resumed>) = 0 [pid 6109] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6109] chdir("./file0") = 0 [pid 6109] ioctl(4, LOOP_CLR_FD) = 0 [pid 6109] close(4) = 0 [pid 6109] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6109] unlink("./file1" [pid 6101] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6101, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5003] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./90/binderfs") = 0 [pid 5003] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6109] <... unlink resumed>) = 0 [pid 6109] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6108] <... mkdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [ 109.522134][ T6108] loop1: detected capacity change from 0 to 4096 [ 109.547851][ T6110] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6108] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = 0 [pid 4998] lstat("./91/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./90/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6103] +++ exited with 0 +++ [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6103, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5002] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... openat resumed>) = 4 [pid 4998] openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] fstat(4, [pid 4998] <... openat resumed>) = 4 [pid 5002] unlink("./92/binderfs") = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] fstat(4, [pid 5002] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./90/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 4998] getdents64(4, [pid 5001] getdents64(4, [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./90/file0") = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./90" [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] getdents64(4, [pid 5003] <... rmdir resumed>) = 0 [pid 5001] close(4 [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] mkdir("./91", 0777) = 0 [pid 5001] <... close resumed>) = 0 [pid 4998] close(4 [pid 5001] rmdir("./90/file0" [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6112 ./strace-static-x86_64: Process 6112 attached [pid 5001] getdents64(3, [pid 4998] rmdir("./91/file0" [pid 6112] chdir("./91" [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5001] close(3 [pid 4998] getdents64(3, [pid 6112] <... chdir resumed>) = 0 [pid 6112] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] rmdir("./90" [pid 4998] close(3 [pid 6112] <... prctl resumed>) = 0 [pid 6112] setpgid(0, 0) = 0 [pid 6112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... rmdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 6108] <... mount resumed>) = 0 [pid 5001] mkdir("./91", 0777 [pid 4998] rmdir("./91" [pid 6108] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6108] chdir("./file0" [pid 6112] <... openat resumed>) = 3 [pid 6108] <... chdir resumed>) = 0 [pid 6108] ioctl(4, LOOP_CLR_FD) = 0 [pid 6112] write(3, "1000", 4 [pid 6108] close(4 [pid 6112] <... write resumed>) = 4 [pid 6108] <... close resumed>) = 0 [pid 6112] close(3 [pid 6108] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6112] <... close resumed>) = 0 [pid 6108] <... openat resumed>) = 4 [pid 6112] symlink("/dev/binderfs", "./binderfs" [pid 6108] unlink("./file1" [pid 6112] <... symlink resumed>) = 0 [pid 6112] memfd_create("syzkaller", 0) = 3 [pid 6112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5002] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] mkdir("./92", 0777 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... openat resumed>) = 3 [pid 4998] <... mkdir resumed>) = 0 [pid 6108] <... unlink resumed>) = 0 [pid 5002] lstat("./92/file0", [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6108] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... openat resumed>) = 3 [pid 5002] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] close(3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... close resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] close(3 [pid 5002] <... openat resumed>) = 4 [pid 4998] <... close resumed>) = 0 [pid 5002] fstat(4, [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6113 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6114 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./92/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./92") = 0 [pid 5002] mkdir("./93", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 ./strace-static-x86_64: Process 6113 attached [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6113] chdir("./91") = 0 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6115 [pid 6113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 6114 attached [pid 6113] setpgid(0, 0) = 0 [ 109.654957][ T6111] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6114] chdir("./92" [pid 6113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6114] <... chdir resumed>) = 0 [pid 6113] <... openat resumed>) = 3 [pid 6114] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6113] write(3, "1000", 4 [pid 6114] <... prctl resumed>) = 0 [pid 6113] <... write resumed>) = 4 [pid 6114] setpgid(0, 0 [pid 6113] close(3 [pid 6114] <... setpgid resumed>) = 0 [pid 6113] <... close resumed>) = 0 ./strace-static-x86_64: Process 6115 attached [pid 6114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6113] symlink("/dev/binderfs", "./binderfs" [pid 6115] chdir("./93" [pid 6114] <... openat resumed>) = 3 [pid 6113] <... symlink resumed>) = 0 [pid 6115] <... chdir resumed>) = 0 [pid 6114] write(3, "1000", 4 [pid 6113] memfd_create("syzkaller", 0 [pid 6115] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6114] <... write resumed>) = 4 [pid 6113] <... memfd_create resumed>) = 3 [pid 6115] <... prctl resumed>) = 0 [pid 6114] close(3 [pid 6113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6115] setpgid(0, 0 [pid 6114] <... close resumed>) = 0 [pid 6113] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6115] <... setpgid resumed>) = 0 [pid 6114] symlink("/dev/binderfs", "./binderfs" [pid 6112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6114] <... symlink resumed>) = 0 [pid 6115] <... openat resumed>) = 3 [pid 6114] memfd_create("syzkaller", 0 [pid 6115] write(3, "1000", 4 [pid 6114] <... memfd_create resumed>) = 3 [pid 6115] <... write resumed>) = 4 [pid 6114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6115] close(3 [pid 6114] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6115] <... close resumed>) = 0 [pid 6113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6115] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6115] memfd_create("syzkaller", 0) = 3 [pid 6115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6109] <... pwritev resumed>) = 1114112 [pid 6109] exit_group(0) = ? [pid 6114] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6113] <... write resumed>) = 2097152 [pid 6112] <... write resumed>) = 2097152 [pid 6115] <... write resumed>) = 2097152 [pid 6114] <... write resumed>) = 2097152 [pid 6113] munmap(0x7f0ed4ac1000, 2097152 [pid 6112] munmap(0x7f0ed4ac1000, 2097152 [pid 6109] +++ exited with 0 +++ [pid 6114] munmap(0x7f0ed4ac1000, 2097152 [pid 6112] <... munmap resumed>) = 0 [pid 6112] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6109, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6114] <... munmap resumed>) = 0 [pid 6113] <... munmap resumed>) = 0 [pid 6112] <... openat resumed>) = 4 [pid 5000] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6114] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6113] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6112] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6115] munmap(0x7f0ed4ac1000, 2097152 [pid 6114] <... openat resumed>) = 4 [pid 6113] <... openat resumed>) = 4 [pid 5000] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6114] ioctl(4, LOOP_SET_FD, 3 [pid 6113] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... openat resumed>) = 3 [pid 6115] <... munmap resumed>) = 0 [pid 6112] <... ioctl resumed>) = 0 [pid 6108] <... pwritev resumed>) = 1114112 [pid 5000] fstat(3, [pid 6115] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6112] close(3 [pid 6108] exit_group(0 [pid 6115] <... openat resumed>) = 4 [pid 6112] <... close resumed>) = 0 [pid 6108] <... exit_group resumed>) = ? [pid 6115] ioctl(4, LOOP_SET_FD, 3 [pid 6114] <... ioctl resumed>) = 0 [pid 6113] <... ioctl resumed>) = 0 [pid 6112] mkdir("./file0", 0777 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6114] close(3 [pid 6113] close(3 [pid 5000] getdents64(3, [pid 6114] <... close resumed>) = 0 [pid 6113] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6114] mkdir("./file0", 0777 [pid 6113] mkdir("./file0", 0777 [pid 5000] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6114] <... mkdir resumed>) = 0 [pid 6113] <... mkdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6114] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6113] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] lstat("./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./90/binderfs") = 0 [pid 5000] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6112] <... mkdir resumed>) = 0 [pid 6112] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6115] <... ioctl resumed>) = 0 [pid 6115] close(3) = 0 [pid 6115] mkdir("./file0", 0777) = 0 [ 109.822102][ T6112] loop5: detected capacity change from 0 to 4096 [ 109.829879][ T6114] loop0: detected capacity change from 0 to 4096 [ 109.836507][ T6113] loop3: detected capacity change from 0 to 4096 [ 109.844096][ T6115] loop4: detected capacity change from 0 to 4096 [pid 6115] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 6113] <... mount resumed>) = 0 [pid 5000] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6113] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6113] chdir("./file0") = 0 [pid 6113] ioctl(4, LOOP_CLR_FD) = 0 [pid 6113] close(4 [pid 6115] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6114] <... mount resumed>) = 0 [pid 6113] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6115] <... openat resumed>) = 3 [pid 6114] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] lstat("./90/file0", [pid 6115] chdir("./file0" [pid 6114] <... openat resumed>) = 3 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6115] <... chdir resumed>) = 0 [pid 6114] chdir("./file0" [pid 5000] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6115] ioctl(4, LOOP_CLR_FD [pid 6114] <... chdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6115] <... ioctl resumed>) = 0 [pid 6114] ioctl(4, LOOP_CLR_FD [pid 5000] openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6115] close(4 [pid 6114] <... ioctl resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 6115] <... close resumed>) = 0 [pid 6114] close(4 [pid 5000] fstat(4, [pid 6115] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6114] <... close resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6114] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./90/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./90") = 0 [pid 5000] mkdir("./91", 0777) = 0 [ 109.879601][ T6116] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.881723][ T6117] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.900269][ T6119] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 6115] <... openat resumed>) = 4 [pid 6114] <... openat resumed>) = 4 [pid 6113] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6112] <... mount resumed>) = 0 [pid 6108] +++ exited with 0 +++ [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6115] unlink("./file1" [pid 6114] unlink("./file1" [pid 6112] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] close(3 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6108, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6113] <... openat resumed>) = 4 [pid 6113] unlink("./file1" [pid 6112] <... openat resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 6112] chdir("./file0" [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6113] <... unlink resumed>) = 0 [pid 6112] <... chdir resumed>) = 0 [pid 6115] <... unlink resumed>) = 0 [pid 6113] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6112] ioctl(4, LOOP_CLR_FD [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6120 [pid 4999] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6115] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6112] <... ioctl resumed>) = 0 [pid 6112] close(4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6112] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6114] <... unlink resumed>) = 0 [pid 6114] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6112] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4999] <... openat resumed>) = 3 [pid 6112] <... openat resumed>) = 4 [ 109.921595][ T6118] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] fstat(3, ./strace-static-x86_64: Process 6120 attached [pid 6112] unlink("./file1" [pid 6120] chdir("./91" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6120] <... chdir resumed>) = 0 [pid 4999] getdents64(3, [pid 6112] <... unlink resumed>) = 0 [pid 6120] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6112] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6120] <... prctl resumed>) = 0 [pid 4999] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6120] setpgid(0, 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6120] <... setpgid resumed>) = 0 [pid 4999] lstat("./90/binderfs", [pid 6120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6120] write(3, "1000", 4 [pid 4999] unlink("./90/binderfs" [pid 6120] <... write resumed>) = 4 [pid 6120] close(3 [pid 4999] <... unlink resumed>) = 0 [pid 6120] <... close resumed>) = 0 [pid 4999] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6120] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6120] memfd_create("syzkaller", 0) = 3 [pid 6120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./90/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6120] <... write resumed>) = 2097152 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./90/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./90") = 0 [pid 4999] mkdir("./91", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6121 [pid 6120] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6120] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6120] ioctl(4, LOOP_SET_FD, 3 [pid 6113] <... pwritev resumed>) = 1114112 [pid 6113] exit_group(0) = ? [pid 6120] <... ioctl resumed>) = 0 [pid 6120] close(3) = 0 [pid 6120] mkdir("./file0", 0777) = 0 [pid 6120] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6115] <... pwritev resumed>) = 1114112 [pid 6115] exit_group(0) = ? ./strace-static-x86_64: Process 6121 attached [pid 6121] chdir("./91") = 0 [pid 6121] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6121] setpgid(0, 0) = 0 [pid 6121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6121] write(3, "1000", 4) = 4 [pid 6121] close(3) = 0 [pid 6121] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6121] memfd_create("syzkaller", 0) = 3 [pid 6121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [ 110.099142][ T6120] loop2: detected capacity change from 0 to 4096 [pid 6121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6112] <... pwritev resumed>) = 1114112 [pid 6114] <... pwritev resumed>) = 1114112 [pid 6113] +++ exited with 0 +++ [pid 6112] exit_group(0 [pid 6114] exit_group(0 [pid 6112] <... exit_group resumed>) = ? [pid 6121] <... write resumed>) = 2097152 [pid 6120] <... mount resumed>) = 0 [pid 6114] <... exit_group resumed>) = ? [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6113, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6121] munmap(0x7f0ed4ac1000, 2097152 [pid 6120] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6115] +++ exited with 0 +++ [pid 6121] <... munmap resumed>) = 0 [pid 6120] <... openat resumed>) = 3 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 6121] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6120] chdir("./file0" [pid 6121] <... openat resumed>) = 4 [pid 6120] <... chdir resumed>) = 0 [pid 5001] <... restart_syscall resumed>) = 0 [pid 6121] ioctl(4, LOOP_SET_FD, 3 [pid 6120] ioctl(4, LOOP_CLR_FD [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6115, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6120] <... ioctl resumed>) = 0 [pid 5002] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6120] close(4 [pid 6121] <... ioctl resumed>) = 0 [pid 6120] <... close resumed>) = 0 [pid 6112] +++ exited with 0 +++ [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6121] close(3 [pid 6120] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6114] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6112, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5002] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6121] <... close resumed>) = 0 [pid 6120] <... openat resumed>) = 4 [pid 5002] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6114, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 6121] mkdir("./file0", 0777 [pid 6120] unlink("./file1" [pid 5002] fstat(3, [pid 5001] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 6121] <... mkdir resumed>) = 0 [pid 6120] <... unlink resumed>) = 0 [pid 5003] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... openat resumed>) = 3 [pid 4998] <... restart_syscall resumed>) = 0 [pid 6121] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 110.194122][ T6122] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.211057][ T6121] loop1: detected capacity change from 0 to 4096 [pid 6120] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] getdents64(3, [pid 5001] fstat(3, [pid 6121] <... mount resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6121] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5003] <... openat resumed>) = 3 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6121] chdir("./file0" [pid 5003] fstat(3, [pid 5002] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6121] <... chdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6121] ioctl(4, LOOP_CLR_FD [pid 5002] lstat("./93/binderfs", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] getdents64(3, [pid 6121] <... ioctl resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6121] close(4 [pid 5002] unlink("./93/binderfs" [pid 5001] lstat("./91/binderfs", [pid 5003] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(3, [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6121] <... close resumed>) = 0 [pid 6121] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... unlink resumed>) = 0 [pid 5001] unlink("./91/binderfs" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6121] <... openat resumed>) = 4 [pid 5003] lstat("./91/binderfs", [pid 5002] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... unlink resumed>) = 0 [pid 4998] getdents64(3, [pid 6121] unlink("./file1" [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] unlink("./91/binderfs" [pid 4998] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./92/binderfs", [pid 5003] <... unlink resumed>) = 0 [pid 5003] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6121] <... unlink resumed>) = 0 [pid 4998] unlink("./92/binderfs" [pid 6121] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] <... unlink resumed>) = 0 [ 110.246505][ T6123] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5003] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] lstat("./91/file0", [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] lstat("./93/file0", [pid 5001] lstat("./91/file0", [pid 5003] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... openat resumed>) = 4 [pid 5002] openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] fstat(4, [pid 5001] openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5001] <... openat resumed>) = 4 [pid 5003] getdents64(4, [pid 5002] fstat(4, [pid 5001] fstat(4, [pid 4998] <... umount2 resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 5002] getdents64(4, [pid 5001] getdents64(4, [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] <... close resumed>) = 0 [pid 5002] getdents64(4, [pid 5001] getdents64(4, [pid 5003] rmdir("./91/file0" [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... rmdir resumed>) = 0 [pid 5002] close(4 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] getdents64(3, [pid 5002] <... close resumed>) = 0 [pid 5001] close(4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] rmdir("./93/file0" [pid 5001] <... close resumed>) = 0 [pid 5003] close(3 [pid 4998] lstat("./92/file0", [pid 5003] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] rmdir("./91/file0" [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] rmdir("./91" [pid 5002] getdents64(3, [pid 4998] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... rmdir resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] mkdir("./92", 0777 [pid 5002] close(3 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... mkdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] close(3 [pid 4998] <... openat resumed>) = 4 [pid 6120] <... pwritev resumed>) = 1114112 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] rmdir("./93" [pid 5001] <... close resumed>) = 0 [pid 4998] fstat(4, [pid 6120] exit_group(0 [pid 5003] <... openat resumed>) = 3 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6120] <... exit_group resumed>) = ? [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] <... rmdir resumed>) = 0 [pid 5001] rmdir("./91" [pid 4998] getdents64(4, [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] mkdir("./94", 0777 [pid 5001] <... rmdir resumed>) = 0 [pid 5003] close(3 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] mkdir("./92", 0777 [pid 5003] <... close resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] <... mkdir resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... openat resumed>) = 3 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] <... openat resumed>) = 3 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6125 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5002] close(3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... close resumed>) = 0 [pid 5001] close(3 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6126 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6127 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./92/file0"./strace-static-x86_64: Process 6127 attached ) = 0 [pid 6127] chdir("./92" [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./92" [pid 6127] <... chdir resumed>) = 0 [pid 6127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6127] setpgid(0, 0 [pid 4998] <... rmdir resumed>) = 0 [pid 6127] <... setpgid resumed>) = 0 [pid 4998] mkdir("./93", 0777 [pid 6127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6127] write(3, "1000", 4) = 4 [pid 4998] <... mkdir resumed>) = 0 [pid 6127] close(3) = 0 [pid 6127] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6127] memfd_create("syzkaller", 0) = 3 [pid 4998] <... openat resumed>) = 3 [pid 6127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6127] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 6126 attached [pid 4998] close(3 [pid 6126] chdir("./94" [pid 4998] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6128 [pid 6126] <... chdir resumed>) = 0 [pid 6126] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6125 attached ) = 0 [pid 6126] setpgid(0, 0) = 0 [pid 6125] chdir("./92" [pid 6126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6125] <... chdir resumed>) = 0 [pid 6126] <... openat resumed>) = 3 [pid 6125] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6128 attached [pid 6126] write(3, "1000", 4) = 4 [pid 6128] chdir("./93" [pid 6125] <... prctl resumed>) = 0 [pid 6126] close(3 [pid 6125] setpgid(0, 0 [pid 6126] <... close resumed>) = 0 [pid 6125] <... setpgid resumed>) = 0 [pid 6128] <... chdir resumed>) = 0 [pid 6126] symlink("/dev/binderfs", "./binderfs" [pid 6125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6128] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6126] <... symlink resumed>) = 0 [pid 6125] <... openat resumed>) = 3 [pid 6126] memfd_create("syzkaller", 0 [pid 6125] write(3, "1000", 4 [pid 6126] <... memfd_create resumed>) = 3 [pid 6128] <... prctl resumed>) = 0 [pid 6125] <... write resumed>) = 4 [pid 6128] setpgid(0, 0 [pid 6126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6125] close(3 [pid 6128] <... setpgid resumed>) = 0 [pid 6126] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6125] <... close resumed>) = 0 [pid 6125] symlink("/dev/binderfs", "./binderfs" [pid 6128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6125] <... symlink resumed>) = 0 [pid 6128] <... openat resumed>) = 3 [pid 6125] memfd_create("syzkaller", 0) = 3 [pid 6128] write(3, "1000", 4 [pid 6125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6125] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6128] <... write resumed>) = 4 [pid 6128] close(3 [pid 6126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6121] <... pwritev resumed>) = 1114112 [pid 6120] +++ exited with 0 +++ [pid 6128] <... close resumed>) = 0 [pid 6121] exit_group(0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6120, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6128] symlink("/dev/binderfs", "./binderfs" [pid 6121] <... exit_group resumed>) = ? [pid 6128] <... symlink resumed>) = 0 [pid 6125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6128] memfd_create("syzkaller", 0 [pid 5000] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6128] <... memfd_create resumed>) = 3 [pid 5000] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6128] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5000] lstat("./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./91/binderfs") = 0 [pid 5000] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... umount2 resumed>) = 0 [pid 6126] <... write resumed>) = 2097152 [pid 6126] munmap(0x7f0ed4ac1000, 2097152 [pid 6125] <... write resumed>) = 2097152 [pid 5000] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6126] <... munmap resumed>) = 0 [pid 6125] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6126] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] lstat("./91/file0", [pid 6126] <... openat resumed>) = 4 [pid 6125] <... munmap resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6126] ioctl(4, LOOP_SET_FD, 3 [pid 6125] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6127] <... write resumed>) = 2097152 [pid 6127] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6125] <... openat resumed>) = 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6125] ioctl(4, LOOP_SET_FD, 3 [pid 5000] openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6126] <... ioctl resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 6127] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6126] close(3 [pid 5000] fstat(4, [pid 6127] <... openat resumed>) = 4 [pid 6126] <... close resumed>) = 0 [pid 6127] ioctl(4, LOOP_SET_FD, 3 [pid 6128] <... write resumed>) = 2097152 [pid 6126] mkdir("./file0", 0777 [pid 6125] <... ioctl resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6126] <... mkdir resumed>) = 0 [pid 6125] close(3 [pid 5000] getdents64(4, [pid 6126] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6125] <... close resumed>) = 0 [pid 6121] +++ exited with 0 +++ [pid 6128] munmap(0x7f0ed4ac1000, 2097152 [pid 6127] <... ioctl resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6128] <... munmap resumed>) = 0 [pid 6127] close(3 [pid 5000] getdents64(4, [pid 6127] <... close resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6121, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6127] mkdir("./file0", 0777 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6128] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6127] <... mkdir resumed>) = 0 [pid 5000] close(4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6128] <... openat resumed>) = 4 [pid 6127] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6125] mkdir("./file0", 0777 [pid 5000] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6128] ioctl(4, LOOP_SET_FD, 3 [ 110.522133][ T6126] loop4: detected capacity change from 0 to 4096 [ 110.530227][ T6125] loop5: detected capacity change from 0 to 4096 [ 110.540026][ T6127] loop3: detected capacity change from 0 to 4096 [ 110.557405][ T6129] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6126] <... mount resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 6126] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6125] <... mkdir resumed>) = 0 [pid 5000] rmdir("./91/file0" [pid 6126] <... openat resumed>) = 3 [pid 6125] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] <... rmdir resumed>) = 0 [pid 6128] <... ioctl resumed>) = 0 [pid 6126] chdir("./file0" [pid 5000] getdents64(3, [pid 4999] fstat(3, [pid 6128] close(3 [pid 6126] <... chdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6128] <... close resumed>) = 0 [pid 6126] ioctl(4, LOOP_CLR_FD [pid 5000] close(3 [pid 4999] getdents64(3, [pid 6128] mkdir("./file0", 0777 [pid 6126] <... ioctl resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6128] <... mkdir resumed>) = 0 [pid 6126] close(4 [pid 5000] rmdir("./91" [pid 4999] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6128] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6125] <... mount resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6126] <... close resumed>) = 0 [pid 6125] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] <... rmdir resumed>) = 0 [pid 6126] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6125] <... openat resumed>) = 3 [pid 5000] mkdir("./92", 0777 [pid 6125] chdir("./file0" [pid 5000] <... mkdir resumed>) = 0 [pid 6125] <... chdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6125] ioctl(4, LOOP_CLR_FD [pid 5000] <... openat resumed>) = 3 [pid 6125] <... ioctl resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 6125] close(4 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6125] <... close resumed>) = 0 [pid 5000] close(3 [pid 6125] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6127] <... mount resumed>) = 0 [pid 6126] <... openat resumed>) = 4 [pid 6125] <... openat resumed>) = 4 [pid 4999] lstat("./91/binderfs", [pid 6127] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6126] unlink("./file1" [pid 6125] unlink("./file1" [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6132 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6127] <... openat resumed>) = 3 [pid 6126] <... unlink resumed>) = 0 [pid 4999] unlink("./91/binderfs" [pid 6127] chdir("./file0" [pid 6126] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6125] <... unlink resumed>) = 0 [pid 6125] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] <... unlink resumed>) = 0 [pid 6127] <... chdir resumed>) = 0 [pid 4999] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6127] ioctl(4, LOOP_CLR_FD) = 0 [pid 6127] close(4) = 0 [pid 6127] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6127] unlink("./file1"./strace-static-x86_64: Process 6132 attached ) = 0 [pid 6127] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6132] chdir("./92") = 0 [pid 6132] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 110.559174][ T6128] loop0: detected capacity change from 0 to 4096 [ 110.585827][ T6131] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.601865][ T6130] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6132] setpgid(0, 0) = 0 [pid 6132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6132] write(3, "1000", 4) = 4 [pid 6132] close(3) = 0 [pid 6132] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6132] memfd_create("syzkaller", 0 [pid 4999] <... umount2 resumed>) = 0 [pid 6132] <... memfd_create resumed>) = 3 [pid 4999] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6132] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 4999] lstat("./91/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./91/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./91") = 0 [pid 4999] mkdir("./92", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6128] <... mount resumed>) = 0 [pid 6128] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] close(3 [pid 6128] <... openat resumed>) = 3 [pid 6128] chdir("./file0") = 0 [pid 6128] ioctl(4, LOOP_CLR_FD [pid 4999] <... close resumed>) = 0 [pid 6128] <... ioctl resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6128] close(4) = 0 [pid 6128] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6134 [pid 6128] <... openat resumed>) = 4 [pid 6128] unlink("./file1"./strace-static-x86_64: Process 6134 attached [pid 6134] chdir("./92") = 0 [pid 6134] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6134] setpgid(0, 0) = 0 [pid 6134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6125] <... pwritev resumed>) = 1114112 [pid 6134] write(3, "1000", 4 [pid 6125] exit_group(0) = ? [pid 6134] <... write resumed>) = 4 [pid 6134] close(3 [pid 6132] <... write resumed>) = 2097152 [pid 6134] <... close resumed>) = 0 [pid 6134] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6134] memfd_create("syzkaller", 0) = 3 [pid 6134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [ 110.701560][ T6133] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6132] munmap(0x7f0ed4ac1000, 2097152 [pid 6128] <... unlink resumed>) = 0 [pid 6128] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6132] <... munmap resumed>) = 0 [pid 6132] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6132] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6134] <... write resumed>) = 2097152 [pid 6132] close(3 [pid 6134] munmap(0x7f0ed4ac1000, 2097152 [pid 6132] <... close resumed>) = 0 [pid 6125] +++ exited with 0 +++ [pid 6132] mkdir("./file0", 0777) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6125, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 6132] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./92/binderfs") = 0 [ 110.801040][ T6132] loop2: detected capacity change from 0 to 4096 [pid 6134] <... munmap resumed>) = 0 [pid 5003] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6132] <... mount resumed>) = 0 [pid 6127] <... pwritev resumed>) = 1114112 [pid 6126] <... pwritev resumed>) = 1114112 [pid 6126] exit_group(0) = ? [pid 6134] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6132] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6127] exit_group(0 [pid 6134] <... openat resumed>) = 4 [pid 6132] <... openat resumed>) = 3 [pid 6127] <... exit_group resumed>) = ? [pid 6132] chdir("./file0" [pid 6134] ioctl(4, LOOP_SET_FD, 3 [pid 6132] <... chdir resumed>) = 0 [pid 6134] <... ioctl resumed>) = 0 [pid 6132] ioctl(4, LOOP_CLR_FD) = 0 [pid 6127] +++ exited with 0 +++ [pid 6134] close(3 [pid 6132] close(4 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6127, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6132] <... close resumed>) = 0 [pid 6134] <... close resumed>) = 0 [pid 6132] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6134] mkdir("./file0", 0777 [pid 5001] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6134] <... mkdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6134] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6132] <... openat resumed>) = 4 [pid 6132] unlink("./file1" [pid 5001] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6132] <... unlink resumed>) = 0 [pid 6132] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./92/binderfs") = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5001] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./92/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 110.859400][ T6135] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.891593][ T6134] loop1: detected capacity change from 0 to 4096 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./92/file0") = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./92") = 0 [pid 5003] mkdir("./93", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3 [pid 6134] <... mount resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 6134] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6126] +++ exited with 0 +++ [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6134] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6137 [pid 6134] chdir("./file0" [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6126, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5001] lstat("./92/file0", [pid 5002] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6134] <... chdir resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6134] ioctl(4, LOOP_CLR_FD [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6134] <... ioctl resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6137 attached [pid 6134] close(4 [pid 5002] <... openat resumed>) = 3 [pid 5001] openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6134] <... close resumed>) = 0 [pid 6137] chdir("./93") = 0 [pid 6137] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6137] setpgid(0, 0) = 0 [pid 6137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6137] write(3, "1000", 4) = 4 [pid 6137] close(3) = 0 [pid 6137] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6137] memfd_create("syzkaller", 0) = 3 [pid 6137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6134] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] fstat(3, [pid 5001] fstat(4, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6134] <... openat resumed>) = 4 [pid 5002] getdents64(3, [pid 5001] getdents64(4, [pid 6134] unlink("./file1" [pid 6128] <... pwritev resumed>) = 1114112 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6128] exit_group(0 [pid 5002] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, [pid 6128] <... exit_group resumed>) = ? [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] lstat("./94/binderfs", [pid 5001] close(4 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... close resumed>) = 0 [pid 5002] unlink("./94/binderfs" [pid 5001] rmdir("./92/file0") = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5001] getdents64(3, [pid 5002] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [ 110.956878][ T6136] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] close(3) = 0 [pid 5001] rmdir("./92") = 0 [pid 5001] mkdir("./93", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 6134] <... unlink resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 6134] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6138 ./strace-static-x86_64: Process 6138 attached [pid 6138] chdir("./93") = 0 [pid 6138] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6138] setpgid(0, 0) = 0 [pid 6138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... umount2 resumed>) = 0 [pid 6138] <... openat resumed>) = 3 [pid 6138] write(3, "1000", 4) = 4 [pid 5002] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6138] close(3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6138] <... close resumed>) = 0 [pid 5002] lstat("./94/file0", [pid 6138] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6138] <... symlink resumed>) = 0 [pid 6137] <... write resumed>) = 2097152 [pid 5002] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6138] memfd_create("syzkaller", 0 [pid 6137] munmap(0x7f0ed4ac1000, 2097152 [pid 6138] <... memfd_create resumed>) = 3 [pid 5002] openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... openat resumed>) = 4 [pid 6138] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./94/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6137] <... munmap resumed>) = 0 [pid 5002] close(3 [pid 6137] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5002] <... close resumed>) = 0 [pid 6137] ioctl(4, LOOP_SET_FD, 3 [pid 5002] rmdir("./94" [pid 6137] <... ioctl resumed>) = 0 [pid 6137] close(3) = 0 [pid 6137] mkdir("./file0", 0777 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./95", 0777) = 0 [pid 6137] <... mkdir resumed>) = 0 [pid 6137] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 6132] <... pwritev resumed>) = 1114112 [pid 5002] <... close resumed>) = 0 [pid 6132] exit_group(0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6132] <... exit_group resumed>) = ? [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6139 [pid 6128] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6128, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./93/binderfs") = 0 [pid 4998] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6139 attached [pid 6138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6139] chdir("./95") = 0 [pid 6139] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6139] setpgid(0, 0) = 0 [pid 6139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6139] write(3, "1000", 4) = 4 [pid 6139] close(3) = 0 [ 111.086083][ T6137] loop5: detected capacity change from 0 to 4096 [pid 6139] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 6139] memfd_create("syzkaller", 0) = 3 [pid 6132] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6132, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 4998] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./93/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... restart_syscall resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 4998] fstat(4, [pid 5000] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6137] <... mount resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6139] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6137] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] <... openat resumed>) = 3 [pid 4998] getdents64(4, [pid 6137] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 6137] chdir("./file0" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6137] <... chdir resumed>) = 0 [pid 5000] getdents64(3, [pid 6137] ioctl(4, LOOP_CLR_FD [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] getdents64(4, [pid 6137] <... ioctl resumed>) = 0 [pid 5000] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6137] close(4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6137] <... close resumed>) = 0 [pid 5000] lstat("./92/binderfs", [pid 6137] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] close(4 [pid 6139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6138] <... write resumed>) = 2097152 [pid 6137] <... openat resumed>) = 4 [pid 5000] unlink("./92/binderfs" [pid 4998] <... close resumed>) = 0 [pid 6137] unlink("./file1" [pid 5000] <... unlink resumed>) = 0 [pid 4998] rmdir("./93/file0" [pid 5000] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... rmdir resumed>) = 0 [pid 6138] munmap(0x7f0ed4ac1000, 2097152 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./93" [pid 6139] <... write resumed>) = 2097152 [pid 6138] <... munmap resumed>) = 0 [pid 6137] <... unlink resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 6138] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 111.156340][ T6140] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6138] ioctl(4, LOOP_SET_FD, 3 [pid 6137] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] mkdir("./94", 0777 [pid 6138] <... ioctl resumed>) = 0 [pid 6138] close(3) = 0 [pid 6138] mkdir("./file0", 0777) = 0 [pid 6138] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6139] munmap(0x7f0ed4ac1000, 2097152 [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6139] <... munmap resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6139] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6139] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6139] close(3) = 0 [pid 6139] mkdir("./file0", 0777 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6141 [pid 6139] <... mkdir resumed>) = 0 [pid 6139] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6138] <... mount resumed>) = 0 [pid 6138] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6138] chdir("./file0") = 0 [pid 6138] ioctl(4, LOOP_CLR_FD) = 0 [pid 6138] close(4) = 0 ./strace-static-x86_64: Process 6141 attached [pid 6138] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6141] chdir("./94" [pid 6138] <... openat resumed>) = 4 [pid 6141] <... chdir resumed>) = 0 [pid 6138] unlink("./file1" [pid 6141] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6141] setpgid(0, 0) = 0 [pid 6141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6141] write(3, "1000", 4) = 4 [pid 6141] close(3) = 0 [ 111.198265][ T6138] loop3: detected capacity change from 0 to 4096 [ 111.221775][ T6139] loop4: detected capacity change from 0 to 4096 [pid 6141] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 6141] memfd_create("syzkaller", 0 [pid 5000] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6141] <... memfd_create resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] lstat("./92/file0", [pid 6141] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./92/file0" [pid 6139] <... mount resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 6139] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] getdents64(3, [pid 6139] <... openat resumed>) = 3 [pid 6139] chdir("./file0" [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6139] <... chdir resumed>) = 0 [pid 5000] close(3 [pid 6139] ioctl(4, LOOP_CLR_FD [pid 5000] <... close resumed>) = 0 [pid 6139] <... ioctl resumed>) = 0 [pid 5000] rmdir("./92" [pid 6139] close(4) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 6139] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] mkdir("./93", 0777 [pid 6139] <... openat resumed>) = 4 [pid 6139] unlink("./file1" [pid 5000] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6144 [pid 6134] <... pwritev resumed>) = 1114112 [pid 6134] exit_group(0) = ? [pid 6141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 6144 attached [pid 6144] chdir("./93") = 0 [pid 6144] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6138] <... unlink resumed>) = 0 [pid 6144] <... prctl resumed>) = 0 [pid 6138] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 111.250748][ T6142] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.277222][ T6143] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6144] setpgid(0, 0) = 0 [pid 6144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6144] write(3, "1000", 4) = 4 [pid 6144] close(3) = 0 [pid 6144] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6144] memfd_create("syzkaller", 0) = 3 [pid 6144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6139] <... unlink resumed>) = 0 [pid 6139] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6141] <... write resumed>) = 2097152 [pid 6141] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6141] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6141] ioctl(4, LOOP_SET_FD, 3 [pid 6134] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6134, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 6141] <... ioctl resumed>) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 6141] close(3 [pid 4999] <... restart_syscall resumed>) = 0 [pid 6141] <... close resumed>) = 0 [pid 6141] mkdir("./file0", 0777 [pid 4999] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6141] <... mkdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6141] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./92/binderfs" [pid 6144] <... write resumed>) = 2097152 [pid 4999] <... unlink resumed>) = 0 [pid 6144] munmap(0x7f0ed4ac1000, 2097152 [pid 4999] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6144] <... munmap resumed>) = 0 [pid 6144] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 111.388139][ T6141] loop0: detected capacity change from 0 to 4096 [ 111.425760][ T6144] loop2: detected capacity change from 0 to 4096 [pid 6144] ioctl(4, LOOP_SET_FD, 3 [pid 6137] <... pwritev resumed>) = 1114112 [pid 4999] <... umount2 resumed>) = 0 [pid 6137] exit_group(0) = ? [pid 6141] <... mount resumed>) = 0 [pid 6141] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 4999] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./92/file0", [pid 6141] chdir("./file0") = 0 [pid 6141] ioctl(4, LOOP_CLR_FD) = 0 [pid 6141] close(4 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6141] <... close resumed>) = 0 [pid 6144] <... ioctl resumed>) = 0 [pid 4999] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6144] close(3 [pid 6141] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6144] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6144] mkdir("./file0", 0777) = 0 [pid 4999] <... openat resumed>) = 4 [pid 6144] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6141] <... openat resumed>) = 4 [pid 4999] fstat(4, [pid 6141] unlink("./file1" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./92/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./92") = 0 [pid 4999] mkdir("./93", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 6139] <... pwritev resumed>) = 1114112 [pid 4999] <... close resumed>) = 0 [pid 6139] exit_group(0 [ 111.437066][ T6145] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6139] <... exit_group resumed>) = ? [pid 6141] <... unlink resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6146 [pid 6141] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0./strace-static-x86_64: Process 6146 attached [pid 6146] chdir("./93") = 0 [pid 6146] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6146] setpgid(0, 0) = 0 [pid 6146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6146] write(3, "1000", 4) = 4 [pid 6146] close(3) = 0 [pid 6146] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6146] memfd_create("syzkaller", 0) = 3 [pid 6146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6138] <... pwritev resumed>) = 1114112 [pid 6138] exit_group(0 [pid 6137] +++ exited with 0 +++ [pid 6138] <... exit_group resumed>) = ? [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6137, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5003] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./93/binderfs") = 0 [pid 5003] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6144] <... mount resumed>) = 0 [pid 6144] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6144] chdir("./file0") = 0 [pid 6139] +++ exited with 0 +++ [pid 6144] ioctl(4, LOOP_CLR_FD) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6139, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6144] close(4 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 6144] <... close resumed>) = 0 [pid 5002] <... restart_syscall resumed>) = 0 [pid 6144] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6144] unlink("./file1" [pid 5002] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./95/binderfs") = 0 [pid 5002] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 6138] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6138, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5001] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6144] <... unlink resumed>) = 0 [ 111.536242][ T6147] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6144] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5001] fstat(3, [pid 6146] <... write resumed>) = 2097152 [pid 6141] <... pwritev resumed>) = 1114112 [pid 5002] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 6141] exit_group(0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6141] <... exit_group resumed>) = ? [pid 5002] lstat("./95/file0", [pid 5001] unlink("./93/binderfs" [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5002] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./93/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... openat resumed>) = 4 [pid 5002] <... openat resumed>) = 4 [pid 5002] fstat(4, [pid 5001] <... umount2 resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] fstat(4, [pid 5002] getdents64(4, [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, [pid 5002] getdents64(4, [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] getdents64(4, [pid 5002] close(4 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5003] close(4 [pid 5002] rmdir("./95/file0" [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./93/file0") = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5003] getdents64(3, [pid 5002] getdents64(3, [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3 [pid 5002] close(3 [pid 5003] <... close resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5003] rmdir("./93" [pid 5002] rmdir("./95" [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5003] mkdir("./94", 0777 [pid 5002] mkdir("./96", 0777 [pid 5003] <... mkdir resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... openat resumed>) = 3 [pid 5002] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] lstat("./93/file0", [pid 5002] close(3 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... close resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] close(3 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6146] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6146] <... munmap resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6149 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6148 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, [pid 6146] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6146] <... openat resumed>) = 4 [pid 5001] getdents64(4, [pid 6146] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4./strace-static-x86_64: Process 6148 attached ) = 0 [pid 5001] rmdir("./93/file0" [pid 6148] chdir("./96" [pid 5001] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6149 attached [pid 6148] <... chdir resumed>) = 0 [pid 5001] getdents64(3, [pid 6149] chdir("./94" [pid 6148] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6149] <... chdir resumed>) = 0 [pid 6148] <... prctl resumed>) = 0 [pid 5001] close(3 [pid 6149] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... close resumed>) = 0 [pid 6148] setpgid(0, 0 [pid 6149] <... prctl resumed>) = 0 [pid 5001] rmdir("./93" [pid 6149] setpgid(0, 0 [pid 6148] <... setpgid resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 6149] <... setpgid resumed>) = 0 [pid 6148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] mkdir("./94", 0777 [pid 6149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6148] <... openat resumed>) = 3 [pid 5001] <... mkdir resumed>) = 0 [pid 6149] <... openat resumed>) = 3 [pid 6148] write(3, "1000", 4 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6149] write(3, "1000", 4 [pid 6148] <... write resumed>) = 4 [pid 5001] <... openat resumed>) = 3 [pid 6149] <... write resumed>) = 4 [pid 6148] close(3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 6149] close(3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6149] <... close resumed>) = 0 [pid 6148] <... close resumed>) = 0 [pid 5001] close(3 [pid 6149] symlink("/dev/binderfs", "./binderfs" [pid 6148] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... close resumed>) = 0 [pid 6149] <... symlink resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6148] <... symlink resumed>) = 0 [pid 6149] memfd_create("syzkaller", 0) = 3 [pid 6148] memfd_create("syzkaller", 0 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6150 [pid 6149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6148] <... memfd_create resumed>) = 3 [pid 6149] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6146] <... ioctl resumed>) = 0 [pid 6149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6146] close(3 [pid 6141] +++ exited with 0 +++ [pid 6146] <... close resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6141, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6148] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6146] mkdir("./file0", 0777) = 0 [pid 6146] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6150 attached [pid 4998] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6150] chdir("./94" [pid 4998] <... openat resumed>) = 3 [pid 6150] <... chdir resumed>) = 0 [pid 4998] fstat(3, [pid 6150] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6150] <... prctl resumed>) = 0 [pid 4998] getdents64(3, [pid 6150] setpgid(0, 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6150] <... setpgid resumed>) = 0 [pid 4998] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6150] <... openat resumed>) = 3 [pid 4998] lstat("./94/binderfs", [pid 6150] write(3, "1000", 4 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6150] <... write resumed>) = 4 [pid 4998] unlink("./94/binderfs" [pid 6150] close(3 [pid 4998] <... unlink resumed>) = 0 [pid 6150] <... close resumed>) = 0 [pid 4998] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6150] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6150] memfd_create("syzkaller", 0) = 3 [pid 6150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [ 111.661719][ T6146] loop1: detected capacity change from 0 to 4096 [pid 6148] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... umount2 resumed>) = 0 [pid 6146] <... mount resumed>) = 0 [pid 6146] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./94/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, [pid 6146] <... openat resumed>) = 3 [pid 6146] chdir("./file0" [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4 [pid 6146] <... chdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 6146] ioctl(4, LOOP_CLR_FD [pid 4998] rmdir("./94/file0" [pid 6146] <... ioctl resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 6146] close(4 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./94" [pid 6146] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 6150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6146] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6149] <... write resumed>) = 2097152 [pid 6146] <... openat resumed>) = 4 [pid 4998] mkdir("./95", 0777 [pid 6146] unlink("./file1" [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6152 ./strace-static-x86_64: Process 6152 attached [pid 6152] chdir("./95") = 0 [pid 6152] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6152] setpgid(0, 0) = 0 [pid 6152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6149] munmap(0x7f0ed4ac1000, 2097152 [pid 6152] write(3, "1000", 4 [pid 6149] <... munmap resumed>) = 0 [pid 6144] <... pwritev resumed>) = 1114112 [ 111.730944][ T6151] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6152] <... write resumed>) = 4 [pid 6150] <... write resumed>) = 2097152 [pid 6148] <... write resumed>) = 2097152 [pid 6146] <... unlink resumed>) = 0 [pid 6144] exit_group(0 [pid 6152] close(3) = 0 [pid 6152] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6148] munmap(0x7f0ed4ac1000, 2097152 [pid 6146] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6144] <... exit_group resumed>) = ? [pid 6152] memfd_create("syzkaller", 0 [pid 6149] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6152] <... memfd_create resumed>) = 3 [pid 6149] <... openat resumed>) = 4 [pid 6152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6149] ioctl(4, LOOP_SET_FD, 3 [pid 6152] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6149] <... ioctl resumed>) = 0 [pid 6148] <... munmap resumed>) = 0 [pid 6148] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6150] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6150] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6149] close(3) = 0 [pid 6149] mkdir("./file0", 0777 [pid 6148] <... openat resumed>) = 4 [pid 6148] ioctl(4, LOOP_SET_FD, 3 [pid 6150] <... openat resumed>) = 4 [pid 6149] <... mkdir resumed>) = 0 [pid 6149] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6150] ioctl(4, LOOP_SET_FD, 3 [pid 6148] <... ioctl resumed>) = 0 [pid 6148] close(3) = 0 [pid 6148] mkdir("./file0", 0777) = 0 [pid 6148] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6150] <... ioctl resumed>) = 0 [ 111.801825][ T6149] loop5: detected capacity change from 0 to 4096 [ 111.825022][ T6148] loop4: detected capacity change from 0 to 4096 [ 111.827737][ T6150] loop3: detected capacity change from 0 to 4096 [pid 6148] <... mount resumed>) = 0 [pid 6150] close(3) = 0 [pid 6150] mkdir("./file0", 0777) = 0 [pid 6150] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6152] <... write resumed>) = 2097152 [pid 6152] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6152] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6152] ioctl(4, LOOP_SET_FD, 3 [pid 6148] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6148] chdir("./file0") = 0 [pid 6148] ioctl(4, LOOP_CLR_FD) = 0 [pid 6148] close(4 [pid 6144] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6144, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5000] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6148] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6148] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./93/binderfs") = 0 [pid 5000] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6148] <... openat resumed>) = 4 [pid 6152] <... ioctl resumed>) = 0 [pid 6152] close(3) = 0 [pid 6152] mkdir("./file0", 0777 [pid 6149] <... mount resumed>) = 0 [pid 6148] unlink("./file1" [pid 6149] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6149] chdir("./file0") = 0 [pid 6149] ioctl(4, LOOP_CLR_FD) = 0 [pid 6149] close(4) = 0 [pid 6149] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6149] unlink("./file1" [pid 6152] <... mkdir resumed>) = 0 [pid 6152] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6148] <... unlink resumed>) = 0 [pid 6148] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] <... umount2 resumed>) = 0 [ 111.865386][ T6153] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.882968][ T6152] loop0: detected capacity change from 0 to 4096 [ 111.895793][ T6154] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6150] <... mount resumed>) = 0 [pid 6150] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6150] chdir("./file0") = 0 [pid 6150] ioctl(4, LOOP_CLR_FD) = 0 [pid 6150] close(4) = 0 [pid 6150] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6150] unlink("./file1" [pid 6149] <... unlink resumed>) = 0 [pid 6149] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6152] <... mount resumed>) = 0 [pid 6152] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6152] chdir("./file0") = 0 [pid 6152] ioctl(4, LOOP_CLR_FD) = 0 [pid 6152] close(4) = 0 [pid 6152] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6152] unlink("./file1" [pid 5000] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./93/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./93/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./93") = 0 [pid 5000] mkdir("./94", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6157 [pid 6146] <... pwritev resumed>) = 1114112 ./strace-static-x86_64: Process 6157 attached [pid 6146] exit_group(0) = ? [pid 6157] chdir("./94") = 0 [pid 6157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6157] setpgid(0, 0) = 0 [pid 6157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6157] write(3, "1000", 4) = 4 [pid 6157] close(3) = 0 [pid 6157] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6157] memfd_create("syzkaller", 0) = 3 [pid 6157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6150] <... unlink resumed>) = 0 [ 111.932737][ T6155] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.956836][ T6156] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6150] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6152] <... unlink resumed>) = 0 [pid 6152] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6146] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6146, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6157] <... write resumed>) = 2097152 [pid 6148] <... pwritev resumed>) = 1114112 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6148] exit_group(0 [pid 4999] unlink("./93/binderfs" [pid 6148] <... exit_group resumed>) = ? [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6157] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6157] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6157] ioctl(4, LOOP_SET_FD, 3 [pid 6148] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6148, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6157] <... ioctl resumed>) = 0 [pid 6150] <... pwritev resumed>) = 1114112 [pid 5002] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 6157] close(3 [pid 6150] exit_group(0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6157] <... close resumed>) = 0 [pid 6150] <... exit_group resumed>) = ? [pid 5002] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6157] mkdir("./file0", 0777 [pid 6149] <... pwritev resumed>) = 1114112 [pid 6149] exit_group(0 [pid 4999] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6149] <... exit_group resumed>) = ? [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6157] <... mkdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 4999] lstat("./93/file0", [pid 6157] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] fstat(3, [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6152] <... pwritev resumed>) = 1114112 [pid 5002] getdents64(3, [pid 4999] <... openat resumed>) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 6152] exit_group(0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [ 112.143645][ T6157] loop2: detected capacity change from 0 to 4096 [pid 4999] close(4 [pid 6152] <... exit_group resumed>) = ? [pid 5002] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6150] +++ exited with 0 +++ [pid 4999] <... close resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6150, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4999] rmdir("./93/file0") = 0 [pid 4999] getdents64(3, [pid 5001] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] close(3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... close resumed>) = 0 [pid 6157] <... mount resumed>) = 0 [pid 5002] lstat("./96/binderfs", [pid 5001] <... openat resumed>) = 3 [pid 4999] rmdir("./93" [pid 6157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] fstat(3, [pid 4999] <... rmdir resumed>) = 0 [pid 6157] <... openat resumed>) = 3 [pid 5002] unlink("./96/binderfs" [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] mkdir("./94", 0777 [pid 6157] chdir("./file0" [pid 5002] <... unlink resumed>) = 0 [pid 6149] +++ exited with 0 +++ [pid 5001] getdents64(3, [pid 4999] <... mkdir resumed>) = 0 [pid 6157] <... chdir resumed>) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6149, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5002] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6157] ioctl(4, LOOP_CLR_FD [pid 5001] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 3 [pid 6157] <... ioctl resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6157] close(4 [pid 5003] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] lstat("./94/binderfs", [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6157] <... close resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] close(3 [pid 6157] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] unlink("./94/binderfs" [pid 4999] <... close resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6157] <... openat resumed>) = 4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6159 [pid 6157] unlink("./file1") = 0 [pid 6157] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./94/binderfs") = 0 [pid 5003] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6159 attached [pid 6152] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6152, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 6159] chdir("./94" [pid 5002] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... restart_syscall resumed>) = 0 [pid 4998] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 112.200873][ T6158] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] lstat("./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./95/binderfs") = 0 [pid 4998] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6159] <... chdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6159] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] lstat("./96/file0", [pid 6159] <... prctl resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 6159] setpgid(0, 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6159] <... setpgid resumed>) = 0 [pid 5002] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./94/file0", [pid 6159] <... openat resumed>) = 3 [pid 5002] openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6159] write(3, "1000", 4 [pid 5002] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./94/file0" [pid 6159] <... write resumed>) = 4 [pid 5002] fstat(4, [pid 5001] <... rmdir resumed>) = 0 [pid 6159] close(3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 4998] <... umount2 resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./94" [pid 6159] <... close resumed>) = 0 [pid 5002] getdents64(4, [pid 5001] <... rmdir resumed>) = 0 [pid 5001] mkdir("./95", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6160 [pid 4998] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./95/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./95/file0") = 0 [pid 4998] getdents64(3, [pid 6159] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6159] <... symlink resumed>) = 0 [pid 5002] getdents64(4, ./strace-static-x86_64: Process 6160 attached [pid 4998] close(3 [pid 6160] chdir("./95" [pid 6159] memfd_create("syzkaller", 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] <... close resumed>) = 0 [pid 6160] <... chdir resumed>) = 0 [pid 6160] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6159] <... memfd_create resumed>) = 3 [pid 5002] close(4 [pid 4998] rmdir("./95" [pid 6160] <... prctl resumed>) = 0 [pid 6159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... close resumed>) = 0 [pid 6160] setpgid(0, 0 [pid 6159] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] rmdir("./96/file0" [pid 4998] <... rmdir resumed>) = 0 [pid 6160] <... setpgid resumed>) = 0 [pid 6160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... rmdir resumed>) = 0 [pid 4998] mkdir("./96", 0777 [pid 6160] <... openat resumed>) = 3 [pid 4998] <... mkdir resumed>) = 0 [pid 6160] write(3, "1000", 4) = 4 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6160] close(3) = 0 [pid 4998] <... openat resumed>) = 3 [pid 6160] symlink("/dev/binderfs", "./binderfs" [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6160] <... symlink resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6160] memfd_create("syzkaller", 0 [pid 4998] close(3 [pid 6160] <... memfd_create resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 6160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6160] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] getdents64(3, [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6161 [pid 5003] lstat("./94/file0", [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6161 attached [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] close(3 [pid 5003] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... close resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] rmdir("./96" [pid 6161] chdir("./96") = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] mkdir("./97", 0777 [pid 5003] <... openat resumed>) = 4 [pid 5002] <... mkdir resumed>) = 0 [pid 6161] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5003] fstat(4, [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5003] getdents64(4, [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] getdents64(4, [pid 5002] close(3 [pid 6161] setpgid(0, 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 6161] <... setpgid resumed>) = 0 [pid 5003] close(4 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6161] write(3, "1000", 4 [pid 5003] <... close resumed>) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6162 [pid 6161] <... write resumed>) = 4 [pid 5003] rmdir("./94/file0" [pid 6161] close(3) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 6161] symlink("/dev/binderfs", "./binderfs" [pid 5003] getdents64(3, [pid 6161] <... symlink resumed>) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6161] memfd_create("syzkaller", 0 [pid 5003] close(3 [pid 6161] <... memfd_create resumed>) = 3 [pid 5003] <... close resumed>) = 0 ./strace-static-x86_64: Process 6162 attached [pid 6161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] rmdir("./94" [pid 6162] chdir("./97" [pid 6161] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] <... rmdir resumed>) = 0 [pid 6162] <... chdir resumed>) = 0 [pid 6159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] mkdir("./95", 0777 [pid 6162] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6162] setpgid(0, 0) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 6162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6162] <... openat resumed>) = 3 [pid 5003] <... openat resumed>) = 3 [pid 6162] write(3, "1000", 4) = 4 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 6162] close(3) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6162] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5003] close(3 [pid 6162] memfd_create("syzkaller", 0 [pid 5003] <... close resumed>) = 0 [pid 6162] <... memfd_create resumed>) = 3 [pid 6159] <... write resumed>) = 2097152 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6163 ./strace-static-x86_64: Process 6163 attached [pid 6163] chdir("./95" [pid 6159] munmap(0x7f0ed4ac1000, 2097152 [pid 6163] <... chdir resumed>) = 0 [pid 6163] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6163] setpgid(0, 0) = 0 [pid 6163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6163] write(3, "1000", 4) = 4 [pid 6159] <... munmap resumed>) = 0 [pid 6163] close(3 [pid 6159] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6163] <... close resumed>) = 0 [pid 6159] <... openat resumed>) = 4 [pid 6163] symlink("/dev/binderfs", "./binderfs" [pid 6159] ioctl(4, LOOP_SET_FD, 3 [pid 6163] <... symlink resumed>) = 0 [pid 6161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6163] memfd_create("syzkaller", 0) = 3 [pid 6163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6160] <... write resumed>) = 2097152 [pid 6162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6160] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6160] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6160] ioctl(4, LOOP_SET_FD, 3 [pid 6163] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6161] <... write resumed>) = 2097152 [pid 6159] <... ioctl resumed>) = 0 [pid 6157] <... pwritev resumed>) = 1114112 [pid 6162] <... write resumed>) = 2097152 [pid 6159] close(3 [pid 6157] exit_group(0) = ? [pid 6159] <... close resumed>) = 0 [pid 6161] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6160] <... ioctl resumed>) = 0 [pid 6160] close(3) = 0 [pid 6159] mkdir("./file0", 0777 [pid 6160] mkdir("./file0", 0777 [pid 6159] <... mkdir resumed>) = 0 [pid 6159] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6160] <... mkdir resumed>) = 0 [pid 6161] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6161] ioctl(4, LOOP_SET_FD, 3 [ 112.400974][ T6159] loop1: detected capacity change from 0 to 4096 [ 112.427276][ T6160] loop3: detected capacity change from 0 to 4096 [pid 6160] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6162] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6162] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6162] ioctl(4, LOOP_SET_FD, 3 [pid 6163] <... write resumed>) = 2097152 [pid 6159] <... mount resumed>) = 0 [pid 6163] munmap(0x7f0ed4ac1000, 2097152 [pid 6159] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6159] chdir("./file0") = 0 [pid 6163] <... munmap resumed>) = 0 [pid 6159] ioctl(4, LOOP_CLR_FD [pid 6163] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6159] <... ioctl resumed>) = 0 [pid 6163] <... openat resumed>) = 4 [pid 6159] close(4) = 0 [pid 6159] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6161] <... ioctl resumed>) = 0 [pid 6161] close(3 [pid 6163] ioctl(4, LOOP_SET_FD, 3 [pid 6159] <... openat resumed>) = 4 [pid 6161] <... close resumed>) = 0 [pid 6161] mkdir("./file0", 0777) = 0 [pid 6161] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6162] <... ioctl resumed>) = 0 [pid 6162] close(3) = 0 [pid 6162] mkdir("./file0", 0777) = 0 [ 112.454516][ T6161] loop0: detected capacity change from 0 to 4096 [ 112.466332][ T6164] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.472420][ T6162] loop4: detected capacity change from 0 to 4096 [pid 6159] unlink("./file1" [pid 6160] <... mount resumed>) = 0 [pid 6160] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6160] chdir("./file0") = 0 [pid 6160] ioctl(4, LOOP_CLR_FD) = 0 [pid 6160] close(4) = 0 [pid 6160] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6160] unlink("./file1" [pid 6162] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6157] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6157, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6163] <... ioctl resumed>) = 0 [pid 6161] <... mount resumed>) = 0 [pid 6159] <... unlink resumed>) = 0 [pid 5000] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6163] close(3 [pid 6161] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6163] <... close resumed>) = 0 [pid 6161] <... openat resumed>) = 3 [pid 6159] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6163] mkdir("./file0", 0777 [pid 6161] chdir("./file0" [pid 5000] <... openat resumed>) = 3 [pid 6161] <... chdir resumed>) = 0 [pid 5000] fstat(3, [pid 6161] ioctl(4, LOOP_CLR_FD [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6161] <... ioctl resumed>) = 0 [pid 5000] getdents64(3, [pid 6161] close(4 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6161] <... close resumed>) = 0 [pid 5000] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6161] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./94/binderfs") = 0 [pid 5000] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6163] <... mkdir resumed>) = 0 [pid 6160] <... unlink resumed>) = 0 [pid 6160] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6163] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6161] <... openat resumed>) = 4 [pid 6161] unlink("./file1") = 0 [ 112.500247][ T6163] loop5: detected capacity change from 0 to 4096 [ 112.509833][ T6165] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.527840][ T6166] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6161] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6163] <... mount resumed>) = 0 [pid 6162] <... mount resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 6162] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6163] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6162] <... openat resumed>) = 3 [pid 6162] chdir("./file0" [pid 6163] chdir("./file0" [pid 6162] <... chdir resumed>) = 0 [pid 6163] <... chdir resumed>) = 0 [pid 6162] ioctl(4, LOOP_CLR_FD [pid 6163] ioctl(4, LOOP_CLR_FD [pid 6162] <... ioctl resumed>) = 0 [pid 6163] <... ioctl resumed>) = 0 [pid 6162] close(4 [pid 6163] close(4 [pid 6162] <... close resumed>) = 0 [pid 5000] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6163] <... close resumed>) = 0 [pid 6162] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6163] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] lstat("./94/file0", [pid 6162] <... openat resumed>) = 4 [pid 6163] <... openat resumed>) = 4 [pid 6163] unlink("./file1" [pid 6162] unlink("./file1" [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./94/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [ 112.578557][ T6168] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.591589][ T6167] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] close(3) = 0 [pid 5000] rmdir("./94") = 0 [pid 5000] mkdir("./95", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6162] <... unlink resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 6162] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6163] <... unlink resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6169 [pid 6163] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0./strace-static-x86_64: Process 6169 attached [pid 6169] chdir("./95") = 0 [pid 6169] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6169] setpgid(0, 0) = 0 [pid 6169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6169] write(3, "1000", 4) = 4 [pid 6169] close(3) = 0 [pid 6169] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6169] memfd_create("syzkaller", 0) = 3 [pid 6169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6159] <... pwritev resumed>) = 1114112 [pid 6159] exit_group(0) = ? [pid 6160] <... pwritev resumed>) = 1114112 [pid 6160] exit_group(0) = ? [pid 6169] <... write resumed>) = 2097152 [pid 6169] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6169] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6161] <... pwritev resumed>) = 1114112 [pid 6169] ioctl(4, LOOP_SET_FD, 3 [pid 6161] exit_group(0) = ? [pid 6159] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6159, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6160] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6160, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4999] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./94/binderfs", [pid 5001] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... openat resumed>) = 3 [pid 4999] unlink("./94/binderfs" [pid 5001] fstat(3, [pid 4999] <... unlink resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, [pid 6169] <... ioctl resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6169] close(3 [pid 6161] +++ exited with 0 +++ [pid 5001] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6169] <... close resumed>) = 0 [pid 6162] <... pwritev resumed>) = 1114112 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./95/binderfs", [pid 6169] mkdir("./file0", 0777 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6161, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6162] exit_group(0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5001] unlink("./95/binderfs" [pid 4998] <... restart_syscall resumed>) = 0 [pid 6169] <... mkdir resumed>) = 0 [pid 6162] <... exit_group resumed>) = ? [ 112.785954][ T6169] loop2: detected capacity change from 0 to 4096 [pid 5001] <... unlink resumed>) = 0 [pid 6169] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 4998] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./96/binderfs") = 0 [pid 4998] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./94/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6169] <... mount resumed>) = 0 [pid 6169] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6169] chdir("./file0") = 0 [pid 6169] ioctl(4, LOOP_CLR_FD [pid 5001] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(4, [pid 4998] <... umount2 resumed>) = 0 [pid 6169] <... ioctl resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6169] close(4 [pid 5001] lstat("./95/file0", [pid 6169] <... close resumed>) = 0 [pid 6169] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6169] unlink("./file1" [pid 6162] +++ exited with 0 +++ [pid 6163] <... pwritev resumed>) = 1114112 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6162, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6163] exit_group(0 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5001] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] lstat("./96/file0", [pid 6163] <... exit_group resumed>) = ? [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... restart_syscall resumed>) = 0 [pid 4999] getdents64(4, [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 4 [pid 4999] close(4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6169] <... unlink resumed>) = 0 [pid 5001] fstat(4, [pid 4999] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6169] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] rmdir("./94/file0" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(4, [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(3, [pid 4998] fstat(4, [pid 5001] getdents64(4, [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 4998] getdents64(4, [pid 5001] close(4 [pid 4999] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... close resumed>) = 0 [pid 4999] rmdir("./94" [pid 4998] getdents64(4, [pid 6163] +++ exited with 0 +++ [pid 5002] <... openat resumed>) = 3 [pid 5001] rmdir("./95/file0" [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] fstat(3, [pid 5001] <... rmdir resumed>) = 0 [pid 4999] mkdir("./95", 0777 [pid 4998] close(4 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6163, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(3, [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] rmdir("./96/file0" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] close(3 [pid 4999] <... openat resumed>) = 3 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... close resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] getdents64(3, [pid 5003] <... openat resumed>) = 3 [pid 5002] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 112.884125][ T6170] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] rmdir("./95" [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] fstat(3, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... rmdir resumed>) = 0 [pid 4999] close(3 [pid 4998] close(3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] lstat("./97/binderfs", [pid 5001] mkdir("./96", 0777 [pid 4999] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] getdents64(3, [pid 5001] <... mkdir resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] rmdir("./96" [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] <... rmdir resumed>) = 0 [pid 5003] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 3 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6171 [pid 4998] mkdir("./97", 0777 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4998] <... mkdir resumed>) = 0 [pid 5003] lstat("./95/binderfs", [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] close(3 [pid 4998] <... openat resumed>) = 3 [pid 5003] unlink("./95/binderfs" [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... close resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5003] <... unlink resumed>) = 0 [pid 5002] unlink("./97/binderfs" [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... unlink resumed>) = 0 [pid 4998] close(3 [pid 5002] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6172 [pid 4998] <... close resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6173 ./strace-static-x86_64: Process 6171 attached [pid 6171] chdir("./95") = 0 [pid 6171] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6171] setpgid(0, 0) = 0 [pid 6171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 6173 attached [pid 6171] write(3, "1000", 4) = 4 [pid 6171] close(3 [pid 6173] chdir("./97" [pid 6171] <... close resumed>) = 0 [pid 6171] symlink("/dev/binderfs", "./binderfs" [pid 6173] <... chdir resumed>) = 0 [pid 6173] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6171] <... symlink resumed>) = 0 [pid 6173] <... prctl resumed>) = 0 [pid 6171] memfd_create("syzkaller", 0 [pid 5003] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6173] setpgid(0, 0 [pid 6171] <... memfd_create resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6173] <... setpgid resumed>) = 0 [pid 6171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] lstat("./95/file0", [pid 6173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6171] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6173] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6172 attached [pid 6173] write(3, "1000", 4 [pid 6171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [pid 6173] <... write resumed>) = 4 [pid 6172] chdir("./96" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6173] close(3 [pid 6172] <... chdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6173] <... close resumed>) = 0 [pid 6172] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] <... openat resumed>) = 4 [pid 6173] symlink("/dev/binderfs", "./binderfs" [pid 5003] fstat(4, [pid 6173] <... symlink resumed>) = 0 [pid 6172] <... prctl resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] lstat("./97/file0", [pid 6173] memfd_create("syzkaller", 0 [pid 6172] setpgid(0, 0 [pid 5003] getdents64(4, [pid 6173] <... memfd_create resumed>) = 3 [pid 6172] <... setpgid resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] getdents64(4, [pid 5002] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6173] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6172] <... openat resumed>) = 3 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./95/file0") = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./95") = 0 [pid 5003] mkdir("./96", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6172] write(3, "1000", 4 [pid 5003] <... openat resumed>) = 3 [pid 5002] openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6172] <... write resumed>) = 4 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 6172] close(3 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... openat resumed>) = 4 [pid 5003] close(3 [pid 6172] <... close resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5002] fstat(4, [pid 6172] symlink("/dev/binderfs", "./binderfs" [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6172] <... symlink resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6174 [pid 5002] getdents64(4, [pid 6172] memfd_create("syzkaller", 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6172] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 6174 attached [pid 6172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] getdents64(4, [pid 6172] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 6174] chdir("./96") = 0 [pid 6174] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6174] setpgid(0, 0) = 0 [pid 6174] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6174] write(3, "1000", 4) = 4 [pid 6174] close(3) = 0 [pid 6174] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5002] <... close resumed>) = 0 [pid 6174] memfd_create("syzkaller", 0 [pid 5002] rmdir("./97/file0" [pid 6174] <... memfd_create resumed>) = 3 [pid 6174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./97") = 0 [pid 5002] mkdir("./98", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6175 ./strace-static-x86_64: Process 6175 attached [pid 6175] chdir("./98") = 0 [pid 6175] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6175] setpgid(0, 0 [pid 6171] <... write resumed>) = 2097152 [pid 6175] <... setpgid resumed>) = 0 [pid 6173] <... write resumed>) = 2097152 [pid 6172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6171] munmap(0x7f0ed4ac1000, 2097152 [pid 6175] <... openat resumed>) = 3 [pid 6175] write(3, "1000", 4 [pid 6171] <... munmap resumed>) = 0 [pid 6175] <... write resumed>) = 4 [pid 6175] close(3 [pid 6173] munmap(0x7f0ed4ac1000, 2097152 [pid 6175] <... close resumed>) = 0 [pid 6171] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6175] symlink("/dev/binderfs", "./binderfs" [pid 6171] <... openat resumed>) = 4 [pid 6171] ioctl(4, LOOP_SET_FD, 3 [pid 6175] <... symlink resumed>) = 0 [pid 6173] <... munmap resumed>) = 0 [pid 6173] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6175] memfd_create("syzkaller", 0 [pid 6173] <... openat resumed>) = 4 [pid 6173] ioctl(4, LOOP_SET_FD, 3 [pid 6175] <... memfd_create resumed>) = 3 [pid 6175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6171] <... ioctl resumed>) = 0 [pid 6171] close(3) = 0 [pid 6171] mkdir("./file0", 0777) = 0 [pid 6171] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6173] <... ioctl resumed>) = 0 [pid 6173] close(3) = 0 [pid 6173] mkdir("./file0", 0777) = 0 [pid 6173] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6169] <... pwritev resumed>) = 1114112 [pid 6169] exit_group(0 [pid 6174] <... write resumed>) = 2097152 [pid 6169] <... exit_group resumed>) = ? [ 113.073915][ T6171] loop1: detected capacity change from 0 to 4096 [ 113.082322][ T6173] loop0: detected capacity change from 0 to 4096 [pid 6174] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6174] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6174] ioctl(4, LOOP_SET_FD, 3 [pid 6175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6172] <... write resumed>) = 2097152 [pid 6172] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6172] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6172] ioctl(4, LOOP_SET_FD, 3 [pid 6175] <... write resumed>) = 2097152 [pid 6174] <... ioctl resumed>) = 0 [pid 6173] <... mount resumed>) = 0 [pid 6172] <... ioctl resumed>) = 0 [pid 6169] +++ exited with 0 +++ [pid 6175] munmap(0x7f0ed4ac1000, 2097152 [pid 6174] close(3 [pid 6173] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6169, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6172] close(3) = 0 [pid 6175] <... munmap resumed>) = 0 [pid 6172] mkdir("./file0", 0777) = 0 [pid 6172] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6174] <... close resumed>) = 0 [pid 6174] mkdir("./file0", 0777) = 0 [pid 6174] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6173] <... openat resumed>) = 3 [pid 6173] chdir("./file0") = 0 [pid 6173] ioctl(4, LOOP_CLR_FD) = 0 [pid 6173] close(4) = 0 [pid 6173] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6175] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6173] <... openat resumed>) = 4 [pid 6171] <... mount resumed>) = 0 [pid 6175] <... openat resumed>) = 4 [pid 6173] unlink("./file1" [pid 6171] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6175] ioctl(4, LOOP_SET_FD, 3 [pid 6173] <... unlink resumed>) = 0 [pid 6171] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 113.126231][ T6174] loop5: detected capacity change from 0 to 4096 [ 113.143826][ T6172] loop3: detected capacity change from 0 to 4096 [ 113.151562][ T6177] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.163603][ T6176] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6173] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6171] chdir("./file0" [pid 5000] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6175] <... ioctl resumed>) = 0 [pid 6172] <... mount resumed>) = 0 [pid 6171] <... chdir resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 6172] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6171] ioctl(4, LOOP_CLR_FD [pid 5000] fstat(3, [pid 6172] <... openat resumed>) = 3 [pid 6171] <... ioctl resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6172] chdir("./file0" [pid 6171] close(4 [pid 5000] getdents64(3, [pid 6172] <... chdir resumed>) = 0 [pid 6171] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6172] ioctl(4, LOOP_CLR_FD [pid 6171] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6174] <... mount resumed>) = 0 [pid 6172] <... ioctl resumed>) = 0 [pid 6171] <... openat resumed>) = 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6174] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6172] close(4 [pid 6171] unlink("./file1" [pid 5000] lstat("./95/binderfs", [pid 6175] close(3 [pid 6174] <... openat resumed>) = 3 [pid 6172] <... close resumed>) = 0 [pid 6171] <... unlink resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6175] <... close resumed>) = 0 [pid 6174] chdir("./file0" [pid 6172] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6171] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] unlink("./95/binderfs" [pid 6175] mkdir("./file0", 0777 [pid 6174] <... chdir resumed>) = 0 [pid 6172] <... openat resumed>) = 4 [pid 5000] <... unlink resumed>) = 0 [pid 6175] <... mkdir resumed>) = 0 [pid 6174] ioctl(4, LOOP_CLR_FD [pid 6172] unlink("./file1" [pid 5000] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6175] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6174] <... ioctl resumed>) = 0 [pid 6174] close(4) = 0 [pid 6174] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6174] unlink("./file1" [pid 6172] <... unlink resumed>) = 0 [ 113.190146][ T6175] loop4: detected capacity change from 0 to 4096 [ 113.198059][ T6178] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.209137][ T6179] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6172] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6174] <... unlink resumed>) = 0 [pid 6175] <... mount resumed>) = 0 [pid 6174] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] <... umount2 resumed>) = 0 [pid 6175] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6175] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6175] chdir("./file0" [pid 5000] lstat("./95/file0", [pid 6175] <... chdir resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6175] ioctl(4, LOOP_CLR_FD [pid 5000] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6175] <... ioctl resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6175] close(4 [pid 5000] openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6175] <... close resumed>) = 0 [pid 6175] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, [pid 6175] <... openat resumed>) = 4 [pid 6175] unlink("./file1" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./95/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [ 113.281490][ T6180] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] rmdir("./95") = 0 [pid 5000] mkdir("./96", 0777 [pid 6175] <... unlink resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 6175] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6181 ./strace-static-x86_64: Process 6181 attached [pid 6181] chdir("./96") = 0 [pid 6181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6173] <... pwritev resumed>) = 1114112 [pid 6181] setpgid(0, 0 [pid 6173] exit_group(0 [pid 6181] <... setpgid resumed>) = 0 [pid 6173] <... exit_group resumed>) = ? [pid 6181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6181] write(3, "1000", 4) = 4 [pid 6181] close(3) = 0 [pid 6181] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6181] memfd_create("syzkaller", 0) = 3 [pid 6181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6174] <... pwritev resumed>) = 1114112 [pid 6181] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6174] exit_group(0 [pid 6181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6174] <... exit_group resumed>) = ? [pid 6171] <... pwritev resumed>) = 1114112 [pid 6171] exit_group(0 [pid 6173] +++ exited with 0 +++ [pid 6171] <... exit_group resumed>) = ? [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6173, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4998] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6175] <... pwritev resumed>) = 1114112 [pid 4998] getdents64(3, [pid 6175] exit_group(0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6175] <... exit_group resumed>) = ? [pid 4998] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6181] <... write resumed>) = 2097152 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./97/binderfs", [pid 6181] munmap(0x7f0ed4ac1000, 2097152 [pid 6172] <... pwritev resumed>) = 1114112 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6172] exit_group(0 [pid 4998] unlink("./97/binderfs" [pid 6181] <... munmap resumed>) = 0 [pid 6172] <... exit_group resumed>) = ? [pid 4998] <... unlink resumed>) = 0 [pid 6181] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6181] <... openat resumed>) = 4 [pid 6181] ioctl(4, LOOP_SET_FD, 3 [pid 6174] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6174, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6171] +++ exited with 0 +++ [pid 5003] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6171, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5003] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6175] +++ exited with 0 +++ [pid 5003] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6181] <... ioctl resumed>) = 0 [pid 5003] fstat(3, [pid 4999] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6181] close(3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6175, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4999] <... openat resumed>) = 3 [pid 5003] getdents64(3, [pid 5002] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(3, [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6181] <... close resumed>) = 0 [pid 5003] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(3, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] lstat("./96/binderfs", [pid 5002] fstat(3, [pid 4999] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] unlink("./96/binderfs" [pid 5002] getdents64(3, [pid 4999] lstat("./95/binderfs", [pid 6181] mkdir("./file0", 0777 [pid 5003] <... unlink resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6181] <... mkdir resumed>) = 0 [pid 5003] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] unlink("./95/binderfs" [pid 6181] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... unlink resumed>) = 0 [pid 5002] lstat("./98/binderfs", [pid 4999] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./98/binderfs") = 0 [pid 5002] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./97/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./97/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./97") = 0 [pid 4998] mkdir("./98", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6182 ./strace-static-x86_64: Process 6182 attached [pid 6182] chdir("./98") = 0 [pid 6182] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6182] setpgid(0, 0) = 0 [pid 6182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6182] write(3, "1000", 4) = 4 [pid 6182] close(3) = 0 [pid 6182] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6182] memfd_create("syzkaller", 0) = 3 [pid 6182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6172] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6172, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 113.519558][ T6181] loop2: detected capacity change from 0 to 4096 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./96/binderfs") = 0 [pid 5001] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./98/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./98/file0" [pid 6182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6181] <... mount resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 6181] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6181] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6181] chdir("./file0" [pid 5003] lstat("./96/file0", [pid 6181] <... chdir resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6181] ioctl(4, LOOP_CLR_FD [pid 5003] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] lstat("./96/file0", [pid 4999] lstat("./95/file0", [pid 6181] <... ioctl resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6181] close(4 [pid 5003] openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6181] <... close resumed>) = 0 [pid 5003] <... openat resumed>) = 4 [pid 4999] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6181] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] fstat(4, [pid 6181] <... openat resumed>) = 4 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6181] unlink("./file1" [pid 5003] getdents64(4, [pid 4999] openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] <... openat resumed>) = 4 [pid 5003] getdents64(4, [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(4, [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] close(4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(4, [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./96/file0" [pid 5001] openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] close(3 [pid 5001] <... openat resumed>) = 4 [pid 4999] getdents64(4, [pid 5003] getdents64(3, [pid 5001] fstat(4, [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] close(4 [pid 5003] close(3 [pid 4999] <... close resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] getdents64(4, [pid 4999] rmdir("./95/file0" [pid 5003] rmdir("./96") = 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] <... rmdir resumed>) = 0 [pid 5003] mkdir("./97", 0777 [pid 5001] getdents64(4, [pid 4999] getdents64(3, [pid 5002] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5002] rmdir("./98" [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] close(4 [pid 4999] <... close resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 4999] rmdir("./95" [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] <... close resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... rmdir resumed>) = 0 [pid 5001] rmdir("./96/file0" [pid 4999] <... rmdir resumed>) = 0 [pid 5003] close(3 [pid 5002] mkdir("./99", 0777 [pid 5003] <... close resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] mkdir("./96", 0777 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] getdents64(3, [pid 5002] <... openat resumed>) = 3 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6184 [pid 5001] close(3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5001] <... close resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] rmdir("./96" [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 6182] <... write resumed>) = 2097152 [pid 6182] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] <... rmdir resumed>) = 0 [pid 5002] close(3 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] mkdir("./97", 0777 [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... mkdir resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6185 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 6184 attached [pid 6184] chdir("./97") = 0 [pid 6184] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] close(3 [pid 6184] <... prctl resumed>) = 0 [pid 6184] setpgid(0, 0) = 0 [pid 5001] <... close resumed>) = 0 [pid 6182] <... munmap resumed>) = 0 [pid 6184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6186 [pid 6182] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6181] <... unlink resumed>) = 0 [pid 6181] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6182] <... openat resumed>) = 4 [pid 6184] <... openat resumed>) = 3 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6187 [pid 6184] write(3, "1000", 4 [ 113.607520][ T6183] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6182] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6187 attached ./strace-static-x86_64: Process 6185 attached [pid 6184] <... write resumed>) = 4 [pid 6184] close(3 [pid 6182] <... ioctl resumed>) = 0 [pid 6184] <... close resumed>) = 0 [pid 6182] close(3 [pid 6184] symlink("/dev/binderfs", "./binderfs" [pid 6182] <... close resumed>) = 0 [pid 6187] chdir("./97" [pid 6185] chdir("./96" [pid 6184] <... symlink resumed>) = 0 [pid 6182] mkdir("./file0", 0777 [pid 6187] <... chdir resumed>) = 0 [pid 6185] <... chdir resumed>) = 0 [pid 6184] memfd_create("syzkaller", 0 [pid 6182] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6186 attached [pid 6187] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6185] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6184] <... memfd_create resumed>) = 3 [pid 6182] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6187] <... prctl resumed>) = 0 [pid 6186] chdir("./99" [pid 6185] <... prctl resumed>) = 0 [pid 6184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6186] <... chdir resumed>) = 0 [pid 6184] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6187] setpgid(0, 0 [pid 6186] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6185] setpgid(0, 0 [pid 6186] <... prctl resumed>) = 0 [pid 6186] setpgid(0, 0 [pid 6187] <... setpgid resumed>) = 0 [pid 6186] <... setpgid resumed>) = 0 [pid 6185] <... setpgid resumed>) = 0 [pid 6187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6186] <... openat resumed>) = 3 [pid 6185] <... openat resumed>) = 3 [pid 6187] <... openat resumed>) = 3 [pid 6186] write(3, "1000", 4 [pid 6185] write(3, "1000", 4 [pid 6186] <... write resumed>) = 4 [pid 6186] close(3) = 0 [pid 6185] <... write resumed>) = 4 [pid 6187] write(3, "1000", 4 [pid 6186] symlink("/dev/binderfs", "./binderfs" [pid 6185] close(3 [pid 6187] <... write resumed>) = 4 [pid 6186] <... symlink resumed>) = 0 [pid 6186] memfd_create("syzkaller", 0) = 3 [pid 6186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6187] close(3 [pid 6186] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6185] <... close resumed>) = 0 [pid 6187] <... close resumed>) = 0 [pid 6186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6185] symlink("/dev/binderfs", "./binderfs" [pid 6187] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6185] <... symlink resumed>) = 0 [ 113.661576][ T6182] loop0: detected capacity change from 0 to 4096 [pid 6187] memfd_create("syzkaller", 0 [pid 6186] <... write resumed>) = 2097152 [pid 6185] memfd_create("syzkaller", 0 [pid 6184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6182] <... mount resumed>) = 0 [pid 6187] <... memfd_create resumed>) = 3 [pid 6186] munmap(0x7f0ed4ac1000, 2097152 [pid 6185] <... memfd_create resumed>) = 3 [pid 6187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6186] <... munmap resumed>) = 0 [pid 6185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6187] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6185] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6186] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6184] <... write resumed>) = 2097152 [pid 6184] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6184] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6184] ioctl(4, LOOP_SET_FD, 3 [pid 6186] <... openat resumed>) = 4 [pid 6186] ioctl(4, LOOP_SET_FD, 3 [pid 6182] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6182] chdir("./file0") = 0 [pid 6182] ioctl(4, LOOP_CLR_FD) = 0 [pid 6182] close(4) = 0 [pid 6182] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 113.720903][ T6188] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.758479][ T6184] loop5: detected capacity change from 0 to 4096 [pid 6182] unlink("./file1" [pid 6185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6184] <... ioctl resumed>) = 0 [pid 6184] close(3) = 0 [pid 6184] mkdir("./file0", 0777) = 0 [pid 6184] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6181] <... pwritev resumed>) = 1114112 [pid 6181] exit_group(0) = ? [pid 6186] <... ioctl resumed>) = 0 [pid 6186] close(3) = 0 [pid 6186] mkdir("./file0", 0777) = 0 [pid 6186] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6182] <... unlink resumed>) = 0 [ 113.765647][ T6186] loop4: detected capacity change from 0 to 4096 [pid 6182] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6186] <... mount resumed>) = 0 [pid 6181] +++ exited with 0 +++ [pid 6186] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6181, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6186] <... openat resumed>) = 3 [pid 6186] chdir("./file0") = 0 [pid 5000] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6186] ioctl(4, LOOP_CLR_FD [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6186] <... ioctl resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6186] close(4 [pid 5000] <... openat resumed>) = 3 [pid 6186] <... close resumed>) = 0 [pid 6184] <... mount resumed>) = 0 [pid 6184] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6184] chdir("./file0") = 0 [pid 6184] ioctl(4, LOOP_CLR_FD) = 0 [pid 6184] close(4) = 0 [pid 6184] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6184] unlink("./file1" [pid 6186] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] fstat(3, [pid 6186] <... openat resumed>) = 4 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6186] unlink("./file1" [pid 5000] getdents64(3, [pid 6186] <... unlink resumed>) = 0 [pid 6186] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6187] <... write resumed>) = 2097152 [pid 5000] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./96/binderfs", [pid 6187] munmap(0x7f0ed4ac1000, 2097152 [pid 6185] <... write resumed>) = 2097152 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./96/binderfs" [pid 6185] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] <... unlink resumed>) = 0 [pid 6187] <... munmap resumed>) = 0 [pid 6185] <... munmap resumed>) = 0 [pid 5000] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6185] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 113.812459][ T6189] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.845654][ T6190] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6185] ioctl(4, LOOP_SET_FD, 3 [pid 6187] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6187] ioctl(4, LOOP_SET_FD, 3 [pid 6185] <... ioctl resumed>) = 0 [pid 6185] close(3) = 0 [pid 6185] mkdir("./file0", 0777) = 0 [pid 6185] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6187] <... ioctl resumed>) = 0 [pid 6187] close(3) = 0 [ 113.877466][ T6185] loop1: detected capacity change from 0 to 4096 [ 113.889834][ T6187] loop3: detected capacity change from 0 to 4096 [pid 6187] mkdir("./file0", 0777) = 0 [pid 6185] <... mount resumed>) = 0 [pid 6184] <... unlink resumed>) = 0 [pid 6184] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6187] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6185] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6185] chdir("./file0") = 0 [pid 6185] ioctl(4, LOOP_CLR_FD) = 0 [pid 6185] close(4) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./96/file0", [pid 6185] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6185] <... openat resumed>) = 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6185] unlink("./file1" [pid 5000] openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 6185] <... unlink resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6185] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./96/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./96") = 0 [ 113.927496][ T6191] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] mkdir("./97", 0777 [pid 6187] <... mount resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 6187] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6187] <... openat resumed>) = 3 [pid 6187] chdir("./file0") = 0 [pid 6187] ioctl(4, LOOP_CLR_FD) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6193 [pid 6187] close(4) = 0 [pid 6187] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6187] unlink("./file1"./strace-static-x86_64: Process 6193 attached [pid 6193] chdir("./97") = 0 [pid 6193] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6186] <... pwritev resumed>) = 1114112 [pid 6186] exit_group(0) = ? [pid 6193] <... prctl resumed>) = 0 [pid 6193] setpgid(0, 0) = 0 [pid 6182] <... pwritev resumed>) = 1114112 [pid 6193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6182] exit_group(0 [pid 6193] <... openat resumed>) = 3 [pid 6182] <... exit_group resumed>) = ? [pid 6193] write(3, "1000", 4) = 4 [pid 6193] close(3) = 0 [pid 6193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6193] memfd_create("syzkaller", 0) = 3 [ 113.977736][ T6192] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6187] <... unlink resumed>) = 0 [pid 6187] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6186] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6186, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5002] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6193] <... write resumed>) = 2097152 [pid 6182] +++ exited with 0 +++ [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6182, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5002] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... restart_syscall resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6193] munmap(0x7f0ed4ac1000, 2097152 [pid 5002] unlink("./99/binderfs" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6185] <... pwritev resumed>) = 1114112 [pid 6184] <... pwritev resumed>) = 1114112 [pid 5002] <... unlink resumed>) = 0 [pid 6185] exit_group(0 [pid 5002] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6193] <... munmap resumed>) = 0 [pid 6185] <... exit_group resumed>) = ? [pid 6184] exit_group(0 [pid 6193] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6184] <... exit_group resumed>) = ? [pid 4998] <... openat resumed>) = 3 [pid 6193] <... openat resumed>) = 4 [pid 4998] fstat(3, [pid 6193] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6193] <... ioctl resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6193] close(3 [pid 4998] lstat("./98/binderfs", [pid 6193] <... close resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6193] mkdir("./file0", 0777 [pid 4998] unlink("./98/binderfs" [pid 6193] <... mkdir resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 6193] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6187] <... pwritev resumed>) = 1114112 [pid 6185] +++ exited with 0 +++ [pid 6187] exit_group(0) = ? [pid 4998] <... umount2 resumed>) = 0 [pid 6184] +++ exited with 0 +++ [pid 5002] <... umount2 resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6185, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 4998] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6193] <... mount resumed>) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6184, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [ 114.153872][ T6193] loop2: detected capacity change from 0 to 4096 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6193] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6193] chdir("./file0" [pid 5003] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6193] <... chdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6193] ioctl(4, LOOP_CLR_FD [pid 5003] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6193] <... ioctl resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 6193] close(4 [pid 5003] fstat(3, [pid 5002] lstat("./99/file0", [pid 4999] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] lstat("./98/file0", [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, [pid 5002] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(3, [pid 4998] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6193] <... close resumed>) = 0 [pid 5003] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./99/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(3, [pid 4998] openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6193] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 4 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] <... openat resumed>) = 4 [pid 5003] lstat("./97/binderfs", [pid 5002] fstat(4, [pid 4999] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(4, [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] unlink("./97/binderfs" [pid 5002] getdents64(4, [pid 4999] lstat("./96/binderfs", [pid 4998] getdents64(4, [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] <... unlink resumed>) = 0 [pid 5002] getdents64(4, [pid 4999] unlink("./96/binderfs" [pid 4998] getdents64(4, [pid 5003] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 4999] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(4 [pid 5002] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5002] rmdir("./99/file0" [pid 4998] rmdir("./98/file0" [pid 5002] <... rmdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, [pid 4998] getdents64(3, [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 4998] close(3 [pid 5002] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5002] rmdir("./99" [pid 4998] rmdir("./98" [pid 5002] <... rmdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5002] mkdir("./100", 0777 [pid 4998] mkdir("./99", 0777 [pid 5002] <... mkdir resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 4998] close(3 [pid 5002] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6195 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6196 ./strace-static-x86_64: Process 6195 attached [pid 6195] chdir("./100") = 0 [pid 6195] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6195] setpgid(0, 0) = 0 [pid 6195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6195] write(3, "1000", 4) = 4 [pid 6195] close(3) = 0 [pid 6195] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6195] memfd_create("syzkaller", 0) = 3 [pid 6195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6187] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6187, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6193] <... openat resumed>) = 4 [pid 5001] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6193] unlink("./file1" [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6193] <... unlink resumed>) = 0 [pid 5001] lstat("./97/binderfs", [pid 6193] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./97/binderfs") = 0 [pid 5001] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6196 attached [pid 4999] <... umount2 resumed>) = 0 [ 114.209927][ T6194] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6196] chdir("./99") = 0 [pid 4999] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6196] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6196] <... prctl resumed>) = 0 [pid 6196] setpgid(0, 0 [pid 4999] lstat("./96/file0", [pid 6196] <... setpgid resumed>) = 0 [pid 5003] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6196] write(3, "1000", 4 [pid 5003] lstat("./97/file0", [pid 4999] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6196] <... write resumed>) = 4 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6196] close(3 [pid 5003] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6196] <... close resumed>) = 0 [pid 6195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6196] symlink("/dev/binderfs", "./binderfs" [pid 5003] openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 4 [pid 6196] <... symlink resumed>) = 0 [pid 5003] <... openat resumed>) = 4 [pid 5001] lstat("./97/file0", [pid 4999] fstat(4, [pid 6196] memfd_create("syzkaller", 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6196] <... memfd_create resumed>) = 3 [pid 5003] fstat(4, [pid 5001] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(4, [pid 6196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6196] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5001] openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(4, [pid 5003] getdents64(4, [pid 5001] <... openat resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] fstat(4, [pid 5003] getdents64(4, [pid 4999] close(4 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] close(4 [pid 4999] <... close resumed>) = 0 [pid 5001] getdents64(4, [pid 5003] <... close resumed>) = 0 [pid 4999] rmdir("./96/file0" [pid 5003] rmdir("./97/file0" [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 4999] <... rmdir resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5003] getdents64(3, [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(3, [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(4 [pid 5003] close(3 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] <... close resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] rmdir("./97/file0" [pid 5003] rmdir("./97" [pid 4999] close(3 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5001] getdents64(3, [pid 5003] <... rmdir resumed>) = 0 [pid 4999] rmdir("./96" [pid 5003] mkdir("./98", 0777 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5001] close(3 [pid 5003] <... mkdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./97" [pid 4999] mkdir("./97", 0777 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5001] mkdir("./98", 0777 [pid 5003] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] <... mkdir resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5003] close(3 [pid 5001] <... openat resumed>) = 3 [pid 5003] <... close resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5001] close(3 [pid 4999] <... close resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6197 [pid 5001] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6198 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6199 ./strace-static-x86_64: Process 6199 attached ./strace-static-x86_64: Process 6198 attached [pid 6196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6195] <... write resumed>) = 2097152 [pid 6199] chdir("./98" [pid 6198] chdir("./97" [pid 6199] <... chdir resumed>) = 0 [pid 6198] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6197 attached [pid 6199] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6198] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6196] <... write resumed>) = 2097152 [pid 6195] munmap(0x7f0ed4ac1000, 2097152 [pid 6199] <... prctl resumed>) = 0 [pid 6198] <... prctl resumed>) = 0 [pid 6197] chdir("./98" [pid 6199] setpgid(0, 0 [pid 6198] setpgid(0, 0 [pid 6196] munmap(0x7f0ed4ac1000, 2097152 [pid 6197] <... chdir resumed>) = 0 [pid 6196] <... munmap resumed>) = 0 [pid 6199] <... setpgid resumed>) = 0 [pid 6198] <... setpgid resumed>) = 0 [pid 6197] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6199] <... openat resumed>) = 3 [pid 6197] <... prctl resumed>) = 0 [pid 6198] <... openat resumed>) = 3 [pid 6198] write(3, "1000", 4 [pid 6197] setpgid(0, 0 [pid 6199] write(3, "1000", 4 [pid 6197] <... setpgid resumed>) = 0 [pid 6199] <... write resumed>) = 4 [pid 6198] <... write resumed>) = 4 [pid 6196] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6198] close(3 [pid 6199] close(3 [pid 6196] <... openat resumed>) = 4 [pid 6197] <... openat resumed>) = 3 [pid 6198] <... close resumed>) = 0 [pid 6199] <... close resumed>) = 0 [pid 6198] symlink("/dev/binderfs", "./binderfs" [pid 6199] symlink("/dev/binderfs", "./binderfs" [pid 6197] write(3, "1000", 4 [pid 6196] ioctl(4, LOOP_SET_FD, 3 [pid 6198] <... symlink resumed>) = 0 [pid 6199] <... symlink resumed>) = 0 [pid 6197] <... write resumed>) = 4 [pid 6198] memfd_create("syzkaller", 0 [pid 6197] close(3 [pid 6199] memfd_create("syzkaller", 0 [pid 6197] <... close resumed>) = 0 [pid 6198] <... memfd_create resumed>) = 3 [pid 6197] symlink("/dev/binderfs", "./binderfs" [pid 6199] <... memfd_create resumed>) = 3 [pid 6198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6197] <... symlink resumed>) = 0 [pid 6199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6198] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6197] memfd_create("syzkaller", 0 [pid 6199] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6195] <... munmap resumed>) = 0 [pid 6195] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6195] ioctl(4, LOOP_SET_FD, 3 [pid 6197] <... memfd_create resumed>) = 3 [pid 6197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6193] <... pwritev resumed>) = 1114112 [pid 6193] exit_group(0) = ? [pid 6195] <... ioctl resumed>) = 0 [pid 6195] close(3) = 0 [pid 6195] mkdir("./file0", 0777) = 0 [pid 6195] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6196] <... ioctl resumed>) = 0 [pid 6199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6196] close(3) = 0 [pid 6196] mkdir("./file0", 0777 [pid 6198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6196] <... mkdir resumed>) = 0 [ 114.359508][ T6196] loop0: detected capacity change from 0 to 4096 [ 114.363842][ T6195] loop4: detected capacity change from 0 to 4096 [pid 6196] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 6196] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6196] chdir("./file0") = 0 [pid 6196] ioctl(4, LOOP_CLR_FD) = 0 [pid 6196] close(4 [pid 6199] <... write resumed>) = 2097152 [pid 6198] <... write resumed>) = 2097152 [pid 6197] <... write resumed>) = 2097152 [pid 6196] <... close resumed>) = 0 [pid 6193] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6193, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5000] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6199] munmap(0x7f0ed4ac1000, 2097152 [pid 6198] munmap(0x7f0ed4ac1000, 2097152 [pid 6197] munmap(0x7f0ed4ac1000, 2097152 [pid 6196] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6195] <... mount resumed>) = 0 [pid 5000] unlink("./97/binderfs" [pid 6199] <... munmap resumed>) = 0 [pid 6198] <... munmap resumed>) = 0 [pid 6195] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] <... unlink resumed>) = 0 [ 114.443492][ T6200] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.470303][ T6201] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6199] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6198] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6197] <... munmap resumed>) = 0 [pid 6196] <... openat resumed>) = 4 [pid 6195] <... openat resumed>) = 3 [pid 5000] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6199] <... openat resumed>) = 4 [pid 6198] <... openat resumed>) = 4 [pid 6197] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6196] unlink("./file1" [pid 6195] chdir("./file0" [pid 6199] ioctl(4, LOOP_SET_FD, 3 [pid 6198] ioctl(4, LOOP_SET_FD, 3 [pid 6197] <... openat resumed>) = 4 [pid 6199] <... ioctl resumed>) = 0 [pid 6197] ioctl(4, LOOP_SET_FD, 3 [pid 6196] <... unlink resumed>) = 0 [pid 6195] <... chdir resumed>) = 0 [pid 6199] close(3 [pid 6196] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6199] <... close resumed>) = 0 [pid 6198] <... ioctl resumed>) = 0 [pid 6197] <... ioctl resumed>) = 0 [pid 6195] ioctl(4, LOOP_CLR_FD [pid 5000] <... umount2 resumed>) = 0 [pid 6199] mkdir("./file0", 0777 [pid 6198] close(3 [pid 6197] close(3 [pid 6195] <... ioctl resumed>) = 0 [pid 5000] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6198] <... close resumed>) = 0 [pid 6197] <... close resumed>) = 0 [pid 6195] close(4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6199] <... mkdir resumed>) = 0 [pid 6198] mkdir("./file0", 0777 [pid 6197] mkdir("./file0", 0777 [pid 6195] <... close resumed>) = 0 [pid 5000] lstat("./97/file0", [pid 6199] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6198] <... mkdir resumed>) = 0 [pid 6197] <... mkdir resumed>) = 0 [pid 6195] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6198] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6197] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6195] <... openat resumed>) = 4 [ 114.490094][ T6199] loop3: detected capacity change from 0 to 4096 [ 114.497504][ T6198] loop1: detected capacity change from 0 to 4096 [ 114.505251][ T6197] loop5: detected capacity change from 0 to 4096 [pid 5000] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6199] <... mount resumed>) = 0 [pid 6195] unlink("./file1" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./97/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./97") = 0 [pid 5000] mkdir("./98", 0777 [pid 6199] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] <... mkdir resumed>) = 0 [pid 6199] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6199] chdir("./file0" [pid 6195] <... unlink resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 6199] <... chdir resumed>) = 0 [pid 6195] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 6199] ioctl(4, LOOP_CLR_FD) = 0 [pid 6199] close(4) = 0 [pid 6199] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6199] unlink("./file1") = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6199] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6197] <... mount resumed>) = 0 [pid 6197] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6205 [pid 6198] <... mount resumed>) = 0 [ 114.545309][ T6202] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.581499][ T6204] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6198] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6198] chdir("./file0") = 0 [pid 6198] ioctl(4, LOOP_CLR_FD) = 0 [pid 6198] close(4) = 0 [pid 6198] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6198] unlink("./file1"./strace-static-x86_64: Process 6205 attached [pid 6197] chdir("./file0" [pid 6205] chdir("./98" [pid 6197] <... chdir resumed>) = 0 [pid 6205] <... chdir resumed>) = 0 [pid 6197] ioctl(4, LOOP_CLR_FD [pid 6205] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6197] <... ioctl resumed>) = 0 [pid 6205] <... prctl resumed>) = 0 [pid 6197] close(4 [pid 6205] setpgid(0, 0 [pid 6197] <... close resumed>) = 0 [pid 6205] <... setpgid resumed>) = 0 [pid 6197] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6197] <... openat resumed>) = 4 [pid 6205] <... openat resumed>) = 3 [pid 6197] unlink("./file1" [pid 6205] write(3, "1000", 4 [pid 6197] <... unlink resumed>) = 0 [pid 6205] <... write resumed>) = 4 [pid 6205] close(3 [pid 6197] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6205] <... close resumed>) = 0 [pid 6205] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6205] memfd_create("syzkaller", 0) = 3 [pid 6205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [ 114.598563][ T6203] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6196] <... pwritev resumed>) = 1114112 [pid 6196] exit_group(0) = ? [pid 6205] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6198] <... unlink resumed>) = 0 [pid 6198] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6205] <... write resumed>) = 2097152 [pid 6205] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6205] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6205] ioctl(4, LOOP_SET_FD, 3 [pid 6195] <... pwritev resumed>) = 1114112 [pid 6195] exit_group(0) = ? [pid 6196] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6196, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6205] <... ioctl resumed>) = 0 [pid 4998] getdents64(3, [pid 6205] close(3 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6205] <... close resumed>) = 0 [pid 4998] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6205] mkdir("./file0", 0777 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6205] <... mkdir resumed>) = 0 [pid 4998] lstat("./99/binderfs", [pid 6205] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6199] <... pwritev resumed>) = 1114112 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6199] exit_group(0 [pid 4998] unlink("./99/binderfs" [pid 6199] <... exit_group resumed>) = ? [pid 4998] <... unlink resumed>) = 0 [ 114.736962][ T6205] loop2: detected capacity change from 0 to 4096 [pid 4998] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6195] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6195, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 6205] <... mount resumed>) = 0 [pid 5002] <... restart_syscall resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 6205] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 4998] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6205] chdir("./file0" [pid 5002] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6205] <... chdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6205] ioctl(4, LOOP_CLR_FD [pid 5002] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] lstat("./99/file0", [pid 6205] <... ioctl resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 6205] close(4 [pid 5002] fstat(3, [pid 6205] <... close resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6205] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6205] <... openat resumed>) = 4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./99/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] lstat("./100/binderfs", [pid 6205] unlink("./file1" [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5002] unlink("./100/binderfs") = 0 [pid 4998] fstat(4, [pid 5002] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4 [pid 6198] <... pwritev resumed>) = 1114112 [pid 6198] exit_group(0 [pid 4998] <... close resumed>) = 0 [pid 6198] <... exit_group resumed>) = ? [pid 4998] rmdir("./99/file0" [pid 6197] <... pwritev resumed>) = 1114112 [pid 5002] <... umount2 resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 6197] exit_group(0) = ? [pid 4998] getdents64(3, [pid 6205] <... unlink resumed>) = 0 [pid 6205] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [ 114.811834][ T6206] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] rmdir("./99" [pid 5002] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... rmdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] mkdir("./100", 0777 [pid 5002] lstat("./100/file0", [pid 4998] <... mkdir resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6199] +++ exited with 0 +++ [pid 5002] openat(AT_FDCWD, "./100/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6199, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] fstat(4, [pid 4998] close(3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./98/binderfs" [pid 5002] getdents64(4, [pid 5001] <... unlink resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(4, [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6207 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./100/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 ./strace-static-x86_64: Process 6207 attached [pid 5002] rmdir("./100" [pid 6207] chdir("./100" [pid 5002] <... rmdir resumed>) = 0 [pid 6207] <... chdir resumed>) = 0 [pid 5002] mkdir("./101", 0777 [pid 6207] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... mkdir resumed>) = 0 [pid 6207] <... prctl resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6207] setpgid(0, 0 [pid 5002] <... openat resumed>) = 3 [pid 6207] <... setpgid resumed>) = 0 [pid 6198] +++ exited with 0 +++ [pid 6197] +++ exited with 0 +++ [pid 5002] ioctl(3, LOOP_CLR_FD [pid 6207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6197, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6198, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6207] <... openat resumed>) = 3 [pid 5002] close(3 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 6207] write(3, "1000", 4 [pid 5002] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 6207] <... write resumed>) = 4 [pid 5003] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... restart_syscall resumed>) = 0 [pid 6207] close(3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6207] <... close resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6208 [pid 6207] symlink("/dev/binderfs", "./binderfs" [pid 5003] <... openat resumed>) = 3 [pid 4999] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6207] <... symlink resumed>) = 0 [pid 5003] fstat(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6207] memfd_create("syzkaller", 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6207] <... memfd_create resumed>) = 3 [pid 5003] getdents64(3, [pid 6207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... openat resumed>) = 3 [pid 6207] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(3, ./strace-static-x86_64: Process 6208 attached [pid 6207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6208] chdir("./101" [pid 5003] lstat("./98/binderfs", [pid 5001] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6208] <... chdir resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] getdents64(3, [pid 6208] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6208] <... prctl resumed>) = 0 [pid 6208] setpgid(0, 0 [pid 5003] unlink("./98/binderfs" [pid 5001] lstat("./98/file0", [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6208] <... setpgid resumed>) = 0 [pid 5003] <... unlink resumed>) = 0 [pid 6208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6208] write(3, "1000", 4) = 4 [pid 6208] close(3) = 0 [pid 6208] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6208] memfd_create("syzkaller", 0) = 3 [pid 6208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./97/binderfs", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] unlink("./97/binderfs" [pid 5001] fstat(4, [pid 4999] <... unlink resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./98/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./98") = 0 [pid 5001] mkdir("./99", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 5003] <... umount2 resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6209 [pid 4999] <... umount2 resumed>) = 0 [pid 5003] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6209 attached ) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] lstat("./98/file0", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6209] chdir("./99" [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] lstat("./97/file0", [pid 5003] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6209] <... chdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6209] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6207] <... write resumed>) = 2097152 [pid 5003] openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6209] <... prctl resumed>) = 0 [pid 6207] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] <... openat resumed>) = 4 [pid 6209] setpgid(0, 0 [pid 5003] fstat(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6209] <... setpgid resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] getdents64(4, [pid 4999] <... openat resumed>) = 4 [pid 6209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] fstat(4, [pid 5003] getdents64(4, [pid 6209] <... openat resumed>) = 3 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6209] write(3, "1000", 4 [pid 6207] <... munmap resumed>) = 0 [pid 5003] close(4 [pid 4999] getdents64(4, [pid 6209] <... write resumed>) = 4 [pid 6207] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6209] close(3 [pid 6207] <... openat resumed>) = 4 [pid 5003] rmdir("./98/file0" [pid 4999] getdents64(4, [pid 6209] <... close resumed>) = 0 [pid 6207] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6209] symlink("/dev/binderfs", "./binderfs" [pid 5003] getdents64(3, [pid 4999] close(4 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6209] <... symlink resumed>) = 0 [pid 5003] close(3 [pid 4999] <... close resumed>) = 0 [pid 6209] memfd_create("syzkaller", 0 [pid 5003] <... close resumed>) = 0 [pid 4999] rmdir("./97/file0" [pid 6209] <... memfd_create resumed>) = 3 [pid 5003] rmdir("./98" [pid 4999] <... rmdir resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 6209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] mkdir("./99", 0777 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6209] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] <... mkdir resumed>) = 0 [pid 4999] close(3) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] rmdir("./97" [pid 5003] <... openat resumed>) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./98", 0777 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3 [pid 4999] <... mkdir resumed>) = 0 [pid 6209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6210 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6208] <... write resumed>) = 2097152 [pid 6207] <... ioctl resumed>) = 0 [pid 6208] munmap(0x7f0ed4ac1000, 2097152 [pid 6207] close(3 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6211 [pid 6208] <... munmap resumed>) = 0 [pid 6207] <... close resumed>) = 0 [pid 6208] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6207] mkdir("./file0", 0777 [pid 6208] <... openat resumed>) = 4 [pid 6208] ioctl(4, LOOP_SET_FD, 3 [pid 6207] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6210 attached [pid 6210] chdir("./99") = 0 ./strace-static-x86_64: Process 6211 attached [pid 6210] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6211] chdir("./98" [pid 6210] <... prctl resumed>) = 0 [pid 6211] <... chdir resumed>) = 0 [pid 6210] setpgid(0, 0 [pid 6211] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6210] <... setpgid resumed>) = 0 [pid 6211] <... prctl resumed>) = 0 [pid 6210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6211] setpgid(0, 0 [pid 6210] <... openat resumed>) = 3 [pid 6211] <... setpgid resumed>) = 0 [pid 6210] write(3, "1000", 4 [pid 6211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6210] <... write resumed>) = 4 [pid 6211] <... openat resumed>) = 3 [pid 6210] close(3 [pid 6211] write(3, "1000", 4 [pid 6210] <... close resumed>) = 0 [pid 6211] <... write resumed>) = 4 [pid 6210] symlink("/dev/binderfs", "./binderfs" [pid 6211] close(3 [pid 6210] <... symlink resumed>) = 0 [pid 6211] <... close resumed>) = 0 [pid 6210] memfd_create("syzkaller", 0 [pid 6208] <... ioctl resumed>) = 0 [pid 6207] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6205] <... pwritev resumed>) = 1114112 [pid 6211] symlink("/dev/binderfs", "./binderfs" [pid 6210] <... memfd_create resumed>) = 3 [pid 6211] <... symlink resumed>) = 0 [pid 6210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6205] exit_group(0 [pid 6211] memfd_create("syzkaller", 0 [pid 6210] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6205] <... exit_group resumed>) = ? [ 115.025458][ T6207] loop0: detected capacity change from 0 to 4096 [ 115.062175][ T6208] loop4: detected capacity change from 0 to 4096 [pid 6211] <... memfd_create resumed>) = 3 [pid 6210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6209] <... write resumed>) = 2097152 [pid 6208] close(3 [pid 6207] <... mount resumed>) = 0 [pid 6205] +++ exited with 0 +++ [pid 6209] munmap(0x7f0ed4ac1000, 2097152 [pid 6208] <... close resumed>) = 0 [pid 6207] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6209] <... munmap resumed>) = 0 [pid 6208] mkdir("./file0", 0777 [pid 6211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6207] <... openat resumed>) = 3 [pid 6209] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6208] <... mkdir resumed>) = 0 [pid 6207] chdir("./file0" [pid 6209] <... openat resumed>) = 4 [pid 6208] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6207] <... chdir resumed>) = 0 [pid 6209] ioctl(4, LOOP_SET_FD, 3 [pid 6207] ioctl(4, LOOP_CLR_FD [pid 6211] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6210] <... write resumed>) = 2097152 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6205, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6207] <... ioctl resumed>) = 0 [pid 6207] close(4) = 0 [pid 6207] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6207] unlink("./file1" [pid 6209] <... ioctl resumed>) = 0 [pid 6209] close(3) = 0 [pid 6209] mkdir("./file0", 0777) = 0 [pid 6209] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6210] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6207] <... unlink resumed>) = 0 [pid 6207] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6210] <... munmap resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6210] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] <... openat resumed>) = 3 [pid 6210] <... openat resumed>) = 4 [pid 6210] ioctl(4, LOOP_SET_FD, 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 115.089694][ T6212] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.107526][ T6209] loop3: detected capacity change from 0 to 4096 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./98/binderfs", [pid 6209] <... mount resumed>) = 0 [pid 6208] <... mount resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6209] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6208] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6209] <... openat resumed>) = 3 [pid 6208] <... openat resumed>) = 3 [pid 6209] chdir("./file0" [pid 6208] chdir("./file0" [pid 6209] <... chdir resumed>) = 0 [pid 6208] <... chdir resumed>) = 0 [pid 6209] ioctl(4, LOOP_CLR_FD [pid 6208] ioctl(4, LOOP_CLR_FD [pid 6209] <... ioctl resumed>) = 0 [pid 6208] <... ioctl resumed>) = 0 [pid 6209] close(4 [pid 6208] close(4 [pid 6209] <... close resumed>) = 0 [pid 6208] <... close resumed>) = 0 [pid 6209] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6208] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6209] <... openat resumed>) = 4 [pid 6208] <... openat resumed>) = 4 [pid 6209] unlink("./file1" [pid 6208] unlink("./file1" [pid 5000] unlink("./98/binderfs") = 0 [pid 5000] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5000] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6210] <... ioctl resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6210] close(3) = 0 [pid 5000] lstat("./98/file0", [pid 6210] mkdir("./file0", 0777 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6210] <... mkdir resumed>) = 0 [pid 6210] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 6211] <... write resumed>) = 2097152 [pid 6211] munmap(0x7f0ed4ac1000, 2097152 [pid 6209] <... unlink resumed>) = 0 [ 115.134596][ T6210] loop5: detected capacity change from 0 to 4096 [ 115.145612][ T6214] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.146707][ T6213] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6209] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6210] <... mount resumed>) = 0 [pid 6208] <... unlink resumed>) = 0 [pid 5000] rmdir("./98/file0" [pid 6210] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6208] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6211] <... munmap resumed>) = 0 [pid 6210] <... openat resumed>) = 3 [pid 6207] <... pwritev resumed>) = 1114112 [pid 5000] <... rmdir resumed>) = 0 [pid 6207] exit_group(0 [pid 6211] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6210] chdir("./file0" [pid 6207] <... exit_group resumed>) = ? [pid 5000] getdents64(3, [pid 6211] <... openat resumed>) = 4 [pid 6210] <... chdir resumed>) = 0 [pid 6211] ioctl(4, LOOP_SET_FD, 3 [pid 6210] ioctl(4, LOOP_CLR_FD [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [ 115.231083][ T6215] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6210] <... ioctl resumed>) = 0 [pid 5000] close(3) = 0 [pid 6210] close(4) = 0 [pid 6210] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] rmdir("./98") = 0 [pid 5000] mkdir("./99", 0777 [pid 6211] <... ioctl resumed>) = 0 [pid 6210] <... openat resumed>) = 4 [pid 6211] close(3 [pid 6210] unlink("./file1" [pid 5000] <... mkdir resumed>) = 0 [pid 6211] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6210] <... unlink resumed>) = 0 [pid 6211] mkdir("./file0", 0777 [pid 6210] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] close(3 [pid 6211] <... mkdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 6211] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6216 [pid 6207] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6207, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- ./strace-static-x86_64: Process 6216 attached [pid 6216] chdir("./99" [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 6216] <... chdir resumed>) = 0 [pid 4998] <... restart_syscall resumed>) = 0 [pid 6216] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 115.274199][ T6211] loop1: detected capacity change from 0 to 4096 [pid 6216] setpgid(0, 0 [pid 6211] <... mount resumed>) = 0 [pid 4998] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6216] <... setpgid resumed>) = 0 [pid 6211] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6211] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 6216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6211] chdir("./file0" [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6216] <... openat resumed>) = 3 [pid 6211] <... chdir resumed>) = 0 [pid 6216] write(3, "1000", 4 [pid 6211] ioctl(4, LOOP_CLR_FD [pid 4998] getdents64(3, [pid 6216] <... write resumed>) = 4 [pid 6211] <... ioctl resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6216] close(3 [pid 6211] close(4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6216] <... close resumed>) = 0 [pid 6211] <... close resumed>) = 0 [pid 6216] symlink("/dev/binderfs", "./binderfs" [pid 6211] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] lstat("./100/binderfs", [pid 6216] <... symlink resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6216] memfd_create("syzkaller", 0) = 3 [pid 4998] unlink("./100/binderfs" [pid 6216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6209] <... pwritev resumed>) = 1114112 [pid 4998] <... unlink resumed>) = 0 [pid 6211] <... openat resumed>) = 4 [pid 6216] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6209] exit_group(0 [pid 4998] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6209] <... exit_group resumed>) = ? [pid 6211] unlink("./file1") = 0 [ 115.330152][ T6217] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6211] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6216] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./100/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./100/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./100/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./100" [pid 6216] <... write resumed>) = 2097152 [pid 6216] munmap(0x7f0ed4ac1000, 2097152 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./101", 0777) = 0 [pid 6216] <... munmap resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6216] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6216] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6216] <... ioctl resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6216] close(3) = 0 [pid 6216] mkdir("./file0", 0777) = 0 [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6216] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6218 [pid 6208] <... pwritev resumed>) = 1114112 [pid 6208] exit_group(0) = ? [pid 6210] <... pwritev resumed>) = 1114112 [pid 6210] exit_group(0) = ? [pid 6209] +++ exited with 0 +++ ./strace-static-x86_64: Process 6218 attached [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6209, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 6218] chdir("./101" [pid 5001] <... restart_syscall resumed>) = 0 [pid 5001] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6218] <... chdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./99/binderfs") = 0 [pid 6218] prctl(PR_SET_PDEATHSIG, SIGKILL [ 115.442144][ T6216] loop2: detected capacity change from 0 to 4096 [pid 5001] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6218] <... prctl resumed>) = 0 [pid 6216] <... mount resumed>) = 0 [pid 6216] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6216] chdir("./file0") = 0 [pid 6216] ioctl(4, LOOP_CLR_FD) = 0 [pid 6216] close(4) = 0 [pid 6216] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6216] unlink("./file1" [pid 6218] setpgid(0, 0) = 0 [pid 6218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6208] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6208, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6218] write(3, "1000", 4) = 4 [pid 6218] close(3 [pid 5002] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6218] <... close resumed>) = 0 [pid 6218] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6218] <... symlink resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6218] memfd_create("syzkaller", 0 [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6218] <... memfd_create resumed>) = 3 [pid 6218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6216] <... unlink resumed>) = 0 [pid 5002] getdents64(3, [pid 6216] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6218] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./101/binderfs") = 0 [pid 5002] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 6210] +++ exited with 0 +++ [pid 5001] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6210, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5003] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] lstat("./99/file0", [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] lstat("./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./99/binderfs") = 0 [pid 5003] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 115.498432][ T6219] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... umount2 resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./99/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] lstat("./99/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] close(4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./99/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] <... close resumed>) = 0 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] rmdir("./99/file0" [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6211] <... pwritev resumed>) = 1114112 [pid 5003] rmdir("./99/file0" [pid 5002] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] close(3 [pid 6211] exit_group(0 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... close resumed>) = 0 [pid 6211] <... exit_group resumed>) = ? [pid 5003] getdents64(3, [pid 5002] lstat("./101/file0", [pid 5001] rmdir("./99" [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] close(3 [pid 5002] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] rmdir("./99" [pid 5002] openat(AT_FDCWD, "./101/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5003] mkdir("./100", 0777 [pid 5002] fstat(4, [pid 5003] <... mkdir resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] getdents64(4, [pid 5003] <... openat resumed>) = 3 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] <... rmdir resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] getdents64(4, [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(3 [pid 5002] close(4 [pid 5003] <... close resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] mkdir("./100", 0777 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] rmdir("./101/file0") = 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6220 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./101") = 0 [pid 5002] mkdir("./102", 0777) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6221 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6218] <... write resumed>) = 2097152 [pid 5001] close(3) = 0 ./strace-static-x86_64: Process 6220 attached [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6220] chdir("./100") = 0 [pid 6220] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6220] setpgid(0, 0) = 0 [pid 6220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6222 [pid 6220] write(3, "1000", 4) = 4 [pid 6220] close(3) = 0 ./strace-static-x86_64: Process 6221 attached [pid 6220] symlink("/dev/binderfs", "./binderfs" [pid 6221] chdir("./102" [pid 6220] <... symlink resumed>) = 0 [pid 6221] <... chdir resumed>) = 0 [pid 6220] memfd_create("syzkaller", 0 [pid 6221] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6220] <... memfd_create resumed>) = 3 [pid 6221] <... prctl resumed>) = 0 [pid 6220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6221] setpgid(0, 0 [pid 6220] <... mmap resumed>) = 0x7f0ed4ac1000 ./strace-static-x86_64: Process 6222 attached [pid 6221] <... setpgid resumed>) = 0 [pid 6218] munmap(0x7f0ed4ac1000, 2097152 [pid 6221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6221] write(3, "1000", 4) = 4 [pid 6221] close(3) = 0 [pid 6221] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6221] memfd_create("syzkaller", 0) = 3 [pid 6221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6222] chdir("./100" [pid 6218] <... munmap resumed>) = 0 [pid 6222] <... chdir resumed>) = 0 [pid 6218] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6222] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6218] <... openat resumed>) = 4 [pid 6222] <... prctl resumed>) = 0 [pid 6218] ioctl(4, LOOP_SET_FD, 3 [pid 6222] setpgid(0, 0) = 0 [pid 6220] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6222] write(3, "1000", 4) = 4 [pid 6222] close(3) = 0 [pid 6222] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6222] memfd_create("syzkaller", 0) = 3 [pid 6222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6216] <... pwritev resumed>) = 1114112 [pid 6216] exit_group(0) = ? [pid 6222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6221] <... write resumed>) = 2097152 [pid 6218] <... ioctl resumed>) = 0 [pid 6211] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6211, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4999] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./98/binderfs") = 0 [pid 4999] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6218] close(3) = 0 [pid 6218] mkdir("./file0", 0777) = 0 [pid 6221] munmap(0x7f0ed4ac1000, 2097152 [pid 6218] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6221] <... munmap resumed>) = 0 [ 115.655631][ T6218] loop0: detected capacity change from 0 to 4096 [pid 6221] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6221] ioctl(4, LOOP_SET_FD, 3 [pid 6216] +++ exited with 0 +++ [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./98/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./98/file0" [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6216, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5000] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6218] <... mount resumed>) = 0 [pid 6218] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... rmdir resumed>) = 0 [pid 6218] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 6218] chdir("./file0" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 5000] getdents64(3, [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 6218] <... chdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6220] <... write resumed>) = 2097152 [pid 6218] ioctl(4, LOOP_CLR_FD [pid 5000] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./98" [pid 6218] <... ioctl resumed>) = 0 [pid 6218] close(4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... rmdir resumed>) = 0 [pid 5000] lstat("./99/binderfs", [pid 6222] <... write resumed>) = 2097152 [pid 6221] <... ioctl resumed>) = 0 [pid 6220] munmap(0x7f0ed4ac1000, 2097152 [pid 6218] <... close resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6222] munmap(0x7f0ed4ac1000, 2097152 [pid 6221] close(3 [pid 6220] <... munmap resumed>) = 0 [pid 6218] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] unlink("./99/binderfs" [pid 6222] <... munmap resumed>) = 0 [pid 6221] <... close resumed>) = 0 [pid 6218] <... openat resumed>) = 4 [pid 5000] <... unlink resumed>) = 0 [pid 4999] mkdir("./99", 0777 [ 115.718528][ T6221] loop4: detected capacity change from 0 to 4096 [ 115.731083][ T6223] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6222] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6221] mkdir("./file0", 0777 [pid 6220] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6218] unlink("./file1" [pid 5000] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6222] <... openat resumed>) = 4 [pid 6221] <... mkdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 6222] ioctl(4, LOOP_SET_FD, 3 [pid 6221] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6222] <... ioctl resumed>) = 0 [pid 6220] <... openat resumed>) = 4 [pid 6218] <... unlink resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6220] ioctl(4, LOOP_SET_FD, 3 [pid 6218] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6220] <... ioctl resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6222] close(3 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6222] <... close resumed>) = 0 [pid 4999] close(3 [pid 6222] mkdir("./file0", 0777) = 0 [pid 4999] <... close resumed>) = 0 [pid 6222] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6225 [pid 6221] <... mount resumed>) = 0 [pid 6221] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6221] chdir("./file0") = 0 [pid 6221] ioctl(4, LOOP_CLR_FD) = 0 [ 115.763800][ T6222] loop3: detected capacity change from 0 to 4096 [ 115.790525][ T6220] loop5: detected capacity change from 0 to 4096 [pid 6221] close(4) = 0 [pid 6221] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6221] unlink("./file1" [pid 6220] close(3) = 0 [pid 6220] mkdir("./file0", 0777) = 0 ./strace-static-x86_64: Process 6225 attached [pid 6225] chdir("./99") = 0 [pid 6225] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6220] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6225] <... prctl resumed>) = 0 [pid 6225] setpgid(0, 0 [pid 6222] <... mount resumed>) = 0 [pid 6225] <... setpgid resumed>) = 0 [pid 6225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6222] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6225] <... openat resumed>) = 3 [pid 6222] <... openat resumed>) = 3 [pid 6225] write(3, "1000", 4) = 4 [pid 6225] close(3 [pid 6222] chdir("./file0" [pid 6225] <... close resumed>) = 0 [pid 6222] <... chdir resumed>) = 0 [pid 6225] symlink("/dev/binderfs", "./binderfs" [pid 6222] ioctl(4, LOOP_CLR_FD [pid 6225] <... symlink resumed>) = 0 [pid 6222] <... ioctl resumed>) = 0 [pid 5000] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6225] memfd_create("syzkaller", 0 [pid 6222] close(4 [pid 6225] <... memfd_create resumed>) = 3 [pid 6222] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6222] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] lstat("./99/file0", [pid 6225] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6222] <... openat resumed>) = 4 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6222] unlink("./file1" [pid 5000] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./99/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./99/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./99") = 0 [pid 5000] mkdir("./100", 0777) = 0 [ 115.812005][ T6224] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.826107][ T6226] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6220] <... mount resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 6221] <... unlink resumed>) = 0 [pid 6220] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6221] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6220] <... openat resumed>) = 3 [pid 6222] <... unlink resumed>) = 0 [pid 6220] chdir("./file0" [pid 5000] ioctl(3, LOOP_CLR_FD [pid 6222] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6220] <... chdir resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6225] <... write resumed>) = 2097152 [pid 6220] ioctl(4, LOOP_CLR_FD [pid 5000] close(3 [pid 6225] munmap(0x7f0ed4ac1000, 2097152 [pid 6220] <... ioctl resumed>) = 0 [pid 6218] <... pwritev resumed>) = 1114112 [pid 5000] <... close resumed>) = 0 [pid 6220] close(4 [pid 6218] exit_group(0 [pid 6225] <... munmap resumed>) = 0 [pid 6220] <... close resumed>) = 0 [pid 6218] <... exit_group resumed>) = ? [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6225] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6220] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6225] <... openat resumed>) = 4 [pid 6220] <... openat resumed>) = 4 [ 115.879557][ T6227] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6225] ioctl(4, LOOP_SET_FD, 3 [pid 6220] unlink("./file1" [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6228 ./strace-static-x86_64: Process 6228 attached [pid 6225] <... ioctl resumed>) = 0 [pid 6220] <... unlink resumed>) = 0 [pid 6225] close(3 [pid 6220] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6228] chdir("./100" [pid 6225] <... close resumed>) = 0 [pid 6228] <... chdir resumed>) = 0 [pid 6225] mkdir("./file0", 0777 [pid 6228] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6225] <... mkdir resumed>) = 0 [pid 6228] setpgid(0, 0 [pid 6225] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6228] <... setpgid resumed>) = 0 [pid 6228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6228] write(3, "1000", 4) = 4 [pid 6228] close(3) = 0 [pid 6228] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6228] memfd_create("syzkaller", 0 [pid 6221] <... pwritev resumed>) = 1114112 [ 115.942246][ T6225] loop1: detected capacity change from 0 to 4096 [pid 6228] <... memfd_create resumed>) = 3 [pid 6225] <... mount resumed>) = 0 [pid 6228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6225] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6221] exit_group(0 [pid 6228] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6225] <... openat resumed>) = 3 [pid 6221] <... exit_group resumed>) = ? [pid 6225] chdir("./file0") = 0 [pid 6225] ioctl(4, LOOP_CLR_FD) = 0 [pid 6225] close(4) = 0 [pid 6225] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6225] <... openat resumed>) = 4 [pid 6225] unlink("./file1") = 0 [pid 6225] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6218] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6218, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 115.984656][ T6229] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6221] +++ exited with 0 +++ [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./101/binderfs", [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6221, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] unlink("./101/binderfs" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... unlink resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./102/binderfs" [pid 6228] <... write resumed>) = 2097152 [pid 5002] <... unlink resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 6228] munmap(0x7f0ed4ac1000, 2097152 [pid 5002] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6228] <... munmap resumed>) = 0 [pid 6228] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6228] ioctl(4, LOOP_SET_FD, 3 [pid 4998] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./101/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./101/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, [pid 6228] <... ioctl resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./101/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./101") = 0 [pid 4998] mkdir("./102", 0777) = 0 [pid 6228] close(3 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6228] <... close resumed>) = 0 [pid 6228] mkdir("./file0", 0777 [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 6228] <... mkdir resumed>) = 0 [pid 6220] <... pwritev resumed>) = 1114112 [pid 5002] <... umount2 resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 6228] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6220] exit_group(0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6220] <... exit_group resumed>) = ? [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6230 [ 116.082982][ T6228] loop2: detected capacity change from 0 to 4096 [pid 5002] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./102/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./102/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 6230 attached [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 6230] chdir("./102") = 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6230] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] getdents64(4, [pid 6230] <... prctl resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6230] setpgid(0, 0 [pid 5002] close(4 [pid 6230] <... setpgid resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 6230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] rmdir("./102/file0") = 0 [pid 6230] <... openat resumed>) = 3 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6230] write(3, "1000", 4 [pid 5002] close(3 [pid 6230] <... write resumed>) = 4 [pid 5002] <... close resumed>) = 0 [pid 6230] close(3 [pid 5002] rmdir("./102" [pid 6230] <... close resumed>) = 0 [pid 6230] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./103", 0777 [pid 6230] <... symlink resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 6230] memfd_create("syzkaller", 0) = 3 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... openat resumed>) = 3 [pid 6230] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6232 [pid 6228] <... mount resumed>) = 0 [pid 6228] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6228] chdir("./file0") = 0 [pid 6228] ioctl(4, LOOP_CLR_FD) = 0 [pid 6228] close(4) = 0 [pid 6228] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000./strace-static-x86_64: Process 6232 attached ) = 4 [pid 6228] unlink("./file1" [pid 6232] chdir("./103") = 0 [pid 6232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6232] setpgid(0, 0) = 0 [pid 6222] <... pwritev resumed>) = 1114112 [pid 6232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6222] exit_group(0 [pid 6232] <... openat resumed>) = 3 [pid 6222] <... exit_group resumed>) = ? [pid 6232] write(3, "1000", 4 [pid 6230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6232] <... write resumed>) = 4 [pid 6220] +++ exited with 0 +++ [pid 6232] close(3 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6220, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6232] <... close resumed>) = 0 [pid 6225] <... pwritev resumed>) = 1114112 [pid 6232] symlink("/dev/binderfs", "./binderfs" [pid 6225] exit_group(0 [pid 6232] <... symlink resumed>) = 0 [pid 6225] <... exit_group resumed>) = ? [pid 6232] memfd_create("syzkaller", 0 [pid 6230] <... write resumed>) = 2097152 [pid 6232] <... memfd_create resumed>) = 3 [pid 6230] munmap(0x7f0ed4ac1000, 2097152 [pid 6232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6228] <... unlink resumed>) = 0 [ 116.176593][ T6231] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6228] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6232] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6230] <... munmap resumed>) = 0 [pid 6222] +++ exited with 0 +++ [pid 6230] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6222, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6230] <... openat resumed>) = 4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6230] ioctl(4, LOOP_SET_FD, 3 [pid 5003] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] getdents64(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] <... openat resumed>) = 3 [pid 6230] <... ioctl resumed>) = 0 [pid 5003] lstat("./100/binderfs", [pid 5001] fstat(3, [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6230] close(3 [pid 5003] unlink("./100/binderfs" [pid 5001] getdents64(3, [pid 6230] <... close resumed>) = 0 [pid 5003] <... unlink resumed>) = 0 [pid 6230] mkdir("./file0", 0777 [pid 5003] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./100/binderfs" [pid 6230] <... mkdir resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 6230] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6225] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6225, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4999] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, [pid 5003] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 116.251145][ T6230] loop0: detected capacity change from 0 to 4096 [pid 5001] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./100/file0", [pid 5001] lstat("./100/file0", [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6228] <... pwritev resumed>) = 1114112 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./99/binderfs", [pid 6228] exit_group(0 [pid 5003] openat(AT_FDCWD, "./100/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "./100/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6228] <... exit_group resumed>) = ? [pid 5003] <... openat resumed>) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6230] <... mount resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5003] fstat(4, [pid 6230] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] fstat(4, [pid 4999] unlink("./99/binderfs" [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 6230] <... openat resumed>) = 3 [pid 5003] getdents64(4, [pid 5001] getdents64(4, [pid 4999] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6230] chdir("./file0" [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, [pid 5001] getdents64(4, [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4 [pid 5001] close(4 [pid 5003] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5003] rmdir("./100/file0" [pid 5001] rmdir("./100/file0" [pid 6230] <... chdir resumed>) = 0 [pid 6232] <... write resumed>) = 2097152 [pid 6232] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] <... rmdir resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5003] getdents64(3, [pid 5001] getdents64(3, [pid 6232] <... munmap resumed>) = 0 [pid 6232] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6232] ioctl(4, LOOP_SET_FD, 3 [pid 6230] ioctl(4, LOOP_CLR_FD [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 6230] <... ioctl resumed>) = 0 [pid 5003] close(3 [pid 6230] close(4 [pid 5003] <... close resumed>) = 0 [pid 5001] close(3 [pid 5003] rmdir("./100" [pid 6230] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 6230] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] <... rmdir resumed>) = 0 [pid 5001] rmdir("./100" [pid 5003] mkdir("./101", 0777 [pid 6232] <... ioctl resumed>) = 0 [pid 6230] <... openat resumed>) = 4 [pid 6228] +++ exited with 0 +++ [pid 5003] <... mkdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6230] unlink("./file1" [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] mkdir("./101", 0777 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... openat resumed>) = 3 [pid 5001] <... mkdir resumed>) = 0 [pid 4999] lstat("./99/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6228, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6232] close(3 [pid 6230] <... unlink resumed>) = 0 [pid 5003] close(3 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6230] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] <... close resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "./99/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6232] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] <... openat resumed>) = 4 [pid 5000] <... openat resumed>) = 3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] fstat(3, [pid 4999] fstat(4, [pid 5001] close(3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] getdents64(3, [pid 4999] getdents64(4, [pid 6232] mkdir("./file0", 0777 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6234 [pid 5000] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(4, [pid 6232] <... mkdir resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6235 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6232] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] lstat("./100/binderfs", [pid 4999] close(4 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 5000] unlink("./100/binderfs") = 0 [pid 4999] rmdir("./99/file0" [pid 5000] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./99"./strace-static-x86_64: Process 6235 attached ) = 0 [pid 6235] chdir("./101" [pid 4999] mkdir("./100", 0777 [pid 6235] <... chdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 6235] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6235] <... prctl resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 6235] setpgid(0, 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6235] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 6234 attached [pid 6234] chdir("./101") = 0 [pid 6234] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6234] setpgid(0, 0) = 0 [pid 6234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6234] write(3, "1000", 4) = 4 [pid 6234] close(3 [ 116.322179][ T6233] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.342356][ T6232] loop4: detected capacity change from 0 to 4096 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6234] <... close resumed>) = 0 [pid 4999] close(3 [pid 6235] <... openat resumed>) = 3 [pid 6234] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... close resumed>) = 0 [pid 6235] write(3, "1000", 4 [pid 6234] <... symlink resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6235] <... write resumed>) = 4 [pid 6234] memfd_create("syzkaller", 0 [pid 6235] close(3 [pid 6234] <... memfd_create resumed>) = 3 [pid 6235] <... close resumed>) = 0 [pid 6234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6237 [pid 6235] symlink("/dev/binderfs", "./binderfs" [pid 6234] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6232] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6237 attached [pid 6237] chdir("./100") = 0 [pid 6237] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6237] setpgid(0, 0) = 0 [pid 6237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6235] <... symlink resumed>) = 0 [pid 6235] memfd_create("syzkaller", 0 [pid 6232] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] <... umount2 resumed>) = 0 [pid 6237] write(3, "1000", 4 [pid 6235] <... memfd_create resumed>) = 3 [pid 6232] <... openat resumed>) = 3 [pid 5000] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6237] <... write resumed>) = 4 [pid 6235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6232] chdir("./file0" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6237] close(3 [pid 6235] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6232] <... chdir resumed>) = 0 [pid 5000] lstat("./100/file0", [pid 6237] <... close resumed>) = 0 [pid 6237] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6237] memfd_create("syzkaller", 0) = 3 [pid 6237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6232] ioctl(4, LOOP_CLR_FD [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6232] <... ioctl resumed>) = 0 [pid 5000] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6232] close(4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6232] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./100/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6232] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] <... openat resumed>) = 4 [pid 6232] <... openat resumed>) = 4 [pid 5000] fstat(4, [pid 6232] unlink("./file1" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 6232] <... unlink resumed>) = 0 [pid 5000] getdents64(4, [pid 6232] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./100/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [ 116.415324][ T6236] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] rmdir("./100") = 0 [pid 5000] mkdir("./101", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6234] <... write resumed>) = 2097152 [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6238 ./strace-static-x86_64: Process 6238 attached [pid 6235] <... write resumed>) = 2097152 [pid 6238] chdir("./101") = 0 [pid 6235] munmap(0x7f0ed4ac1000, 2097152 [pid 6238] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6238] setpgid(0, 0 [pid 6235] <... munmap resumed>) = 0 [pid 6230] <... pwritev resumed>) = 1114112 [pid 6238] <... setpgid resumed>) = 0 [pid 6235] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6230] exit_group(0 [pid 6238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6235] <... openat resumed>) = 4 [pid 6230] <... exit_group resumed>) = ? [pid 6238] <... openat resumed>) = 3 [pid 6235] ioctl(4, LOOP_SET_FD, 3 [pid 6234] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6234] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6234] ioctl(4, LOOP_SET_FD, 3 [pid 6238] write(3, "1000", 4 [pid 6235] <... ioctl resumed>) = 0 [pid 6238] <... write resumed>) = 4 [pid 6235] close(3 [pid 6238] close(3 [pid 6235] <... close resumed>) = 0 [pid 6238] <... close resumed>) = 0 [pid 6235] mkdir("./file0", 0777 [pid 6238] symlink("/dev/binderfs", "./binderfs" [pid 6235] <... mkdir resumed>) = 0 [pid 6238] <... symlink resumed>) = 0 [pid 6235] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6238] memfd_create("syzkaller", 0 [pid 6237] <... write resumed>) = 2097152 [pid 6235] <... mount resumed>) = 0 [pid 6238] <... memfd_create resumed>) = 3 [pid 6237] munmap(0x7f0ed4ac1000, 2097152 [pid 6230] +++ exited with 0 +++ [pid 6238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6235] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6230, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6238] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6237] <... munmap resumed>) = 0 [pid 6235] <... openat resumed>) = 3 [pid 6235] chdir("./file0") = 0 [pid 4998] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6235] ioctl(4, LOOP_CLR_FD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6235] <... ioctl resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6235] close(4 [pid 4998] <... openat resumed>) = 3 [pid 6237] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6235] <... close resumed>) = 0 [pid 4998] fstat(3, [pid 6237] <... openat resumed>) = 4 [pid 6235] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6237] ioctl(4, LOOP_SET_FD, 3 [pid 6235] <... openat resumed>) = 4 [pid 4998] getdents64(3, [ 116.520718][ T6235] loop3: detected capacity change from 0 to 4096 [ 116.526650][ T6234] loop5: detected capacity change from 0 to 4096 [ 116.558319][ T6239] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6235] unlink("./file1" [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./102/binderfs") = 0 [pid 4998] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6232] <... pwritev resumed>) = 1114112 [pid 6232] exit_group(0) = ? [pid 6238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6237] <... ioctl resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 6234] <... ioctl resumed>) = 0 [pid 6234] close(3) = 0 [pid 6234] mkdir("./file0", 0777) = 0 [pid 6234] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6237] close(3) = 0 [pid 6237] mkdir("./file0", 0777) = 0 [pid 6237] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6235] <... unlink resumed>) = 0 [pid 6235] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./102/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 116.594391][ T6237] loop1: detected capacity change from 0 to 4096 [pid 4998] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./102/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./102/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./102") = 0 [pid 6237] <... mount resumed>) = 0 [pid 4998] mkdir("./103", 0777 [pid 6237] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] <... mkdir resumed>) = 0 [pid 6237] <... openat resumed>) = 3 [pid 6237] chdir("./file0" [pid 6232] +++ exited with 0 +++ [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6238] <... write resumed>) = 2097152 [pid 6237] <... chdir resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6232, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6238] munmap(0x7f0ed4ac1000, 2097152 [pid 6237] ioctl(4, LOOP_CLR_FD [pid 4998] <... openat resumed>) = 3 [pid 6238] <... munmap resumed>) = 0 [pid 6237] <... ioctl resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6238] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6237] close(4 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6238] <... openat resumed>) = 4 [pid 6237] <... close resumed>) = 0 [pid 6234] <... mount resumed>) = 0 [pid 4998] close(3 [pid 6234] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 6234] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6238] ioctl(4, LOOP_SET_FD, 3 [pid 6237] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6234] chdir("./file0" [pid 5002] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6234] <... chdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6242 [pid 6234] ioctl(4, LOOP_CLR_FD [pid 5002] fstat(3, [pid 6234] <... ioctl resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6234] close(4 [pid 5002] getdents64(3, [pid 6234] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6234] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6237] <... openat resumed>) = 4 [pid 6234] <... openat resumed>) = 4 [pid 5002] lstat("./103/binderfs", [pid 6237] unlink("./file1" [pid 6234] unlink("./file1" [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 6242 attached [pid 5002] unlink("./103/binderfs" [pid 6242] chdir("./103" [pid 6237] <... unlink resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 6242] <... chdir resumed>) = 0 [pid 6237] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6242] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6242] setpgid(0, 0) = 0 [pid 6242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6242] write(3, "1000", 4) = 4 [pid 6242] close(3) = 0 [pid 6242] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6242] memfd_create("syzkaller", 0) = 3 [pid 6242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6238] <... ioctl resumed>) = 0 [ 116.656031][ T6240] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.681606][ T6241] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.698806][ T6238] loop2: detected capacity change from 0 to 4096 [pid 6238] close(3) = 0 [pid 6238] mkdir("./file0", 0777) = 0 [pid 6234] <... unlink resumed>) = 0 [pid 6234] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6238] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./103/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6238] <... mount resumed>) = 0 [pid 6242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6238] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6238] <... openat resumed>) = 3 [pid 5002] openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6238] chdir("./file0") = 0 [pid 5002] <... openat resumed>) = 4 [pid 6238] ioctl(4, LOOP_CLR_FD [pid 5002] fstat(4, [pid 6238] <... ioctl resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6238] close(4 [pid 5002] getdents64(4, [pid 6238] <... close resumed>) = 0 [pid 6238] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 6235] <... pwritev resumed>) = 1114112 [pid 6238] <... openat resumed>) = 4 [pid 6235] exit_group(0 [pid 5002] close(4 [pid 6238] unlink("./file1" [pid 6235] <... exit_group resumed>) = ? [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./103/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./103") = 0 [pid 5002] mkdir("./104", 0777) = 0 [pid 6238] <... unlink resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6238] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... openat resumed>) = 3 [ 116.763740][ T6243] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6244 ./strace-static-x86_64: Process 6244 attached [pid 6244] chdir("./104" [pid 6242] <... write resumed>) = 2097152 [pid 6242] munmap(0x7f0ed4ac1000, 2097152 [pid 6244] <... chdir resumed>) = 0 [pid 6242] <... munmap resumed>) = 0 [pid 6244] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6242] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6244] <... prctl resumed>) = 0 [pid 6242] <... openat resumed>) = 4 [pid 6244] setpgid(0, 0 [pid 6242] ioctl(4, LOOP_SET_FD, 3 [pid 6244] <... setpgid resumed>) = 0 [pid 6244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6244] write(3, "1000", 4 [pid 6235] +++ exited with 0 +++ [pid 6244] <... write resumed>) = 4 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6235, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6244] close(3) = 0 [pid 6244] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6237] <... pwritev resumed>) = 1114112 [pid 6242] <... ioctl resumed>) = 0 [pid 6242] close(3 [pid 6244] memfd_create("syzkaller", 0 [pid 6237] exit_group(0 [pid 6244] <... memfd_create resumed>) = 3 [pid 6244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6237] <... exit_group resumed>) = ? [pid 6244] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6242] <... close resumed>) = 0 [pid 6242] mkdir("./file0", 0777) = 0 [pid 6242] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6234] <... pwritev resumed>) = 1114112 [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, [pid 6234] exit_group(0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 116.865692][ T6242] loop0: detected capacity change from 0 to 4096 [pid 6234] <... exit_group resumed>) = ? [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./101/binderfs") = 0 [pid 5001] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6242] <... mount resumed>) = 0 [pid 6242] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] <... umount2 resumed>) = 0 [pid 6242] <... openat resumed>) = 3 [pid 5001] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6242] chdir("./file0") = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6242] ioctl(4, LOOP_CLR_FD) = 0 [pid 5001] lstat("./101/file0", [pid 6242] close(4 [pid 6237] +++ exited with 0 +++ [pid 6244] <... write resumed>) = 2097152 [pid 6242] <... close resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6244] munmap(0x7f0ed4ac1000, 2097152 [pid 6242] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6237, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6244] <... munmap resumed>) = 0 [pid 6242] <... openat resumed>) = 4 [pid 6238] <... pwritev resumed>) = 1114112 [pid 6234] +++ exited with 0 +++ [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 6244] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6242] unlink("./file1" [pid 6238] exit_group(0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6234, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5001] openat(AT_FDCWD, "./101/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... restart_syscall resumed>) = 0 [pid 6244] <... openat resumed>) = 4 [pid 6238] <... exit_group resumed>) = ? [pid 5001] <... openat resumed>) = 4 [pid 6244] ioctl(4, LOOP_SET_FD, 3 [pid 5001] fstat(4, [pid 6242] <... unlink resumed>) = 0 [pid 5003] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6242] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6244] <... ioctl resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6244] close(3 [pid 5001] getdents64(4, [pid 4999] <... openat resumed>) = 3 [pid 6244] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] fstat(3, [pid 6244] mkdir("./file0", 0777 [pid 5001] close(4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6244] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 6244] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] <... openat resumed>) = 3 [pid 5001] rmdir("./101/file0" [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] fstat(3, [pid 5001] <... rmdir resumed>) = 0 [pid 4999] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] getdents64(3, [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] lstat("./100/binderfs", [pid 5001] close(3 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] <... close resumed>) = 0 [pid 4999] unlink("./100/binderfs" [pid 5003] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] rmdir("./101" [pid 4999] <... unlink resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... rmdir resumed>) = 0 [pid 4999] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] lstat("./101/binderfs", [pid 5001] mkdir("./102", 0777 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5003] unlink("./101/binderfs" [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] <... unlink resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5003] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5003] <... umount2 resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... umount2 resumed>) = 0 [pid 5001] close(3) = 0 [ 116.951493][ T6245] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.991270][ T6244] loop4: detected capacity change from 0 to 4096 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6246 ./strace-static-x86_64: Process 6246 attached [pid 6246] chdir("./102") = 0 [pid 6246] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6246] setpgid(0, 0) = 0 [pid 6246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4999] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6246] write(3, "1000", 4) = 4 [pid 6246] close(3 [pid 4999] lstat("./100/file0", [pid 6246] <... close resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6246] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4999] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6246] memfd_create("syzkaller", 0) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 4999] openat(AT_FDCWD, "./100/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./100/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./100") = 0 [pid 4999] mkdir("./101", 0777) = 0 [pid 6244] <... mount resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6244] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 4999] <... openat resumed>) = 3 [pid 6244] chdir("./file0") = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6244] ioctl(4, LOOP_CLR_FD [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6244] <... ioctl resumed>) = 0 [pid 4999] close(3 [pid 6244] close(4 [pid 4999] <... close resumed>) = 0 [pid 6244] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6244] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6244] unlink("./file1" [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6248 ./strace-static-x86_64: Process 6248 attached [pid 6248] chdir("./101") = 0 [pid 6248] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6248] setpgid(0, 0) = 0 [pid 6248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6248] write(3, "1000", 4) = 4 [pid 6248] close(3) = 0 [pid 6248] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6248] memfd_create("syzkaller", 0) = 3 [pid 6248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./101/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./101/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./101/file0") = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./101") = 0 [pid 5003] mkdir("./102", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6246] <... write resumed>) = 2097152 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6249 [pid 6238] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6238, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5000] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 6249 attached [pid 5000] fstat(3, [pid 6249] chdir("./102" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6249] <... chdir resumed>) = 0 [pid 5000] getdents64(3, [pid 6249] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6249] <... prctl resumed>) = 0 [pid 6248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6249] setpgid(0, 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6249] <... setpgid resumed>) = 0 [pid 5000] lstat("./101/binderfs", [pid 6249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6249] <... openat resumed>) = 3 [pid 5000] unlink("./101/binderfs" [pid 6249] write(3, "1000", 4 [pid 5000] <... unlink resumed>) = 0 [pid 6249] <... write resumed>) = 4 [ 117.055983][ T6247] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6249] close(3) = 0 [pid 6249] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6249] memfd_create("syzkaller", 0) = 3 [pid 6249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6244] <... unlink resumed>) = 0 [pid 6244] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] <... umount2 resumed>) = 0 [pid 6246] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6246] <... munmap resumed>) = 0 [pid 6246] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./101/file0", [pid 6246] <... openat resumed>) = 4 [pid 6246] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./101/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 6249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./101/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./101") = 0 [pid 5000] mkdir("./102", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6246] <... ioctl resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 6248] <... write resumed>) = 2097152 [pid 6246] close(3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 6246] <... close resumed>) = 0 [pid 6246] mkdir("./file0", 0777 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6246] <... mkdir resumed>) = 0 [pid 5000] close(3 [pid 6248] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] <... close resumed>) = 0 [pid 6246] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6248] <... munmap resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6250 [pid 6248] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 ./strace-static-x86_64: Process 6250 attached [ 117.142225][ T6246] loop3: detected capacity change from 0 to 4096 [pid 6248] ioctl(4, LOOP_SET_FD, 3 [pid 6250] chdir("./102") = 0 [pid 6250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6249] <... write resumed>) = 2097152 [pid 6250] setpgid(0, 0) = 0 [pid 6250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6250] write(3, "1000", 4 [pid 6242] <... pwritev resumed>) = 1114112 [pid 6250] <... write resumed>) = 4 [pid 6249] munmap(0x7f0ed4ac1000, 2097152 [pid 6248] <... ioctl resumed>) = 0 [pid 6242] exit_group(0 [pid 6250] close(3 [pid 6248] close(3 [pid 6242] <... exit_group resumed>) = ? [pid 6250] <... close resumed>) = 0 [pid 6249] <... munmap resumed>) = 0 [pid 6248] <... close resumed>) = 0 [pid 6246] <... mount resumed>) = 0 [ 117.192688][ T6248] loop1: detected capacity change from 0 to 4096 [ 117.222313][ T6251] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6246] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6246] chdir("./file0") = 0 [pid 6246] ioctl(4, LOOP_CLR_FD) = 0 [pid 6246] close(4) = 0 [pid 6249] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6246] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6249] <... openat resumed>) = 4 [pid 6246] <... openat resumed>) = 4 [pid 6249] ioctl(4, LOOP_SET_FD, 3 [pid 6246] unlink("./file1" [pid 6249] <... ioctl resumed>) = 0 [pid 6246] <... unlink resumed>) = 0 [pid 6246] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6250] symlink("/dev/binderfs", "./binderfs" [pid 6249] close(3 [pid 6248] mkdir("./file0", 0777 [pid 6250] <... symlink resumed>) = 0 [pid 6249] <... close resumed>) = 0 [pid 6248] <... mkdir resumed>) = 0 [pid 6250] memfd_create("syzkaller", 0 [pid 6249] mkdir("./file0", 0777 [pid 6248] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6250] <... memfd_create resumed>) = 3 [pid 6249] <... mkdir resumed>) = 0 [pid 6250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6249] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6250] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6244] <... pwritev resumed>) = 1114112 [pid 6244] exit_group(0) = ? [ 117.240916][ T6249] loop5: detected capacity change from 0 to 4096 [pid 6248] <... mount resumed>) = 0 [pid 6248] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6248] chdir("./file0") = 0 [pid 6248] ioctl(4, LOOP_CLR_FD) = 0 [pid 6248] close(4) = 0 [pid 6250] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6248] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6248] unlink("./file1" [pid 6249] <... mount resumed>) = 0 [pid 6249] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6249] chdir("./file0" [pid 6242] +++ exited with 0 +++ [pid 6249] <... chdir resumed>) = 0 [pid 6249] ioctl(4, LOOP_CLR_FD [pid 6248] <... unlink resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6242, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6249] <... ioctl resumed>) = 0 [pid 6248] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 6250] <... write resumed>) = 2097152 [pid 6249] close(4 [pid 4998] <... restart_syscall resumed>) = 0 [pid 6249] <... close resumed>) = 0 [pid 6249] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6244] +++ exited with 0 +++ [pid 4998] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6249] unlink("./file1" [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6244, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6249] <... unlink resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [ 117.277148][ T6252] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.308623][ T6253] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6249] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] lstat("./103/binderfs", [pid 5002] <... openat resumed>) = 3 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] fstat(3, [pid 4998] unlink("./103/binderfs" [pid 6250] munmap(0x7f0ed4ac1000, 2097152 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 6250] <... munmap resumed>) = 0 [pid 5002] getdents64(3, [pid 4998] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./104/binderfs", [pid 6250] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6250] <... openat resumed>) = 4 [pid 5002] unlink("./104/binderfs" [pid 6250] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... unlink resumed>) = 0 [pid 6250] <... ioctl resumed>) = 0 [pid 5002] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 6250] close(3) = 0 [pid 6250] mkdir("./file0", 0777) = 0 [pid 4998] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6250] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6246] <... pwritev resumed>) = 1114112 [pid 4998] lstat("./103/file0", [pid 6246] exit_group(0) = ? [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./103/file0") = 0 [pid 4998] getdents64(3, [pid 6250] <... mount resumed>) = 0 [ 117.392627][ T6250] loop2: detected capacity change from 0 to 4096 [pid 5002] <... umount2 resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6250] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 4998] close(3 [pid 6250] chdir("./file0" [pid 4998] <... close resumed>) = 0 [pid 6250] <... chdir resumed>) = 0 [pid 5002] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] rmdir("./103" [pid 6250] ioctl(4, LOOP_CLR_FD [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6250] <... ioctl resumed>) = 0 [pid 5002] lstat("./104/file0", [pid 4998] <... rmdir resumed>) = 0 [pid 6250] close(4 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] mkdir("./104", 0777 [pid 6250] <... close resumed>) = 0 [pid 6250] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... mkdir resumed>) = 0 [pid 6246] +++ exited with 0 +++ [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6246, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] <... openat resumed>) = 3 [pid 6250] <... openat resumed>) = 4 [pid 5002] <... openat resumed>) = 4 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6250] unlink("./file1" [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] getdents64(4, [pid 4998] close(3 [pid 6248] <... pwritev resumed>) = 1114112 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6248] exit_group(0 [pid 4998] <... close resumed>) = 0 [pid 5002] getdents64(4, [pid 5001] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6250] <... unlink resumed>) = 0 [pid 6248] <... exit_group resumed>) = ? [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6250] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] close(4 [pid 5001] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6255 attached [pid 6255] chdir("./104" [pid 5002] <... close resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6255 [pid 5002] rmdir("./104/file0" [pid 5001] fstat(3, [pid 6255] <... chdir resumed>) = 0 [ 117.449718][ T6254] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6255] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6255] <... prctl resumed>) = 0 [pid 6255] setpgid(0, 0 [pid 5002] getdents64(3, [pid 5001] getdents64(3, [pid 6255] <... setpgid resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] close(3 [pid 5001] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] rmdir("./104" [pid 6255] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] lstat("./102/binderfs", [pid 6255] <... openat resumed>) = 3 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6255] write(3, "1000", 4 [pid 5002] mkdir("./105", 0777 [pid 5001] unlink("./102/binderfs" [pid 6255] <... write resumed>) = 4 [pid 6255] close(3 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 6255] <... close resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6255] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... openat resumed>) = 3 [pid 6255] <... symlink resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] <... umount2 resumed>) = 0 [pid 6255] memfd_create("syzkaller", 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6255] <... memfd_create resumed>) = 3 [pid 5002] close(3 [pid 6255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... close resumed>) = 0 [pid 6255] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6248] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6248, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6256 [pid 4999] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6256 attached [pid 6249] <... pwritev resumed>) = 1114112 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./102/file0", [pid 4999] lstat("./101/binderfs", [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] unlink("./101/binderfs" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... unlink resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./102/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./102/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./102") = 0 [pid 5001] mkdir("./103", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6257 [pid 6256] chdir("./105" [pid 6249] exit_group(0./strace-static-x86_64: Process 6257 attached [pid 6256] <... chdir resumed>) = 0 [pid 6249] <... exit_group resumed>) = ? [pid 4999] <... umount2 resumed>) = 0 [pid 6257] chdir("./103" [pid 6256] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6257] <... chdir resumed>) = 0 [pid 6256] <... prctl resumed>) = 0 [pid 6255] <... write resumed>) = 2097152 [pid 6257] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6256] setpgid(0, 0 [pid 6255] munmap(0x7f0ed4ac1000, 2097152 [pid 6257] <... prctl resumed>) = 0 [pid 6256] <... setpgid resumed>) = 0 [pid 6257] setpgid(0, 0) = 0 [pid 6256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6256] <... openat resumed>) = 3 [pid 6257] <... openat resumed>) = 3 [pid 6256] write(3, "1000", 4 [pid 6257] write(3, "1000", 4 [pid 6256] <... write resumed>) = 4 [pid 6256] close(3 [pid 6257] <... write resumed>) = 4 [pid 6256] <... close resumed>) = 0 [pid 6257] close(3 [pid 6256] symlink("/dev/binderfs", "./binderfs" [pid 6255] <... munmap resumed>) = 0 [pid 4999] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6257] <... close resumed>) = 0 [pid 6257] symlink("/dev/binderfs", "./binderfs" [pid 6256] <... symlink resumed>) = 0 [pid 6255] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6257] <... symlink resumed>) = 0 [pid 6256] memfd_create("syzkaller", 0 [pid 6255] <... openat resumed>) = 4 [pid 6257] memfd_create("syzkaller", 0 [pid 6256] <... memfd_create resumed>) = 3 [pid 6255] ioctl(4, LOOP_SET_FD, 3 [pid 4999] lstat("./101/file0", [pid 6257] <... memfd_create resumed>) = 3 [pid 6256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./101/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./101/file0" [pid 6257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6256] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 6257] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./101") = 0 [pid 4999] mkdir("./102", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6258 [pid 6255] <... ioctl resumed>) = 0 [pid 6255] close(3) = 0 [pid 6255] mkdir("./file0", 0777) = 0 [pid 6255] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6249] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6249, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- ./strace-static-x86_64: Process 6258 attached [pid 6258] chdir("./102") = 0 [pid 6250] <... pwritev resumed>) = 1114112 [pid 6258] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6250] exit_group(0 [pid 6258] <... prctl resumed>) = 0 [pid 6250] <... exit_group resumed>) = ? [pid 5003] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6258] setpgid(0, 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6258] <... setpgid resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... openat resumed>) = 3 [pid 6258] <... openat resumed>) = 3 [pid 5003] fstat(3, [pid 6258] write(3, "1000", 4 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6258] <... write resumed>) = 4 [pid 5003] getdents64(3, [pid 6258] close(3 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6258] <... close resumed>) = 0 [pid 5003] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6258] symlink("/dev/binderfs", "./binderfs" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6258] <... symlink resumed>) = 0 [pid 5003] lstat("./102/binderfs", [pid 6258] memfd_create("syzkaller", 0 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6258] <... memfd_create resumed>) = 3 [pid 5003] unlink("./102/binderfs" [pid 6258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... unlink resumed>) = 0 [pid 6258] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 117.615212][ T6255] loop0: detected capacity change from 0 to 4096 [pid 6258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6256] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6255] <... mount resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./102/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./102/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./102/file0") = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./102") = 0 [pid 5003] mkdir("./103", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 6255] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6255] <... openat resumed>) = 3 [pid 5003] close(3 [pid 6257] <... write resumed>) = 2097152 [pid 6256] <... write resumed>) = 2097152 [pid 6255] chdir("./file0" [pid 5003] <... close resumed>) = 0 [pid 6257] munmap(0x7f0ed4ac1000, 2097152 [pid 6256] munmap(0x7f0ed4ac1000, 2097152 [pid 6255] <... chdir resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6257] <... munmap resumed>) = 0 [pid 6256] <... munmap resumed>) = 0 [pid 6255] ioctl(4, LOOP_CLR_FD [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6260 [pid 6257] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6256] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6255] <... ioctl resumed>) = 0 [pid 6257] <... openat resumed>) = 4 [pid 6257] ioctl(4, LOOP_SET_FD, 3 [pid 6256] <... openat resumed>) = 4 [ 117.674652][ T6259] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6255] close(4./strace-static-x86_64: Process 6260 attached [pid 6260] chdir("./103") = 0 [pid 6260] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6260] setpgid(0, 0) = 0 [pid 6260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6260] write(3, "1000", 4) = 4 [pid 6260] close(3) = 0 [pid 6260] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6260] memfd_create("syzkaller", 0 [pid 6258] <... write resumed>) = 2097152 [pid 6257] <... ioctl resumed>) = 0 [pid 6256] ioctl(4, LOOP_SET_FD, 3 [pid 6255] <... close resumed>) = 0 [pid 6260] <... memfd_create resumed>) = 3 [pid 6258] munmap(0x7f0ed4ac1000, 2097152 [pid 6257] close(3 [pid 6250] +++ exited with 0 +++ [pid 6260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6257] <... close resumed>) = 0 [pid 6255] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6260] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6250, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6258] <... munmap resumed>) = 0 [pid 6257] mkdir("./file0", 0777 [pid 6256] <... ioctl resumed>) = 0 [pid 6255] <... openat resumed>) = 4 [pid 5000] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6258] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6257] <... mkdir resumed>) = 0 [pid 6256] close(3 [pid 6255] unlink("./file1" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6258] <... openat resumed>) = 4 [pid 6257] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6256] <... close resumed>) = 0 [pid 6255] <... unlink resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6258] ioctl(4, LOOP_SET_FD, 3 [pid 6256] mkdir("./file0", 0777 [pid 6255] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6258] <... ioctl resumed>) = 0 [pid 6257] <... mount resumed>) = 0 [pid 6256] <... mkdir resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 6258] close(3 [ 117.721216][ T6257] loop3: detected capacity change from 0 to 4096 [ 117.732715][ T6256] loop4: detected capacity change from 0 to 4096 [ 117.751182][ T6258] loop1: detected capacity change from 0 to 4096 [pid 6256] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6258] <... close resumed>) = 0 [pid 6258] mkdir("./file0", 0777 [pid 6257] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] fstat(3, [pid 6258] <... mkdir resumed>) = 0 [pid 6257] <... openat resumed>) = 3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6258] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6257] chdir("./file0" [pid 5000] getdents64(3, [pid 6257] <... chdir resumed>) = 0 [pid 6257] ioctl(4, LOOP_CLR_FD [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6257] <... ioctl resumed>) = 0 [pid 5000] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6257] close(4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6257] <... close resumed>) = 0 [pid 5000] lstat("./102/binderfs", [pid 6257] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6257] <... openat resumed>) = 4 [pid 5000] unlink("./102/binderfs" [pid 6257] unlink("./file1" [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6260] <... write resumed>) = 2097152 [pid 5000] <... umount2 resumed>) = 0 [pid 6258] <... mount resumed>) = 0 [pid 6258] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6258] chdir("./file0") = 0 [pid 6258] ioctl(4, LOOP_CLR_FD) = 0 [ 117.764907][ T6261] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6260] munmap(0x7f0ed4ac1000, 2097152 [pid 6258] close(4 [pid 6256] <... mount resumed>) = 0 [pid 6258] <... close resumed>) = 0 [pid 5000] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6258] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6256] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6258] <... openat resumed>) = 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6258] unlink("./file1" [pid 6256] <... openat resumed>) = 3 [pid 5000] lstat("./102/file0", [pid 6256] chdir("./file0" [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6256] <... chdir resumed>) = 0 [pid 6256] ioctl(4, LOOP_CLR_FD [pid 5000] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6256] <... ioctl resumed>) = 0 [pid 6256] close(4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6256] <... close resumed>) = 0 [pid 6256] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] openat(AT_FDCWD, "./102/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6256] <... openat resumed>) = 4 [pid 6256] unlink("./file1" [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./102/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6260] <... munmap resumed>) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./102") = 0 [pid 5000] mkdir("./103", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6264 [pid 6260] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6257] <... unlink resumed>) = 0 [pid 6260] <... openat resumed>) = 4 [pid 6257] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6260] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6264 attached [pid 6264] chdir("./103") = 0 [pid 6264] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6264] setpgid(0, 0) = 0 [pid 6264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6264] write(3, "1000", 4) = 4 [pid 6264] close(3) = 0 [pid 6264] symlink("/dev/binderfs", "./binderfs" [pid 6260] <... ioctl resumed>) = 0 [pid 6264] <... symlink resumed>) = 0 [pid 6264] memfd_create("syzkaller", 0) = 3 [pid 6260] close(3) = 0 [pid 6264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6260] mkdir("./file0", 0777 [pid 6256] <... unlink resumed>) = 0 [pid 6264] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6256] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6260] <... mkdir resumed>) = 0 [ 117.814201][ T6262] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.825229][ T6263] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.850910][ T6260] loop5: detected capacity change from 0 to 4096 [pid 6260] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6258] <... unlink resumed>) = 0 [pid 6258] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6260] <... mount resumed>) = 0 [pid 6260] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6260] chdir("./file0") = 0 [pid 6260] ioctl(4, LOOP_CLR_FD) = 0 [pid 6260] close(4) = 0 [pid 6260] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6260] unlink("./file1") = 0 [pid 6260] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 117.898799][ T6265] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6255] <... pwritev resumed>) = 1114112 [pid 6255] exit_group(0) = ? [pid 6264] <... write resumed>) = 2097152 [pid 6264] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6264] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6264] ioctl(4, LOOP_SET_FD, 3 [pid 6257] <... pwritev resumed>) = 1114112 [pid 6257] exit_group(0) = ? [pid 6255] +++ exited with 0 +++ [pid 6264] <... ioctl resumed>) = 0 [pid 6264] close(3) = 0 [pid 6264] mkdir("./file0", 0777) = 0 [pid 6264] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6255, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4998] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./104/binderfs") = 0 [ 118.010774][ T6264] loop2: detected capacity change from 0 to 4096 [pid 4998] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6264] <... mount resumed>) = 0 [pid 6264] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6264] chdir("./file0") = 0 [pid 6264] ioctl(4, LOOP_CLR_FD) = 0 [pid 6264] close(4) = 0 [pid 6264] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6264] unlink("./file1" [pid 4998] <... umount2 resumed>) = 0 [pid 6256] <... pwritev resumed>) = 1114112 [pid 6256] exit_group(0) = ? [pid 4998] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./104/file0", [pid 6257] +++ exited with 0 +++ [pid 6258] <... pwritev resumed>) = 1114112 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6258] exit_group(0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6257, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 4998] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6258] <... exit_group resumed>) = ? [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6264] <... unlink resumed>) = 0 [pid 6260] <... pwritev resumed>) = 1114112 [ 118.079592][ T6266] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6264] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] <... restart_syscall resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6260] exit_group(0 [pid 6256] +++ exited with 0 +++ [pid 4998] <... openat resumed>) = 4 [pid 6260] <... exit_group resumed>) = ? [pid 4998] fstat(4, [pid 6258] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6256, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5001] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6258, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4998] getdents64(4, [pid 5002] <... restart_syscall resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] <... openat resumed>) = 3 [pid 4999] <... restart_syscall resumed>) = 0 [pid 4998] getdents64(4, [pid 5001] fstat(3, [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] close(4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(3, [pid 4999] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] rmdir("./104/file0" [pid 5002] <... openat resumed>) = 3 [pid 5001] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... rmdir resumed>) = 0 [pid 5002] fstat(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 3 [pid 4998] getdents64(3, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] lstat("./103/binderfs", [pid 4999] fstat(3, [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] getdents64(3, [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] close(3 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] unlink("./103/binderfs" [pid 4999] getdents64(3, [pid 4998] <... close resumed>) = 0 [pid 5002] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... unlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] rmdir("./104" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... rmdir resumed>) = 0 [pid 5002] lstat("./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] mkdir("./105", 0777 [pid 5002] unlink("./105/binderfs" [pid 4999] lstat("./102/binderfs", [pid 4998] <... mkdir resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 4999] unlink("./102/binderfs") = 0 [pid 5002] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6260] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6260, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5003] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] lstat("./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./103/binderfs") = 0 [pid 5003] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6267 [pid 6264] <... pwritev resumed>) = 1114112 [pid 6264] exit_group(0) = ? ./strace-static-x86_64: Process 6267 attached [pid 6267] chdir("./105" [pid 5003] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6267] <... chdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6267] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] lstat("./103/file0", [pid 6267] <... prctl resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6267] setpgid(0, 0) = 0 [pid 6267] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 6267] <... openat resumed>) = 3 [pid 6267] write(3, "1000", 4 [pid 5003] getdents64(4, [pid 6267] <... write resumed>) = 4 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4 [pid 6267] close(3) = 0 [pid 5003] <... close resumed>) = 0 [pid 6267] symlink("/dev/binderfs", "./binderfs" [pid 5003] rmdir("./103/file0" [pid 6267] <... symlink resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 6267] memfd_create("syzkaller", 0) = 3 [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./103") = 0 [pid 6267] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] mkdir("./104", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6268 [pid 5001] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = 0 [pid 5001] lstat("./103/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] lstat("./102/file0", [pid 5001] <... openat resumed>) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6268 attached [pid 5002] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, [pid 4999] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6268] chdir("./104" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6268] <... chdir resumed>) = 0 [pid 5002] lstat("./105/file0", [pid 5001] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6268] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6267] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6264] +++ exited with 0 +++ [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6264, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5001] rmdir("./103/file0") = 0 [pid 6268] <... prctl resumed>) = 0 [pid 5002] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, [pid 5000] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./102/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6268] setpgid(0, 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6268] <... setpgid resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] close(3 [pid 5000] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 4 [pid 6268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... openat resumed>) = 4 [pid 5001] <... close resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4999] fstat(4, [pid 6268] <... openat resumed>) = 3 [pid 5002] fstat(4, [pid 5001] rmdir("./103" [pid 5000] fstat(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6268] write(3, "1000", 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 6268] <... write resumed>) = 4 [pid 5002] getdents64(4, [pid 5001] mkdir("./104", 0777 [pid 5000] getdents64(3, [pid 6268] close(3 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6268] <... close resumed>) = 0 [pid 5002] getdents64(4, [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(4, [pid 6268] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6268] <... symlink resumed>) = 0 [pid 5002] close(4 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] lstat("./103/binderfs", [pid 4999] close(4 [pid 6268] memfd_create("syzkaller", 0 [pid 5002] <... close resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6268] <... memfd_create resumed>) = 3 [pid 5002] rmdir("./105/file0" [pid 5001] close(3 [pid 5000] unlink("./103/binderfs" [pid 4999] <... close resumed>) = 0 [pid 6268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./102/file0" [pid 6268] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5002] getdents64(3, [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6269 [pid 4999] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6269 attached [pid 6269] chdir("./104") = 0 [pid 6269] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6269] setpgid(0, 0) = 0 [pid 6269] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6269] write(3, "1000", 4) = 4 [pid 6269] close(3) = 0 [pid 6269] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6269] memfd_create("syzkaller", 0) = 3 [pid 6269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6268] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(3, [pid 5002] close(3 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] close(3 [pid 5002] rmdir("./105" [pid 4999] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] rmdir("./102" [pid 5002] mkdir("./106", 0777 [pid 4999] <... rmdir resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 4999] mkdir("./103", 0777 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] <... mkdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] <... openat resumed>) = 3 [pid 5002] close(3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] close(3 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6270 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... close resumed>) = 0 [pid 6267] <... write resumed>) = 2097152 [pid 5000] lstat("./103/file0", [pid 6267] munmap(0x7f0ed4ac1000, 2097152 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6271 [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6270 attached [pid 6267] <... munmap resumed>) = 0 [pid 5000] getdents64(4, [pid 6270] chdir("./106" [pid 6267] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6270] <... chdir resumed>) = 0 [pid 6267] <... openat resumed>) = 4 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6267] ioctl(4, LOOP_SET_FD, 3 [pid 5000] getdents64(4, [pid 6270] <... prctl resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6270] setpgid(0, 0 [pid 5000] close(4 [pid 6270] <... setpgid resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 6270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] rmdir("./103/file0" [pid 6270] <... openat resumed>) = 3 [pid 5000] <... rmdir resumed>) = 0 [pid 6270] write(3, "1000", 4 [pid 5000] getdents64(3, [pid 6270] <... write resumed>) = 4 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6270] close(3 [pid 5000] close(3 [pid 6270] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 6270] symlink("/dev/binderfs", "./binderfs" [pid 5000] rmdir("./103" [pid 6270] <... symlink resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 6270] memfd_create("syzkaller", 0 [pid 5000] mkdir("./104", 0777 [pid 6270] <... memfd_create resumed>) = 3 [pid 5000] <... mkdir resumed>) = 0 [pid 6270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 6271 attached [pid 6270] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5000] <... openat resumed>) = 3 [pid 6271] chdir("./103" [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6271] <... chdir resumed>) = 0 [pid 6271] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6272 [pid 6271] <... prctl resumed>) = 0 [pid 6271] setpgid(0, 0) = 0 [pid 6271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6267] <... ioctl resumed>) = 0 [pid 6271] write(3, "1000", 4 [pid 6267] close(3 [pid 6269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6271] <... write resumed>) = 4 ./strace-static-x86_64: Process 6272 attached [pid 6271] close(3 [pid 6272] chdir("./104" [pid 6271] <... close resumed>) = 0 [pid 6272] <... chdir resumed>) = 0 [pid 6271] symlink("/dev/binderfs", "./binderfs" [pid 6272] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6271] <... symlink resumed>) = 0 [pid 6272] <... prctl resumed>) = 0 [pid 6271] memfd_create("syzkaller", 0 [pid 6267] <... close resumed>) = 0 [pid 6272] setpgid(0, 0 [pid 6271] <... memfd_create resumed>) = 3 [pid 6270] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6268] <... write resumed>) = 2097152 [pid 6267] mkdir("./file0", 0777 [pid 6272] <... setpgid resumed>) = 0 [pid 6271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6271] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6268] munmap(0x7f0ed4ac1000, 2097152 [pid 6267] <... mkdir resumed>) = 0 [pid 6272] <... openat resumed>) = 3 [pid 6272] write(3, "1000", 4) = 4 [pid 6272] close(3) = 0 [pid 6272] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6272] memfd_create("syzkaller", 0) = 3 [pid 6272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6269] <... write resumed>) = 2097152 [pid 6267] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6272] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6268] <... munmap resumed>) = 0 [ 118.347243][ T6267] loop0: detected capacity change from 0 to 4096 [pid 6268] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6267] <... mount resumed>) = 0 [pid 6272] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6269] munmap(0x7f0ed4ac1000, 2097152 [pid 6268] <... openat resumed>) = 4 [pid 6267] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6268] ioctl(4, LOOP_SET_FD, 3 [pid 6267] <... openat resumed>) = 3 [pid 6269] <... munmap resumed>) = 0 [pid 6269] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6269] ioctl(4, LOOP_SET_FD, 3 [pid 6271] <... write resumed>) = 2097152 [pid 6269] <... ioctl resumed>) = 0 [pid 6269] close(3) = 0 [pid 6269] mkdir("./file0", 0777 [pid 6270] <... write resumed>) = 2097152 [pid 6269] <... mkdir resumed>) = 0 [pid 6269] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6267] chdir("./file0" [pid 6271] munmap(0x7f0ed4ac1000, 2097152 [pid 6270] munmap(0x7f0ed4ac1000, 2097152 [pid 6268] <... ioctl resumed>) = 0 [pid 6267] <... chdir resumed>) = 0 [pid 6267] ioctl(4, LOOP_CLR_FD [pid 6271] <... munmap resumed>) = 0 [pid 6268] close(3 [pid 6267] <... ioctl resumed>) = 0 [pid 6271] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6268] <... close resumed>) = 0 [pid 6267] close(4 [pid 6271] <... openat resumed>) = 4 [pid 6270] <... munmap resumed>) = 0 [pid 6268] mkdir("./file0", 0777 [pid 6267] <... close resumed>) = 0 [ 118.406112][ T6273] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.429943][ T6268] loop5: detected capacity change from 0 to 4096 [ 118.429950][ T6269] loop3: detected capacity change from 0 to 4096 [pid 6271] ioctl(4, LOOP_SET_FD, 3 [pid 6272] <... write resumed>) = 2097152 [pid 6270] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6268] <... mkdir resumed>) = 0 [pid 6267] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6272] munmap(0x7f0ed4ac1000, 2097152 [pid 6270] <... openat resumed>) = 4 [pid 6268] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6272] <... munmap resumed>) = 0 [pid 6270] ioctl(4, LOOP_SET_FD, 3 [pid 6272] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6267] <... openat resumed>) = 4 [pid 6272] <... openat resumed>) = 4 [pid 6267] unlink("./file1" [pid 6272] ioctl(4, LOOP_SET_FD, 3 [pid 6270] <... ioctl resumed>) = 0 [pid 6267] <... unlink resumed>) = 0 [pid 6270] close(3) = 0 [pid 6270] mkdir("./file0", 0777) = 0 [pid 6270] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6272] <... ioctl resumed>) = 0 [pid 6272] close(3) = 0 [pid 6272] mkdir("./file0", 0777) = 0 [pid 6272] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6271] <... ioctl resumed>) = 0 [pid 6271] close(3) = 0 [pid 6271] mkdir("./file0", 0777) = 0 [pid 6271] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6267] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6269] <... mount resumed>) = 0 [pid 6269] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6269] chdir("./file0") = 0 [pid 6269] ioctl(4, LOOP_CLR_FD) = 0 [pid 6269] close(4) = 0 [pid 6269] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 118.457171][ T6271] loop1: detected capacity change from 0 to 4096 [ 118.464185][ T6270] loop4: detected capacity change from 0 to 4096 [ 118.475584][ T6272] loop2: detected capacity change from 0 to 4096 [ 118.478205][ T6274] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6269] unlink("./file1" [pid 6270] <... mount resumed>) = 0 [pid 6269] <... unlink resumed>) = 0 [pid 6270] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6269] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6270] chdir("./file0" [pid 6272] <... mount resumed>) = 0 [pid 6270] <... chdir resumed>) = 0 [pid 6272] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6270] ioctl(4, LOOP_CLR_FD) = 0 [pid 6272] <... openat resumed>) = 3 [ 118.517729][ T6275] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.533095][ T6276] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.556997][ T6278] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6270] close(4 [pid 6272] chdir("./file0" [pid 6270] <... close resumed>) = 0 [pid 6271] <... mount resumed>) = 0 [pid 6271] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6271] chdir("./file0") = 0 [pid 6271] ioctl(4, LOOP_CLR_FD) = 0 [pid 6271] close(4) = 0 [pid 6271] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6271] unlink("./file1" [pid 6272] <... chdir resumed>) = 0 [pid 6270] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6268] <... mount resumed>) = 0 [pid 6272] ioctl(4, LOOP_CLR_FD [pid 6270] <... openat resumed>) = 4 [pid 6268] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6272] <... ioctl resumed>) = 0 [pid 6270] unlink("./file1" [pid 6268] <... openat resumed>) = 3 [pid 6272] close(4 [pid 6268] chdir("./file0" [pid 6272] <... close resumed>) = 0 [pid 6268] <... chdir resumed>) = 0 [pid 6272] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6268] ioctl(4, LOOP_CLR_FD) = 0 [pid 6268] close(4) = 0 [pid 6268] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6272] <... openat resumed>) = 4 [pid 6270] <... unlink resumed>) = 0 [pid 6268] <... openat resumed>) = 4 [pid 6272] unlink("./file1" [pid 6270] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6268] unlink("./file1" [pid 6271] <... unlink resumed>) = 0 [pid 6271] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6272] <... unlink resumed>) = 0 [pid 6268] <... unlink resumed>) = 0 [pid 6267] <... pwritev resumed>) = 1114112 [ 118.567668][ T6277] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6272] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6268] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6267] exit_group(0) = ? [pid 6269] <... pwritev resumed>) = 1114112 [pid 6269] exit_group(0) = ? [pid 6267] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6267, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./105/binderfs") = 0 [pid 4998] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 6269] +++ exited with 0 +++ [pid 6270] <... pwritev resumed>) = 1114112 [pid 4998] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6270] exit_group(0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6269, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6270] <... exit_group resumed>) = ? [pid 5001] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] lstat("./105/file0", [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./104/binderfs", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] unlink("./104/binderfs" [pid 4998] <... openat resumed>) = 4 [pid 5001] <... unlink resumed>) = 0 [pid 4998] fstat(4, [pid 5001] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./105/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./105") = 0 [pid 4998] mkdir("./106", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 5001] <... umount2 resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6279 [pid 6270] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6270, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5002] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./106/binderfs", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 6279 attached [pid 5002] unlink("./106/binderfs" [pid 5001] lstat("./104/file0", [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6279] chdir("./106" [pid 5001] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6279] <... chdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6279] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 6279] <... prctl resumed>) = 0 [pid 5001] fstat(4, [pid 6279] setpgid(0, 0 [pid 6272] <... pwritev resumed>) = 1114112 [pid 6271] <... pwritev resumed>) = 1114112 [pid 6268] <... pwritev resumed>) = 1114112 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6279] <... setpgid resumed>) = 0 [pid 6272] exit_group(0 [pid 6271] exit_group(0 [pid 6268] exit_group(0 [pid 5001] getdents64(4, [pid 6279] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6272] <... exit_group resumed>) = ? [pid 6271] <... exit_group resumed>) = ? [pid 6268] <... exit_group resumed>) = ? [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6279] <... openat resumed>) = 3 [pid 5001] getdents64(4, [pid 6279] write(3, "1000", 4 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6279] <... write resumed>) = 4 [pid 5001] close(4 [pid 6279] close(3 [pid 5001] <... close resumed>) = 0 [pid 6279] <... close resumed>) = 0 [pid 5001] rmdir("./104/file0" [pid 6279] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... rmdir resumed>) = 0 [pid 6279] <... symlink resumed>) = 0 [pid 5001] getdents64(3, [pid 6279] memfd_create("syzkaller", 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6279] <... memfd_create resumed>) = 3 [pid 5001] close(3 [pid 6279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... close resumed>) = 0 [pid 6279] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5001] rmdir("./104" [pid 6279] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] mkdir("./105", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6280 ./strace-static-x86_64: Process 6280 attached [pid 6280] chdir("./105") = 0 [pid 6280] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6280] setpgid(0, 0) = 0 [pid 6280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6280] write(3, "1000", 4) = 4 [pid 6280] close(3) = 0 [pid 6280] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6280] memfd_create("syzkaller", 0) = 3 [pid 6280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5002] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./106/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./106") = 0 [pid 5002] mkdir("./107", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6281 [pid 6279] <... write resumed>) = 2097152 [pid 6279] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6271] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6271, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- ./strace-static-x86_64: Process 6281 attached [pid 6272] +++ exited with 0 +++ [pid 6268] +++ exited with 0 +++ [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 6281] chdir("./107" [pid 6279] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6268, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6272, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4999] <... restart_syscall resumed>) = 0 [pid 6281] <... chdir resumed>) = 0 [pid 6279] <... openat resumed>) = 4 [pid 6281] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6279] ioctl(4, LOOP_SET_FD, 3 [pid 6281] <... prctl resumed>) = 0 [pid 6280] <... write resumed>) = 2097152 [pid 5003] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6281] setpgid(0, 0 [pid 6280] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6281] <... setpgid resumed>) = 0 [pid 6280] <... munmap resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6280] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6279] <... ioctl resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5000] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6281] <... openat resumed>) = 3 [pid 6280] <... openat resumed>) = 4 [pid 6279] close(3 [pid 5003] fstat(3, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, [pid 4999] <... openat resumed>) = 3 [pid 6281] write(3, "1000", 4 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(3, [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./104/binderfs" [pid 5003] getdents64(3, [pid 5000] <... unlink resumed>) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6281] <... write resumed>) = 4 [pid 6281] close(3 [pid 6280] ioctl(4, LOOP_SET_FD, 3 [pid 6279] <... close resumed>) = 0 [pid 5003] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, [pid 6281] <... close resumed>) = 0 [pid 6280] <... ioctl resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = 0 [pid 6281] symlink("/dev/binderfs", "./binderfs" [pid 6280] close(3 [pid 5003] lstat("./104/binderfs", [pid 5000] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6280] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6281] <... symlink resumed>) = 0 [pid 6280] mkdir("./file0", 0777 [pid 5000] lstat("./104/file0", [pid 6281] memfd_create("syzkaller", 0 [pid 6280] <... mkdir resumed>) = 0 [pid 6279] mkdir("./file0", 0777 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6281] <... memfd_create resumed>) = 3 [pid 6280] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] unlink("./104/binderfs" [pid 5000] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6279] <... mkdir resumed>) = 0 [pid 5003] <... unlink resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./103/binderfs", [pid 6281] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 6281] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6279] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] unlink("./103/binderfs" [pid 5000] close(4) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5000] rmdir("./104/file0" [pid 4999] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... rmdir resumed>) = 0 [ 118.963984][ T6279] loop0: detected capacity change from 0 to 4096 [ 118.977525][ T6280] loop3: detected capacity change from 0 to 4096 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./104") = 0 [pid 5000] mkdir("./105", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6282 [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./104/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./104/file0") = 0 ./strace-static-x86_64: Process 6282 attached [pid 6282] chdir("./105" [pid 5003] getdents64(3, [pid 6282] <... chdir resumed>) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6282] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5003] close(3 [pid 6282] setpgid(0, 0 [pid 5003] <... close resumed>) = 0 [pid 6282] <... setpgid resumed>) = 0 [pid 5003] rmdir("./104" [pid 6282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... rmdir resumed>) = 0 [pid 6282] <... openat resumed>) = 3 [pid 5003] mkdir("./105", 0777 [pid 6282] write(3, "1000", 4 [pid 5003] <... mkdir resumed>) = 0 [pid 6282] <... write resumed>) = 4 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6282] close(3 [pid 5003] <... openat resumed>) = 3 [pid 6282] <... close resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 6282] symlink("/dev/binderfs", "./binderfs" [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6282] <... symlink resumed>) = 0 [pid 5003] close(3 [pid 6282] memfd_create("syzkaller", 0 [pid 5003] <... close resumed>) = 0 [pid 6282] <... memfd_create resumed>) = 3 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6285 [pid 6280] <... mount resumed>) = 0 [pid 6280] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6280] chdir("./file0") = 0 [pid 6280] ioctl(4, LOOP_CLR_FD [pid 6279] <... mount resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 6280] <... ioctl resumed>) = 0 [pid 6279] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6280] close(4 [pid 6279] <... openat resumed>) = 3 [pid 4999] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6280] <... close resumed>) = 0 [pid 6279] chdir("./file0" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6280] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6279] <... chdir resumed>) = 0 [pid 4999] lstat("./103/file0", [pid 6279] ioctl(4, LOOP_CLR_FD [pid 6280] <... openat resumed>) = 4 [pid 6279] <... ioctl resumed>) = 0 [pid 6280] unlink("./file1" [pid 6279] close(4 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6285 attached [pid 6279] <... close resumed>) = 0 [pid 4999] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6285] chdir("./105" [pid 6279] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6285] <... chdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6285] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6279] <... openat resumed>) = 4 [pid 4999] openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6285] setpgid(0, 0 [pid 6279] unlink("./file1" [pid 4999] <... openat resumed>) = 4 [pid 6285] <... setpgid resumed>) = 0 [pid 4999] fstat(4, [pid 6285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6285] <... openat resumed>) = 3 [pid 4999] getdents64(4, [pid 6285] write(3, "1000", 4 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6285] <... write resumed>) = 4 [pid 4999] getdents64(4, [pid 6285] close(3 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6285] <... close resumed>) = 0 [pid 6281] <... write resumed>) = 2097152 [pid 4999] close(4 [pid 6285] symlink("/dev/binderfs", "./binderfs" [pid 6281] munmap(0x7f0ed4ac1000, 2097152 [pid 4999] <... close resumed>) = 0 [pid 6285] <... symlink resumed>) = 0 [pid 4999] rmdir("./103/file0" [pid 6285] memfd_create("syzkaller", 0 [pid 6282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6281] <... munmap resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 6285] <... memfd_create resumed>) = 3 [pid 6281] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] getdents64(3, [pid 6285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6281] <... openat resumed>) = 4 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6281] ioctl(4, LOOP_SET_FD, 3 [pid 4999] close(3) = 0 [ 119.048921][ T6283] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.063038][ T6284] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6281] <... ioctl resumed>) = 0 [pid 4999] rmdir("./103" [pid 6281] close(3 [pid 6280] <... unlink resumed>) = 0 [pid 6281] <... close resumed>) = 0 [pid 6280] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] <... rmdir resumed>) = 0 [pid 6281] mkdir("./file0", 0777 [pid 4999] mkdir("./104", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6281] <... mkdir resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6281] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6279] <... unlink resumed>) = 0 [pid 4999] close(3 [pid 6279] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] <... close resumed>) = 0 [pid 6282] <... write resumed>) = 2097152 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6285] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6286 ./strace-static-x86_64: Process 6286 attached [pid 6286] chdir("./104") = 0 [pid 6286] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6286] setpgid(0, 0) = 0 [pid 6286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6286] write(3, "1000", 4) = 4 [pid 6282] munmap(0x7f0ed4ac1000, 2097152 [pid 6286] close(3 [pid 6282] <... munmap resumed>) = 0 [pid 6286] <... close resumed>) = 0 [pid 6286] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6286] memfd_create("syzkaller", 0) = 3 [pid 6282] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6282] <... openat resumed>) = 4 [pid 6286] <... mmap resumed>) = 0x7f0ed4ac1000 [ 119.102797][ T6281] loop4: detected capacity change from 0 to 4096 [pid 6282] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6282] close(3) = 0 [pid 6282] mkdir("./file0", 0777) = 0 [pid 6282] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6281] <... mount resumed>) = 0 [pid 6281] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6281] chdir("./file0") = 0 [pid 6281] ioctl(4, LOOP_CLR_FD) = 0 [pid 6281] close(4) = 0 [pid 6281] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6281] unlink("./file1" [pid 6285] <... write resumed>) = 2097152 [pid 6285] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6285] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 119.170796][ T6282] loop2: detected capacity change from 0 to 4096 [ 119.189436][ T6287] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6285] ioctl(4, LOOP_SET_FD, 3 [pid 6282] <... mount resumed>) = 0 [pid 6282] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6286] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6282] <... openat resumed>) = 3 [pid 6282] chdir("./file0") = 0 [pid 6282] ioctl(4, LOOP_CLR_FD) = 0 [pid 6282] close(4) = 0 [pid 6282] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6282] unlink("./file1" [pid 6281] <... unlink resumed>) = 0 [pid 6281] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6285] <... ioctl resumed>) = 0 [pid 6285] close(3) = 0 [pid 6285] mkdir("./file0", 0777) = 0 [pid 6286] <... write resumed>) = 2097152 [pid 6285] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 119.215287][ T6285] loop5: detected capacity change from 0 to 4096 [ 119.222410][ T6288] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6286] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6286] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6286] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6282] <... unlink resumed>) = 0 [pid 6282] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6280] <... pwritev resumed>) = 1114112 [pid 6285] <... mount resumed>) = 0 [pid 6280] exit_group(0) = ? [pid 6285] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6279] <... pwritev resumed>) = 1114112 [pid 6279] exit_group(0 [pid 6285] <... openat resumed>) = 3 [pid 6279] <... exit_group resumed>) = ? [pid 6286] close(3) = 0 [pid 6286] mkdir("./file0", 0777) = 0 [pid 6286] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6285] chdir("./file0") = 0 [pid 6285] ioctl(4, LOOP_CLR_FD) = 0 [pid 6285] close(4) = 0 [ 119.292517][ T6286] loop1: detected capacity change from 0 to 4096 [ 119.300080][ T6289] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6285] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6285] unlink("./file1" [pid 6286] <... mount resumed>) = 0 [pid 6279] +++ exited with 0 +++ [pid 6286] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6279, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6286] <... openat resumed>) = 3 [pid 6286] chdir("./file0") = 0 [pid 4998] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6286] ioctl(4, LOOP_CLR_FD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6286] <... ioctl resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6286] close(4 [pid 4998] <... openat resumed>) = 3 [pid 6286] <... close resumed>) = 0 [pid 4998] fstat(3, [pid 6286] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6286] <... openat resumed>) = 4 [pid 4998] getdents64(3, [pid 6286] unlink("./file1" [pid 6280] +++ exited with 0 +++ [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6280, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./106/binderfs" [pid 6285] <... unlink resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6285] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = 0 [pid 5001] lstat("./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./105/binderfs") = 0 [pid 5001] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./106/file0") = 0 [ 119.378772][ T6290] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./106") = 0 [pid 4998] mkdir("./107", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 5001] <... umount2 resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 6281] <... pwritev resumed>) = 1114112 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6281] exit_group(0 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6291 [pid 6281] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6291 attached [pid 6291] chdir("./107") = 0 [pid 6291] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6291] setpgid(0, 0) = 0 [pid 6291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6291] write(3, "1000", 4) = 4 [pid 6291] close(3) = 0 [pid 6291] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6291] memfd_create("syzkaller", 0) = 3 [pid 6291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5001] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./105/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4 [pid 6286] <... unlink resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 6286] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] rmdir("./105/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./105") = 0 [pid 5001] mkdir("./106", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6291] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 6282] <... pwritev resumed>) = 1114112 [pid 5001] <... close resumed>) = 0 [pid 6282] exit_group(0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6282] <... exit_group resumed>) = ? [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6292 ./strace-static-x86_64: Process 6292 attached [pid 6292] chdir("./106") = 0 [pid 6292] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6292] setpgid(0, 0) = 0 [pid 6292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6292] write(3, "1000", 4) = 4 [pid 6281] +++ exited with 0 +++ [pid 6292] close(3 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6281, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 6292] <... close resumed>) = 0 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 6292] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... restart_syscall resumed>) = 0 [pid 6292] <... symlink resumed>) = 0 [pid 6292] memfd_create("syzkaller", 0 [pid 5002] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6292] <... memfd_create resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6292] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6291] <... write resumed>) = 2097152 [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 6291] munmap(0x7f0ed4ac1000, 2097152 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 6291] <... munmap resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6291] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6291] ioctl(4, LOOP_SET_FD, 3 [pid 5002] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./107/binderfs", [pid 6292] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./107/binderfs") = 0 [pid 5002] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6292] <... write resumed>) = 2097152 [pid 6291] <... ioctl resumed>) = 0 [pid 6285] <... pwritev resumed>) = 1114112 [pid 6282] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6282, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6292] munmap(0x7f0ed4ac1000, 2097152 [pid 6291] close(3 [pid 6285] exit_group(0 [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6292] <... munmap resumed>) = 0 [pid 6291] <... close resumed>) = 0 [pid 6285] <... exit_group resumed>) = ? [pid 5000] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6292] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6291] mkdir("./file0", 0777 [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6292] <... openat resumed>) = 4 [pid 5000] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6291] <... mkdir resumed>) = 0 [pid 6292] ioctl(4, LOOP_SET_FD, 3 [pid 5000] unlink("./105/binderfs" [pid 6291] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] <... unlink resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5000] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./107/file0" [pid 6292] <... ioctl resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./107") = 0 [ 119.573390][ T6291] loop0: detected capacity change from 0 to 4096 [ 119.610889][ T6292] loop3: detected capacity change from 0 to 4096 [pid 6292] close(3 [pid 5002] mkdir("./108", 0777 [pid 5000] <... umount2 resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6292] <... close resumed>) = 0 [pid 6291] <... mount resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 6292] mkdir("./file0", 0777 [pid 6291] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] <... close resumed>) = 0 [pid 5000] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6286] <... pwritev resumed>) = 1114112 [pid 6286] exit_group(0 [pid 6292] <... mkdir resumed>) = 0 [pid 6291] <... openat resumed>) = 3 [pid 6286] <... exit_group resumed>) = ? [pid 6292] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6291] chdir("./file0" [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6285] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6285, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 6291] <... chdir resumed>) = 0 [pid 6286] +++ exited with 0 +++ [pid 5003] <... restart_syscall resumed>) = 0 [pid 6291] ioctl(4, LOOP_CLR_FD [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6286, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6291] <... ioctl resumed>) = 0 [pid 5003] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6291] close(4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] fstat(3, [pid 4999] <... openat resumed>) = 3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(3, [pid 6291] <... close resumed>) = 0 [pid 5003] getdents64(3, [pid 5000] lstat("./105/file0", [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6291] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6294 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 6291] <... openat resumed>) = 4 [pid 5003] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6291] unlink("./file1" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6291] <... unlink resumed>) = 0 [pid 5003] lstat("./105/binderfs", [pid 4999] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6291] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./105/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [ 119.640647][ T6293] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] rmdir("./105" [pid 6292] <... mount resumed>) = 0 [pid 5003] unlink("./105/binderfs" [pid 5000] <... rmdir resumed>) = 0 [pid 4999] lstat("./104/binderfs", [pid 5003] <... unlink resumed>) = 0 [pid 5000] mkdir("./106", 0777 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... mkdir resumed>) = 0 [pid 4999] unlink("./104/binderfs" [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] <... unlink resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4999] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3./strace-static-x86_64: Process 6294 attached [pid 6292] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] <... umount2 resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 6294] chdir("./108" [pid 6292] <... openat resumed>) = 3 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6294] <... chdir resumed>) = 0 [pid 6292] chdir("./file0" [pid 6294] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6292] <... chdir resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6296 [pid 6294] <... prctl resumed>) = 0 [pid 6292] ioctl(4, LOOP_CLR_FD [pid 6294] setpgid(0, 0 [pid 6292] <... ioctl resumed>) = 0 [pid 6294] <... setpgid resumed>) = 0 [pid 6292] close(4./strace-static-x86_64: Process 6296 attached [pid 6294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6292] <... close resumed>) = 0 [pid 5003] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 6296] chdir("./106" [pid 6294] <... openat resumed>) = 3 [pid 6292] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6296] <... chdir resumed>) = 0 [pid 6294] write(3, "1000", 4 [pid 6292] <... openat resumed>) = 4 [pid 5003] lstat("./105/file0", [pid 4999] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6296] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6294] <... write resumed>) = 4 [pid 6292] unlink("./file1" [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6296] <... prctl resumed>) = 0 [pid 6294] close(3 [pid 6292] <... unlink resumed>) = 0 [pid 5003] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6296] setpgid(0, 0 [pid 6294] <... close resumed>) = 0 [ 119.701483][ T6295] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6292] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6296] <... setpgid resumed>) = 0 [pid 6294] symlink("/dev/binderfs", "./binderfs" [pid 5003] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] lstat("./104/file0", [pid 6296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6294] <... symlink resumed>) = 0 [pid 5003] <... openat resumed>) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6296] <... openat resumed>) = 3 [pid 6294] memfd_create("syzkaller", 0 [pid 5003] fstat(4, [pid 4999] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6296] write(3, "1000", 4 [pid 6294] <... memfd_create resumed>) = 3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6296] <... write resumed>) = 4 [pid 6294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] getdents64(4, [pid 4999] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6296] close(3 [pid 6294] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] <... openat resumed>) = 4 [pid 6296] <... close resumed>) = 0 [pid 6294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] getdents64(4, [pid 4999] fstat(4, [pid 6296] symlink("/dev/binderfs", "./binderfs" [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6296] <... symlink resumed>) = 0 [pid 5003] close(4 [pid 4999] getdents64(4, [pid 6296] memfd_create("syzkaller", 0 [pid 5003] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6296] <... memfd_create resumed>) = 3 [pid 5003] rmdir("./105/file0" [pid 4999] getdents64(4, [pid 6296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6296] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] getdents64(3, [pid 4999] close(4 [pid 6291] <... pwritev resumed>) = 1114112 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] <... close resumed>) = 0 [pid 6291] exit_group(0 [pid 5003] close(3 [pid 4999] rmdir("./104/file0" [pid 6291] <... exit_group resumed>) = ? [pid 5003] <... close resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5003] rmdir("./105" [pid 4999] getdents64(3, [pid 5003] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] mkdir("./106", 0777 [pid 4999] close(3 [pid 5003] <... mkdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] rmdir("./104" [pid 5003] <... openat resumed>) = 3 [pid 4999] <... rmdir resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 4999] mkdir("./105", 0777 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... mkdir resumed>) = 0 [pid 5003] close(3 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6297 [pid 4999] close(3) = 0 [pid 6296] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6298 ./strace-static-x86_64: Process 6297 attached [pid 6297] chdir("./106"./strace-static-x86_64: Process 6298 attached [pid 6298] chdir("./105" [pid 6297] <... chdir resumed>) = 0 [pid 6297] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6298] <... chdir resumed>) = 0 [pid 6297] <... prctl resumed>) = 0 [pid 6297] setpgid(0, 0 [pid 6298] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6297] <... setpgid resumed>) = 0 [pid 6297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6298] <... prctl resumed>) = 0 [pid 6297] <... openat resumed>) = 3 [pid 6297] write(3, "1000", 4) = 4 [pid 6297] close(3) = 0 [pid 6297] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6298] setpgid(0, 0) = 0 [pid 6297] memfd_create("syzkaller", 0) = 3 [pid 6297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6294] <... write resumed>) = 2097152 [pid 6298] <... openat resumed>) = 3 [pid 6298] write(3, "1000", 4) = 4 [pid 6298] close(3) = 0 [pid 6298] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6298] memfd_create("syzkaller", 0) = 3 [pid 6298] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6294] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6294] ioctl(4, LOOP_SET_FD, 3 [pid 6297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6296] <... write resumed>) = 2097152 [pid 6296] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6296] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6296] ioctl(4, LOOP_SET_FD, 3 [pid 6298] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6297] <... write resumed>) = 2097152 [pid 6296] <... ioctl resumed>) = 0 [pid 6294] <... ioctl resumed>) = 0 [pid 6291] +++ exited with 0 +++ [pid 6297] munmap(0x7f0ed4ac1000, 2097152 [pid 6296] close(3 [pid 6294] close(3 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6291, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6294] <... close resumed>) = 0 [pid 6297] <... munmap resumed>) = 0 [pid 6294] mkdir("./file0", 0777 [pid 6296] <... close resumed>) = 0 [pid 6296] mkdir("./file0", 0777) = 0 [pid 6294] <... mkdir resumed>) = 0 [pid 6294] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6297] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6296] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6297] <... openat resumed>) = 4 [pid 4998] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 119.856202][ T6294] loop4: detected capacity change from 0 to 4096 [ 119.870359][ T6296] loop2: detected capacity change from 0 to 4096 [pid 6297] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... openat resumed>) = 3 [pid 6292] <... pwritev resumed>) = 1114112 [pid 4998] fstat(3, [pid 6292] exit_group(0) = ? [pid 6298] <... write resumed>) = 2097152 [pid 6297] <... ioctl resumed>) = 0 [pid 6296] <... mount resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6296] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6296] chdir("./file0") = 0 [pid 6296] ioctl(4, LOOP_CLR_FD) = 0 [pid 6296] close(4) = 0 [pid 6296] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6296] unlink("./file1" [pid 6294] <... mount resumed>) = 0 [pid 6294] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6294] chdir("./file0") = 0 [pid 6294] ioctl(4, LOOP_CLR_FD) = 0 [pid 6294] close(4) = 0 [pid 6294] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6294] unlink("./file1" [pid 6298] munmap(0x7f0ed4ac1000, 2097152 [pid 6297] close(3 [pid 4998] getdents64(3, [pid 6292] +++ exited with 0 +++ [pid 6297] <... close resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6292, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6296] <... unlink resumed>) = 0 [pid 6296] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6298] <... munmap resumed>) = 0 [pid 6297] mkdir("./file0", 0777 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6297] <... mkdir resumed>) = 0 [ 119.905518][ T6297] loop5: detected capacity change from 0 to 4096 [ 119.913968][ T6300] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.924930][ T6299] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6298] <... openat resumed>) = 4 [pid 6297] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./107/binderfs", [pid 6298] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] unlink("./107/binderfs") = 0 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./106/binderfs") = 0 [pid 5001] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6298] <... ioctl resumed>) = 0 [pid 6298] close(3) = 0 [pid 6298] mkdir("./file0", 0777) = 0 [pid 6298] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6294] <... unlink resumed>) = 0 [ 119.953032][ T6298] loop1: detected capacity change from 0 to 4096 [pid 6294] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6297] <... mount resumed>) = 0 [pid 6297] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6297] chdir("./file0") = 0 [pid 6297] ioctl(4, LOOP_CLR_FD) = 0 [pid 6297] close(4) = 0 [pid 6297] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6297] unlink("./file1" [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 119.988675][ T6301] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6298] <... mount resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6298] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./106/file0", [pid 4998] <... openat resumed>) = 4 [pid 6298] <... openat resumed>) = 3 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6298] chdir("./file0" [pid 4998] fstat(4, [pid 5001] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6298] <... chdir resumed>) = 0 [pid 6298] ioctl(4, LOOP_CLR_FD [pid 4998] getdents64(4, [pid 6298] <... ioctl resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6298] close(4 [pid 5001] <... openat resumed>) = 4 [pid 6298] <... close resumed>) = 0 [pid 4998] getdents64(4, [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4 [pid 6298] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6297] <... unlink resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] rmdir("./106/file0" [pid 6297] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] close(4 [pid 5001] getdents64(3, [pid 4998] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./106") = 0 [pid 5001] mkdir("./107", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6303 [pid 4998] rmdir("./107/file0"./strace-static-x86_64: Process 6303 attached [pid 6303] chdir("./107") = 0 [pid 6303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] <... rmdir resumed>) = 0 [pid 6298] <... openat resumed>) = 4 [pid 4998] getdents64(3, [pid 6298] unlink("./file1" [pid 6303] <... prctl resumed>) = 0 [pid 6303] setpgid(0, 0) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 6303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] <... close resumed>) = 0 [pid 6303] write(3, "1000", 4) = 4 [pid 4998] rmdir("./107" [pid 6303] close(3) = 0 [pid 6303] symlink("/dev/binderfs", "./binderfs" [pid 4998] <... rmdir resumed>) = 0 [pid 6303] <... symlink resumed>) = 0 [pid 6303] memfd_create("syzkaller", 0 [pid 4998] mkdir("./108", 0777 [pid 6303] <... memfd_create resumed>) = 3 [pid 6303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [ 120.043271][ T6302] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6298] <... unlink resumed>) = 0 [pid 6298] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] close(3) = 0 [pid 6296] <... pwritev resumed>) = 1114112 [pid 6296] exit_group(0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6296] <... exit_group resumed>) = ? [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6304 ./strace-static-x86_64: Process 6304 attached [pid 6304] chdir("./108") = 0 [pid 6304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6304] setpgid(0, 0) = 0 [pid 6304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6304] write(3, "1000", 4) = 4 [pid 6304] close(3) = 0 [pid 6303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6304] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6304] memfd_create("syzkaller", 0) = 3 [pid 6304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6296] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6296, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 6304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5000] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6294] <... pwritev resumed>) = 1114112 [pid 5000] <... openat resumed>) = 3 [pid 6294] exit_group(0) = ? [pid 6304] <... write resumed>) = 2097152 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6303] <... write resumed>) = 2097152 [pid 5000] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./106/binderfs", [pid 6303] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./106/binderfs") = 0 [pid 6303] <... munmap resumed>) = 0 [pid 5000] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6303] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6303] ioctl(4, LOOP_SET_FD, 3 [pid 6304] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6304] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6297] <... pwritev resumed>) = 1114112 [pid 6297] exit_group(0) = ? [pid 6304] <... openat resumed>) = 4 [pid 6294] +++ exited with 0 +++ [pid 6303] <... ioctl resumed>) = 0 [pid 6303] close(3) = 0 [pid 6303] mkdir("./file0", 0777) = 0 [pid 6303] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6294, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6304] ioctl(4, LOOP_SET_FD, 3 [pid 5002] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 120.218206][ T6303] loop3: detected capacity change from 0 to 4096 [pid 5002] lstat("./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./108/binderfs") = 0 [pid 5002] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6298] <... pwritev resumed>) = 1114112 [pid 6298] exit_group(0) = ? [pid 6303] <... mount resumed>) = 0 [pid 6303] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6303] chdir("./file0") = 0 [pid 6303] ioctl(4, LOOP_CLR_FD) = 0 [pid 6303] close(4) = 0 [pid 6303] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6303] unlink("./file1") = 0 [pid 6303] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6297] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6297, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 5000] <... umount2 resumed>) = 0 [pid 5003] <... restart_syscall resumed>) = 0 [pid 5003] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./106/binderfs") = 0 [pid 5000] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./106/file0", [pid 5002] <... umount2 resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 120.266307][ T6304] loop0: detected capacity change from 0 to 4096 [ 120.281371][ T6305] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6304] <... ioctl resumed>) = 0 [pid 5002] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6304] close(3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6304] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... openat resumed>) = 4 [pid 5002] lstat("./108/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6304] mkdir("./file0", 0777 [pid 5000] fstat(4, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6304] <... mkdir resumed>) = 0 [pid 5002] getdents64(4, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] lstat("./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6304] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] getdents64(4, [pid 5000] getdents64(4, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, [pid 5002] close(4 [pid 5000] close(4 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 5002] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5002] rmdir("./108/file0" [pid 5000] rmdir("./106/file0" [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4 [pid 5002] <... rmdir resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./106/file0" [pid 5002] getdents64(3, [pid 5000] <... rmdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(3, [pid 5002] close(3 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] close(3 [pid 5002] rmdir("./108" [pid 5000] <... close resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5003] getdents64(3, [pid 5002] <... rmdir resumed>) = 0 [pid 5000] rmdir("./106" [pid 5002] mkdir("./109", 0777 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3 [pid 5000] <... rmdir resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./106") = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5000] mkdir("./107", 0777 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5003] mkdir("./107", 0777 [pid 5000] <... mkdir resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... openat resumed>) = 3 [pid 5003] <... openat resumed>) = 3 [pid 5002] close(3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] <... close resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6306 [pid 6298] +++ exited with 0 +++ [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6298, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- ./strace-static-x86_64: Process 6306 attached [pid 6306] chdir("./107" [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6307 [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6308 [pid 4999] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6306] <... chdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] lstat("./105/binderfs", [pid 6306] <... prctl resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6306] setpgid(0, 0 [pid 4999] unlink("./105/binderfs" [pid 6306] <... setpgid resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 6306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6308 attached ./strace-static-x86_64: Process 6307 attached [pid 6306] <... openat resumed>) = 3 [pid 6308] chdir("./107" [pid 6307] chdir("./109" [pid 6308] <... chdir resumed>) = 0 [pid 6307] <... chdir resumed>) = 0 [pid 6308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6308] <... prctl resumed>) = 0 [pid 6307] <... prctl resumed>) = 0 [pid 6308] setpgid(0, 0 [pid 6307] setpgid(0, 0 [pid 6308] <... setpgid resumed>) = 0 [pid 6307] <... setpgid resumed>) = 0 [pid 6308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6308] <... openat resumed>) = 3 [pid 6307] <... openat resumed>) = 3 [pid 6308] write(3, "1000", 4 [pid 6307] write(3, "1000", 4 [pid 6308] <... write resumed>) = 4 [pid 6307] <... write resumed>) = 4 [pid 6308] close(3 [pid 6307] close(3 [pid 6308] <... close resumed>) = 0 [pid 6307] <... close resumed>) = 0 [pid 6308] symlink("/dev/binderfs", "./binderfs" [pid 6307] symlink("/dev/binderfs", "./binderfs" [pid 6308] <... symlink resumed>) = 0 [pid 6307] <... symlink resumed>) = 0 [pid 6308] memfd_create("syzkaller", 0 [pid 6307] memfd_create("syzkaller", 0 [pid 6308] <... memfd_create resumed>) = 3 [pid 6307] <... memfd_create resumed>) = 3 [pid 6308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6308] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6307] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6306] write(3, "1000", 4 [pid 6304] <... mount resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 6306] <... write resumed>) = 4 [pid 6304] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6306] close(3) = 0 [pid 6304] <... openat resumed>) = 3 [pid 6306] symlink("/dev/binderfs", "./binderfs" [pid 6304] chdir("./file0" [pid 6306] <... symlink resumed>) = 0 [pid 6304] <... chdir resumed>) = 0 [pid 4999] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6306] memfd_create("syzkaller", 0 [pid 6304] ioctl(4, LOOP_CLR_FD [pid 6306] <... memfd_create resumed>) = 3 [pid 6304] <... ioctl resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6304] close(4 [pid 6306] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 4999] lstat("./105/file0", [pid 6304] <... close resumed>) = 0 [pid 6308] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6304] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6304] <... openat resumed>) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6304] unlink("./file1" [pid 4999] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./105/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] close(3) = 0 [pid 4999] rmdir("./105") = 0 [pid 4999] mkdir("./106", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [ 120.414199][ T6309] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6310 ./strace-static-x86_64: Process 6310 attached [pid 6310] chdir("./106" [pid 6304] <... unlink resumed>) = 0 [pid 6304] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6310] <... chdir resumed>) = 0 [pid 6310] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6310] setpgid(0, 0) = 0 [pid 6310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6310] write(3, "1000", 4) = 4 [pid 6310] close(3) = 0 [pid 6310] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6310] memfd_create("syzkaller", 0) = 3 [pid 6310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6307] <... write resumed>) = 2097152 [pid 6307] munmap(0x7f0ed4ac1000, 2097152 [pid 6308] <... write resumed>) = 2097152 [pid 6307] <... munmap resumed>) = 0 [pid 6308] munmap(0x7f0ed4ac1000, 2097152 [pid 6303] <... pwritev resumed>) = 1114112 [pid 6308] <... munmap resumed>) = 0 [pid 6306] <... write resumed>) = 2097152 [pid 6303] exit_group(0 [pid 6306] munmap(0x7f0ed4ac1000, 2097152 [pid 6303] <... exit_group resumed>) = ? [pid 6307] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6308] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6307] <... openat resumed>) = 4 [pid 6308] <... openat resumed>) = 4 [pid 6307] ioctl(4, LOOP_SET_FD, 3 [pid 6308] ioctl(4, LOOP_SET_FD, 3 [pid 6306] <... munmap resumed>) = 0 [pid 6306] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6306] ioctl(4, LOOP_SET_FD, 3 [pid 6310] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6306] <... ioctl resumed>) = 0 [pid 6306] close(3) = 0 [pid 6306] mkdir("./file0", 0777 [pid 6307] <... ioctl resumed>) = 0 [pid 6307] close(3) = 0 [pid 6307] mkdir("./file0", 0777) = 0 [pid 6308] <... ioctl resumed>) = 0 [pid 6308] close(3) = 0 [pid 6308] mkdir("./file0", 0777) = 0 [pid 6307] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6308] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6306] <... mkdir resumed>) = 0 [pid 6306] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6303] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6303, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5001] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 120.520093][ T6307] loop4: detected capacity change from 0 to 4096 [ 120.527694][ T6308] loop2: detected capacity change from 0 to 4096 [ 120.546135][ T6306] loop5: detected capacity change from 0 to 4096 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6310] <... write resumed>) = 2097152 [pid 6307] <... mount resumed>) = 0 [pid 6307] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6307] chdir("./file0") = 0 [pid 6307] ioctl(4, LOOP_CLR_FD) = 0 [pid 6307] close(4) = 0 [pid 6307] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6310] munmap(0x7f0ed4ac1000, 2097152 [pid 6308] <... mount resumed>) = 0 [pid 6307] <... openat resumed>) = 4 [pid 5001] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6310] <... munmap resumed>) = 0 [pid 6308] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6307] unlink("./file1" [pid 6308] <... openat resumed>) = 3 [pid 6308] chdir("./file0" [pid 6310] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6308] <... chdir resumed>) = 0 [pid 6310] <... openat resumed>) = 4 [pid 6308] ioctl(4, LOOP_CLR_FD [pid 6310] ioctl(4, LOOP_SET_FD, 3 [pid 6308] <... ioctl resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./107/binderfs") = 0 [pid 5001] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6308] close(4 [pid 6307] <... unlink resumed>) = 0 [pid 6306] <... mount resumed>) = 0 [pid 6304] <... pwritev resumed>) = 1114112 [pid 6310] <... ioctl resumed>) = 0 [pid 6310] close(3 [pid 6306] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6304] exit_group(0 [pid 6310] <... close resumed>) = 0 [pid 6308] <... close resumed>) = 0 [pid 6307] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6306] <... openat resumed>) = 3 [pid 6304] <... exit_group resumed>) = ? [pid 6310] mkdir("./file0", 0777 [pid 6308] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6306] chdir("./file0" [pid 5001] <... umount2 resumed>) = 0 [pid 6310] <... mkdir resumed>) = 0 [pid 6308] <... openat resumed>) = 4 [pid 6306] <... chdir resumed>) = 0 [pid 6310] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6306] ioctl(4, LOOP_CLR_FD [pid 6308] unlink("./file1" [pid 6306] <... ioctl resumed>) = 0 [pid 6306] close(4) = 0 [pid 6306] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6308] <... unlink resumed>) = 0 [pid 6306] <... openat resumed>) = 4 [pid 6308] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 120.602840][ T6311] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.610027][ T6312] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.632164][ T6313] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.638497][ T6310] loop1: detected capacity change from 0 to 4096 [pid 6306] unlink("./file1") = 0 [pid 6306] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6304] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6304, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./108/binderfs" [pid 5001] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 6310] <... mount resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6310] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5001] close(4 [pid 6310] chdir("./file0") = 0 [pid 5001] <... close resumed>) = 0 [pid 6310] ioctl(4, LOOP_CLR_FD) = 0 [pid 5001] rmdir("./107/file0" [pid 6310] close(4) = 0 [pid 6310] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5001] <... rmdir resumed>) = 0 [pid 6310] unlink("./file1" [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5001] close(3 [pid 4998] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./107" [pid 4998] lstat("./108/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] mkdir("./108", 0777 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] <... openat resumed>) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] getdents64(4, [pid 5001] close(3 [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] <... close resumed>) = 0 [pid 4998] close(4) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] rmdir("./108/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6315 [pid 4998] rmdir("./108") = 0 [pid 4998] mkdir("./109", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6315 attached [pid 6315] chdir("./108" [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6316 [pid 6315] <... chdir resumed>) = 0 [ 120.732220][ T6314] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6315] setpgid(0, 0) = 0 [pid 6315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 6316 attached ) = 3 [pid 6316] chdir("./109" [pid 6315] write(3, "1000", 4 [pid 6316] <... chdir resumed>) = 0 [pid 6315] <... write resumed>) = 4 [pid 6316] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6315] close(3 [pid 6316] <... prctl resumed>) = 0 [pid 6316] setpgid(0, 0 [pid 6315] <... close resumed>) = 0 [pid 6316] <... setpgid resumed>) = 0 [pid 6315] symlink("/dev/binderfs", "./binderfs" [pid 6316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6315] <... symlink resumed>) = 0 [pid 6316] <... openat resumed>) = 3 [pid 6315] memfd_create("syzkaller", 0 [pid 6316] write(3, "1000", 4 [pid 6315] <... memfd_create resumed>) = 3 [pid 6316] <... write resumed>) = 4 [pid 6315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6316] close(3 [pid 6315] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6310] <... unlink resumed>) = 0 [pid 6316] <... close resumed>) = 0 [pid 6310] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6316] memfd_create("syzkaller", 0) = 3 [pid 6316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6315] munmap(0x7f0ed4ac1000, 2097152 [pid 6306] <... pwritev resumed>) = 1114112 [pid 6306] exit_group(0) = ? [pid 6307] <... pwritev resumed>) = 1114112 [pid 6316] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6315] <... munmap resumed>) = 0 [pid 6307] exit_group(0 [pid 6315] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6308] <... pwritev resumed>) = 1114112 [pid 6307] <... exit_group resumed>) = ? [pid 6315] <... openat resumed>) = 4 [pid 6308] exit_group(0 [pid 6315] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6308] <... exit_group resumed>) = ? [pid 6315] close(3) = 0 [pid 6315] mkdir("./file0", 0777) = 0 [pid 6315] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6306] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6306, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6310] <... pwritev resumed>) = 1114112 [pid 6310] exit_group(0) = ? [pid 5003] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, [pid 6316] <... write resumed>) = 2097152 [pid 6315] <... mount resumed>) = 0 [pid 6316] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6316] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 120.912054][ T6315] loop3: detected capacity change from 0 to 4096 [ 120.948947][ T6317] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6316] ioctl(4, LOOP_SET_FD, 3 [pid 6315] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6310] +++ exited with 0 +++ [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6315] <... openat resumed>) = 3 [pid 5003] getdents64(3, [pid 6315] chdir("./file0" [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6310, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6315] <... chdir resumed>) = 0 [pid 5003] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6315] ioctl(4, LOOP_CLR_FD [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6315] <... ioctl resumed>) = 0 [pid 5003] lstat("./107/binderfs", [pid 4999] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6315] close(4 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... openat resumed>) = 3 [pid 6315] <... close resumed>) = 0 [pid 5003] unlink("./107/binderfs" [pid 4999] fstat(3, [pid 6315] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] <... unlink resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6315] <... openat resumed>) = 4 [pid 5003] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, [pid 6316] <... ioctl resumed>) = 0 [pid 6315] unlink("./file1" [pid 6308] +++ exited with 0 +++ [pid 6307] +++ exited with 0 +++ [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6308, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] lstat("./106/binderfs", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] unlink("./106/binderfs" [pid 5000] <... openat resumed>) = 3 [pid 4999] <... unlink resumed>) = 0 [pid 5000] fstat(3, [pid 4999] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./107/binderfs") = 0 [pid 5000] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6315] <... unlink resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6307, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [ 120.959438][ T6316] loop0: detected capacity change from 0 to 4096 [pid 6315] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5002] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 6316] close(3) = 0 [pid 6316] mkdir("./file0", 0777) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6316] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./109/binderfs") = 0 [pid 5002] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./106/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./106" [pid 5000] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... rmdir resumed>) = 0 [pid 5000] lstat("./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] mkdir("./107", 0777 [pid 5000] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... mkdir resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5000] getdents64(4, [pid 4999] <... openat resumed>) = 3 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5000] getdents64(4, [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 5000] close(4 [pid 4999] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] rmdir("./107/file0" [pid 5003] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6319 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./107" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... rmdir resumed>) = 0 [pid 6316] <... mount resumed>) = 0 [pid 5000] mkdir("./108", 0777 [pid 6316] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] lstat("./107/file0", [pid 5000] <... mkdir resumed>) = 0 [pid 6316] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6316] chdir("./file0" [pid 5000] <... openat resumed>) = 3 [pid 6316] <... chdir resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 6316] ioctl(4, LOOP_CLR_FD [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6316] <... ioctl resumed>) = 0 [pid 6316] close(4 [pid 5000] close(3 [pid 6316] <... close resumed>) = 0 [pid 6316] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] <... close resumed>) = 0 [pid 5003] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6316] <... openat resumed>) = 4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6319 attached [pid 6316] unlink("./file1" [pid 5003] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6319] chdir("./107" [pid 5002] <... umount2 resumed>) = 0 [pid 5003] <... openat resumed>) = 4 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6320 [pid 6319] <... chdir resumed>) = 0 [pid 5003] fstat(4, [pid 6319] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6319] <... prctl resumed>) = 0 [pid 6319] setpgid(0, 0) = 0 [pid 6319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] getdents64(4, [pid 6319] <... openat resumed>) = 3 [pid 6319] write(3, "1000", 4) = 4 [pid 6319] close(3) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6319] symlink("/dev/binderfs", "./binderfs" [pid 5002] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] getdents64(4, ./strace-static-x86_64: Process 6320 attached [pid 6319] <... symlink resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] close(4 [pid 5002] lstat("./109/file0", [pid 6320] chdir("./108" [pid 6319] memfd_create("syzkaller", 0 [pid 5003] <... close resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6320] <... chdir resumed>) = 0 [pid 6319] <... memfd_create resumed>) = 3 [pid 5003] rmdir("./107/file0" [pid 5002] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6320] <... prctl resumed>) = 0 [pid 6319] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6320] setpgid(0, 0 [pid 5003] getdents64(3, [pid 6320] <... setpgid resumed>) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] close(3 [pid 6320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... close resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 6320] <... openat resumed>) = 3 [pid 5003] rmdir("./107" [pid 5002] fstat(4, [pid 6320] write(3, "1000", 4) = 4 [pid 6320] close(3 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6320] <... close resumed>) = 0 [pid 5003] mkdir("./108", 0777 [pid 5002] getdents64(4, [pid 6320] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6320] memfd_create("syzkaller", 0 [pid 5003] <... mkdir resumed>) = 0 [pid 6320] <... memfd_create resumed>) = 3 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5003] <... openat resumed>) = 3 [pid 5002] getdents64(4, [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(4 [pid 5003] close(3 [pid 5002] <... close resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5002] rmdir("./109/file0" [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6321 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6316] <... unlink resumed>) = 0 [pid 6316] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0./strace-static-x86_64: Process 6321 attached [pid 5002] close(3 [pid 6321] chdir("./108" [pid 5002] <... close resumed>) = 0 [ 121.028744][ T6318] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6321] <... chdir resumed>) = 0 [pid 5002] rmdir("./109" [pid 6321] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... rmdir resumed>) = 0 [pid 6321] <... prctl resumed>) = 0 [pid 5002] mkdir("./110", 0777 [pid 6321] setpgid(0, 0 [pid 5002] <... mkdir resumed>) = 0 [pid 6321] <... setpgid resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] ioctl(3, LOOP_CLR_FD [pid 6321] <... openat resumed>) = 3 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6321] write(3, "1000", 4 [pid 6319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] close(3 [pid 6321] <... write resumed>) = 4 [pid 5002] <... close resumed>) = 0 [pid 6321] close(3 [pid 6320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6321] <... close resumed>) = 0 ./strace-static-x86_64: Process 6322 attached [pid 6322] chdir("./110") = 0 [pid 6322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6322] setpgid(0, 0) = 0 [pid 6322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6321] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6322 [pid 6322] <... openat resumed>) = 3 [pid 6321] <... symlink resumed>) = 0 [pid 6321] memfd_create("syzkaller", 0) = 3 [pid 6321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6322] write(3, "1000", 4) = 4 [pid 6322] close(3 [pid 6321] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6322] <... close resumed>) = 0 [pid 6322] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6322] memfd_create("syzkaller", 0) = 3 [pid 6322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6319] <... write resumed>) = 2097152 [pid 6319] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6319] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6319] ioctl(4, LOOP_SET_FD, 3 [pid 6320] <... write resumed>) = 2097152 [pid 6322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6320] munmap(0x7f0ed4ac1000, 2097152 [pid 6321] <... write resumed>) = 2097152 [pid 6321] munmap(0x7f0ed4ac1000, 2097152 [pid 6320] <... munmap resumed>) = 0 [pid 6320] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6321] <... munmap resumed>) = 0 [pid 6320] <... openat resumed>) = 4 [pid 6320] ioctl(4, LOOP_SET_FD, 3 [pid 6321] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6319] <... ioctl resumed>) = 0 [pid 6315] <... pwritev resumed>) = 1114112 [pid 6315] exit_group(0) = ? [pid 6322] <... write resumed>) = 2097152 [pid 6321] <... openat resumed>) = 4 [pid 6320] <... ioctl resumed>) = 0 [pid 6319] close(3 [pid 6322] munmap(0x7f0ed4ac1000, 2097152 [pid 6321] ioctl(4, LOOP_SET_FD, 3 [pid 6320] close(3 [pid 6319] <... close resumed>) = 0 [ 121.162205][ T6319] loop1: detected capacity change from 0 to 4096 [ 121.191207][ T6320] loop2: detected capacity change from 0 to 4096 [pid 6322] <... munmap resumed>) = 0 [pid 6319] mkdir("./file0", 0777) = 0 [pid 6319] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6320] <... close resumed>) = 0 [pid 6322] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6320] mkdir("./file0", 0777 [pid 6322] <... openat resumed>) = 4 [pid 6322] ioctl(4, LOOP_SET_FD, 3 [pid 6320] <... mkdir resumed>) = 0 [pid 6321] <... ioctl resumed>) = 0 [pid 6321] close(3) = 0 [pid 6321] mkdir("./file0", 0777) = 0 [pid 6321] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6320] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6322] <... ioctl resumed>) = 0 [pid 6319] <... mount resumed>) = 0 [pid 6322] close(3) = 0 [pid 6322] mkdir("./file0", 0777) = 0 [pid 6322] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6319] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6316] <... pwritev resumed>) = 1114112 [pid 6319] <... openat resumed>) = 3 [pid 6320] <... mount resumed>) = 0 [pid 6319] chdir("./file0" [pid 6316] exit_group(0 [pid 6320] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6319] <... chdir resumed>) = 0 [pid 6316] <... exit_group resumed>) = ? [pid 6319] ioctl(4, LOOP_CLR_FD) = 0 [pid 6319] close(4) = 0 [pid 6319] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6320] <... openat resumed>) = 3 [pid 6319] <... openat resumed>) = 4 [pid 6319] unlink("./file1" [pid 6320] chdir("./file0" [pid 6319] <... unlink resumed>) = 0 [pid 6315] +++ exited with 0 +++ [ 121.218487][ T6321] loop5: detected capacity change from 0 to 4096 [ 121.233012][ T6322] loop4: detected capacity change from 0 to 4096 [ 121.246861][ T6324] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.250267][ T6323] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6319] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6315, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6322] <... mount resumed>) = 0 [pid 6320] <... chdir resumed>) = 0 [pid 6316] +++ exited with 0 +++ [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6316, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5001] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 5001] fstat(3, [pid 4998] fstat(3, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 4998] getdents64(3, [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./108/binderfs", [pid 4998] lstat("./109/binderfs", [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./108/binderfs" [pid 4998] unlink("./109/binderfs" [pid 5001] <... unlink resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5001] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6322] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6321] <... mount resumed>) = 0 [pid 6320] ioctl(4, LOOP_CLR_FD [pid 6321] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6321] chdir("./file0") = 0 [pid 6321] ioctl(4, LOOP_CLR_FD) = 0 [pid 6321] close(4) = 0 [pid 6321] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6321] unlink("./file1" [pid 6322] <... openat resumed>) = 3 [pid 6320] <... ioctl resumed>) = 0 [pid 6322] chdir("./file0" [pid 6320] close(4 [pid 6322] <... chdir resumed>) = 0 [pid 6320] <... close resumed>) = 0 [pid 6322] ioctl(4, LOOP_CLR_FD [pid 6320] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6322] <... ioctl resumed>) = 0 [pid 6320] <... openat resumed>) = 4 [pid 6322] close(4) = 0 [pid 6320] unlink("./file1" [pid 6322] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6320] <... unlink resumed>) = 0 [pid 6322] unlink("./file1" [ 121.299736][ T6325] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.311709][ T6326] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6320] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] <... umount2 resumed>) = 0 [pid 6322] <... unlink resumed>) = 0 [pid 6322] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6321] <... unlink resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 4998] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6321] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./109/file0", [pid 5001] lstat("./108/file0", [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... openat resumed>) = 4 [pid 4998] <... openat resumed>) = 4 [pid 5001] fstat(4, [pid 4998] fstat(4, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, [pid 4998] getdents64(4, [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 4998] getdents64(4, [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4 [pid 4998] close(4 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./108/file0" [pid 4998] <... close resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 4998] rmdir("./109/file0" [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [pid 4998] <... rmdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4998] getdents64(3, [pid 5001] rmdir("./108" [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] close(3 [pid 5001] mkdir("./109", 0777 [pid 4998] <... close resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 4998] rmdir("./109") = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4998] mkdir("./110", 0777 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4998] <... mkdir resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] <... close resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 6322] <... pwritev resumed>) = 1114112 [pid 6320] <... pwritev resumed>) = 1114112 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6322] exit_group(0 [pid 6320] exit_group(0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6322] <... exit_group resumed>) = ? [pid 6320] <... exit_group resumed>) = ? [pid 4998] close(3 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6327 [pid 4998] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6328 ./strace-static-x86_64: Process 6327 attached [pid 6327] chdir("./109") = 0 [pid 6327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6327] setpgid(0, 0) = 0 [pid 6327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6319] <... pwritev resumed>) = 1114112 [pid 6319] exit_group(0) = ? ./strace-static-x86_64: Process 6328 attached [pid 6328] chdir("./110") = 0 [pid 6327] <... openat resumed>) = 3 [pid 6328] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6327] write(3, "1000", 4 [pid 6328] <... prctl resumed>) = 0 [pid 6327] <... write resumed>) = 4 [pid 6327] close(3 [pid 6328] setpgid(0, 0 [pid 6327] <... close resumed>) = 0 [pid 6328] <... setpgid resumed>) = 0 [pid 6327] symlink("/dev/binderfs", "./binderfs" [pid 6328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6327] <... symlink resumed>) = 0 [pid 6327] memfd_create("syzkaller", 0) = 3 [pid 6327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6328] <... openat resumed>) = 3 [pid 6327] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6328] write(3, "1000", 4) = 4 [pid 6328] close(3) = 0 [pid 6328] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6328] memfd_create("syzkaller", 0) = 3 [pid 6328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6319] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6319, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./107/binderfs") = 0 [pid 4999] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6322] +++ exited with 0 +++ [pid 6321] <... pwritev resumed>) = 1114112 [pid 6320] +++ exited with 0 +++ [pid 6321] exit_group(0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6322, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6320, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 6321] <... exit_group resumed>) = ? [pid 5002] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 5000] fstat(3, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5000] getdents64(3, [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = 0 [pid 5002] lstat("./110/binderfs", [pid 5000] lstat("./108/binderfs", [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./110/binderfs" [pid 5000] unlink("./108/binderfs" [pid 5002] <... unlink resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 5002] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6328] <... write resumed>) = 2097152 [pid 6327] <... write resumed>) = 2097152 [pid 5000] <... umount2 resumed>) = 0 [pid 6328] munmap(0x7f0ed4ac1000, 2097152 [pid 6327] munmap(0x7f0ed4ac1000, 2097152 [pid 6328] <... munmap resumed>) = 0 [pid 6327] <... munmap resumed>) = 0 [pid 6321] +++ exited with 0 +++ [pid 5002] <... umount2 resumed>) = 0 [pid 5000] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6328] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6321, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 6328] <... openat resumed>) = 4 [pid 6327] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... restart_syscall resumed>) = 0 [pid 5003] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6328] ioctl(4, LOOP_SET_FD, 3 [pid 6327] <... openat resumed>) = 4 [pid 5003] unlink("./108/binderfs" [pid 5000] lstat("./108/file0", [pid 4999] lstat("./107/file0", [pid 5003] <... unlink resumed>) = 0 [pid 5003] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./110/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./110") = 0 [pid 5002] mkdir("./111", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 6328] <... ioctl resumed>) = 0 [pid 6327] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... close resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... umount2 resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 4999] <... openat resumed>) = 4 [pid 5000] fstat(4, [pid 4999] fstat(4, [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6328] close(3 [pid 5000] getdents64(4, [pid 4999] getdents64(4, [pid 6328] <... close resumed>) = 0 [pid 6327] <... ioctl resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6328] mkdir("./file0", 0777 [pid 6327] close(3 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6329 [pid 5000] getdents64(4, [pid 4999] getdents64(4, [pid 6327] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6327] mkdir("./file0", 0777 [pid 5000] close(4 [pid 4999] close(4 [pid 6327] <... mkdir resumed>) = 0 [pid 6328] <... mkdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 6328] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6327] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] rmdir("./108/file0" [pid 4999] rmdir("./107/file0" [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, [pid 4999] getdents64(3, ./strace-static-x86_64: Process 6329 attached [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6329] chdir("./111" [pid 5000] close(3 [pid 4999] close(3 [pid 6329] <... chdir resumed>) = 0 [pid 5003] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] rmdir("./108" [ 121.635157][ T6328] loop0: detected capacity change from 0 to 4096 [ 121.646492][ T6327] loop3: detected capacity change from 0 to 4096 [pid 4999] rmdir("./107" [pid 6329] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] lstat("./108/file0", [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] mkdir("./109", 0777 [pid 4999] mkdir("./108", 0777 [pid 5003] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 5003] <... openat resumed>) = 4 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5003] fstat(4, [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] close(3 [pid 4999] close(3 [pid 5003] getdents64(4, [pid 5000] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6329] <... prctl resumed>) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6332 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6333 [pid 5003] close(4) = 0 [pid 5003] rmdir("./108/file0") = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 ./strace-static-x86_64: Process 6332 attached [pid 6327] <... mount resumed>) = 0 [pid 5003] rmdir("./108"./strace-static-x86_64: Process 6333 attached [pid 6332] chdir("./109" [pid 6329] setpgid(0, 0 [pid 6328] <... mount resumed>) = 0 [pid 6327] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] <... rmdir resumed>) = 0 [pid 6333] chdir("./108" [pid 6332] <... chdir resumed>) = 0 [pid 6329] <... setpgid resumed>) = 0 [pid 6328] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6327] <... openat resumed>) = 3 [pid 5003] mkdir("./109", 0777 [pid 6333] <... chdir resumed>) = 0 [pid 6332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6328] <... openat resumed>) = 3 [pid 6327] chdir("./file0" [pid 6333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6332] <... prctl resumed>) = 0 [pid 6329] <... openat resumed>) = 3 [pid 6328] chdir("./file0" [pid 5003] <... mkdir resumed>) = 0 [pid 6327] <... chdir resumed>) = 0 [pid 6333] <... prctl resumed>) = 0 [pid 6332] setpgid(0, 0 [pid 6329] write(3, "1000", 4 [pid 6328] <... chdir resumed>) = 0 [pid 6327] ioctl(4, LOOP_CLR_FD [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6333] setpgid(0, 0 [pid 6329] <... write resumed>) = 4 [pid 6328] ioctl(4, LOOP_CLR_FD [pid 6333] <... setpgid resumed>) = 0 [pid 6332] <... setpgid resumed>) = 0 [pid 6329] close(3 [pid 6328] <... ioctl resumed>) = 0 [pid 6327] <... ioctl resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 6333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6329] <... close resumed>) = 0 [pid 6328] close(4 [pid 6327] close(4 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 6333] <... openat resumed>) = 3 [pid 6332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6329] symlink("/dev/binderfs", "./binderfs" [pid 6328] <... close resumed>) = 0 [pid 6327] <... close resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6332] <... openat resumed>) = 3 [pid 6327] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] close(3 [pid 6333] write(3, "1000", 4 [pid 6332] write(3, "1000", 4 [pid 6329] <... symlink resumed>) = 0 [pid 6328] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6327] <... openat resumed>) = 4 [pid 5003] <... close resumed>) = 0 [pid 6333] <... write resumed>) = 4 [pid 6332] <... write resumed>) = 4 [pid 6329] memfd_create("syzkaller", 0 [pid 6328] <... openat resumed>) = 4 [pid 6327] unlink("./file1" [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6333] close(3 [pid 6332] close(3 [pid 6329] <... memfd_create resumed>) = 3 [pid 6328] unlink("./file1" [pid 6332] <... close resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6334 [pid 6333] <... close resumed>) = 0 [pid 6332] symlink("/dev/binderfs", "./binderfs" [pid 6329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6333] symlink("/dev/binderfs", "./binderfs" [pid 6332] <... symlink resumed>) = 0 [pid 6329] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6328] <... unlink resumed>) = 0 [pid 6333] <... symlink resumed>) = 0 [pid 6332] memfd_create("syzkaller", 0 [pid 6328] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6333] memfd_create("syzkaller", 0 [pid 6332] <... memfd_create resumed>) = 3 [pid 6329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6333] <... memfd_create resumed>) = 3 [pid 6332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6332] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6333] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6327] <... unlink resumed>) = 0 [pid 6327] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0./strace-static-x86_64: Process 6334 attached [pid 6334] chdir("./109") = 0 [ 121.681400][ T6330] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.700049][ T6331] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6334] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6334] setpgid(0, 0) = 0 [pid 6334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6334] write(3, "1000", 4) = 4 [pid 6334] close(3 [pid 6332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6334] <... close resumed>) = 0 [pid 6334] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6334] memfd_create("syzkaller", 0) = 3 [pid 6334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6332] <... write resumed>) = 2097152 [pid 6333] <... write resumed>) = 2097152 [pid 6329] <... write resumed>) = 2097152 [pid 6333] munmap(0x7f0ed4ac1000, 2097152 [pid 6332] munmap(0x7f0ed4ac1000, 2097152 [pid 6329] munmap(0x7f0ed4ac1000, 2097152 [pid 6334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6333] <... munmap resumed>) = 0 [pid 6332] <... munmap resumed>) = 0 [pid 6329] <... munmap resumed>) = 0 [pid 6333] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6332] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6333] <... openat resumed>) = 4 [pid 6332] <... openat resumed>) = 4 [pid 6329] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6333] ioctl(4, LOOP_SET_FD, 3 [pid 6332] ioctl(4, LOOP_SET_FD, 3 [pid 6329] <... openat resumed>) = 4 [pid 6333] <... ioctl resumed>) = 0 [pid 6329] ioctl(4, LOOP_SET_FD, 3 [pid 6333] close(3 [pid 6332] <... ioctl resumed>) = 0 [pid 6329] <... ioctl resumed>) = 0 [pid 6333] <... close resumed>) = 0 [pid 6332] close(3 [pid 6333] mkdir("./file0", 0777 [pid 6332] <... close resumed>) = 0 [pid 6329] close(3 [pid 6333] <... mkdir resumed>) = 0 [pid 6332] mkdir("./file0", 0777 [pid 6329] <... close resumed>) = 0 [pid 6334] <... write resumed>) = 2097152 [pid 6333] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6332] <... mkdir resumed>) = 0 [pid 6329] mkdir("./file0", 0777 [pid 6334] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6334] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6334] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6332] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6329] <... mkdir resumed>) = 0 [pid 6329] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6334] close(3) = 0 [pid 6334] mkdir("./file0", 0777) = 0 [pid 6334] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6329] <... mount resumed>) = 0 [ 121.833549][ T6333] loop1: detected capacity change from 0 to 4096 [ 121.840084][ T6332] loop2: detected capacity change from 0 to 4096 [ 121.847427][ T6329] loop4: detected capacity change from 0 to 4096 [ 121.871442][ T6334] loop5: detected capacity change from 0 to 4096 [pid 6333] <... mount resumed>) = 0 [pid 6332] <... mount resumed>) = 0 [pid 6329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6332] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6329] <... openat resumed>) = 3 [pid 6328] <... pwritev resumed>) = 1114112 [pid 6333] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6332] <... openat resumed>) = 3 [pid 6329] chdir("./file0" [pid 6333] <... openat resumed>) = 3 [pid 6332] chdir("./file0" [pid 6329] <... chdir resumed>) = 0 [pid 6328] exit_group(0 [pid 6333] chdir("./file0") = 0 [pid 6333] ioctl(4, LOOP_CLR_FD) = 0 [pid 6333] close(4) = 0 [pid 6333] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6332] <... chdir resumed>) = 0 [pid 6332] ioctl(4, LOOP_CLR_FD) = 0 [pid 6332] close(4) = 0 [pid 6332] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6329] ioctl(4, LOOP_CLR_FD) = 0 [pid 6329] close(4 [pid 6334] <... mount resumed>) = 0 [pid 6333] <... openat resumed>) = 4 [pid 6332] <... openat resumed>) = 4 [pid 6329] <... close resumed>) = 0 [pid 6328] <... exit_group resumed>) = ? [pid 6327] <... pwritev resumed>) = 1114112 [pid 6334] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6333] unlink("./file1" [pid 6332] unlink("./file1" [pid 6329] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6327] exit_group(0 [pid 6334] <... openat resumed>) = 3 [pid 6333] <... unlink resumed>) = 0 [pid 6332] <... unlink resumed>) = 0 [pid 6329] <... openat resumed>) = 4 [pid 6327] <... exit_group resumed>) = ? [pid 6334] chdir("./file0" [pid 6333] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 121.895933][ T6335] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.907435][ T6336] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.918626][ T6337] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.931771][ T6338] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6332] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6329] unlink("./file1" [pid 6334] <... chdir resumed>) = 0 [pid 6329] <... unlink resumed>) = 0 [pid 6334] ioctl(4, LOOP_CLR_FD [pid 6329] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6334] <... ioctl resumed>) = 0 [pid 6334] close(4) = 0 [pid 6334] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6334] unlink("./file1") = 0 [pid 6334] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6328] +++ exited with 0 +++ [pid 6327] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6328, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6327, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5001] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 5001] fstat(3, [pid 4998] fstat(3, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 4998] getdents64(3, [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./109/binderfs", [pid 4998] lstat("./110/binderfs", [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./109/binderfs" [pid 4998] unlink("./110/binderfs" [pid 5001] <... unlink resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5001] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./109/file0", [pid 4998] lstat("./110/file0", [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6333] <... pwritev resumed>) = 1114112 [pid 5001] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6333] exit_group(0 [pid 5001] <... openat resumed>) = 4 [pid 4998] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6333] <... exit_group resumed>) = ? [pid 5001] fstat(4, [pid 4998] <... openat resumed>) = 4 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] fstat(4, [pid 5001] getdents64(4, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, [pid 5001] getdents64(4, [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] getdents64(4, [pid 5001] close(4 [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] <... close resumed>) = 0 [pid 4998] close(4 [pid 5001] rmdir("./109/file0" [pid 4998] <... close resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] rmdir("./110/file0" [pid 5001] getdents64(3, [pid 4998] <... rmdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] getdents64(3, [pid 5001] close(3 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] <... close resumed>) = 0 [pid 4998] close(3 [pid 5001] rmdir("./109" [pid 4998] <... close resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] rmdir("./110" [pid 5001] mkdir("./110", 0777 [pid 4998] <... rmdir resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 4998] mkdir("./111", 0777 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] <... mkdir resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4998] <... openat resumed>) = 3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5001] close(3 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... close resumed>) = 0 [pid 4998] close(3 [pid 6332] <... pwritev resumed>) = 1114112 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... close resumed>) = 0 [pid 6332] exit_group(0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6332] <... exit_group resumed>) = ? [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6339 ./strace-static-x86_64: Process 6340 attached ./strace-static-x86_64: Process 6339 attached [pid 6334] <... pwritev resumed>) = 1114112 [pid 6333] +++ exited with 0 +++ [pid 6329] <... pwritev resumed>) = 1114112 [pid 6340] chdir("./111" [pid 6339] chdir("./110" [pid 6334] exit_group(0 [pid 6329] exit_group(0 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6340 [pid 6340] <... chdir resumed>) = 0 [pid 6339] <... chdir resumed>) = 0 [pid 6334] <... exit_group resumed>) = ? [pid 6329] <... exit_group resumed>) = ? [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6333, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6340] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6339] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6340] <... prctl resumed>) = 0 [pid 6339] <... prctl resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6340] setpgid(0, 0 [pid 6339] setpgid(0, 0 [pid 4999] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6340] <... setpgid resumed>) = 0 [pid 6339] <... setpgid resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 6340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] fstat(3, [pid 6340] <... openat resumed>) = 3 [pid 6339] <... openat resumed>) = 3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6340] write(3, "1000", 4 [pid 6339] write(3, "1000", 4 [pid 4999] getdents64(3, [pid 6340] <... write resumed>) = 4 [pid 6339] <... write resumed>) = 4 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6340] close(3 [pid 6339] close(3 [pid 4999] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6340] <... close resumed>) = 0 [pid 6339] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6340] symlink("/dev/binderfs", "./binderfs" [pid 6339] symlink("/dev/binderfs", "./binderfs" [pid 4999] lstat("./108/binderfs", [pid 6340] <... symlink resumed>) = 0 [pid 6339] <... symlink resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6340] memfd_create("syzkaller", 0 [pid 6339] memfd_create("syzkaller", 0 [pid 4999] unlink("./108/binderfs" [pid 6340] <... memfd_create resumed>) = 3 [pid 6339] <... memfd_create resumed>) = 3 [pid 4999] <... unlink resumed>) = 0 [pid 6340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6340] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 4999] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6339] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6334] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6334, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5003] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./109/binderfs") = 0 [pid 5003] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./108/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6332] +++ exited with 0 +++ [pid 4999] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6332, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4999] <... openat resumed>) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] close(4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] rmdir("./108/file0" [pid 5000] <... openat resumed>) = 3 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] fstat(3, [pid 4999] close(3) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] rmdir("./108" [pid 6329] +++ exited with 0 +++ [pid 5000] getdents64(3, [pid 4999] <... rmdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] mkdir("./109", 0777 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6329, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5000] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... mkdir resumed>) = 0 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] <... restart_syscall resumed>) = 0 [pid 5000] lstat("./109/binderfs", [pid 4999] <... openat resumed>) = 3 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5000] unlink("./109/binderfs" [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] close(3 [pid 6339] <... write resumed>) = 2097152 [pid 5003] <... umount2 resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... unlink resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5003] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6341 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, ./strace-static-x86_64: Process 6341 attached [pid 6341] chdir("./109") = 0 [pid 6341] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] lstat("./109/file0", [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6340] <... write resumed>) = 2097152 [pid 6339] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6340] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./111/binderfs", [pid 6341] <... prctl resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6341] setpgid(0, 0 [pid 5003] <... openat resumed>) = 4 [pid 5002] unlink("./111/binderfs" [pid 6341] <... setpgid resumed>) = 0 [pid 6340] <... munmap resumed>) = 0 [pid 6339] <... munmap resumed>) = 0 [pid 5003] fstat(4, [pid 5002] <... unlink resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 6341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6340] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6339] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6341] <... openat resumed>) = 3 [pid 6340] <... openat resumed>) = 4 [pid 6339] <... openat resumed>) = 4 [pid 5003] getdents64(4, [pid 5000] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6340] ioctl(4, LOOP_SET_FD, 3 [pid 6339] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6341] write(3, "1000", 4) = 4 [pid 6341] close(3) = 0 [pid 6341] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6341] memfd_create("syzkaller", 0) = 3 [pid 6341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6340] <... ioctl resumed>) = 0 [pid 6339] <... ioctl resumed>) = 0 [pid 5003] getdents64(4, [pid 5000] lstat("./109/file0", [pid 6340] close(3 [pid 6339] close(3 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6340] <... close resumed>) = 0 [pid 6339] <... close resumed>) = 0 [pid 5003] close(4 [pid 5000] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6340] mkdir("./file0", 0777 [pid 6339] mkdir("./file0", 0777 [pid 5003] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6340] <... mkdir resumed>) = 0 [pid 6339] <... mkdir resumed>) = 0 [pid 5003] rmdir("./109/file0" [pid 5000] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6340] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6339] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] <... rmdir resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5003] getdents64(3, [pid 5000] fstat(4, [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] close(3 [pid 5000] getdents64(4, [pid 5003] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] rmdir("./109" [pid 5000] getdents64(4, [pid 5003] <... rmdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] mkdir("./110", 0777 [pid 5000] close(4 [pid 5003] <... mkdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] rmdir("./109/file0" [pid 5003] <... openat resumed>) = 3 [pid 5000] <... rmdir resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5000] getdents64(3, [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3 [pid 5000] close(3 [pid 5003] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] rmdir("./109") = 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6342 [pid 5000] mkdir("./110", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6343 ./strace-static-x86_64: Process 6342 attached [pid 6342] chdir("./110") = 0 [pid 6342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6342] setpgid(0, 0) = 0 [pid 6342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6342] write(3, "1000", 4) = 4 [pid 6342] close(3) = 0 [ 122.315274][ T6340] loop0: detected capacity change from 0 to 4096 [ 122.322209][ T6339] loop3: detected capacity change from 0 to 4096 [pid 6342] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6339] <... mount resumed>) = 0 [pid 6342] memfd_create("syzkaller", 0 [pid 6339] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6342] <... memfd_create resumed>) = 3 [pid 6339] <... openat resumed>) = 3 [pid 6342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6339] chdir("./file0" [pid 6342] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6339] <... chdir resumed>) = 0 [pid 6339] ioctl(4, LOOP_CLR_FD) = 0 [pid 6339] close(4) = 0 [pid 6339] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6340] <... mount resumed>) = 0 [pid 6339] <... openat resumed>) = 4 [pid 6340] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6339] unlink("./file1" [pid 6340] <... openat resumed>) = 3 [pid 6340] chdir("./file0") = 0 ./strace-static-x86_64: Process 6343 attached [pid 6340] ioctl(4, LOOP_CLR_FD) = 0 [pid 6340] close(4) = 0 [pid 6340] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6343] chdir("./110" [pid 6340] unlink("./file1" [pid 6343] <... chdir resumed>) = 0 [pid 6343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6343] setpgid(0, 0) = 0 [pid 6343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6343] write(3, "1000", 4) = 4 [pid 6343] close(3) = 0 [pid 6343] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6343] memfd_create("syzkaller", 0) = 3 [pid 6343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./111/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6339] <... unlink resumed>) = 0 [ 122.356818][ T6345] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.371184][ T6344] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6339] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 6340] <... unlink resumed>) = 0 [pid 5002] close(4 [pid 6340] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./111/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 6341] <... write resumed>) = 2097152 [pid 5002] rmdir("./111" [pid 6341] munmap(0x7f0ed4ac1000, 2097152 [pid 5002] <... rmdir resumed>) = 0 [pid 6341] <... munmap resumed>) = 0 [pid 5002] mkdir("./112", 0777 [pid 6341] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6341] <... openat resumed>) = 4 [pid 6341] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... openat resumed>) = 3 [pid 6341] <... ioctl resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 6342] <... write resumed>) = 2097152 [pid 6342] munmap(0x7f0ed4ac1000, 2097152 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6346 ./strace-static-x86_64: Process 6346 attached [pid 6343] <... write resumed>) = 2097152 [pid 6342] <... munmap resumed>) = 0 [pid 6341] close(3 [pid 6343] munmap(0x7f0ed4ac1000, 2097152 [pid 6342] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6346] chdir("./112" [pid 6343] <... munmap resumed>) = 0 [pid 6342] <... openat resumed>) = 4 [pid 6341] <... close resumed>) = 0 [pid 6346] <... chdir resumed>) = 0 [pid 6343] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6342] ioctl(4, LOOP_SET_FD, 3 [pid 6341] mkdir("./file0", 0777 [pid 6346] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6343] <... openat resumed>) = 4 [pid 6341] <... mkdir resumed>) = 0 [pid 6346] <... prctl resumed>) = 0 [pid 6343] ioctl(4, LOOP_SET_FD, 3 [ 122.462482][ T6341] loop1: detected capacity change from 0 to 4096 [ 122.491123][ T6342] loop5: detected capacity change from 0 to 4096 [pid 6341] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6346] setpgid(0, 0 [pid 6342] <... ioctl resumed>) = 0 [pid 6342] close(3) = 0 [pid 6342] mkdir("./file0", 0777 [pid 6346] <... setpgid resumed>) = 0 [pid 6343] <... ioctl resumed>) = 0 [pid 6346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6342] <... mkdir resumed>) = 0 [pid 6342] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6346] write(3, "1000", 4) = 4 [pid 6346] close(3) = 0 [pid 6346] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6346] memfd_create("syzkaller", 0 [pid 6343] close(3 [pid 6346] <... memfd_create resumed>) = 3 [pid 6343] <... close resumed>) = 0 [pid 6346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6343] mkdir("./file0", 0777 [pid 6346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6343] <... mkdir resumed>) = 0 [ 122.508038][ T6343] loop2: detected capacity change from 0 to 4096 [pid 6343] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6341] <... mount resumed>) = 0 [pid 6341] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6341] chdir("./file0") = 0 [pid 6341] ioctl(4, LOOP_CLR_FD) = 0 [pid 6341] close(4) = 0 [pid 6341] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6341] unlink("./file1" [pid 6342] <... mount resumed>) = 0 [pid 6342] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6342] chdir("./file0") = 0 [pid 6342] ioctl(4, LOOP_CLR_FD) = 0 [pid 6339] <... pwritev resumed>) = 1114112 [pid 6342] close(4 [pid 6339] exit_group(0 [pid 6342] <... close resumed>) = 0 [pid 6339] <... exit_group resumed>) = ? [pid 6342] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6343] <... mount resumed>) = 0 [pid 6342] unlink("./file1" [pid 6343] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6343] chdir("./file0") = 0 [pid 6343] ioctl(4, LOOP_CLR_FD) = 0 [pid 6343] close(4) = 0 [pid 6343] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6346] <... write resumed>) = 2097152 [pid 6343] unlink("./file1" [pid 6340] <... pwritev resumed>) = 1114112 [pid 6340] exit_group(0) = ? [pid 6346] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6346] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 122.546736][ T6347] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.573685][ T6349] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.579286][ T6348] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6346] ioctl(4, LOOP_SET_FD, 3 [pid 6341] <... unlink resumed>) = 0 [pid 6341] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6343] <... unlink resumed>) = 0 [pid 6342] <... unlink resumed>) = 0 [pid 6339] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6339, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6346] <... ioctl resumed>) = 0 [pid 6346] close(3) = 0 [pid 6346] mkdir("./file0", 0777 [pid 5001] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6346] <... mkdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6346] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./110/binderfs") = 0 [pid 5001] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6342] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6343] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6346] <... mount resumed>) = 0 [pid 6346] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6346] chdir("./file0") = 0 [pid 6346] ioctl(4, LOOP_CLR_FD) = 0 [pid 6346] close(4) = 0 [pid 6346] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6346] unlink("./file1" [pid 6340] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6340, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6346] <... unlink resumed>) = 0 [pid 6346] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./111/binderfs") = 0 [ 122.618399][ T6346] loop4: detected capacity change from 0 to 4096 [ 122.648204][ T6350] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5001] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] lstat("./111/file0", [pid 5001] getdents64(4, [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] close(4) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5001] rmdir("./110/file0" [pid 4998] fstat(4, [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] getdents64(4, [pid 5001] close(3) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] rmdir("./110" [pid 4998] getdents64(4, [pid 5001] <... rmdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] mkdir("./111", 0777 [pid 4998] close(4 [pid 5001] <... mkdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] rmdir("./111/file0" [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4998] <... rmdir resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] getdents64(3, [pid 5001] close(3 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] close(3) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6351 [pid 4998] rmdir("./111") = 0 [pid 4998] mkdir("./112", 0777./strace-static-x86_64: Process 6351 attached ) = 0 [pid 6351] chdir("./111" [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6351] <... chdir resumed>) = 0 [pid 6351] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] <... openat resumed>) = 3 [pid 6351] <... prctl resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6351] setpgid(0, 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6351] <... setpgid resumed>) = 0 [pid 4998] close(3 [pid 6351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... close resumed>) = 0 [pid 6351] <... openat resumed>) = 3 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6351] write(3, "1000", 4) = 4 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6352 [pid 6351] close(3) = 0 [pid 6351] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6351] memfd_create("syzkaller", 0) = 3 [pid 6351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 ./strace-static-x86_64: Process 6352 attached [pid 6352] chdir("./112") = 0 [pid 6352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6352] setpgid(0, 0) = 0 [pid 6352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6352] write(3, "1000", 4) = 4 [pid 6351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6352] close(3) = 0 [pid 6352] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6352] memfd_create("syzkaller", 0) = 3 [pid 6352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6346] <... pwritev resumed>) = 1114112 [pid 6346] exit_group(0) = ? [pid 6343] <... pwritev resumed>) = 1114112 [pid 6342] <... pwritev resumed>) = 1114112 [pid 6341] <... pwritev resumed>) = 1114112 [pid 6352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6351] <... write resumed>) = 2097152 [pid 6343] exit_group(0 [pid 6342] exit_group(0 [pid 6341] exit_group(0 [pid 6343] <... exit_group resumed>) = ? [pid 6342] <... exit_group resumed>) = ? [pid 6341] <... exit_group resumed>) = ? [pid 6351] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6351] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6351] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6351] close(3) = 0 [pid 6351] mkdir("./file0", 0777) = 0 [pid 6351] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6352] <... write resumed>) = 2097152 [pid 6352] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6352] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 122.882804][ T6351] loop3: detected capacity change from 0 to 4096 [pid 6352] ioctl(4, LOOP_SET_FD, 3 [pid 6342] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6342, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6346] +++ exited with 0 +++ [pid 6352] <... ioctl resumed>) = 0 [pid 6343] +++ exited with 0 +++ [pid 6341] +++ exited with 0 +++ [pid 6351] <... mount resumed>) = 0 [pid 6351] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6343, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6351] <... openat resumed>) = 3 [pid 5000] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6351] chdir("./file0" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6351] <... chdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6351] ioctl(4, LOOP_CLR_FD [pid 5000] <... openat resumed>) = 3 [pid 6351] <... ioctl resumed>) = 0 [pid 5000] fstat(3, [pid 6351] close(4 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6352] close(3 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6346, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6352] <... close resumed>) = 0 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5000] getdents64(3, [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6341, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6352] mkdir("./file0", 0777 [pid 5003] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... restart_syscall resumed>) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 6352] <... mkdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... restart_syscall resumed>) = 0 [pid 6352] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... openat resumed>) = 3 [pid 5002] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] fstat(3, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] getdents64(3, [pid 5002] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] fstat(3, [pid 4999] <... openat resumed>) = 3 [pid 5003] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] lstat("./110/binderfs", [pid 4999] fstat(3, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] getdents64(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] lstat("./110/binderfs", [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] getdents64(3, [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] unlink("./110/binderfs" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... unlink resumed>) = 0 [pid 5002] lstat("./112/binderfs", [pid 5000] unlink("./110/binderfs" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] lstat("./109/binderfs", [pid 6351] <... close resumed>) = 0 [pid 5002] unlink("./112/binderfs" [pid 5000] <... unlink resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6351] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] <... unlink resumed>) = 0 [pid 4999] unlink("./109/binderfs" [pid 5002] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... unlink resumed>) = 0 [pid 6352] <... mount resumed>) = 0 [pid 6351] <... openat resumed>) = 4 [pid 5000] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6352] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6351] unlink("./file1" [pid 6352] <... openat resumed>) = 3 [pid 6352] chdir("./file0") = 0 [pid 6352] ioctl(4, LOOP_CLR_FD) = 0 [pid 6352] close(4) = 0 [pid 6352] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6351] <... unlink resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 6352] unlink("./file1" [pid 6351] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... umount2 resumed>) = 0 [ 122.930175][ T6352] loop0: detected capacity change from 0 to 4096 [ 122.939662][ T6353] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.960832][ T6354] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6352] <... unlink resumed>) = 0 [pid 6352] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./112/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, [pid 5000] <... umount2 resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./112/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./112") = 0 [pid 5002] mkdir("./113", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 5003] lstat("./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6355 [pid 5003] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./110/file0" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... rmdir resumed>) = 0 [pid 5000] lstat("./110/file0", [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./110") = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] mkdir("./111", 0777 [pid 5000] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] lstat("./109/file0", ./strace-static-x86_64: Process 6355 attached [pid 5003] <... mkdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6355] chdir("./113" [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6355] <... chdir resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6355] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5000] fstat(4, [pid 4999] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6355] <... prctl resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6355] setpgid(0, 0 [pid 5003] close(3 [pid 5000] getdents64(4, [pid 4999] <... openat resumed>) = 4 [pid 6355] <... setpgid resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] fstat(4, [pid 6355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] getdents64(4, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6355] <... openat resumed>) = 3 [pid 6355] write(3, "1000", 4 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6356 [pid 6355] <... write resumed>) = 4 [pid 6355] close(3) = 0 [pid 6355] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6355] memfd_create("syzkaller", 0) = 3 [pid 6355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 ./strace-static-x86_64: Process 6356 attached [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(4, [pid 6356] chdir("./111" [pid 5000] close(4 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6356] <... chdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 6356] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] rmdir("./110/file0" [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6356] <... prctl resumed>) = 0 [pid 6356] setpgid(0, 0) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] close(4 [pid 6356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 6356] <... openat resumed>) = 3 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] rmdir("./109/file0" [pid 6356] write(3, "1000", 4) = 4 [pid 6356] close(3) = 0 [pid 6356] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6356] memfd_create("syzkaller", 0) = 3 [pid 5000] close(3 [pid 6356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... rmdir resumed>) = 0 [pid 6356] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5000] <... close resumed>) = 0 [pid 6356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] rmdir("./110" [pid 4999] getdents64(3, [pid 6355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] mkdir("./111", 0777 [pid 4999] close(3 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] rmdir("./109" [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] <... rmdir resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] mkdir("./110", 0777 [pid 5000] close(3) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6357 [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6358 ./strace-static-x86_64: Process 6357 attached ./strace-static-x86_64: Process 6358 attached [pid 6358] chdir("./110" [pid 6357] chdir("./111" [pid 6355] <... write resumed>) = 2097152 [pid 6358] <... chdir resumed>) = 0 [pid 6357] <... chdir resumed>) = 0 [pid 6358] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6357] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6358] <... prctl resumed>) = 0 [pid 6357] <... prctl resumed>) = 0 [pid 6358] setpgid(0, 0 [pid 6357] setpgid(0, 0 [pid 6358] <... setpgid resumed>) = 0 [pid 6357] <... setpgid resumed>) = 0 [pid 6358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6358] write(3, "1000", 4 [pid 6357] <... openat resumed>) = 3 [pid 6358] <... write resumed>) = 4 [pid 6357] write(3, "1000", 4 [pid 6358] close(3 [pid 6357] <... write resumed>) = 4 [pid 6358] <... close resumed>) = 0 [pid 6355] munmap(0x7f0ed4ac1000, 2097152 [pid 6358] symlink("/dev/binderfs", "./binderfs" [pid 6357] close(3 [pid 6358] <... symlink resumed>) = 0 [pid 6357] <... close resumed>) = 0 [pid 6358] memfd_create("syzkaller", 0 [pid 6356] <... write resumed>) = 2097152 [pid 6358] <... memfd_create resumed>) = 3 [pid 6357] symlink("/dev/binderfs", "./binderfs" [pid 6358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6355] <... munmap resumed>) = 0 [pid 6358] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6357] <... symlink resumed>) = 0 [pid 6355] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6355] ioctl(4, LOOP_SET_FD, 3 [pid 6357] memfd_create("syzkaller", 0) = 3 [pid 6351] <... pwritev resumed>) = 1114112 [pid 6358] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6351] exit_group(0 [pid 6357] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6351] <... exit_group resumed>) = ? [pid 6357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6356] munmap(0x7f0ed4ac1000, 2097152 [pid 6352] <... pwritev resumed>) = 1114112 [pid 6352] exit_group(0) = ? [pid 6356] <... munmap resumed>) = 0 [pid 6356] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6356] ioctl(4, LOOP_SET_FD, 3 [pid 6355] <... ioctl resumed>) = 0 [pid 6355] close(3 [pid 6358] <... write resumed>) = 2097152 [pid 6357] <... write resumed>) = 2097152 [pid 6355] <... close resumed>) = 0 [pid 6355] mkdir("./file0", 0777 [pid 6357] munmap(0x7f0ed4ac1000, 2097152 [pid 6355] <... mkdir resumed>) = 0 [pid 6351] +++ exited with 0 +++ [pid 6355] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6351, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6352] +++ exited with 0 +++ [pid 6357] <... munmap resumed>) = 0 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6352, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6357] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5001] <... restart_syscall resumed>) = 0 [pid 6357] <... openat resumed>) = 4 [pid 6357] ioctl(4, LOOP_SET_FD, 3 [pid 5001] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 123.179125][ T6355] loop4: detected capacity change from 0 to 4096 [ 123.210903][ T6356] loop5: detected capacity change from 0 to 4096 [pid 5001] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, [pid 4998] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(3, [pid 4998] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] <... openat resumed>) = 3 [pid 6356] <... ioctl resumed>) = 0 [pid 5001] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(3, [pid 6356] close(3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6358] munmap(0x7f0ed4ac1000, 2097152 [pid 6356] <... close resumed>) = 0 [pid 5001] lstat("./111/binderfs", [pid 4998] getdents64(3, [pid 6358] <... munmap resumed>) = 0 [pid 6356] mkdir("./file0", 0777 [pid 6355] <... mount resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6356] <... mkdir resumed>) = 0 [pid 5001] unlink("./111/binderfs" [pid 4998] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6358] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6356] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] <... unlink resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6357] <... ioctl resumed>) = 0 [pid 6355] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] lstat("./112/binderfs", [pid 6357] close(3 [pid 6355] <... openat resumed>) = 3 [pid 6357] <... close resumed>) = 0 [pid 6355] chdir("./file0" [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6357] mkdir("./file0", 0777 [pid 6355] <... chdir resumed>) = 0 [pid 6357] <... mkdir resumed>) = 0 [pid 6355] ioctl(4, LOOP_CLR_FD [pid 6358] <... openat resumed>) = 4 [pid 4998] unlink("./112/binderfs" [pid 6357] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6355] <... ioctl resumed>) = 0 [pid 6355] close(4 [pid 4998] <... unlink resumed>) = 0 [pid 6358] ioctl(4, LOOP_SET_FD, 3 [pid 6355] <... close resumed>) = 0 [pid 6355] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] <... umount2 resumed>) = 0 [pid 4998] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6358] <... ioctl resumed>) = 0 [pid 6355] <... openat resumed>) = 4 [pid 5001] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6358] close(3 [pid 6355] unlink("./file1" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6358] <... close resumed>) = 0 [pid 5001] lstat("./111/file0", [pid 6358] mkdir("./file0", 0777 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6358] <... mkdir resumed>) = 0 [pid 5001] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6358] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] <... umount2 resumed>) = 0 [ 123.241897][ T6357] loop2: detected capacity change from 0 to 4096 [ 123.251479][ T6359] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.280248][ T6358] loop1: detected capacity change from 0 to 4096 [pid 6357] <... mount resumed>) = 0 [pid 6355] <... unlink resumed>) = 0 [pid 5001] getdents64(4, [pid 4998] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6357] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6355] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6357] <... openat resumed>) = 3 [pid 6356] <... mount resumed>) = 0 [pid 5001] close(4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./111/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./111") = 0 [pid 5001] mkdir("./112", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6363 ./strace-static-x86_64: Process 6363 attached [pid 6363] chdir("./112") = 0 [pid 6363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6363] setpgid(0, 0) = 0 [pid 6363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6363] write(3, "1000", 4) = 4 [pid 6363] close(3) = 0 [pid 6363] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6363] memfd_create("syzkaller", 0) = 3 [pid 6363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6357] chdir("./file0" [pid 6356] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6358] <... mount resumed>) = 0 [pid 6357] <... chdir resumed>) = 0 [pid 6356] <... openat resumed>) = 3 [pid 4998] lstat("./112/file0", [pid 6358] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6357] ioctl(4, LOOP_CLR_FD [pid 6356] chdir("./file0" [pid 6358] <... openat resumed>) = 3 [pid 6357] <... ioctl resumed>) = 0 [pid 6356] <... chdir resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6358] chdir("./file0" [pid 6357] close(4 [pid 6356] ioctl(4, LOOP_CLR_FD [pid 4998] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6358] <... chdir resumed>) = 0 [pid 6357] <... close resumed>) = 0 [pid 6358] ioctl(4, LOOP_CLR_FD [pid 6357] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6356] <... ioctl resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6358] <... ioctl resumed>) = 0 [pid 6357] <... openat resumed>) = 4 [pid 6356] close(4 [pid 4998] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6358] close(4 [pid 6357] unlink("./file1" [pid 6356] <... close resumed>) = 0 [pid 6358] <... close resumed>) = 0 [ 123.303566][ T6360] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.322696][ T6361] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.333451][ T6362] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] <... openat resumed>) = 4 [pid 6358] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6357] <... unlink resumed>) = 0 [pid 6356] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] fstat(4, [pid 6363] <... write resumed>) = 2097152 [pid 6358] <... openat resumed>) = 4 [pid 6357] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6363] munmap(0x7f0ed4ac1000, 2097152 [pid 6358] unlink("./file1" [pid 6356] <... openat resumed>) = 4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6355] <... pwritev resumed>) = 1114112 [pid 6363] <... munmap resumed>) = 0 [pid 6355] exit_group(0 [pid 6363] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6356] unlink("./file1" [pid 6355] <... exit_group resumed>) = ? [pid 4998] getdents64(4, [pid 6363] <... openat resumed>) = 4 [pid 6358] <... unlink resumed>) = 0 [pid 6356] <... unlink resumed>) = 0 [pid 6363] ioctl(4, LOOP_SET_FD, 3 [pid 6358] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6356] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6363] <... ioctl resumed>) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./112/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6363] close(3 [pid 4998] close(3) = 0 [pid 4998] rmdir("./112" [pid 6363] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 6363] mkdir("./file0", 0777 [pid 4998] mkdir("./113", 0777 [pid 6363] <... mkdir resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 6363] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6364 ./strace-static-x86_64: Process 6364 attached [pid 6364] chdir("./113") = 0 [ 123.433451][ T6363] loop3: detected capacity change from 0 to 4096 [pid 6364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6364] setpgid(0, 0) = 0 [pid 6364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6363] <... mount resumed>) = 0 [pid 6364] <... openat resumed>) = 3 [pid 6363] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6364] write(3, "1000", 4 [pid 6363] <... openat resumed>) = 3 [pid 6364] <... write resumed>) = 4 [pid 6357] <... pwritev resumed>) = 1114112 [pid 6363] chdir("./file0" [pid 6357] exit_group(0 [pid 6363] <... chdir resumed>) = 0 [pid 6364] close(3 [pid 6357] <... exit_group resumed>) = ? [pid 6364] <... close resumed>) = 0 [pid 6363] ioctl(4, LOOP_CLR_FD [pid 6364] symlink("/dev/binderfs", "./binderfs" [pid 6363] <... ioctl resumed>) = 0 [pid 6364] <... symlink resumed>) = 0 [pid 6363] close(4) = 0 [pid 6364] memfd_create("syzkaller", 0 [pid 6363] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6364] <... memfd_create resumed>) = 3 [pid 6364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6355] +++ exited with 0 +++ [pid 6364] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6355, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5002] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./113/binderfs") = 0 [ 123.496525][ T6365] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6363] <... openat resumed>) = 4 [pid 6363] unlink("./file1" [pid 6364] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6363] <... unlink resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 6363] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, [pid 6356] <... pwritev resumed>) = 1114112 [pid 6356] exit_group(0) = ? [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./113/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./113") = 0 [pid 5002] mkdir("./114", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 6364] <... write resumed>) = 2097152 [pid 6358] <... pwritev resumed>) = 1114112 [pid 6357] +++ exited with 0 +++ [pid 5002] <... close resumed>) = 0 [pid 6358] exit_group(0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6358] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6366 attached [pid 6364] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6357, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6366] chdir("./114" [pid 6364] <... munmap resumed>) = 0 [pid 6366] <... chdir resumed>) = 0 [pid 6364] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6366 [pid 6366] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6364] <... openat resumed>) = 4 [pid 6366] <... prctl resumed>) = 0 [pid 6364] ioctl(4, LOOP_SET_FD, 3 [pid 6366] setpgid(0, 0 [pid 6356] +++ exited with 0 +++ [pid 6366] <... setpgid resumed>) = 0 [pid 6366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6356, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6366] <... openat resumed>) = 3 [pid 5003] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6366] write(3, "1000", 4 [pid 6364] <... ioctl resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6366] <... write resumed>) = 4 [pid 6364] close(3 [pid 5000] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6366] close(3 [pid 6364] <... close resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 3 [pid 6366] <... close resumed>) = 0 [pid 6364] mkdir("./file0", 0777 [pid 5000] fstat(3, [pid 6366] symlink("/dev/binderfs", "./binderfs" [pid 6364] <... mkdir resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6366] <... symlink resumed>) = 0 [pid 6364] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] fstat(3, [pid 5000] getdents64(3, [pid 6366] memfd_create("syzkaller", 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6366] <... memfd_create resumed>) = 3 [pid 5003] getdents64(3, [pid 5000] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6366] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] lstat("./111/binderfs", [pid 6366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] unlink("./111/binderfs" [pid 5003] lstat("./111/binderfs", [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./111/binderfs") = 0 [pid 5003] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [ 123.655233][ T6364] loop0: detected capacity change from 0 to 4096 [pid 6358] +++ exited with 0 +++ [pid 6364] <... mount resumed>) = 0 [pid 6364] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6358, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6364] <... openat resumed>) = 3 [pid 4999] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6364] chdir("./file0" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6364] <... chdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6364] ioctl(4, LOOP_CLR_FD [pid 4999] <... openat resumed>) = 3 [pid 6364] <... ioctl resumed>) = 0 [pid 4999] fstat(3, [pid 6364] close(4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6364] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 6364] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6364] <... openat resumed>) = 4 [pid 4999] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6364] unlink("./file1" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./110/binderfs" [pid 6363] <... pwritev resumed>) = 1114112 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6363] exit_group(0) = ? [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./111/file0", [pid 5000] lstat("./111/file0", [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6364] <... unlink resumed>) = 0 [pid 6363] +++ exited with 0 +++ [pid 5003] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6364] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5003] <... openat resumed>) = 4 [pid 5000] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6366] <... write resumed>) = 2097152 [pid 5003] fstat(4, [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6363, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5000] <... openat resumed>) = 4 [pid 4999] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6366] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5003] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] fstat(4, [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] lstat("./110/file0", [pid 5003] getdents64(4, [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(4, [pid 4999] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6366] <... munmap resumed>) = 0 [ 123.709210][ T6367] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5003] close(4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] getdents64(4, [pid 4999] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] rmdir("./111/file0" [pid 6366] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5003] <... rmdir resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] <... openat resumed>) = 4 [pid 6366] ioctl(4, LOOP_SET_FD, 3 [pid 5001] fstat(3, [pid 5000] close(4 [pid 4999] fstat(4, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 5000] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 5003] getdents64(3, [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] rmdir("./111/file0" [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6366] <... ioctl resumed>) = 0 [pid 6366] close(3) = 0 [pid 6366] mkdir("./file0", 0777 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... rmdir resumed>) = 0 [pid 4999] getdents64(4, [pid 5003] close(3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(3, [pid 4999] close(4 [pid 5001] lstat("./112/binderfs", [pid 4999] <... close resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] rmdir("./110/file0" [pid 5003] <... close resumed>) = 0 [pid 5001] unlink("./112/binderfs" [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6366] <... mkdir resumed>) = 0 [pid 5003] rmdir("./111" [pid 4999] <... rmdir resumed>) = 0 [pid 6366] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] <... unlink resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5001] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(3 [pid 4999] getdents64(3, [pid 5003] mkdir("./112", 0777 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] close(3 [pid 5003] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] rmdir("./111" [pid 4999] <... close resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] rmdir("./110" [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5000] mkdir("./112", 0777 [pid 4999] <... rmdir resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] mkdir("./111", 0777 [pid 5003] <... close resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... openat resumed>) = 3 [pid 4999] <... mkdir resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6368 attached [pid 6368] chdir("./112") = 0 [pid 6368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6368] setpgid(0, 0) = 0 [pid 6368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] close(3 [pid 6368] <... openat resumed>) = 3 [pid 6368] write(3, "1000", 4) = 4 [pid 6368] close(3 [pid 5001] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6368 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6368] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6368] symlink("/dev/binderfs", "./binderfs" [pid 5001] lstat("./112/file0", [pid 4999] <... openat resumed>) = 3 [pid 6368] <... symlink resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6370 [pid 5001] <... openat resumed>) = 4 [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6368] memfd_create("syzkaller", 0) = 3 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6371 [pid 6368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./112/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [ 123.773925][ T6366] loop4: detected capacity change from 0 to 4096 [pid 6366] <... mount resumed>) = 0 [pid 5001] rmdir("./112" [pid 6366] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 6371 attached ./strace-static-x86_64: Process 6370 attached ) = 3 [pid 5001] <... rmdir resumed>) = 0 [pid 6371] chdir("./111" [pid 6366] chdir("./file0" [pid 5001] mkdir("./113", 0777 [pid 6371] <... chdir resumed>) = 0 [pid 6370] chdir("./112" [pid 6366] <... chdir resumed>) = 0 [pid 6371] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6370] <... chdir resumed>) = 0 [pid 6366] ioctl(4, LOOP_CLR_FD [pid 5001] <... mkdir resumed>) = 0 [pid 6371] <... prctl resumed>) = 0 [pid 6366] <... ioctl resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6371] setpgid(0, 0 [pid 6370] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6366] close(4 [pid 5001] <... openat resumed>) = 3 [pid 6371] <... setpgid resumed>) = 0 [pid 6370] <... prctl resumed>) = 0 [pid 6366] <... close resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 6371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6370] setpgid(0, 0 [pid 6366] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6371] <... openat resumed>) = 3 [pid 6370] <... setpgid resumed>) = 0 [pid 6366] <... openat resumed>) = 4 [pid 6371] write(3, "1000", 4 [pid 6366] unlink("./file1" [pid 5001] close(3 [pid 6371] <... write resumed>) = 4 [pid 6370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... close resumed>) = 0 [pid 6371] close(3 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6371] <... close resumed>) = 0 [pid 6370] <... openat resumed>) = 3 [pid 6371] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6372 [pid 6371] memfd_create("syzkaller", 0) = 3 [pid 6370] write(3, "1000", 4 [pid 6371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6370] <... write resumed>) = 4 [pid 6370] close(3) = 0 [pid 6370] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6370] memfd_create("syzkaller", 0) = 3 [ 123.822700][ T6369] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6366] <... unlink resumed>) = 0 [pid 6366] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6370] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 6372 attached [pid 6372] chdir("./113") = 0 [pid 6372] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6372] setpgid(0, 0) = 0 [pid 6372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6372] write(3, "1000", 4) = 4 [pid 6372] close(3) = 0 [pid 6372] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6372] memfd_create("syzkaller", 0) = 3 [pid 6372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6372] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6368] <... write resumed>) = 2097152 [pid 6368] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6364] <... pwritev resumed>) = 1114112 [pid 6368] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6364] exit_group(0 [pid 6368] ioctl(4, LOOP_SET_FD, 3 [pid 6371] <... write resumed>) = 2097152 [pid 6364] <... exit_group resumed>) = ? [pid 6371] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6371] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6371] ioctl(4, LOOP_SET_FD, 3 [pid 6370] <... write resumed>) = 2097152 [pid 6370] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6370] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6370] ioctl(4, LOOP_SET_FD, 3 [pid 6368] <... ioctl resumed>) = 0 [pid 6368] close(3) = 0 [pid 6368] mkdir("./file0", 0777) = 0 [pid 6368] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6371] <... ioctl resumed>) = 0 [pid 6371] close(3) = 0 [pid 6371] mkdir("./file0", 0777) = 0 [pid 6372] <... write resumed>) = 2097152 [pid 6370] <... ioctl resumed>) = 0 [pid 6364] +++ exited with 0 +++ [pid 6372] munmap(0x7f0ed4ac1000, 2097152 [pid 6370] close(3 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6364, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6372] <... munmap resumed>) = 0 [pid 6371] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6370] <... close resumed>) = 0 [pid 6372] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6370] mkdir("./file0", 0777 [pid 6372] <... openat resumed>) = 4 [pid 6370] <... mkdir resumed>) = 0 [ 123.941668][ T6368] loop5: detected capacity change from 0 to 4096 [ 123.953051][ T6371] loop1: detected capacity change from 0 to 4096 [ 123.968421][ T6370] loop2: detected capacity change from 0 to 4096 [pid 6372] ioctl(4, LOOP_SET_FD, 3 [pid 6370] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6368] <... mount resumed>) = 0 [pid 6368] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6368] chdir("./file0") = 0 [pid 6368] ioctl(4, LOOP_CLR_FD) = 0 [pid 6368] close(4) = 0 [pid 6368] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6368] unlink("./file1" [pid 6372] <... ioctl resumed>) = 0 [pid 6372] close(3) = 0 [pid 6372] mkdir("./file0", 0777) = 0 [pid 6372] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, [pid 6371] <... mount resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6371] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] getdents64(3, [pid 6371] <... openat resumed>) = 3 [pid 6371] chdir("./file0" [pid 6366] <... pwritev resumed>) = 1114112 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6371] <... chdir resumed>) = 0 [pid 6370] <... mount resumed>) = 0 [pid 6366] exit_group(0 [pid 6370] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6370] chdir("./file0") = 0 [ 124.002350][ T6373] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.002974][ T6372] loop3: detected capacity change from 0 to 4096 [ 124.024323][ T6374] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6370] ioctl(4, LOOP_CLR_FD) = 0 [pid 6370] close(4 [pid 6371] ioctl(4, LOOP_CLR_FD [pid 6370] <... close resumed>) = 0 [pid 6368] <... unlink resumed>) = 0 [pid 6366] <... exit_group resumed>) = ? [pid 4998] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6371] <... ioctl resumed>) = 0 [pid 6370] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6368] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6371] close(4 [pid 6370] <... openat resumed>) = 4 [pid 6371] <... close resumed>) = 0 [pid 6370] unlink("./file1" [pid 4998] lstat("./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6371] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] unlink("./113/binderfs") = 0 [pid 6371] <... openat resumed>) = 4 [pid 4998] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 124.048081][ T6375] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6371] unlink("./file1" [pid 6372] <... mount resumed>) = 0 [pid 6371] <... unlink resumed>) = 0 [pid 6366] +++ exited with 0 +++ [pid 4998] <... umount2 resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6366, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5002] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6372] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6371] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] unlink("./114/binderfs" [pid 6372] <... openat resumed>) = 3 [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6372] chdir("./file0") = 0 [pid 6372] ioctl(4, LOOP_CLR_FD [pid 4998] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6372] <... ioctl resumed>) = 0 [pid 6372] close(4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6372] <... close resumed>) = 0 [pid 6372] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] lstat("./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6372] <... openat resumed>) = 4 [pid 6372] unlink("./file1" [pid 4998] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... umount2 resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5002] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] fstat(4, [pid 5002] lstat("./114/file0", [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [ 124.096338][ T6376] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6370] <... unlink resumed>) = 0 [pid 4998] getdents64(4, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6370] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6372] <... unlink resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 4998] close(4 [pid 6372] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] fstat(4, [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./113/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./113") = 0 [pid 4998] mkdir("./114", 0777 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5002] getdents64(4, [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] <... openat resumed>) = 3 [pid 5002] getdents64(4, [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(4 [pid 4998] close(3 [pid 5002] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5002] rmdir("./114/file0" [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6377 ./strace-static-x86_64: Process 6377 attached [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6377] chdir("./114" [pid 5002] close(3 [pid 6377] <... chdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 6377] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] rmdir("./114" [pid 6377] <... prctl resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./115", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6377] setpgid(0, 0) = 0 [pid 6377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6378 ./strace-static-x86_64: Process 6378 attached [pid 6378] chdir("./115") = 0 [pid 6378] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6378] setpgid(0, 0) = 0 [pid 6377] <... openat resumed>) = 3 [pid 6377] write(3, "1000", 4) = 4 [pid 6377] close(3) = 0 [pid 6377] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6377] memfd_create("syzkaller", 0) = 3 [pid 6377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6378] <... openat resumed>) = 3 [pid 6377] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6378] write(3, "1000", 4) = 4 [pid 6378] close(3) = 0 [pid 6378] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6378] memfd_create("syzkaller", 0) = 3 [pid 6378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6378] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6371] <... pwritev resumed>) = 1114112 [pid 6371] exit_group(0) = ? [pid 6368] <... pwritev resumed>) = 1114112 [pid 6368] exit_group(0) = ? [pid 6377] <... write resumed>) = 2097152 [pid 6377] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6377] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6377] ioctl(4, LOOP_SET_FD, 3 [pid 6378] <... write resumed>) = 2097152 [pid 6378] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6378] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6370] <... pwritev resumed>) = 1114112 [pid 6370] exit_group(0) = ? [pid 6372] <... pwritev resumed>) = 1114112 [pid 6378] <... openat resumed>) = 4 [pid 6378] ioctl(4, LOOP_SET_FD, 3 [pid 6372] exit_group(0) = ? [pid 6371] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6371, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4999] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./111/binderfs") = 0 [pid 4999] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6378] <... ioctl resumed>) = 0 [pid 6378] close(3) = 0 [pid 6378] mkdir("./file0", 0777) = 0 [pid 6378] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6368] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6368, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5003] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6377] <... ioctl resumed>) = 0 [pid 5003] fstat(3, [pid 6377] close(3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6377] <... close resumed>) = 0 [pid 5003] getdents64(3, [pid 6377] mkdir("./file0", 0777 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... umount2 resumed>) = 0 [pid 6377] <... mkdir resumed>) = 0 [pid 5003] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6377] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] lstat("./112/binderfs", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] lstat("./111/file0", [pid 5003] unlink("./112/binderfs") = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 124.354763][ T6377] loop0: detected capacity change from 0 to 4096 [ 124.364193][ T6378] loop4: detected capacity change from 0 to 4096 [pid 4999] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6370] +++ exited with 0 +++ [pid 4999] <... openat resumed>) = 4 [pid 6372] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6370, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6372, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5000] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] fstat(3, [pid 4999] getdents64(4, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] getdents64(3, [pid 4999] getdents64(4, [pid 6377] <... mount resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6377] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(3, [pid 5000] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6377] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] close(4 [pid 6377] chdir("./file0" [pid 5003] lstat("./112/file0", [pid 5000] lstat("./112/binderfs", [pid 6377] <... chdir resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 6377] ioctl(4, LOOP_CLR_FD [pid 5003] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] unlink("./112/binderfs" [pid 4999] rmdir("./111/file0" [pid 6377] <... ioctl resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... unlink resumed>) = 0 [pid 6377] close(4 [pid 5003] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 6377] <... close resumed>) = 0 [pid 6377] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] lstat("./113/binderfs", [pid 4999] getdents64(3, [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] unlink("./113/binderfs" [pid 4999] close(3 [pid 6378] <... mount resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 6377] <... openat resumed>) = 4 [pid 5003] <... openat resumed>) = 4 [pid 4999] rmdir("./111" [pid 6377] unlink("./file1" [pid 5003] fstat(4, [pid 5001] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6378] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] <... rmdir resumed>) = 0 [pid 6378] <... openat resumed>) = 3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] mkdir("./112", 0777 [pid 6378] chdir("./file0" [pid 5003] getdents64(4, [pid 4999] <... mkdir resumed>) = 0 [pid 6377] <... unlink resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6377] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6378] <... chdir resumed>) = 0 [pid 6378] ioctl(4, LOOP_CLR_FD) = 0 [pid 6378] close(4) = 0 [pid 6378] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4999] <... openat resumed>) = 3 [pid 6378] <... openat resumed>) = 4 [pid 5003] getdents64(4, [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6378] unlink("./file1" [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] <... close resumed>) = 0 [pid 4999] close(3 [pid 5003] rmdir("./112/file0" [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... rmdir resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6381 [pid 5003] getdents64(3, ./strace-static-x86_64: Process 6381 attached 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./112" [pid 6378] <... unlink resumed>) = 0 [pid 6378] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5003] mkdir("./113", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 6381] chdir("./112") = 0 [pid 6381] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6381] setpgid(0, 0) = 0 [pid 6381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6381] write(3, "1000", 4) = 4 [pid 6381] close(3) = 0 [pid 6381] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6381] memfd_create("syzkaller", 0) = 3 [pid 6381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6382 ./strace-static-x86_64: Process 6382 attached [pid 6382] chdir("./113" [pid 5001] <... umount2 resumed>) = 0 [ 124.426144][ T6379] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.444891][ T6380] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6382] <... chdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6382] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... openat resumed>) = 4 [pid 5000] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(4, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] lstat("./112/file0", [pid 6382] <... prctl resumed>) = 0 [pid 5001] getdents64(4, [pid 6382] setpgid(0, 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6382] <... setpgid resumed>) = 0 [pid 5001] getdents64(4, [pid 6382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6382] <... openat resumed>) = 3 [pid 6381] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6382] write(3, "1000", 4 [pid 5001] close(4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6382] <... write resumed>) = 4 [pid 5001] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6382] close(3 [pid 5001] rmdir("./113/file0" [pid 5000] <... openat resumed>) = 4 [pid 6382] <... close resumed>) = 0 [pid 6382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] fstat(4, [pid 6382] memfd_create("syzkaller", 0 [pid 5001] getdents64(3, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6382] <... memfd_create resumed>) = 3 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(4, [pid 6382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] close(3 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6382] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5001] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 5001] rmdir("./113" [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] close(4 [pid 5001] mkdir("./114", 0777 [pid 5000] <... close resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] rmdir("./112/file0" [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] <... rmdir resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5000] getdents64(3, [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5001] close(3 [pid 5000] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] rmdir("./112" [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... rmdir resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6383 [pid 5000] mkdir("./113", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6384 ./strace-static-x86_64: Process 6384 attached ./strace-static-x86_64: Process 6383 attached [pid 6384] chdir("./113" [pid 6383] chdir("./114" [pid 6384] <... chdir resumed>) = 0 [pid 6382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6383] <... chdir resumed>) = 0 [pid 6384] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6383] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6384] <... prctl resumed>) = 0 [pid 6383] <... prctl resumed>) = 0 [pid 6384] setpgid(0, 0 [pid 6383] setpgid(0, 0 [pid 6384] <... setpgid resumed>) = 0 [pid 6383] <... setpgid resumed>) = 0 [pid 6384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6384] write(3, "1000", 4 [pid 6383] <... openat resumed>) = 3 [pid 6384] <... write resumed>) = 4 [pid 6383] write(3, "1000", 4 [pid 6384] close(3 [pid 6383] <... write resumed>) = 4 [pid 6384] <... close resumed>) = 0 [pid 6383] close(3 [pid 6382] <... write resumed>) = 2097152 [pid 6384] symlink("/dev/binderfs", "./binderfs" [pid 6383] <... close resumed>) = 0 [pid 6382] munmap(0x7f0ed4ac1000, 2097152 [pid 6381] <... write resumed>) = 2097152 [pid 6384] <... symlink resumed>) = 0 [pid 6383] symlink("/dev/binderfs", "./binderfs" [pid 6384] memfd_create("syzkaller", 0) = 3 [pid 6383] <... symlink resumed>) = 0 [pid 6382] <... munmap resumed>) = 0 [pid 6384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6383] memfd_create("syzkaller", 0 [pid 6382] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6384] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6383] <... memfd_create resumed>) = 3 [pid 6382] <... openat resumed>) = 4 [pid 6383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6382] ioctl(4, LOOP_SET_FD, 3 [pid 6381] munmap(0x7f0ed4ac1000, 2097152 [pid 6378] <... pwritev resumed>) = 1114112 [pid 6377] <... pwritev resumed>) = 1114112 [pid 6384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6383] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6382] <... ioctl resumed>) = 0 [pid 6378] exit_group(0 [pid 6377] exit_group(0 [pid 6378] <... exit_group resumed>) = ? [pid 6383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6382] close(3 [pid 6381] <... munmap resumed>) = 0 [pid 6377] <... exit_group resumed>) = ? [pid 6382] <... close resumed>) = 0 [pid 6381] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6384] <... write resumed>) = 2097152 [pid 6384] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6384] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6384] ioctl(4, LOOP_SET_FD, 3 [pid 6382] mkdir("./file0", 0777 [pid 6381] <... openat resumed>) = 4 [pid 6382] <... mkdir resumed>) = 0 [pid 6382] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6381] ioctl(4, LOOP_SET_FD, 3 [pid 6378] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6378, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 6384] <... ioctl resumed>) = 0 [pid 5002] <... restart_syscall resumed>) = 0 [pid 5002] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6381] <... ioctl resumed>) = 0 [pid 5002] unlink("./115/binderfs") = 0 [pid 6383] <... write resumed>) = 2097152 [pid 6381] close(3 [pid 5002] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6383] munmap(0x7f0ed4ac1000, 2097152 [pid 6381] <... close resumed>) = 0 [pid 6381] mkdir("./file0", 0777 [pid 6384] close(3) = 0 [pid 6384] mkdir("./file0", 0777 [pid 6381] <... mkdir resumed>) = 0 [pid 6381] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6384] <... mkdir resumed>) = 0 [pid 6384] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6383] <... munmap resumed>) = 0 [pid 6383] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 124.626669][ T6382] loop5: detected capacity change from 0 to 4096 [ 124.661495][ T6384] loop2: detected capacity change from 0 to 4096 [ 124.668944][ T6381] loop1: detected capacity change from 0 to 4096 [pid 6383] ioctl(4, LOOP_SET_FD, 3 [pid 6384] <... mount resumed>) = 0 [pid 6384] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6384] chdir("./file0") = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 6384] ioctl(4, LOOP_CLR_FD) = 0 [pid 6384] close(4) = 0 [pid 6383] <... ioctl resumed>) = 0 [pid 6384] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6383] close(3 [pid 5002] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 6384] <... openat resumed>) = 4 [pid 6384] unlink("./file1" [pid 6382] <... mount resumed>) = 0 [pid 6377] +++ exited with 0 +++ [pid 6383] <... close resumed>) = 0 [pid 6382] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6381] <... mount resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 6383] mkdir("./file0", 0777 [pid 6382] <... openat resumed>) = 3 [pid 6381] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6377, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6383] <... mkdir resumed>) = 0 [pid 6382] chdir("./file0" [pid 6381] <... openat resumed>) = 3 [pid 5002] rmdir("./115/file0" [pid 6383] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6382] <... chdir resumed>) = 0 [pid 6381] chdir("./file0" [pid 6382] ioctl(4, LOOP_CLR_FD [pid 6381] <... chdir resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 6383] <... mount resumed>) = 0 [pid 6382] <... ioctl resumed>) = 0 [ 124.702103][ T6383] loop3: detected capacity change from 0 to 4096 [ 124.718196][ T6385] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.723629][ T6386] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.729305][ T6387] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6381] ioctl(4, LOOP_CLR_FD [pid 4998] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6382] close(4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6382] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6382] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6384] <... unlink resumed>) = 0 [pid 6383] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6382] <... openat resumed>) = 4 [pid 6381] <... ioctl resumed>) = 0 [pid 5002] getdents64(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6384] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6383] <... openat resumed>) = 3 [pid 6382] unlink("./file1" [pid 6381] close(4 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./114/binderfs") = 0 [pid 4998] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6383] chdir("./file0" [pid 6382] <... unlink resumed>) = 0 [pid 6381] <... close resumed>) = 0 [pid 5002] close(3 [pid 4998] <... umount2 resumed>) = 0 [pid 6382] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... close resumed>) = 0 [pid 6383] <... chdir resumed>) = 0 [pid 6381] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] rmdir("./115" [pid 6383] ioctl(4, LOOP_CLR_FD [pid 6381] <... openat resumed>) = 4 [pid 5002] <... rmdir resumed>) = 0 [pid 6383] <... ioctl resumed>) = 0 [pid 6381] unlink("./file1" [pid 5002] mkdir("./116", 0777 [pid 6383] close(4) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 6383] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6381] <... unlink resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6381] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... openat resumed>) = 3 [pid 6383] <... openat resumed>) = 4 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6389 [pid 6383] unlink("./file1"./strace-static-x86_64: Process 6389 attached ) = 0 [ 124.763320][ T6388] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6383] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6389] chdir("./116") = 0 [pid 6389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6389] setpgid(0, 0) = 0 [pid 6389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6389] write(3, "1000", 4) = 4 [pid 6389] close(3) = 0 [pid 6389] symlink("/dev/binderfs", "./binderfs" [pid 4998] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6389] <... symlink resumed>) = 0 [pid 6389] memfd_create("syzkaller", 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6389] <... memfd_create resumed>) = 3 [pid 6389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 4998] lstat("./114/file0", [pid 6389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./114/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./114") = 0 [pid 4998] mkdir("./115", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6390 ./strace-static-x86_64: Process 6390 attached [pid 6390] chdir("./115") = 0 [pid 6390] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6390] setpgid(0, 0) = 0 [pid 6390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6390] write(3, "1000", 4) = 4 [pid 6390] close(3) = 0 [pid 6390] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6390] memfd_create("syzkaller", 0) = 3 [pid 6390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6389] <... write resumed>) = 2097152 [pid 6389] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6389] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6389] ioctl(4, LOOP_SET_FD, 3 [pid 6390] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6384] <... pwritev resumed>) = 1114112 [pid 6384] exit_group(0) = ? [pid 6389] <... ioctl resumed>) = 0 [pid 6389] close(3) = 0 [pid 6389] mkdir("./file0", 0777) = 0 [pid 6389] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6382] <... pwritev resumed>) = 1114112 [pid 6390] <... write resumed>) = 2097152 [pid 6382] exit_group(0) = ? [ 124.941310][ T6389] loop4: detected capacity change from 0 to 4096 [pid 6390] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6390] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6390] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6384] +++ exited with 0 +++ [pid 6381] <... pwritev resumed>) = 1114112 [pid 6381] exit_group(0) = ? [pid 6383] <... pwritev resumed>) = 1114112 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6384, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6383] exit_group(0) = ? [pid 6390] close(3 [pid 6389] <... mount resumed>) = 0 [pid 6382] +++ exited with 0 +++ [pid 6390] <... close resumed>) = 0 [pid 6389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6382, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6390] mkdir("./file0", 0777 [pid 6389] <... openat resumed>) = 3 [pid 6381] +++ exited with 0 +++ [pid 5000] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6390] <... mkdir resumed>) = 0 [pid 6389] chdir("./file0" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6381, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 6390] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6389] <... chdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 6389] ioctl(4, LOOP_CLR_FD [pid 5000] <... openat resumed>) = 3 [pid 4999] <... restart_syscall resumed>) = 0 [pid 6389] <... ioctl resumed>) = 0 [pid 5000] fstat(3, [pid 6389] close(4 [pid 5003] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6389] <... close resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] getdents64(3, [pid 4999] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6389] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6389] <... openat resumed>) = 4 [pid 5003] <... openat resumed>) = 3 [pid 5000] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6389] unlink("./file1" [pid 5003] fstat(3, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 3 [ 125.010078][ T6390] loop0: detected capacity change from 0 to 4096 [ 125.022188][ T6391] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6390] <... mount resumed>) = 0 [pid 6389] <... unlink resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] lstat("./113/binderfs", [pid 4999] fstat(3, [pid 5003] getdents64(3, [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6390] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6389] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6383] +++ exited with 0 +++ [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] unlink("./113/binderfs" [pid 4999] getdents64(3, [pid 6390] <... openat resumed>) = 3 [pid 5003] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6383, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5000] <... unlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6390] chdir("./file0" [pid 5003] lstat("./113/binderfs", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] lstat("./112/binderfs", [pid 5003] unlink("./113/binderfs" [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] <... unlink resumed>) = 0 [pid 4999] unlink("./112/binderfs" [pid 5003] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... unlink resumed>) = 0 [pid 5001] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6390] <... chdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./114/binderfs") = 0 [pid 5001] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6390] ioctl(4, LOOP_CLR_FD [pid 4999] <... umount2 resumed>) = 0 [pid 5000] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6390] <... ioctl resumed>) = 0 [pid 5000] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6390] close(4) = 0 [pid 6390] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6390] <... openat resumed>) = 4 [pid 6390] unlink("./file1" [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./113/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./113") = 0 [pid 5000] mkdir("./114", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6393 [ 125.063156][ T6392] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6390] <... unlink resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6390] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./114/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./114"./strace-static-x86_64: Process 6393 attached ) = 0 [pid 6393] chdir("./114" [pid 5001] mkdir("./115", 0777 [pid 6393] <... chdir resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 6393] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6393] <... prctl resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 6393] setpgid(0, 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 6393] <... setpgid resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] close(3 [pid 6393] <... openat resumed>) = 3 [pid 5003] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6393] write(3, "1000", 4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... close resumed>) = 0 [pid 6393] <... write resumed>) = 4 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6393] close(3 [pid 5003] lstat("./113/file0", [pid 4999] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6393] <... close resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6394 [pid 6393] symlink("/dev/binderfs", "./binderfs" [pid 5003] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6393] <... symlink resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./112/file0", [pid 6393] memfd_create("syzkaller", 0) = 3 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5003] <... openat resumed>) = 4 [pid 4999] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] fstat(4, ./strace-static-x86_64: Process 6394 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6394] chdir("./115" [pid 5003] getdents64(4, [pid 4999] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6394] <... chdir resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6394] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] getdents64(4, [pid 4999] <... openat resumed>) = 4 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] fstat(4, [pid 5003] close(4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 5003] rmdir("./113/file0" [pid 6394] <... prctl resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6394] setpgid(0, 0 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] getdents64(4, [pid 6394] <... setpgid resumed>) = 0 [pid 5003] getdents64(3, [pid 6394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6394] <... openat resumed>) = 3 [pid 5003] close(3 [pid 4999] close(4 [pid 6394] write(3, "1000", 4 [pid 5003] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 6394] <... write resumed>) = 4 [pid 5003] rmdir("./113" [pid 4999] rmdir("./112/file0" [pid 6394] close(3 [pid 6393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... rmdir resumed>) = 0 [pid 6394] <... close resumed>) = 0 [pid 5003] mkdir("./114", 0777 [pid 4999] <... rmdir resumed>) = 0 [pid 6394] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 4999] getdents64(3, [pid 6394] memfd_create("syzkaller", 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6394] <... memfd_create resumed>) = 3 [pid 5003] <... openat resumed>) = 3 [pid 4999] close(3 [pid 6394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 6394] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... close resumed>) = 0 [pid 6394] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] close(3 [pid 4999] rmdir("./112" [pid 5003] <... close resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./113", 0777 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6395 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6395 attached ) = -1 ENXIO (No such device or address) [pid 6395] chdir("./114" [pid 4999] close(3 [pid 6395] <... chdir resumed>) = 0 [pid 6395] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... close resumed>) = 0 [pid 6395] <... prctl resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6395] setpgid(0, 0) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6396 [pid 6395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6395] write(3, "1000", 4) = 4 [pid 6395] close(3) = 0 [pid 6395] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6395] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 6396 attached [pid 6395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6396] chdir("./113") = 0 [pid 6395] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6396] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6396] setpgid(0, 0) = 0 [pid 6396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6396] write(3, "1000", 4) = 4 [pid 6396] close(3) = 0 [pid 6396] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6396] memfd_create("syzkaller", 0) = 3 [pid 6396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6393] <... write resumed>) = 2097152 [pid 6393] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6393] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6393] ioctl(4, LOOP_SET_FD, 3 [pid 6395] <... write resumed>) = 2097152 [pid 6393] <... ioctl resumed>) = 0 [pid 6396] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6395] munmap(0x7f0ed4ac1000, 2097152 [pid 6390] <... pwritev resumed>) = 1114112 [pid 6390] exit_group(0 [pid 6394] <... write resumed>) = 2097152 [pid 6390] <... exit_group resumed>) = ? [pid 6395] <... munmap resumed>) = 0 [pid 6394] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6394] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6394] ioctl(4, LOOP_SET_FD, 3 [pid 6395] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6395] ioctl(4, LOOP_SET_FD, 3 [pid 6393] close(3) = 0 [pid 6393] mkdir("./file0", 0777) = 0 [pid 6393] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6389] <... pwritev resumed>) = 1114112 [pid 6389] exit_group(0) = ? [pid 6395] <... ioctl resumed>) = 0 [pid 6395] close(3) = 0 [pid 6395] mkdir("./file0", 0777) = 0 [pid 6395] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6396] <... write resumed>) = 2097152 [pid 6396] munmap(0x7f0ed4ac1000, 2097152 [pid 6394] <... ioctl resumed>) = 0 [pid 6390] +++ exited with 0 +++ [pid 6394] close(3 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6390, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 6394] <... close resumed>) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 6396] <... munmap resumed>) = 0 [pid 6394] mkdir("./file0", 0777 [pid 4998] <... restart_syscall resumed>) = 0 [pid 6395] <... mount resumed>) = 0 [ 125.272494][ T6393] loop2: detected capacity change from 0 to 4096 [ 125.289433][ T6394] loop3: detected capacity change from 0 to 4096 [ 125.297867][ T6395] loop5: detected capacity change from 0 to 4096 [pid 6394] <... mkdir resumed>) = 0 [pid 6394] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6396] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6395] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6393] <... mount resumed>) = 0 [pid 6393] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6393] chdir("./file0") = 0 [pid 6396] ioctl(4, LOOP_SET_FD, 3 [pid 6393] ioctl(4, LOOP_CLR_FD [pid 6395] <... openat resumed>) = 3 [pid 6393] <... ioctl resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6395] chdir("./file0" [pid 4998] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6395] <... chdir resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 6395] ioctl(4, LOOP_CLR_FD) = 0 [pid 4998] fstat(3, [pid 6395] close(4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6395] <... close resumed>) = 0 [pid 6393] close(4 [pid 4998] getdents64(3, [pid 6395] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6395] <... openat resumed>) = 4 [pid 4998] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6395] unlink("./file1" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6395] <... unlink resumed>) = 0 [pid 4998] lstat("./115/binderfs", [pid 6395] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6393] <... close resumed>) = 0 [pid 4998] unlink("./115/binderfs" [pid 6393] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6393] <... openat resumed>) = 4 [pid 6393] unlink("./file1" [pid 6389] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6389, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6396] <... ioctl resumed>) = 0 [pid 6396] close(3 [pid 5002] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6393] <... unlink resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6393] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 125.331265][ T6397] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.342631][ T6398] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.345703][ T6396] loop1: detected capacity change from 0 to 4096 [pid 6396] <... close resumed>) = 0 [pid 6394] <... mount resumed>) = 0 [pid 5002] getdents64(3, [pid 4998] <... umount2 resumed>) = 0 [pid 6394] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6396] mkdir("./file0", 0777 [pid 6394] <... openat resumed>) = 3 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6394] chdir("./file0") = 0 [pid 5002] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6394] ioctl(4, LOOP_CLR_FD [pid 4998] lstat("./115/file0", [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6394] <... ioctl resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] lstat("./116/binderfs", [pid 6394] close(4 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6394] <... close resumed>) = 0 [pid 6396] <... mkdir resumed>) = 0 [pid 6394] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] unlink("./116/binderfs" [pid 4998] <... openat resumed>) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 6394] <... openat resumed>) = 4 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 6394] unlink("./file1" [pid 5002] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(4 [pid 6396] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./115/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./115") = 0 [pid 4998] mkdir("./116", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6400 ./strace-static-x86_64: Process 6400 attached [pid 6400] chdir("./116") = 0 [pid 6400] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6400] setpgid(0, 0) = 0 [pid 6400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6400] write(3, "1000", 4) = 4 [pid 6400] close(3) = 0 [pid 6400] symlink("/dev/binderfs", "./binderfs") = 0 [ 125.392569][ T6399] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6400] memfd_create("syzkaller", 0 [pid 6396] <... mount resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 6400] <... memfd_create resumed>) = 3 [pid 6396] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6394] <... unlink resumed>) = 0 [pid 5002] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6396] <... openat resumed>) = 3 [pid 6394] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6400] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6396] chdir("./file0" [pid 5002] lstat("./116/file0", [pid 6396] <... chdir resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6396] ioctl(4, LOOP_CLR_FD [pid 5002] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6396] <... ioctl resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6396] close(4 [pid 5002] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6396] <... close resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 6396] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 6396] <... openat resumed>) = 4 [ 125.446634][ T6401] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] getdents64(4, [pid 6400] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6396] unlink("./file1" [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./116/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 6396] <... unlink resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./116") = 0 [pid 5002] mkdir("./117", 0777 [pid 6396] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6402 ./strace-static-x86_64: Process 6402 attached [pid 6402] chdir("./117") = 0 [pid 6402] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6402] setpgid(0, 0) = 0 [pid 6402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6395] <... pwritev resumed>) = 1114112 [pid 6402] <... openat resumed>) = 3 [pid 6395] exit_group(0 [pid 6402] write(3, "1000", 4 [pid 6395] <... exit_group resumed>) = ? [pid 6402] <... write resumed>) = 4 [pid 6402] close(3) = 0 [pid 6402] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6402] memfd_create("syzkaller", 0) = 3 [pid 6402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6400] <... write resumed>) = 2097152 [pid 6400] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6400] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6400] ioctl(4, LOOP_SET_FD, 3 [pid 6402] <... write resumed>) = 2097152 [pid 6402] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6402] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6402] ioctl(4, LOOP_SET_FD, 3 [pid 6395] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6395, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6402] <... ioctl resumed>) = 0 [pid 5003] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6402] close(3) = 0 [pid 5003] <... openat resumed>) = 3 [pid 6402] mkdir("./file0", 0777 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, [pid 6402] <... mkdir resumed>) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6402] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./114/binderfs") = 0 [pid 5003] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6393] <... pwritev resumed>) = 1114112 [pid 6393] exit_group(0) = ? [pid 5003] <... umount2 resumed>) = 0 [pid 6400] <... ioctl resumed>) = 0 [pid 6400] close(3) = 0 [ 125.595729][ T6400] loop0: detected capacity change from 0 to 4096 [ 125.601876][ T6402] loop4: detected capacity change from 0 to 4096 [pid 6400] mkdir("./file0", 0777) = 0 [pid 6400] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 6402] <... mount resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6402] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] getdents64(4, [pid 6402] <... openat resumed>) = 3 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6402] chdir("./file0" [pid 5003] close(4 [pid 6402] <... chdir resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 6402] ioctl(4, LOOP_CLR_FD [pid 5003] rmdir("./114/file0" [pid 6402] <... ioctl resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 6402] close(4 [pid 5003] getdents64(3, [pid 6402] <... close resumed>) = 0 [pid 6394] <... pwritev resumed>) = 1114112 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6402] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6394] exit_group(0 [pid 5003] close(3 [pid 6402] <... openat resumed>) = 4 [pid 6396] <... pwritev resumed>) = 1114112 [pid 6394] <... exit_group resumed>) = ? [pid 5003] <... close resumed>) = 0 [pid 6402] unlink("./file1" [pid 6400] <... mount resumed>) = 0 [pid 6396] exit_group(0 [pid 6393] +++ exited with 0 +++ [pid 6396] <... exit_group resumed>) = ? [pid 6400] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] rmdir("./114" [pid 6400] <... openat resumed>) = 3 [pid 5003] <... rmdir resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6393, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6400] chdir("./file0" [pid 5003] mkdir("./115", 0777 [pid 5000] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6400] <... chdir resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6400] ioctl(4, LOOP_CLR_FD [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6402] <... unlink resumed>) = 0 [pid 6400] <... ioctl resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 6402] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6400] close(4 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5000] fstat(3, [pid 6400] <... close resumed>) = 0 [pid 6396] +++ exited with 0 +++ [pid 6394] +++ exited with 0 +++ [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6400] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] close(3 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6394, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5000] getdents64(3, [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6396, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6400] <... openat resumed>) = 4 [pid 5003] <... close resumed>) = 0 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6400] unlink("./file1" [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6400] <... unlink resumed>) = 0 [ 125.668324][ T6403] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.703084][ T6404] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6400] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6405 [pid 5000] lstat("./114/binderfs", [pid 5001] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6405 attached [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] unlink("./114/binderfs" [pid 5001] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... unlink resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6405] chdir("./115" [pid 5001] <... openat resumed>) = 3 [pid 5000] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6405] <... chdir resumed>) = 0 [pid 5001] fstat(3, [pid 4999] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6405] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] getdents64(3, [pid 4999] <... openat resumed>) = 3 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./115/binderfs") = 0 [pid 5001] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(3, [pid 6405] <... prctl resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6405] setpgid(0, 0) = 0 [pid 4999] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] lstat("./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6405] <... openat resumed>) = 3 [pid 6405] write(3, "1000", 4 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] unlink("./113/binderfs" [pid 6405] <... write resumed>) = 4 [pid 4999] <... unlink resumed>) = 0 [pid 6405] close(3 [pid 4999] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6405] <... close resumed>) = 0 [pid 6405] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6405] memfd_create("syzkaller", 0) = 3 [pid 6405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5000] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 5001] lstat("./115/file0", [pid 5000] rmdir("./114/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./114" [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 6405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] mkdir("./115", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... openat resumed>) = 4 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6406 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./115/file0"./strace-static-x86_64: Process 6406 attached [pid 6406] chdir("./115") = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6406] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5001] getdents64(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6406] setpgid(0, 0) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] lstat("./113/file0", [pid 6406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] close(3 [pid 6406] <... openat resumed>) = 3 [pid 5001] <... close resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6406] write(3, "1000", 4) = 4 [pid 6406] close(3 [pid 5001] rmdir("./115" [pid 4999] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6406] <... close resumed>) = 0 [pid 6406] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 6406] memfd_create("syzkaller", 0 [pid 5001] mkdir("./116", 0777 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6406] <... memfd_create resumed>) = 3 [pid 6406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5001] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... openat resumed>) = 4 [pid 5001] <... openat resumed>) = 3 [pid 4999] fstat(4, [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] close(3 [pid 6402] <... pwritev resumed>) = 1114112 [pid 5001] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 6406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6405] <... write resumed>) = 2097152 [pid 6402] exit_group(0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6405] munmap(0x7f0ed4ac1000, 2097152 [pid 6402] <... exit_group resumed>) = ? [pid 4999] getdents64(4, ./strace-static-x86_64: Process 6407 attached [pid 6406] <... write resumed>) = 2097152 [pid 6405] <... munmap resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6407] chdir("./116" [pid 6406] munmap(0x7f0ed4ac1000, 2097152 [pid 4999] close(4 [pid 6407] <... chdir resumed>) = 0 [pid 6406] <... munmap resumed>) = 0 [pid 6405] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6407 [pid 4999] <... close resumed>) = 0 [pid 6407] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6406] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] rmdir("./113/file0" [pid 6407] <... prctl resumed>) = 0 [pid 6406] <... openat resumed>) = 4 [pid 6405] <... openat resumed>) = 4 [pid 4999] <... rmdir resumed>) = 0 [pid 6407] setpgid(0, 0 [pid 6406] ioctl(4, LOOP_SET_FD, 3 [pid 6405] ioctl(4, LOOP_SET_FD, 3 [pid 4999] getdents64(3, [pid 6407] <... setpgid resumed>) = 0 [pid 6406] <... ioctl resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] close(3 [pid 6407] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 6407] write(3, "1000", 4 [pid 4999] rmdir("./113" [pid 6407] <... write resumed>) = 4 [pid 4999] <... rmdir resumed>) = 0 [pid 6407] close(3 [pid 4999] mkdir("./114", 0777 [pid 6407] <... close resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 6407] symlink("/dev/binderfs", "./binderfs" [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6407] <... symlink resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 6407] memfd_create("syzkaller", 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6407] <... memfd_create resumed>) = 3 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] close(3 [pid 6407] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6406] close(3 [pid 6405] <... ioctl resumed>) = 0 [pid 6400] <... pwritev resumed>) = 1114112 [pid 4999] <... close resumed>) = 0 [pid 6406] <... close resumed>) = 0 [pid 6405] close(3 [pid 6400] exit_group(0 [pid 6406] mkdir("./file0", 0777 [pid 6405] <... close resumed>) = 0 [pid 6400] <... exit_group resumed>) = ? [pid 6407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6406] <... mkdir resumed>) = 0 [pid 6405] mkdir("./file0", 0777 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6406] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6402] +++ exited with 0 +++ [pid 6405] <... mkdir resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6408 ./strace-static-x86_64: Process 6408 attached [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6402, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5002] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6408] chdir("./114" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6408] <... chdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6405] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6408] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... openat resumed>) = 3 [pid 6408] <... prctl resumed>) = 0 [pid 6408] setpgid(0, 0) = 0 [pid 6408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] fstat(3, [pid 6408] <... openat resumed>) = 3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 6408] write(3, "1000", 4) = 4 [pid 6408] close(3) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6408] symlink("/dev/binderfs", "./binderfs" [pid 5002] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6408] <... symlink resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6408] memfd_create("syzkaller", 0) = 3 [pid 6408] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5002] lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./117/binderfs") = 0 [ 125.902299][ T6406] loop2: detected capacity change from 0 to 4096 [ 125.909838][ T6405] loop5: detected capacity change from 0 to 4096 [pid 5002] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6406] <... mount resumed>) = 0 [pid 6406] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6400] +++ exited with 0 +++ [pid 6406] <... openat resumed>) = 3 [pid 6408] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6407] <... write resumed>) = 2097152 [pid 6406] chdir("./file0" [pid 6405] <... mount resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 6406] <... chdir resumed>) = 0 [pid 6405] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6407] munmap(0x7f0ed4ac1000, 2097152 [pid 6406] ioctl(4, LOOP_CLR_FD [pid 6405] <... openat resumed>) = 3 [pid 5002] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6400, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6406] <... ioctl resumed>) = 0 [pid 6405] chdir("./file0" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 6407] <... munmap resumed>) = 0 [pid 6406] close(4 [pid 6405] <... chdir resumed>) = 0 [pid 5002] lstat("./117/file0", [pid 4998] <... restart_syscall resumed>) = 0 [pid 6406] <... close resumed>) = 0 [pid 6405] ioctl(4, LOOP_CLR_FD [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6406] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6405] <... ioctl resumed>) = 0 [pid 5002] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6407] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6406] <... openat resumed>) = 4 [pid 6405] close(4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6407] <... openat resumed>) = 4 [pid 6406] unlink("./file1" [pid 6405] <... close resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6407] ioctl(4, LOOP_SET_FD, 3 [pid 6405] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6405] <... openat resumed>) = 4 [pid 5002] <... openat resumed>) = 4 [ 125.964885][ T6409] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.976489][ T6410] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6406] <... unlink resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 6406] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6408] <... write resumed>) = 2097152 [pid 6408] munmap(0x7f0ed4ac1000, 2097152 [pid 6405] unlink("./file1" [pid 5002] fstat(4, [pid 4998] getdents64(3, [pid 6407] <... ioctl resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6407] close(3 [pid 5002] getdents64(4, [pid 4998] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6407] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6407] mkdir("./file0", 0777 [pid 5002] getdents64(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] lstat("./116/binderfs", [pid 5002] close(4 [pid 6405] <... unlink resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6405] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] rmdir("./117/file0" [pid 4998] unlink("./116/binderfs" [pid 6407] <... mkdir resumed>) = 0 [pid 6408] <... munmap resumed>) = 0 [pid 6408] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6408] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6408] close(3) = 0 [pid 6408] mkdir("./file0", 0777 [pid 4998] <... unlink resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 4998] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(3, [pid 6407] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./117") = 0 [pid 5002] mkdir("./118", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6412 ./strace-static-x86_64: Process 6412 attached [pid 6412] chdir("./118") = 0 [pid 6412] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6412] setpgid(0, 0) = 0 [pid 6412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6412] write(3, "1000", 4) = 4 [pid 6412] close(3) = 0 [pid 6412] symlink("/dev/binderfs", "./binderfs" [pid 6408] <... mkdir resumed>) = 0 [pid 6412] <... symlink resumed>) = 0 [pid 6408] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6412] memfd_create("syzkaller", 0) = 3 [ 126.007912][ T6407] loop3: detected capacity change from 0 to 4096 [ 126.032762][ T6408] loop1: detected capacity change from 0 to 4096 [pid 6412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6407] <... mount resumed>) = 0 [pid 6407] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6407] chdir("./file0") = 0 [pid 6407] ioctl(4, LOOP_CLR_FD) = 0 [pid 6407] close(4) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 6407] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6412] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6407] <... openat resumed>) = 4 [pid 4998] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6407] unlink("./file1" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, [pid 6408] <... mount resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6408] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] getdents64(4, [pid 6408] <... openat resumed>) = 3 [pid 6408] chdir("./file0" [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6408] <... chdir resumed>) = 0 [pid 6408] ioctl(4, LOOP_CLR_FD [pid 4998] getdents64(4, [pid 6408] <... ioctl resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6408] close(4) = 0 [pid 4998] close(4 [pid 6408] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] <... close resumed>) = 0 [pid 6408] <... openat resumed>) = 4 [pid 6408] unlink("./file1" [pid 4998] rmdir("./116/file0" [pid 6412] <... write resumed>) = 2097152 [pid 6408] <... unlink resumed>) = 0 [pid 6406] <... pwritev resumed>) = 1114112 [ 126.091285][ T6411] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.121299][ T6413] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] <... rmdir resumed>) = 0 [pid 6412] munmap(0x7f0ed4ac1000, 2097152 [pid 6408] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6406] exit_group(0 [pid 6405] <... pwritev resumed>) = 1114112 [pid 4998] getdents64(3, [pid 6412] <... munmap resumed>) = 0 [pid 6407] <... unlink resumed>) = 0 [pid 6406] <... exit_group resumed>) = ? [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6412] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6407] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6405] exit_group(0 [pid 4998] close(3 [pid 6412] <... openat resumed>) = 4 [pid 4998] <... close resumed>) = 0 [pid 6412] ioctl(4, LOOP_SET_FD, 3 [pid 4998] rmdir("./116" [pid 6412] <... ioctl resumed>) = 0 [pid 6405] <... exit_group resumed>) = ? [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./117", 0777 [pid 6412] close(3 [pid 4998] <... mkdir resumed>) = 0 [pid 6412] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6412] mkdir("./file0", 0777 [pid 4998] <... openat resumed>) = 3 [pid 6412] <... mkdir resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6412] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6415 [pid 6406] +++ exited with 0 +++ [pid 6405] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6406, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- ./strace-static-x86_64: Process 6415 attached [pid 5000] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6415] chdir("./117" [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6405, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [ 126.191511][ T6412] loop4: detected capacity change from 0 to 4096 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6412] <... mount resumed>) = 0 [pid 6408] <... pwritev resumed>) = 1114112 [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 6412] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6408] exit_group(0 [pid 6412] <... openat resumed>) = 3 [pid 6408] <... exit_group resumed>) = ? [pid 6415] <... chdir resumed>) = 0 [pid 6412] chdir("./file0" [pid 5003] <... restart_syscall resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6415] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6412] <... chdir resumed>) = 0 [pid 6415] <... prctl resumed>) = 0 [pid 6412] ioctl(4, LOOP_CLR_FD [pid 5000] <... openat resumed>) = 3 [pid 6415] setpgid(0, 0 [pid 6412] <... ioctl resumed>) = 0 [pid 5000] fstat(3, [pid 6415] <... setpgid resumed>) = 0 [pid 6412] close(4 [pid 5003] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6412] <... close resumed>) = 0 [pid 6412] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6415] <... openat resumed>) = 3 [pid 6412] <... openat resumed>) = 4 [pid 6407] <... pwritev resumed>) = 1114112 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] getdents64(3, [pid 6415] write(3, "1000", 4 [pid 6412] unlink("./file1" [pid 6407] exit_group(0 [pid 5003] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [ 126.243210][ T6414] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6415] <... write resumed>) = 4 [pid 6412] <... unlink resumed>) = 0 [pid 6407] <... exit_group resumed>) = ? [pid 5003] <... openat resumed>) = 3 [pid 5000] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6415] close(3 [pid 6412] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] fstat(3, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6415] <... close resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] lstat("./115/binderfs", [pid 6415] symlink("/dev/binderfs", "./binderfs" [pid 5003] getdents64(3, [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6415] <... symlink resumed>) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] unlink("./115/binderfs" [pid 6415] memfd_create("syzkaller", 0 [pid 5003] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... unlink resumed>) = 0 [pid 6415] <... memfd_create resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] lstat("./115/binderfs", [pid 6415] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6408] +++ exited with 0 +++ [pid 5000] <... umount2 resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6408, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5003] unlink("./115/binderfs" [pid 4999] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./114/binderfs") = 0 [pid 4999] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... unlink resumed>) = 0 [pid 5000] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./115/file0") = 0 [pid 6415] <... write resumed>) = 2097152 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./115") = 0 [pid 5000] mkdir("./116", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6416 ./strace-static-x86_64: Process 6416 attached [pid 6416] chdir("./116") = 0 [pid 6416] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6416] setpgid(0, 0) = 0 [pid 6416] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6416] write(3, "1000", 4) = 4 [pid 6416] close(3) = 0 [pid 6416] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6416] memfd_create("syzkaller", 0) = 3 [pid 6416] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 4999] <... umount2 resumed>) = 0 [pid 6415] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] <... umount2 resumed>) = 0 [pid 4999] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6407] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6407, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5001] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./114/file0", [pid 5001] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 4999] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./116/binderfs", [pid 6415] <... munmap resumed>) = 0 [pid 5003] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6415] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] unlink("./116/binderfs" [pid 4999] <... openat resumed>) = 4 [pid 5001] <... unlink resumed>) = 0 [pid 4999] fstat(4, [pid 5001] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 6415] <... openat resumed>) = 4 [pid 5003] lstat("./115/file0", [pid 6415] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, [pid 6416] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 5003] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] rmdir("./114/file0" [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 5003] <... openat resumed>) = 4 [pid 5003] fstat(4, [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] close(3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./114" [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... rmdir resumed>) = 0 [pid 5003] getdents64(4, [pid 4999] mkdir("./115", 0777 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] <... mkdir resumed>) = 0 [pid 5003] close(4 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5003] rmdir("./115/file0" [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] getdents64(4, [pid 4999] close(3 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./116/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] getdents64(3, [pid 5001] close(3) = 0 [pid 5001] rmdir("./116") = 0 [pid 5001] mkdir("./117", 0777 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6417 [pid 5003] rmdir("./115" [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5003] <... rmdir resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] mkdir("./116", 0777 [pid 6416] <... write resumed>) = 2097152 [pid 5003] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6418 ./strace-static-x86_64: Process 6417 attached [pid 5003] <... openat resumed>) = 3 [pid 6417] chdir("./115" [pid 5003] ioctl(3, LOOP_CLR_FD [pid 6417] <... chdir resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6417] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] close(3 [pid 6417] <... prctl resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 6417] setpgid(0, 0) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6417] write(3, "1000", 4) = 4 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6419 ./strace-static-x86_64: Process 6418 attached [pid 6417] close(3 [pid 6418] chdir("./117" [pid 6417] <... close resumed>) = 0 [pid 6418] <... chdir resumed>) = 0 [pid 6417] symlink("/dev/binderfs", "./binderfs" [pid 6418] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6417] <... symlink resumed>) = 0 [pid 6418] <... prctl resumed>) = 0 [pid 6417] memfd_create("syzkaller", 0 [pid 6418] setpgid(0, 0 [pid 6417] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 6419 attached [pid 6418] <... setpgid resumed>) = 0 [pid 6417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6419] chdir("./116" [pid 6418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6417] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6419] <... chdir resumed>) = 0 [pid 6418] <... openat resumed>) = 3 [pid 6419] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6418] write(3, "1000", 4 [pid 6419] <... prctl resumed>) = 0 [pid 6418] <... write resumed>) = 4 [pid 6419] setpgid(0, 0 [pid 6418] close(3 [pid 6419] <... setpgid resumed>) = 0 [pid 6418] <... close resumed>) = 0 [pid 6419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6418] symlink("/dev/binderfs", "./binderfs" [pid 6416] munmap(0x7f0ed4ac1000, 2097152 [pid 6419] <... openat resumed>) = 3 [pid 6418] <... symlink resumed>) = 0 [pid 6415] <... ioctl resumed>) = 0 [pid 6419] write(3, "1000", 4 [pid 6418] memfd_create("syzkaller", 0 [pid 6416] <... munmap resumed>) = 0 [pid 6415] close(3 [pid 6419] <... write resumed>) = 4 [pid 6418] <... memfd_create resumed>) = 3 [pid 6415] <... close resumed>) = 0 [pid 6419] close(3 [pid 6418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6416] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6415] mkdir("./file0", 0777 [pid 6419] <... close resumed>) = 0 [pid 6418] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6416] <... openat resumed>) = 4 [ 126.398367][ T6415] loop0: detected capacity change from 0 to 4096 [pid 6419] symlink("/dev/binderfs", "./binderfs" [pid 6418] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6415] <... mkdir resumed>) = 0 [pid 6419] <... symlink resumed>) = 0 [pid 6416] ioctl(4, LOOP_SET_FD, 3 [pid 6419] memfd_create("syzkaller", 0 [pid 6417] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6415] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6412] <... pwritev resumed>) = 1114112 [pid 6419] <... memfd_create resumed>) = 3 [pid 6419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6412] exit_group(0) = ? [pid 6416] <... ioctl resumed>) = 0 [pid 6416] close(3) = 0 [pid 6416] mkdir("./file0", 0777) = 0 [pid 6415] <... mount resumed>) = 0 [pid 6416] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6415] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6415] <... openat resumed>) = 3 [pid 6415] chdir("./file0") = 0 [pid 6418] <... write resumed>) = 2097152 [pid 6415] ioctl(4, LOOP_CLR_FD [pid 6418] munmap(0x7f0ed4ac1000, 2097152 [pid 6415] <... ioctl resumed>) = 0 [pid 6418] <... munmap resumed>) = 0 [pid 6415] close(4) = 0 [pid 6415] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6418] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6415] <... openat resumed>) = 4 [pid 6415] unlink("./file1" [ 126.460303][ T6416] loop2: detected capacity change from 0 to 4096 [ 126.491996][ T6420] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6418] ioctl(4, LOOP_SET_FD, 3 [pid 6419] <... write resumed>) = 2097152 [pid 6419] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6419] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6419] ioctl(4, LOOP_SET_FD, 3 [pid 6415] <... unlink resumed>) = 0 [pid 6415] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6419] <... ioctl resumed>) = 0 [pid 6418] <... ioctl resumed>) = 0 [pid 6417] <... write resumed>) = 2097152 [pid 6412] +++ exited with 0 +++ [pid 6419] close(3 [pid 6418] close(3 [pid 6417] munmap(0x7f0ed4ac1000, 2097152 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6412, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6418] <... close resumed>) = 0 [pid 6417] <... munmap resumed>) = 0 [pid 6418] mkdir("./file0", 0777) = 0 [pid 6418] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6419] <... close resumed>) = 0 [pid 6417] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6419] mkdir("./file0", 0777 [pid 6417] <... openat resumed>) = 4 [pid 6416] <... mount resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6419] <... mkdir resumed>) = 0 [pid 6417] ioctl(4, LOOP_SET_FD, 3 [pid 6416] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6419] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6416] <... openat resumed>) = 3 [pid 5002] <... openat resumed>) = 3 [ 126.523380][ T6418] loop3: detected capacity change from 0 to 4096 [ 126.530791][ T6419] loop5: detected capacity change from 0 to 4096 [ 126.549796][ T6421] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.566584][ T6417] loop1: detected capacity change from 0 to 4096 [pid 6417] <... ioctl resumed>) = 0 [pid 6416] chdir("./file0" [pid 5002] fstat(3, [pid 6416] <... chdir resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6417] close(3 [pid 6416] ioctl(4, LOOP_CLR_FD [pid 6417] <... close resumed>) = 0 [pid 5002] getdents64(3, [pid 6416] <... ioctl resumed>) = 0 [pid 6417] mkdir("./file0", 0777 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6417] <... mkdir resumed>) = 0 [pid 6418] <... mount resumed>) = 0 [pid 6416] close(4) = 0 [pid 6418] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6416] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6418] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6418] chdir("./file0" [pid 5002] lstat("./118/binderfs", [pid 6418] <... chdir resumed>) = 0 [pid 6418] ioctl(4, LOOP_CLR_FD [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6417] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] unlink("./118/binderfs" [pid 6418] <... ioctl resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 6418] close(4) = 0 [pid 5002] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6418] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6416] <... openat resumed>) = 4 [pid 6416] unlink("./file1" [pid 6418] <... openat resumed>) = 4 [pid 6416] <... unlink resumed>) = 0 [pid 6418] unlink("./file1" [pid 6416] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6415] <... pwritev resumed>) = 1114112 [pid 6415] exit_group(0) = ? [pid 6418] <... unlink resumed>) = 0 [ 126.573410][ T6422] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6418] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6419] <... mount resumed>) = 0 [pid 6417] <... mount resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6419] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6419] chdir("./file0") = 0 [pid 6419] ioctl(4, LOOP_CLR_FD) = 0 [pid 6419] close(4) = 0 [pid 6419] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6417] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5002] lstat("./118/file0", [pid 6419] <... openat resumed>) = 4 [pid 6419] unlink("./file1" [pid 6417] chdir("./file0") = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6417] ioctl(4, LOOP_CLR_FD [pid 5002] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6419] <... unlink resumed>) = 0 [pid 6417] <... ioctl resumed>) = 0 [pid 6415] +++ exited with 0 +++ [pid 6419] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6417] close(4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6415, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6417] <... close resumed>) = 0 [pid 6417] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 6417] <... openat resumed>) = 4 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6417] unlink("./file1" [pid 4998] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] close(4) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 5002] rmdir("./118/file0" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 6417] <... unlink resumed>) = 0 [pid 5002] getdents64(3, [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6417] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] close(3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... close resumed>) = 0 [pid 4998] lstat("./117/binderfs", [pid 5002] rmdir("./118" [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... rmdir resumed>) = 0 [ 126.640701][ T6424] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.652297][ T6423] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] unlink("./117/binderfs" [pid 5002] mkdir("./119", 0777 [pid 4998] <... unlink resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4998] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6425 ./strace-static-x86_64: Process 6425 attached [pid 6425] chdir("./119") = 0 [pid 6425] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6425] setpgid(0, 0) = 0 [pid 6425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6425] write(3, "1000", 4) = 4 [pid 6425] close(3) = 0 [pid 6425] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6425] memfd_create("syzkaller", 0) = 3 [pid 6425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./117/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./117/file0") = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./117") = 0 [pid 4998] mkdir("./118", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6425] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6426 ./strace-static-x86_64: Process 6426 attached [pid 6426] chdir("./118") = 0 [pid 6426] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6426] setpgid(0, 0) = 0 [pid 6426] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6416] <... pwritev resumed>) = 1114112 [pid 6426] <... openat resumed>) = 3 [pid 6416] exit_group(0 [pid 6426] write(3, "1000", 4 [pid 6416] <... exit_group resumed>) = ? [pid 6426] <... write resumed>) = 4 [pid 6426] close(3) = 0 [pid 6426] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6426] memfd_create("syzkaller", 0) = 3 [pid 6425] <... write resumed>) = 2097152 [pid 6418] <... pwritev resumed>) = 1114112 [pid 6416] +++ exited with 0 +++ [pid 6426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6418] exit_group(0) = ? [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6416, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6426] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6425] munmap(0x7f0ed4ac1000, 2097152 [pid 6419] <... pwritev resumed>) = 1114112 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 6425] <... munmap resumed>) = 0 [pid 6419] exit_group(0 [pid 5000] <... restart_syscall resumed>) = 0 [pid 6419] <... exit_group resumed>) = ? [pid 6426] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6425] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6419] +++ exited with 0 +++ [pid 6418] +++ exited with 0 +++ [pid 6417] <... pwritev resumed>) = 1114112 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6419, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6426] <... write resumed>) = 2097152 [pid 6425] ioctl(4, LOOP_SET_FD, 3 [pid 6417] exit_group(0 [pid 5000] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6426] munmap(0x7f0ed4ac1000, 2097152 [pid 6417] <... exit_group resumed>) = ? [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6418, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6425] <... ioctl resumed>) = 0 [pid 5003] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5000] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6426] <... munmap resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6425] close(3 [pid 5003] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6426] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 6426] <... openat resumed>) = 4 [pid 6425] <... close resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 6426] ioctl(4, LOOP_SET_FD, 3 [pid 6425] mkdir("./file0", 0777 [pid 5003] fstat(3, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6425] <... mkdir resumed>) = 0 [pid 6425] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6426] <... ioctl resumed>) = 0 [pid 5003] getdents64(3, [pid 5001] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(3, [pid 6426] close(3 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6426] <... close resumed>) = 0 [pid 5003] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6426] mkdir("./file0", 0777 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6426] <... mkdir resumed>) = 0 [pid 5003] lstat("./116/binderfs", [pid 5001] fstat(3, [pid 5000] lstat("./116/binderfs", [pid 6426] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./116/binderfs" [pid 5001] getdents64(3, [pid 5000] unlink("./116/binderfs" [pid 5003] <... unlink resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] <... unlink resumed>) = 0 [pid 5003] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6417] +++ exited with 0 +++ [ 126.892203][ T6425] loop4: detected capacity change from 0 to 4096 [ 126.905380][ T6426] loop0: detected capacity change from 0 to 4096 [pid 5001] lstat("./117/binderfs", [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./117/binderfs" [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6417, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5001] <... unlink resumed>) = 0 [pid 6425] <... mount resumed>) = 0 [pid 5001] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6425] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6425] <... openat resumed>) = 3 [pid 6425] chdir("./file0" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6425] <... chdir resumed>) = 0 [pid 6425] ioctl(4, LOOP_CLR_FD) = 0 [pid 6425] close(4) = 0 [pid 4999] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6425] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 4999] <... openat resumed>) = 3 [pid 4999] fstat(3, [pid 6425] unlink("./file1" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6426] <... mount resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 6426] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6426] chdir("./file0") = 0 [pid 6426] ioctl(4, LOOP_CLR_FD) = 0 [pid 6426] close(4) = 0 [pid 6426] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5000] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(3, [pid 6426] <... openat resumed>) = 4 [pid 5003] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 6426] unlink("./file1" [pid 6425] <... unlink resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6425] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] lstat("./116/file0", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] lstat("./117/file0", [pid 5000] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... openat resumed>) = 4 [pid 4999] lstat("./115/binderfs", [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] fstat(4, [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6426] <... unlink resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] unlink("./115/binderfs" [pid 6426] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] <... openat resumed>) = 4 [pid 5001] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] getdents64(4, [pid 4999] <... unlink resumed>) = 0 [pid 5003] fstat(4, [pid 5001] <... openat resumed>) = 4 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] fstat(4, [pid 5000] getdents64(4, [pid 5003] getdents64(4, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] getdents64(4, [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(4, [pid 5000] close(4 [pid 5003] close(4 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] close(4 [pid 5000] <... close resumed>) = 0 [pid 5003] rmdir("./116/file0" [pid 5001] <... close resumed>) = 0 [pid 5000] rmdir("./116/file0" [pid 5003] <... rmdir resumed>) = 0 [pid 5001] rmdir("./117/file0" [pid 5000] <... rmdir resumed>) = 0 [pid 5003] getdents64(3, [pid 5001] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(3, [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 5003] <... close resumed>) = 0 [pid 5001] close(3 [pid 5000] <... close resumed>) = 0 [pid 5003] rmdir("./116" [pid 5001] <... close resumed>) = 0 [pid 5000] rmdir("./116" [pid 5003] <... rmdir resumed>) = 0 [pid 5001] rmdir("./117" [pid 5000] <... rmdir resumed>) = 0 [pid 5003] mkdir("./117", 0777 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] mkdir("./117", 0777 [pid 5003] <... mkdir resumed>) = 0 [pid 5001] mkdir("./118", 0777 [pid 5000] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5003] <... openat resumed>) = 3 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] <... openat resumed>) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5003] <... close resumed>) = 0 [pid 5001] close(3 [pid 5000] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6429 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6430 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6431 [ 126.943021][ T6427] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.969509][ T6428] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds ./strace-static-x86_64: Process 6430 attached [pid 6430] chdir("./117") = 0 [pid 6430] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6429 attached ) = 0 [pid 6430] setpgid(0, 0 [pid 6429] chdir("./117" [pid 6430] <... setpgid resumed>) = 0 [pid 6429] <... chdir resumed>) = 0 [pid 6430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6429] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6430] <... openat resumed>) = 3 [pid 6429] <... prctl resumed>) = 0 [pid 6430] write(3, "1000", 4 [pid 6429] setpgid(0, 0 [pid 6430] <... write resumed>) = 4 [pid 6429] <... setpgid resumed>) = 0 [pid 6430] close(3 [pid 6429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6430] <... close resumed>) = 0 [pid 6429] <... openat resumed>) = 3 [pid 6430] symlink("/dev/binderfs", "./binderfs" [pid 6429] write(3, "1000", 4 [pid 6430] <... symlink resumed>) = 0 [pid 6429] <... write resumed>) = 4 [pid 6430] memfd_create("syzkaller", 0 [pid 6429] close(3 [pid 6430] <... memfd_create resumed>) = 3 [pid 6429] <... close resumed>) = 0 [pid 6430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6429] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6431 attached [pid 6430] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6429] <... symlink resumed>) = 0 [pid 6431] chdir("./118" [pid 6429] memfd_create("syzkaller", 0) = 3 [pid 6431] <... chdir resumed>) = 0 [pid 6429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6431] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6431] <... prctl resumed>) = 0 [pid 6431] setpgid(0, 0 [pid 6430] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6431] <... setpgid resumed>) = 0 [pid 4999] lstat("./115/file0", [pid 6431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6431] <... openat resumed>) = 3 [pid 4999] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6431] write(3, "1000", 4) = 4 [pid 4999] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6431] close(3 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6431] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 6431] symlink("/dev/binderfs", "./binderfs" [pid 6429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6431] <... symlink resumed>) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 6431] memfd_create("syzkaller", 0 [pid 4999] close(4) = 0 [pid 6431] <... memfd_create resumed>) = 3 [pid 4999] rmdir("./115/file0" [pid 6431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... rmdir resumed>) = 0 [pid 6431] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./115") = 0 [pid 4999] mkdir("./116", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6432 ./strace-static-x86_64: Process 6432 attached [pid 6432] chdir("./116") = 0 [pid 6432] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6432] <... prctl resumed>) = 0 [pid 6432] setpgid(0, 0) = 0 [pid 6432] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6432] write(3, "1000", 4) = 4 [pid 6432] close(3) = 0 [pid 6432] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6432] memfd_create("syzkaller", 0) = 3 [pid 6432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6430] <... write resumed>) = 2097152 [pid 6429] <... write resumed>) = 2097152 [pid 6430] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6430] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6429] munmap(0x7f0ed4ac1000, 2097152 [pid 6430] ioctl(4, LOOP_SET_FD, 3 [pid 6429] <... munmap resumed>) = 0 [pid 6432] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6430] <... ioctl resumed>) = 0 [pid 6429] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6429] ioctl(4, LOOP_SET_FD, 3 [pid 6432] <... write resumed>) = 2097152 [pid 6431] <... write resumed>) = 2097152 [pid 6430] close(3 [pid 6429] <... ioctl resumed>) = 0 [pid 6432] munmap(0x7f0ed4ac1000, 2097152 [pid 6431] munmap(0x7f0ed4ac1000, 2097152 [pid 6430] <... close resumed>) = 0 [pid 6429] close(3 [pid 6432] <... munmap resumed>) = 0 [pid 6431] <... munmap resumed>) = 0 [pid 6430] mkdir("./file0", 0777 [pid 6429] <... close resumed>) = 0 [pid 6432] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6431] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6430] <... mkdir resumed>) = 0 [pid 6432] <... openat resumed>) = 4 [pid 6431] <... openat resumed>) = 4 [pid 6430] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6429] mkdir("./file0", 0777 [pid 6432] ioctl(4, LOOP_SET_FD, 3 [pid 6431] ioctl(4, LOOP_SET_FD, 3 [pid 6429] <... mkdir resumed>) = 0 [ 127.121340][ T6430] loop2: detected capacity change from 0 to 4096 [ 127.129995][ T6429] loop5: detected capacity change from 0 to 4096 [pid 6430] <... mount resumed>) = 0 [pid 6430] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6430] chdir("./file0") = 0 [pid 6430] ioctl(4, LOOP_CLR_FD) = 0 [pid 6430] close(4) = 0 [pid 6430] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6430] unlink("./file1" [pid 6432] <... ioctl resumed>) = 0 [pid 6431] <... ioctl resumed>) = 0 [pid 6429] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6432] close(3 [pid 6431] close(3 [pid 6432] <... close resumed>) = 0 [pid 6431] <... close resumed>) = 0 [pid 6432] mkdir("./file0", 0777 [pid 6431] mkdir("./file0", 0777 [pid 6432] <... mkdir resumed>) = 0 [pid 6431] <... mkdir resumed>) = 0 [pid 6432] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6431] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6426] <... pwritev resumed>) = 1114112 [pid 6425] <... pwritev resumed>) = 1114112 [pid 6426] exit_group(0 [pid 6425] exit_group(0 [pid 6426] <... exit_group resumed>) = ? [pid 6425] <... exit_group resumed>) = ? [pid 6430] <... unlink resumed>) = 0 [ 127.167576][ T6432] loop1: detected capacity change from 0 to 4096 [ 127.174118][ T6431] loop3: detected capacity change from 0 to 4096 [ 127.181055][ T6433] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6430] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6431] <... mount resumed>) = 0 [pid 6429] <... mount resumed>) = 0 [pid 6431] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6429] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6431] <... openat resumed>) = 3 [pid 6432] <... mount resumed>) = 0 [pid 6431] chdir("./file0" [pid 6429] <... openat resumed>) = 3 [pid 6431] <... chdir resumed>) = 0 [pid 6429] chdir("./file0" [pid 6431] ioctl(4, LOOP_CLR_FD [pid 6429] <... chdir resumed>) = 0 [pid 6431] <... ioctl resumed>) = 0 [pid 6429] ioctl(4, LOOP_CLR_FD [pid 6431] close(4 [pid 6429] <... ioctl resumed>) = 0 [pid 6432] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6431] <... close resumed>) = 0 [pid 6429] close(4 [pid 6431] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6429] <... close resumed>) = 0 [pid 6432] <... openat resumed>) = 3 [pid 6431] <... openat resumed>) = 4 [pid 6429] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6432] chdir("./file0" [pid 6431] unlink("./file1" [pid 6432] <... chdir resumed>) = 0 [pid 6429] <... openat resumed>) = 4 [pid 6426] +++ exited with 0 +++ [pid 6432] ioctl(4, LOOP_CLR_FD) = 0 [pid 6432] close(4) = 0 [pid 6432] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6429] unlink("./file1" [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6426, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6432] unlink("./file1" [pid 4998] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6432] <... unlink resumed>) = 0 [pid 6429] <... unlink resumed>) = 0 [pid 6432] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6431] <... unlink resumed>) = 0 [pid 6429] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] <... openat resumed>) = 3 [pid 6431] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 127.221446][ T6435] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.232902][ T6436] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.243886][ T6434] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./118/binderfs") = 0 [pid 6425] +++ exited with 0 +++ [pid 4998] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6425, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5002] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./119/binderfs") = 0 [pid 5002] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6429] <... pwritev resumed>) = 1114112 [pid 6429] exit_group(0) = ? [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./119/file0" [pid 4998] <... umount2 resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, [pid 4998] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./119") = 0 [pid 5002] mkdir("./120", 0777 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4998] lstat("./118/file0", [pid 6429] +++ exited with 0 +++ [pid 5002] <... openat resumed>) = 3 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6429, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4998] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6430] <... pwritev resumed>) = 1114112 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6430] exit_group(0 [pid 5002] close(3 [pid 4998] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6430] <... exit_group resumed>) = ? [pid 5003] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... close resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... openat resumed>) = 4 [pid 5003] <... openat resumed>) = 3 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6437 [pid 4998] fstat(4, [pid 5003] fstat(3, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, [pid 4998] getdents64(4, [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(4, [pid 5003] lstat("./117/binderfs", [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] close(4 [pid 5003] unlink("./117/binderfs") = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] rmdir("./118/file0"./strace-static-x86_64: Process 6437 attached ) = 0 [pid 6437] chdir("./120" [pid 4998] getdents64(3, [pid 6437] <... chdir resumed>) = 0 [pid 6437] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6437] setpgid(0, 0) = 0 [pid 6437] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6437] write(3, "1000", 4) = 4 [pid 6437] close(3) = 0 [pid 6437] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6437] memfd_create("syzkaller", 0) = 3 [pid 6437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5003] <... umount2 resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./118") = 0 [pid 4998] mkdir("./119", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6438 [pid 6431] <... pwritev resumed>) = 1114112 [pid 6430] +++ exited with 0 +++ [pid 6431] exit_group(0) = ? ./strace-static-x86_64: Process 6438 attached [pid 6432] <... pwritev resumed>) = 1114112 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6430, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6438] chdir("./119" [pid 6432] exit_group(0 [pid 5000] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6438] <... chdir resumed>) = 0 [pid 6437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6432] <... exit_group resumed>) = ? [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6438] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6437] <... write resumed>) = 2097152 [pid 5000] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6438] <... prctl resumed>) = 0 [pid 5003] lstat("./117/file0", [pid 5000] <... openat resumed>) = 3 [pid 6438] setpgid(0, 0 [pid 5000] fstat(3, [pid 6438] <... setpgid resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 6438] <... openat resumed>) = 3 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6438] write(3, "1000", 4 [pid 5000] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6438] <... write resumed>) = 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6438] close(3 [pid 5000] lstat("./117/binderfs", [pid 6438] <... close resumed>) = 0 [pid 5003] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6438] symlink("/dev/binderfs", "./binderfs" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] unlink("./117/binderfs" [pid 6438] <... symlink resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 6438] memfd_create("syzkaller", 0 [pid 5003] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6438] <... memfd_create resumed>) = 3 [pid 6438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... openat resumed>) = 4 [pid 6438] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6431] +++ exited with 0 +++ [pid 5003] fstat(4, [pid 5000] <... umount2 resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6437] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] getdents64(4, [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6431, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6432] +++ exited with 0 +++ [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5000] lstat("./117/file0", [pid 6437] <... munmap resumed>) = 0 [pid 5003] getdents64(4, [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6438] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6437] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4 [pid 5000] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6432, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6437] <... openat resumed>) = 4 [pid 5003] <... close resumed>) = 0 [pid 5001] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6437] ioctl(4, LOOP_SET_FD, 3 [pid 5003] rmdir("./117/file0" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6437] <... ioctl resumed>) = 0 [pid 6437] close(3) = 0 [pid 6437] mkdir("./file0", 0777 [pid 5003] <... rmdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 4 [pid 4999] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 5001] fstat(3, [pid 5000] fstat(4, [pid 4999] fstat(3, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, [pid 5000] getdents64(4, [pid 5001] getdents64(3, [pid 4999] getdents64(3, [pid 6437] <... mkdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(4, [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6437] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] close(3 [pid 5000] close(4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./118/binderfs", [pid 5000] <... close resumed>) = 0 [pid 4999] lstat("./116/binderfs", [pid 5003] <... close resumed>) = 0 [pid 5000] rmdir("./117/file0" [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5003] rmdir("./117" [pid 5001] unlink("./118/binderfs" [pid 4999] unlink("./116/binderfs" [pid 5000] getdents64(3, [pid 5001] <... unlink resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5001] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] mkdir("./118", 0777 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(3) = 0 [pid 5000] rmdir("./117") = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5000] mkdir("./118", 0777 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] <... mkdir resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5000] <... openat resumed>) = 3 [pid 6438] <... write resumed>) = 2097152 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] ioctl(3, LOOP_CLR_FD [pid 6438] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] close(3 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6438] <... munmap resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(3 [pid 6438] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6439 [pid 5001] lstat("./118/file0", [pid 6438] <... openat resumed>) = 4 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6440 [pid 6438] ioctl(4, LOOP_SET_FD, 3 [pid 5001] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 127.562240][ T6437] loop4: detected capacity change from 0 to 4096 [pid 5001] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6440 attached ./strace-static-x86_64: Process 6439 attached [pid 6440] chdir("./118" [pid 6439] chdir("./118" [pid 5001] <... openat resumed>) = 4 [pid 6439] <... chdir resumed>) = 0 [pid 6440] <... chdir resumed>) = 0 [pid 6439] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6440] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6439] <... prctl resumed>) = 0 [pid 6440] <... prctl resumed>) = 0 [pid 6439] setpgid(0, 0 [pid 6440] setpgid(0, 0) = 0 [pid 6439] <... setpgid resumed>) = 0 [pid 5001] fstat(4, [pid 6438] <... ioctl resumed>) = 0 [pid 6438] close(3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 6440] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6440] <... openat resumed>) = 3 [pid 6439] <... openat resumed>) = 3 [pid 6439] write(3, "1000", 4 [pid 6440] write(3, "1000", 4 [pid 6439] <... write resumed>) = 4 [pid 6440] <... write resumed>) = 4 [pid 6439] close(3 [pid 6440] close(3 [pid 6439] <... close resumed>) = 0 [pid 6440] <... close resumed>) = 0 [pid 6439] symlink("/dev/binderfs", "./binderfs" [pid 6440] symlink("/dev/binderfs", "./binderfs" [pid 6439] <... symlink resumed>) = 0 [pid 6440] <... symlink resumed>) = 0 [pid 6439] memfd_create("syzkaller", 0 [pid 6440] memfd_create("syzkaller", 0 [pid 6439] <... memfd_create resumed>) = 3 [pid 6440] <... memfd_create resumed>) = 3 [pid 6439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6439] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5001] getdents64(4, [pid 6437] <... mount resumed>) = 0 [pid 6440] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6438] <... close resumed>) = 0 [pid 6437] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6438] mkdir("./file0", 0777 [pid 6437] <... openat resumed>) = 3 [pid 5001] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6438] <... mkdir resumed>) = 0 [pid 6437] chdir("./file0" [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] lstat("./116/file0", [pid 6438] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6437] <... chdir resumed>) = 0 [pid 5001] close(4 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6437] ioctl(4, LOOP_CLR_FD [pid 5001] <... close resumed>) = 0 [pid 4999] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6437] <... ioctl resumed>) = 0 [pid 6437] close(4 [pid 5001] rmdir("./118/file0" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... rmdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6437] <... close resumed>) = 0 [ 127.604358][ T6438] loop0: detected capacity change from 0 to 4096 [ 127.618605][ T6441] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] getdents64(3, [pid 6440] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6437] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] <... openat resumed>) = 4 [pid 6438] <... mount resumed>) = 0 [pid 6438] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6438] chdir("./file0") = 0 [pid 6438] ioctl(4, LOOP_CLR_FD) = 0 [pid 6438] close(4) = 0 [pid 6438] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6438] unlink("./file1" [pid 6439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] close(3 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./118" [pid 4999] getdents64(4, [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] mkdir("./119", 0777 [pid 6437] <... openat resumed>) = 4 [pid 4999] close(4 [pid 5001] <... mkdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 6437] unlink("./file1" [pid 4999] rmdir("./116/file0") = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 6437] <... unlink resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 6437] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] rmdir("./116") = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] mkdir("./117", 0777 [pid 5001] close(3 [pid 4999] <... mkdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6443 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6444 ./strace-static-x86_64: Process 6444 attached [pid 6444] chdir("./117") = 0 [pid 6444] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6443 attached ) = 0 [pid 6444] setpgid(0, 0 [pid 6443] chdir("./119") = 0 [pid 6443] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6443] setpgid(0, 0) = 0 [pid 6444] <... setpgid resumed>) = 0 [pid 6444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6443] write(3, "1000", 4) = 4 [pid 6443] close(3 [pid 6444] <... openat resumed>) = 3 [pid 6443] <... close resumed>) = 0 [pid 6439] <... write resumed>) = 2097152 [pid 6440] <... write resumed>) = 2097152 [pid 6443] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6444] write(3, "1000", 4 [pid 6443] memfd_create("syzkaller", 0 [pid 6439] munmap(0x7f0ed4ac1000, 2097152 [pid 6444] <... write resumed>) = 4 [pid 6443] <... memfd_create resumed>) = 3 [pid 6443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6444] close(3 [pid 6443] <... mmap resumed>) = 0x7f0ed4ac1000 [ 127.653975][ T6442] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6444] <... close resumed>) = 0 [pid 6440] munmap(0x7f0ed4ac1000, 2097152 [pid 6444] symlink("/dev/binderfs", "./binderfs" [pid 6439] <... munmap resumed>) = 0 [pid 6439] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6439] ioctl(4, LOOP_SET_FD, 3 [pid 6444] <... symlink resumed>) = 0 [pid 6440] <... munmap resumed>) = 0 [pid 6444] memfd_create("syzkaller", 0 [pid 6440] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6444] <... memfd_create resumed>) = 3 [pid 6440] <... openat resumed>) = 4 [pid 6440] ioctl(4, LOOP_SET_FD, 3 [pid 6444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6438] <... unlink resumed>) = 0 [pid 6438] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6444] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6440] <... ioctl resumed>) = 0 [pid 6439] <... ioctl resumed>) = 0 [pid 6439] close(3) = 0 [pid 6439] mkdir("./file0", 0777 [pid 6440] close(3) = 0 [pid 6440] mkdir("./file0", 0777) = 0 [pid 6439] <... mkdir resumed>) = 0 [pid 6439] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6440] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6443] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 127.721675][ T6439] loop5: detected capacity change from 0 to 4096 [ 127.730785][ T6440] loop2: detected capacity change from 0 to 4096 [pid 6444] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6440] <... mount resumed>) = 0 [pid 6440] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6440] chdir("./file0") = 0 [pid 6440] ioctl(4, LOOP_CLR_FD) = 0 [pid 6440] close(4) = 0 [pid 6444] <... write resumed>) = 2097152 [pid 6440] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6440] unlink("./file1" [pid 6439] <... mount resumed>) = 0 [pid 6439] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6439] chdir("./file0") = 0 [pid 6439] ioctl(4, LOOP_CLR_FD) = 0 [pid 6439] close(4) = 0 [pid 6439] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6439] unlink("./file1" [pid 6443] <... write resumed>) = 2097152 [pid 6443] munmap(0x7f0ed4ac1000, 2097152 [pid 6437] <... pwritev resumed>) = 1114112 [pid 6437] exit_group(0) = ? [pid 6443] <... munmap resumed>) = 0 [pid 6443] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 127.785403][ T6445] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.805135][ T6446] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6443] ioctl(4, LOOP_SET_FD, 3 [pid 6444] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6444] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6439] <... unlink resumed>) = 0 [pid 6439] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6437] +++ exited with 0 +++ [pid 6444] <... openat resumed>) = 4 [pid 6443] <... ioctl resumed>) = 0 [pid 6444] ioctl(4, LOOP_SET_FD, 3 [pid 6443] close(3 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6437, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6444] <... ioctl resumed>) = 0 [pid 6443] <... close resumed>) = 0 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 6443] mkdir("./file0", 0777 [pid 5002] <... restart_syscall resumed>) = 0 [pid 6443] <... mkdir resumed>) = 0 [pid 6443] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6444] close(3 [pid 5002] <... openat resumed>) = 3 [pid 6444] <... close resumed>) = 0 [pid 5002] fstat(3, [pid 6444] mkdir("./file0", 0777 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6444] <... mkdir resumed>) = 0 [pid 5002] getdents64(3, [pid 6444] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6440] <... unlink resumed>) = 0 [pid 5002] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6440] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./120/binderfs") = 0 [ 127.836117][ T6443] loop3: detected capacity change from 0 to 4096 [ 127.862670][ T6444] loop1: detected capacity change from 0 to 4096 [pid 5002] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6443] <... mount resumed>) = 0 [pid 6443] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5002] <... umount2 resumed>) = 0 [pid 6443] chdir("./file0") = 0 [pid 6443] ioctl(4, LOOP_CLR_FD) = 0 [pid 6443] close(4 [pid 6438] <... pwritev resumed>) = 1114112 [pid 6443] <... close resumed>) = 0 [pid 6438] exit_group(0) = ? [pid 6443] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6443] unlink("./file1" [pid 5002] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./120/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6444] <... mount resumed>) = 0 [ 127.904303][ T6447] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6444] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5002] <... openat resumed>) = 4 [pid 6444] chdir("./file0" [pid 5002] fstat(4, [pid 6444] <... chdir resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6444] ioctl(4, LOOP_CLR_FD [pid 5002] getdents64(4, [pid 6444] <... ioctl resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6444] close(4) = 0 [pid 5002] getdents64(4, [pid 6444] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6444] <... openat resumed>) = 4 [pid 5002] close(4 [pid 6444] unlink("./file1" [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./120/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./120") = 0 [pid 5002] mkdir("./121", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6449 ./strace-static-x86_64: Process 6449 attached [pid 6449] chdir("./121") = 0 [pid 6444] <... unlink resumed>) = 0 [pid 6449] prctl(PR_SET_PDEATHSIG, SIGKILL [ 127.951435][ T6448] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6444] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6449] <... prctl resumed>) = 0 [pid 6443] <... unlink resumed>) = 0 [pid 6439] <... pwritev resumed>) = 1114112 [pid 6438] +++ exited with 0 +++ [pid 6439] exit_group(0) = ? [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6438, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6449] setpgid(0, 0 [pid 6443] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6449] <... setpgid resumed>) = 0 [pid 4998] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6439] +++ exited with 0 +++ [pid 6449] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6449] write(3, "1000", 4 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6439, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4998] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6449] <... write resumed>) = 4 [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 6449] close(3 [pid 5003] <... restart_syscall resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 6449] <... close resumed>) = 0 [pid 4998] fstat(3, [pid 6449] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5003] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6449] memfd_create("syzkaller", 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6449] <... memfd_create resumed>) = 3 [pid 5003] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] getdents64(3, [pid 6449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... openat resumed>) = 3 [pid 6449] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] fstat(3, [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6444] <... pwritev resumed>) = 1114112 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6444] exit_group(0 [pid 6440] <... pwritev resumed>) = 1114112 [pid 5003] getdents64(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6444] <... exit_group resumed>) = ? [pid 6440] exit_group(0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] lstat("./119/binderfs", [pid 5003] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./118/binderfs") = 0 [pid 5003] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6440] <... exit_group resumed>) = ? [pid 5003] <... umount2 resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./119/binderfs") = 0 [pid 4998] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./118/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./118/file0") = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./118") = 0 [pid 5003] mkdir("./119", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6450 ./strace-static-x86_64: Process 6450 attached [pid 6450] chdir("./119") = 0 [pid 6450] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] <... umount2 resumed>) = 0 [pid 6450] <... prctl resumed>) = 0 [pid 6450] setpgid(0, 0 [pid 4998] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6450] <... setpgid resumed>) = 0 [pid 6450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6450] <... openat resumed>) = 3 [pid 6450] write(3, "1000", 4 [pid 4998] lstat("./119/file0", [pid 6450] <... write resumed>) = 4 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6450] close(3 [pid 6449] <... write resumed>) = 2097152 [pid 6450] <... close resumed>) = 0 [pid 6449] munmap(0x7f0ed4ac1000, 2097152 [pid 4998] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6450] symlink("/dev/binderfs", "./binderfs" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6450] <... symlink resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6450] memfd_create("syzkaller", 0 [pid 6449] <... munmap resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 6450] <... memfd_create resumed>) = 3 [pid 6449] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4998] fstat(4, [pid 6450] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6449] <... openat resumed>) = 4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6450] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6449] ioctl(4, LOOP_SET_FD, 3 [pid 4998] getdents64(4, [pid 6450] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6444] +++ exited with 0 +++ [pid 6443] <... pwritev resumed>) = 1114112 [pid 6440] +++ exited with 0 +++ [pid 6443] exit_group(0) = ? [pid 6449] <... ioctl resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6440, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6444, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6449] close(3 [pid 4998] getdents64(4, [pid 6449] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6449] mkdir("./file0", 0777 [pid 5000] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(4 [pid 6449] <... mkdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] rmdir("./119/file0" [pid 5000] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... rmdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 4998] getdents64(3, [pid 6449] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] fstat(3, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 4999] getdents64(3, [pid 4998] close(3 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./117/binderfs", [pid 4998] rmdir("./119" [pid 5000] lstat("./118/binderfs", [pid 4998] <... rmdir resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./118/binderfs" [pid 4999] unlink("./117/binderfs" [pid 4998] mkdir("./120", 0777 [pid 4999] <... unlink resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 4999] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... mkdir resumed>) = 0 [pid 5000] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6450] <... write resumed>) = 2097152 [pid 6450] munmap(0x7f0ed4ac1000, 2097152 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6450] <... munmap resumed>) = 0 [pid 6450] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6450] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6450] close(3) = 0 [pid 6450] mkdir("./file0", 0777) = 0 [pid 6450] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6451 [pid 6449] <... mount resumed>) = 0 [ 128.183407][ T6449] loop4: detected capacity change from 0 to 4096 [ 128.212914][ T6450] loop5: detected capacity change from 0 to 4096 [pid 5000] <... umount2 resumed>) = 0 [pid 6449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6443] +++ exited with 0 +++ [pid 6449] <... openat resumed>) = 3 [pid 6449] chdir("./file0") = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6443, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6449] ioctl(4, LOOP_CLR_FD) = 0 [pid 5001] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6449] close(4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6449] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6449] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 6449] <... openat resumed>) = 4 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6449] unlink("./file1" [pid 5001] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./119/binderfs") = 0 [pid 5001] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./117/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6451 attached [pid 5000] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6449] <... unlink resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6451] chdir("./120" [pid 6449] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] <... openat resumed>) = 4 [pid 6451] <... chdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6451] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] fstat(4, [pid 6451] <... prctl resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6451] setpgid(0, 0 [pid 4999] getdents64(4, [pid 6451] <... setpgid resumed>) = 0 [pid 6451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 6451] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 6451] write(3, "1000", 4 [pid 4999] rmdir("./117/file0" [pid 6451] <... write resumed>) = 4 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 6451] close(3 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6451] <... close resumed>) = 0 [pid 4999] close(3 [pid 6451] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./117" [pid 6451] <... symlink resumed>) = 0 [pid 5000] lstat("./118/file0", [pid 4999] <... rmdir resumed>) = 0 [pid 6451] memfd_create("syzkaller", 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] mkdir("./118", 0777 [pid 6451] <... memfd_create resumed>) = 3 [pid 4999] <... mkdir resumed>) = 0 [pid 6451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6451] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5000] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6454 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [ 128.232549][ T6452] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] close(4) = 0 [pid 5000] rmdir("./118/file0"./strace-static-x86_64: Process 6454 attached [pid 6454] chdir("./118" [pid 5000] <... rmdir resumed>) = 0 [pid 6454] <... chdir resumed>) = 0 [pid 6454] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6454] setpgid(0, 0) = 0 [pid 5000] getdents64(3, [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6451] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6450] <... mount resumed>) = 0 [pid 5001] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(3 [pid 6454] <... openat resumed>) = 3 [pid 6454] write(3, "1000", 4) = 4 [pid 6454] close(3) = 0 [pid 6450] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 6454] symlink("/dev/binderfs", "./binderfs" [pid 6450] <... openat resumed>) = 3 [pid 5001] lstat("./119/file0", [pid 5000] rmdir("./118" [pid 6454] <... symlink resumed>) = 0 [pid 6450] chdir("./file0" [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 6454] memfd_create("syzkaller", 0 [pid 6450] <... chdir resumed>) = 0 [pid 5001] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] mkdir("./119", 0777 [pid 6454] <... memfd_create resumed>) = 3 [pid 6450] ioctl(4, LOOP_CLR_FD [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6450] <... ioctl resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... mkdir resumed>) = 0 [pid 6454] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6450] close(4 [pid 5001] <... openat resumed>) = 4 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6450] <... close resumed>) = 0 [pid 5001] fstat(4, [pid 5000] <... openat resumed>) = 3 [pid 6450] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] getdents64(4, [pid 5000] close(3 [pid 6450] <... openat resumed>) = 4 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] <... close resumed>) = 0 [pid 6450] unlink("./file1" [pid 5001] getdents64(4, [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6455 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./119/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6451] <... write resumed>) = 2097152 [pid 5001] close(3 [pid 6451] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./119"./strace-static-x86_64: Process 6455 attached [pid 6451] <... munmap resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] mkdir("./120", 0777 [pid 6455] chdir("./119") = 0 [pid 6451] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] <... mkdir resumed>) = 0 [pid 6455] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6451] <... openat resumed>) = 4 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6455] <... prctl resumed>) = 0 [pid 6451] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... openat resumed>) = 3 [pid 6455] setpgid(0, 0 [ 128.299284][ T6453] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] ioctl(3, LOOP_CLR_FD [pid 6455] <... setpgid resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6455] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] close(3 [pid 6455] <... openat resumed>) = 3 [pid 5001] <... close resumed>) = 0 [pid 6455] write(3, "1000", 4 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6455] <... write resumed>) = 4 [pid 6455] close(3 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6456 [pid 6455] <... close resumed>) = 0 [pid 6455] symlink("/dev/binderfs", "./binderfs" [pid 6451] <... ioctl resumed>) = 0 [pid 6455] <... symlink resumed>) = 0 [pid 6451] close(3 [pid 6455] memfd_create("syzkaller", 0 [pid 6451] <... close resumed>) = 0 [pid 6455] <... memfd_create resumed>) = 3 [pid 6451] mkdir("./file0", 0777 [pid 6455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6454] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6451] <... mkdir resumed>) = 0 [pid 6450] <... unlink resumed>) = 0 [pid 6450] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6451] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, ""./strace-static-x86_64: Process 6456 attached [pid 6456] chdir("./120") = 0 [pid 6456] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6456] setpgid(0, 0) = 0 [pid 6456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6449] <... pwritev resumed>) = 1114112 [pid 6456] write(3, "1000", 4 [pid 6449] exit_group(0 [pid 6456] <... write resumed>) = 4 [pid 6455] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6454] <... write resumed>) = 2097152 [pid 6449] <... exit_group resumed>) = ? [ 128.359680][ T6451] loop0: detected capacity change from 0 to 4096 [pid 6456] close(3 [pid 6455] <... write resumed>) = 2097152 [pid 6454] munmap(0x7f0ed4ac1000, 2097152 [pid 6451] <... mount resumed>) = 0 [pid 6456] <... close resumed>) = 0 [pid 6451] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6456] symlink("/dev/binderfs", "./binderfs" [pid 6451] <... openat resumed>) = 3 [pid 6456] <... symlink resumed>) = 0 [pid 6451] chdir("./file0" [pid 6456] memfd_create("syzkaller", 0 [pid 6451] <... chdir resumed>) = 0 [pid 6456] <... memfd_create resumed>) = 3 [pid 6451] ioctl(4, LOOP_CLR_FD [pid 6456] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6455] munmap(0x7f0ed4ac1000, 2097152 [pid 6451] <... ioctl resumed>) = 0 [pid 6456] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6451] close(4 [pid 6454] <... munmap resumed>) = 0 [pid 6454] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6454] ioctl(4, LOOP_SET_FD, 3 [pid 6455] <... munmap resumed>) = 0 [pid 6451] <... close resumed>) = 0 [pid 6455] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6451] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6455] <... openat resumed>) = 4 [pid 6451] <... openat resumed>) = 4 [pid 6456] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6455] ioctl(4, LOOP_SET_FD, 3 [pid 6454] <... ioctl resumed>) = 0 [ 128.429402][ T6457] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.447506][ T6454] loop1: detected capacity change from 0 to 4096 [pid 6451] unlink("./file1" [pid 6455] <... ioctl resumed>) = 0 [pid 6454] close(3) = 0 [pid 6454] mkdir("./file0", 0777) = 0 [pid 6454] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6451] <... unlink resumed>) = 0 [pid 6451] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6449] +++ exited with 0 +++ [pid 6455] close(3) = 0 [pid 6455] mkdir("./file0", 0777) = 0 [pid 6455] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6449, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5002] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./121/binderfs") = 0 [pid 5002] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6450] <... pwritev resumed>) = 1114112 [pid 6450] exit_group(0) = ? [pid 6454] <... mount resumed>) = 0 [pid 6454] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6454] chdir("./file0") = 0 [pid 6454] ioctl(4, LOOP_CLR_FD) = 0 [pid 6454] close(4) = 0 [ 128.481435][ T6455] loop2: detected capacity change from 0 to 4096 [pid 6454] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5002] <... umount2 resumed>) = 0 [pid 6456] <... write resumed>) = 2097152 [pid 6454] unlink("./file1" [pid 5002] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./121/file0", [pid 6456] munmap(0x7f0ed4ac1000, 2097152 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6456] <... munmap resumed>) = 0 [pid 6450] +++ exited with 0 +++ [pid 5002] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6450, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6456] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 4 [pid 6456] <... openat resumed>) = 4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] fstat(4, [pid 6456] ioctl(4, LOOP_SET_FD, 3 [pid 5003] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6456] <... ioctl resumed>) = 0 [pid 6456] close(3) = 0 [pid 6456] mkdir("./file0", 0777) = 0 [ 128.530166][ T6458] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.567599][ T6456] loop3: detected capacity change from 0 to 4096 [pid 6456] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] fstat(3, [pid 5002] getdents64(4, [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6455] <... mount resumed>) = 0 [pid 5003] getdents64(3, [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6455] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] getdents64(4, [pid 6455] <... openat resumed>) = 3 [pid 5003] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6455] chdir("./file0" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] close(4 [pid 6455] <... chdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 6455] ioctl(4, LOOP_CLR_FD [pid 5003] lstat("./119/binderfs", [pid 5002] rmdir("./121/file0" [pid 6455] <... ioctl resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6455] close(4 [pid 5003] unlink("./119/binderfs" [pid 5002] <... rmdir resumed>) = 0 [pid 6455] <... close resumed>) = 0 [pid 5003] <... unlink resumed>) = 0 [pid 5003] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./121") = 0 [pid 5002] mkdir("./122", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6455] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6454] <... unlink resumed>) = 0 [pid 6454] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0./strace-static-x86_64: Process 6460 attached [pid 6455] <... openat resumed>) = 4 [pid 5003] <... umount2 resumed>) = 0 [pid 6455] unlink("./file1" [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6460 [pid 6460] chdir("./122") = 0 [pid 6460] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6460] setpgid(0, 0) = 0 [pid 6460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6460] write(3, "1000", 4) = 4 [pid 6460] close(3) = 0 [ 128.577630][ T6459] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6460] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6456] <... mount resumed>) = 0 [pid 6456] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6456] chdir("./file0") = 0 [pid 6456] ioctl(4, LOOP_CLR_FD) = 0 [pid 6456] close(4 [pid 6460] memfd_create("syzkaller", 0 [pid 6456] <... close resumed>) = 0 [pid 6455] <... unlink resumed>) = 0 [pid 6460] <... memfd_create resumed>) = 3 [pid 6456] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6455] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6460] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6456] <... openat resumed>) = 4 [pid 6456] unlink("./file1" [pid 5003] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6451] <... pwritev resumed>) = 1114112 [pid 6460] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6451] exit_group(0) = ? [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./119/file0") = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./119") = 0 [pid 5003] mkdir("./120", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6462 ./strace-static-x86_64: Process 6462 attached [pid 6462] chdir("./120") = 0 [pid 6462] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6462] setpgid(0, 0) = 0 [pid 6462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6462] write(3, "1000", 4) = 4 [pid 6462] close(3) = 0 [pid 6462] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6462] memfd_create("syzkaller", 0) = 3 [pid 6462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [ 128.624967][ T6461] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6460] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6456] <... unlink resumed>) = 0 [pid 6456] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6462] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6460] <... write resumed>) = 2097152 [pid 6451] +++ exited with 0 +++ [pid 6460] munmap(0x7f0ed4ac1000, 2097152 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6451, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6460] <... munmap resumed>) = 0 [pid 4998] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6460] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6460] <... openat resumed>) = 4 [pid 4998] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./120/binderfs") = 0 [pid 4998] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6460] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... umount2 resumed>) = 0 [pid 6460] <... ioctl resumed>) = 0 [pid 4998] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6460] close(3 [pid 4998] lstat("./120/file0", [pid 6460] <... close resumed>) = 0 [pid 6456] <... pwritev resumed>) = 1114112 [pid 6460] mkdir("./file0", 0777 [pid 6456] exit_group(0 [pid 6460] <... mkdir resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6460] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6456] <... exit_group resumed>) = ? [pid 4998] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./120/file0" [pid 6455] <... pwritev resumed>) = 1114112 [pid 4998] <... rmdir resumed>) = 0 [pid 6455] exit_group(0) = ? [pid 4998] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./120") = 0 [pid 4998] mkdir("./121", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6462] <... write resumed>) = 2097152 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 128.768334][ T6460] loop4: detected capacity change from 0 to 4096 [pid 4998] close(3 [pid 6462] munmap(0x7f0ed4ac1000, 2097152 [pid 6456] +++ exited with 0 +++ [pid 6462] <... munmap resumed>) = 0 [pid 6462] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6456, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6462] <... openat resumed>) = 4 [pid 5001] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6462] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6454] <... pwritev resumed>) = 1114112 [pid 4998] <... close resumed>) = 0 [pid 6454] exit_group(0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6454] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6464 attached [pid 6462] <... ioctl resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6464] chdir("./121" [pid 6462] close(3 [pid 5001] <... openat resumed>) = 3 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6464 [pid 6464] <... chdir resumed>) = 0 [pid 6462] <... close resumed>) = 0 [pid 6460] <... mount resumed>) = 0 [pid 6455] +++ exited with 0 +++ [pid 5001] fstat(3, [pid 6464] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6462] mkdir("./file0", 0777 [pid 6460] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6455, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6464] <... prctl resumed>) = 0 [pid 6462] <... mkdir resumed>) = 0 [pid 6460] <... openat resumed>) = 3 [pid 5001] getdents64(3, [pid 6464] setpgid(0, 0 [pid 6462] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6460] chdir("./file0" [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6464] <... setpgid resumed>) = 0 [pid 6460] <... chdir resumed>) = 0 [pid 5001] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6460] ioctl(4, LOOP_CLR_FD [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6464] <... openat resumed>) = 3 [pid 6460] <... ioctl resumed>) = 0 [pid 5001] lstat("./120/binderfs", [pid 6464] write(3, "1000", 4 [pid 6460] close(4 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6464] <... write resumed>) = 4 [pid 6460] <... close resumed>) = 0 [pid 5001] unlink("./120/binderfs" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6464] close(3 [pid 6460] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] <... unlink resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6464] <... close resumed>) = 0 [pid 5001] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 3 [pid 6464] symlink("/dev/binderfs", "./binderfs" [pid 5000] fstat(3, [pid 6464] <... symlink resumed>) = 0 [pid 6460] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6464] memfd_create("syzkaller", 0 [pid 6460] unlink("./file1" [pid 5000] getdents64(3, [pid 6464] <... memfd_create resumed>) = 3 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6464] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6460] <... unlink resumed>) = 0 [pid 5000] lstat("./119/binderfs", [ 128.830849][ T6463] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.836560][ T6462] loop5: detected capacity change from 0 to 4096 [pid 6460] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./119/binderfs") = 0 [pid 5000] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./120/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./120/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./120") = 0 [pid 5001] mkdir("./121", 0777) = 0 [pid 6464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6466 ./strace-static-x86_64: Process 6466 attached [pid 6466] chdir("./121") = 0 [pid 6466] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6466] setpgid(0, 0) = 0 [pid 6466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6466] write(3, "1000", 4) = 4 [pid 6466] close(3) = 0 [pid 6466] symlink("/dev/binderfs", "./binderfs" [pid 6462] <... mount resumed>) = 0 [pid 6466] <... symlink resumed>) = 0 [pid 6462] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6466] memfd_create("syzkaller", 0 [pid 6462] <... openat resumed>) = 3 [pid 6466] <... memfd_create resumed>) = 3 [pid 6462] chdir("./file0" [pid 6466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6464] <... write resumed>) = 2097152 [pid 6462] <... chdir resumed>) = 0 [pid 6466] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6462] ioctl(4, LOOP_CLR_FD) = 0 [pid 6462] close(4) = 0 [pid 6462] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5000] <... umount2 resumed>) = 0 [pid 6462] unlink("./file1" [pid 6454] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6454, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./118/binderfs", [pid 6462] <... unlink resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6462] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] unlink("./118/binderfs") = 0 [ 128.917208][ T6465] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6464] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 6464] <... munmap resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./119/file0" [pid 6464] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6464] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./119") = 0 [pid 5000] mkdir("./120", 0777) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6467 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./118/file0", [pid 6466] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6467 attached [pid 6464] <... ioctl resumed>) = 0 [pid 6460] <... pwritev resumed>) = 1114112 [pid 6467] chdir("./120" [pid 6464] close(3 [pid 6460] exit_group(0 [pid 4999] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6467] <... chdir resumed>) = 0 [pid 6464] <... close resumed>) = 0 [pid 6460] <... exit_group resumed>) = ? [ 128.988247][ T6464] loop0: detected capacity change from 0 to 4096 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6467] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6466] <... write resumed>) = 2097152 [pid 6464] mkdir("./file0", 0777 [pid 4999] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6466] munmap(0x7f0ed4ac1000, 2097152 [pid 4999] <... openat resumed>) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 6466] <... munmap resumed>) = 0 [pid 4999] getdents64(4, [pid 6466] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6466] <... openat resumed>) = 4 [pid 4999] close(4 [pid 6466] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... close resumed>) = 0 [pid 6467] <... prctl resumed>) = 0 [pid 6464] <... mkdir resumed>) = 0 [pid 4999] rmdir("./118/file0" [pid 6467] setpgid(0, 0 [pid 6464] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 6467] <... setpgid resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./118" [pid 6467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./119", 0777 [pid 6467] <... openat resumed>) = 3 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6467] write(3, "1000", 4 [pid 4999] close(3 [pid 6467] <... write resumed>) = 4 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6468 ./strace-static-x86_64: Process 6468 attached [pid 6468] chdir("./119") = 0 [pid 6468] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6468] setpgid(0, 0) = 0 [pid 6466] <... ioctl resumed>) = 0 [pid 6468] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6466] close(3) = 0 [pid 6466] mkdir("./file0", 0777 [pid 6468] <... openat resumed>) = 3 [pid 6466] <... mkdir resumed>) = 0 [pid 6468] write(3, "1000", 4) = 4 [pid 6468] close(3) = 0 [pid 6468] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6466] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6467] close(3) = 0 [pid 6467] symlink("/dev/binderfs", "./binderfs" [pid 6468] memfd_create("syzkaller", 0 [pid 6467] <... symlink resumed>) = 0 [pid 6468] <... memfd_create resumed>) = 3 [pid 6467] memfd_create("syzkaller", 0 [pid 6468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6467] <... memfd_create resumed>) = 3 [pid 6468] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6462] <... pwritev resumed>) = 1114112 [pid 6462] exit_group(0) = ? [pid 6464] <... mount resumed>) = 0 [pid 6467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6460] +++ exited with 0 +++ [pid 6464] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6460, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 6464] chdir("./file0" [pid 5002] <... restart_syscall resumed>) = 0 [pid 6464] <... chdir resumed>) = 0 [pid 6464] ioctl(4, LOOP_CLR_FD) = 0 [pid 6464] close(4 [pid 5002] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6464] <... close resumed>) = 0 [pid 6462] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6462, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 6466] <... mount resumed>) = 0 [pid 5003] <... restart_syscall resumed>) = 0 [pid 6466] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6466] chdir("./file0" [pid 5003] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6466] <... chdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6466] ioctl(4, LOOP_CLR_FD [pid 5003] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6466] <... ioctl resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 6466] close(4 [pid 5003] fstat(3, [pid 6466] <... close resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6466] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6464] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] getdents64(3, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6466] <... openat resumed>) = 4 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6466] unlink("./file1" [pid 6464] <... openat resumed>) = 4 [ 129.045754][ T6466] loop3: detected capacity change from 0 to 4096 [ 129.078024][ T6469] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5003] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6464] unlink("./file1" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 3 [pid 5003] lstat("./120/binderfs", [pid 5002] fstat(3, [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./120/binderfs" [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6464] <... unlink resumed>) = 0 [pid 5003] <... unlink resumed>) = 0 [pid 5002] getdents64(3, [pid 6464] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./122/binderfs") = 0 [pid 5002] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6467] <... write resumed>) = 2097152 [pid 6468] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6467] munmap(0x7f0ed4ac1000, 2097152 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./122/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6467] <... munmap resumed>) = 0 [pid 5002] fstat(4, [pid 6467] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 129.136121][ T6470] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6467] ioctl(4, LOOP_SET_FD, 3 [pid 6466] <... unlink resumed>) = 0 [pid 6466] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6467] <... ioctl resumed>) = 0 [pid 6467] close(3) = 0 [pid 6467] mkdir("./file0", 0777) = 0 [pid 6468] <... write resumed>) = 2097152 [pid 6467] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] <... umount2 resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./122/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./122" [pid 6468] munmap(0x7f0ed4ac1000, 2097152 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./123", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] close(3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... close resumed>) = 0 [pid 5003] lstat("./120/file0", [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6471 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./120/file0" [pid 6468] <... munmap resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5003] getdents64(3, ./strace-static-x86_64: Process 6471 attached 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6471] chdir("./123" [ 129.179159][ T6467] loop2: detected capacity change from 0 to 4096 [pid 5003] close(3 [pid 6471] <... chdir resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 6471] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6468] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] rmdir("./120" [pid 6471] <... prctl resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 6471] setpgid(0, 0 [pid 5003] mkdir("./121", 0777 [pid 6471] <... setpgid resumed>) = 0 [pid 6468] <... openat resumed>) = 4 [pid 5003] <... mkdir resumed>) = 0 [pid 6471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6468] ioctl(4, LOOP_SET_FD, 3 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6471] <... openat resumed>) = 3 [pid 5003] <... openat resumed>) = 3 [pid 6471] write(3, "1000", 4 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 6471] <... write resumed>) = 4 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6471] close(3 [pid 5003] close(3 [pid 6471] <... close resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 6471] symlink("/dev/binderfs", "./binderfs" [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6471] <... symlink resumed>) = 0 [pid 6471] memfd_create("syzkaller", 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6473 [pid 6471] <... memfd_create resumed>) = 3 [pid 6471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 6473 attached [pid 6473] chdir("./121") = 0 [pid 6473] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6473] setpgid(0, 0) = 0 [pid 6473] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6473] write(3, "1000", 4) = 4 [pid 6473] close(3) = 0 [pid 6473] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6473] memfd_create("syzkaller", 0) = 3 [pid 6473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6467] <... mount resumed>) = 0 [pid 6467] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6467] chdir("./file0") = 0 [pid 6467] ioctl(4, LOOP_CLR_FD) = 0 [pid 6467] close(4) = 0 [pid 6467] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6473] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6468] <... ioctl resumed>) = 0 [pid 6467] <... openat resumed>) = 4 [pid 6468] close(3 [pid 6467] unlink("./file1" [pid 6468] <... close resumed>) = 0 [pid 6468] mkdir("./file0", 0777) = 0 [pid 6468] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6464] <... pwritev resumed>) = 1114112 [ 129.244944][ T6468] loop1: detected capacity change from 0 to 4096 [ 129.267036][ T6472] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6464] exit_group(0) = ? [pid 6468] <... mount resumed>) = 0 [pid 6467] <... unlink resumed>) = 0 [pid 6468] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6467] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6468] <... openat resumed>) = 3 [pid 6471] <... write resumed>) = 2097152 [pid 6471] munmap(0x7f0ed4ac1000, 2097152 [pid 6468] chdir("./file0" [pid 6466] <... pwritev resumed>) = 1114112 [pid 6466] exit_group(0 [pid 6468] <... chdir resumed>) = 0 [pid 6471] <... munmap resumed>) = 0 [pid 6466] <... exit_group resumed>) = ? [pid 6468] ioctl(4, LOOP_CLR_FD [pid 6471] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6468] <... ioctl resumed>) = 0 [pid 6471] ioctl(4, LOOP_SET_FD, 3 [ 129.323446][ T6474] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6468] close(4) = 0 [pid 6468] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6468] unlink("./file1") = 0 [pid 6468] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6473] <... write resumed>) = 2097152 [pid 6473] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6473] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6473] ioctl(4, LOOP_SET_FD, 3 [pid 6471] <... ioctl resumed>) = 0 [pid 6471] close(3) = 0 [pid 6471] mkdir("./file0", 0777 [pid 6464] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6464, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 6471] <... mkdir resumed>) = 0 [pid 6471] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] <... restart_syscall resumed>) = 0 [pid 4998] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6466] +++ exited with 0 +++ [pid 4998] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6466, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5001] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] lstat("./121/binderfs", [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, [pid 6473] <... ioctl resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6473] close(3 [pid 5001] getdents64(3, [pid 6473] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6473] mkdir("./file0", 0777 [pid 5001] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6473] <... mkdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6473] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] lstat("./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./121/binderfs") = 0 [pid 5001] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./121/binderfs") = 0 [ 129.372041][ T6471] loop4: detected capacity change from 0 to 4096 [ 129.393634][ T6473] loop5: detected capacity change from 0 to 4096 [pid 4998] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6473] <... mount resumed>) = 0 [pid 6473] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6473] chdir("./file0") = 0 [pid 6473] ioctl(4, LOOP_CLR_FD) = 0 [pid 6473] close(4) = 0 [pid 6471] <... mount resumed>) = 0 [pid 6473] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6471] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6473] <... openat resumed>) = 4 [pid 6471] <... openat resumed>) = 3 [pid 6473] unlink("./file1" [pid 6471] chdir("./file0") = 0 [pid 6471] ioctl(4, LOOP_CLR_FD) = 0 [pid 6471] close(4) = 0 [pid 6471] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6471] unlink("./file1" [pid 5001] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5001] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] lstat("./121/file0", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] lstat("./121/file0", [pid 5001] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6467] <... pwritev resumed>) = 1114112 [pid 6467] exit_group(0 [pid 5001] <... openat resumed>) = 4 [pid 4998] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6467] <... exit_group resumed>) = ? [pid 5001] fstat(4, [pid 4998] <... openat resumed>) = 4 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, [pid 4998] fstat(4, [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6471] <... unlink resumed>) = 0 [pid 5001] getdents64(4, [pid 4998] getdents64(4, [pid 6471] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] close(4 [pid 4998] getdents64(4, [pid 6473] <... unlink resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] rmdir("./121/file0" [pid 4998] close(4 [pid 6473] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] <... close resumed>) = 0 [ 129.452733][ T6476] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.466637][ T6475] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] <... rmdir resumed>) = 0 [pid 4998] rmdir("./121/file0" [pid 6467] +++ exited with 0 +++ [pid 5001] getdents64(3, [pid 4998] <... rmdir resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6467, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] getdents64(3, [pid 5001] close(3 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] <... close resumed>) = 0 [pid 4998] close(3 [pid 5001] rmdir("./121" [pid 4998] <... close resumed>) = 0 [pid 5000] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] rmdir("./121" [pid 5000] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] mkdir("./122", 0777 [pid 5000] getdents64(3, [pid 4998] <... rmdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] mkdir("./122", 0777 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./120/binderfs", [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5000] unlink("./120/binderfs" [pid 5001] <... openat resumed>) = 3 [pid 5000] <... unlink resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... openat resumed>) = 3 [pid 5001] close(3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5001] <... close resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] close(3) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6477 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6478 [pid 5000] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6477 attached [pid 6477] chdir("./122") = 0 [pid 6477] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6477] setpgid(0, 0) = 0 [pid 6477] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6477] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6477] write(3, "1000", 4) = 4 [pid 5000] lstat("./120/file0", [pid 6477] close(3) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6477] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6478 attached [pid 6478] chdir("./122" [pid 6477] <... symlink resumed>) = 0 [pid 5000] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6477] memfd_create("syzkaller", 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6478] <... chdir resumed>) = 0 [pid 6477] <... memfd_create resumed>) = 3 [pid 6468] <... pwritev resumed>) = 1114112 [pid 5000] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6478] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6468] exit_group(0 [pid 6478] <... prctl resumed>) = 0 [pid 6477] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6468] <... exit_group resumed>) = ? [pid 5000] <... openat resumed>) = 4 [pid 6478] setpgid(0, 0 [pid 6477] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6478] <... setpgid resumed>) = 0 [pid 5000] fstat(4, [pid 6478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6477] <... write resumed>) = 2097152 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6478] write(3, "1000", 4) = 4 [pid 6478] close(3 [pid 6477] munmap(0x7f0ed4ac1000, 2097152 [pid 6478] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 6478] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6478] memfd_create("syzkaller", 0) = 3 [pid 6477] <... munmap resumed>) = 0 [pid 6478] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6478] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6477] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5000] getdents64(4, [pid 6477] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 6477] <... ioctl resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./120/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./120") = 0 [pid 5000] mkdir("./121", 0777) = 0 [pid 6477] close(3 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6477] <... close resumed>) = 0 [pid 6477] mkdir("./file0", 0777 [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 6477] <... mkdir resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6477] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] close(3) = 0 [pid 6478] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6480 ./strace-static-x86_64: Process 6480 attached [pid 6468] +++ exited with 0 +++ [pid 6480] chdir("./121" [pid 6477] <... mount resumed>) = 0 [pid 6477] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6468, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6480] <... chdir resumed>) = 0 [pid 6477] <... openat resumed>) = 3 [pid 6477] chdir("./file0") = 0 [pid 4999] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6480] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6477] ioctl(4, LOOP_CLR_FD [pid 6471] <... pwritev resumed>) = 1114112 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6477] <... ioctl resumed>) = 0 [pid 6473] <... pwritev resumed>) = 1114112 [pid 4999] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6480] <... prctl resumed>) = 0 [pid 6477] close(4 [pid 6471] exit_group(0 [pid 4999] <... openat resumed>) = 3 [pid 6473] exit_group(0 [pid 6477] <... close resumed>) = 0 [pid 4999] fstat(3, [pid 6477] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6480] setpgid(0, 0 [pid 6477] <... openat resumed>) = 4 [pid 6473] <... exit_group resumed>) = ? [pid 6471] <... exit_group resumed>) = ? [ 129.642246][ T6477] loop3: detected capacity change from 0 to 4096 [ 129.678643][ T6479] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] getdents64(3, [pid 6480] <... setpgid resumed>) = 0 [pid 6477] unlink("./file1" [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./119/binderfs") = 0 [pid 4999] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6478] <... write resumed>) = 2097152 [pid 6478] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6478] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6478] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6478] close(3 [pid 6480] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6478] <... close resumed>) = 0 [pid 6478] mkdir("./file0", 0777 [pid 6480] write(3, "1000", 4) = 4 [pid 6480] close(3) = 0 [pid 6480] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6480] memfd_create("syzkaller", 0) = 3 [pid 6480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6478] <... mkdir resumed>) = 0 [pid 6480] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6478] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6477] <... unlink resumed>) = 0 [pid 6477] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [ 129.713641][ T6478] loop0: detected capacity change from 0 to 4096 [pid 4999] getdents64(4, [pid 6480] <... write resumed>) = 2097152 [pid 6473] +++ exited with 0 +++ [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6473, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./119/file0" [pid 6480] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./119") = 0 [pid 4999] mkdir("./120", 0777 [pid 6480] <... munmap resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5003] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6480] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] <... openat resumed>) = 3 [pid 6480] <... openat resumed>) = 4 [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6482 ./strace-static-x86_64: Process 6482 attached [pid 6482] chdir("./120") = 0 [pid 6482] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6482] setpgid(0, 0) = 0 [pid 6482] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6482] write(3, "1000", 4) = 4 [pid 6482] close(3) = 0 [pid 6482] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6482] memfd_create("syzkaller", 0) = 3 [pid 6482] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6480] ioctl(4, LOOP_SET_FD, 3 [pid 5003] fstat(3, [pid 6471] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6471, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5002] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./123/binderfs") = 0 [pid 5002] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6482] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6480] <... ioctl resumed>) = 0 [pid 5003] getdents64(3, [pid 6478] <... mount resumed>) = 0 [pid 6478] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6478] chdir("./file0") = 0 [pid 6478] ioctl(4, LOOP_CLR_FD) = 0 [pid 6478] close(4) = 0 [pid 6478] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6478] unlink("./file1" [pid 6480] close(3 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6480] <... close resumed>) = 0 [pid 5003] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6480] mkdir("./file0", 0777 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6480] <... mkdir resumed>) = 0 [pid 5003] lstat("./121/binderfs", [pid 6480] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./121/binderfs") = 0 [pid 5003] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 6478] <... unlink resumed>) = 0 [pid 5003] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 129.794855][ T6480] loop2: detected capacity change from 0 to 4096 [ 129.802585][ T6481] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6478] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6480] <... mount resumed>) = 0 [pid 6477] <... pwritev resumed>) = 1114112 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./123/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./123/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./123") = 0 [pid 6482] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] mkdir("./124", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6480] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6477] exit_group(0 [pid 5003] lstat("./121/file0", [pid 5002] <... openat resumed>) = 3 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 6480] <... openat resumed>) = 3 [pid 6477] <... exit_group resumed>) = ? [pid 5003] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6480] chdir("./file0" [pid 5002] close(3) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6480] <... chdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6480] ioctl(4, LOOP_CLR_FD [pid 5003] <... openat resumed>) = 4 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6484 [pid 6480] <... ioctl resumed>) = 0 [pid 5003] fstat(4, [pid 6480] close(4) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6480] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] getdents64(4, ./strace-static-x86_64: Process 6484 attached 0x555556045660 /* 2 entries */, 32768) = 48 [pid 6484] chdir("./124" [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 6484] <... chdir resumed>) = 0 [pid 5003] close(4 [pid 6484] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6482] <... write resumed>) = 2097152 [pid 6480] <... openat resumed>) = 4 [pid 5003] <... close resumed>) = 0 [pid 6484] <... prctl resumed>) = 0 [pid 6484] setpgid(0, 0) = 0 [pid 6484] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6480] unlink("./file1" [pid 5003] rmdir("./121/file0" [pid 6484] <... openat resumed>) = 3 [pid 6484] write(3, "1000", 4) = 4 [pid 5003] <... rmdir resumed>) = 0 [pid 6484] close(3) = 0 [pid 6484] symlink("/dev/binderfs", "./binderfs" [pid 6480] <... unlink resumed>) = 0 [pid 5003] getdents64(3, [pid 6484] <... symlink resumed>) = 0 [pid 6480] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6484] memfd_create("syzkaller", 0) = 3 [pid 6484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [ 129.867316][ T6483] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6484] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] close(3) = 0 [pid 5003] rmdir("./121") = 0 [pid 5003] mkdir("./122", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6477] +++ exited with 0 +++ [pid 5003] <... openat resumed>) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6477, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5003] close(3 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6485 [pid 6482] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6485 attached [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6485] chdir("./122" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6485] <... chdir resumed>) = 0 [pid 5001] lstat("./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6485] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5001] unlink("./122/binderfs" [pid 6485] setpgid(0, 0 [pid 6482] <... munmap resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 6482] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6485] <... setpgid resumed>) = 0 [pid 6482] <... openat resumed>) = 4 [pid 5001] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6482] ioctl(4, LOOP_SET_FD, 3 [pid 6485] <... openat resumed>) = 3 [pid 6482] <... ioctl resumed>) = 0 [pid 6482] close(3 [pid 6485] write(3, "1000", 4 [pid 6482] <... close resumed>) = 0 [pid 6485] <... write resumed>) = 4 [pid 6482] mkdir("./file0", 0777 [pid 6485] close(3 [pid 6482] <... mkdir resumed>) = 0 [pid 6485] <... close resumed>) = 0 [pid 6482] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6485] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6485] memfd_create("syzkaller", 0) = 3 [pid 6485] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [ 129.953719][ T6482] loop1: detected capacity change from 0 to 4096 [pid 6482] <... mount resumed>) = 0 [pid 6482] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6482] chdir("./file0") = 0 [pid 6482] ioctl(4, LOOP_CLR_FD) = 0 [pid 6482] close(4) = 0 [pid 6482] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6484] <... write resumed>) = 2097152 [pid 6482] <... openat resumed>) = 4 [pid 6482] unlink("./file1" [pid 6484] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6485] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] lstat("./122/file0", [pid 6484] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6484] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, [pid 6484] <... ioctl resumed>) = 0 [pid 6478] <... pwritev resumed>) = 1114112 [pid 6478] exit_group(0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6478] <... exit_group resumed>) = ? [pid 5001] getdents64(4, [pid 6484] close(3) = 0 [pid 6484] mkdir("./file0", 0777 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6484] <... mkdir resumed>) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 6484] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] close(4) = 0 [pid 5001] rmdir("./122/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./122") = 0 [pid 5001] mkdir("./123", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 6485] <... write resumed>) = 2097152 [pid 6482] <... unlink resumed>) = 0 [pid 5001] <... close resumed>) = 0 [ 129.999817][ T6486] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.039836][ T6484] loop4: detected capacity change from 0 to 4096 [pid 6482] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6485] munmap(0x7f0ed4ac1000, 2097152 [pid 6480] <... pwritev resumed>) = 1114112 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6485] <... munmap resumed>) = 0 [pid 6480] exit_group(0) = ? [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6487 [pid 6485] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6485] ioctl(4, LOOP_SET_FD, 3 [pid 6484] <... mount resumed>) = 0 [pid 6484] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6484] chdir("./file0") = 0 [pid 6484] ioctl(4, LOOP_CLR_FD) = 0 [pid 6484] close(4./strace-static-x86_64: Process 6487 attached ) = 0 [pid 6487] chdir("./123" [pid 6485] <... ioctl resumed>) = 0 [pid 6484] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6487] <... chdir resumed>) = 0 [pid 6487] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6485] close(3 [pid 6487] <... prctl resumed>) = 0 [pid 6485] <... close resumed>) = 0 [pid 6484] <... openat resumed>) = 4 [pid 6484] unlink("./file1" [pid 6487] setpgid(0, 0 [pid 6485] mkdir("./file0", 0777 [pid 6478] +++ exited with 0 +++ [pid 6487] <... setpgid resumed>) = 0 [pid 6485] <... mkdir resumed>) = 0 [pid 6480] +++ exited with 0 +++ [pid 6487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6485] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6480, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6478, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6487] <... openat resumed>) = 3 [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6487] write(3, "1000", 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6487] <... write resumed>) = 4 [pid 5000] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6487] close(3) = 0 [pid 5000] fstat(3, [pid 4998] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 6487] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6487] <... symlink resumed>) = 0 [pid 5000] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6487] memfd_create("syzkaller", 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6484] <... unlink resumed>) = 0 [pid 6487] <... memfd_create resumed>) = 3 [pid 5000] lstat("./121/binderfs", [pid 4998] lstat("./122/binderfs", [ 130.099103][ T6485] loop5: detected capacity change from 0 to 4096 [ 130.117248][ T6488] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6484] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6487] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6485] <... mount resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6487] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6485] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] unlink("./121/binderfs" [pid 4998] unlink("./122/binderfs" [pid 5000] <... unlink resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 6485] <... openat resumed>) = 3 [pid 4998] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6485] chdir("./file0") = 0 [pid 5000] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6485] ioctl(4, LOOP_CLR_FD) = 0 [pid 6485] close(4) = 0 [pid 6485] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6487] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... umount2 resumed>) = 0 [pid 6485] <... openat resumed>) = 4 [pid 6485] unlink("./file1" [pid 4998] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./122/file0", [pid 6485] <... unlink resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 130.146975][ T6489] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6487] <... write resumed>) = 2097152 [pid 6485] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6487] munmap(0x7f0ed4ac1000, 2097152 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 6487] <... munmap resumed>) = 0 [pid 4998] rmdir("./122/file0" [pid 6487] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 4998] <... rmdir resumed>) = 0 [pid 6487] ioctl(4, LOOP_SET_FD, 3 [pid 4998] getdents64(3, [pid 6487] <... ioctl resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6487] close(3 [pid 4998] close(3 [pid 6487] <... close resumed>) = 0 [pid 6487] mkdir("./file0", 0777 [pid 4998] <... close resumed>) = 0 [pid 6487] <... mkdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4998] rmdir("./122" [pid 6487] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./123", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6490 [pid 5000] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./121/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6490 attached [pid 5000] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6490] chdir("./123") = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6490] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6490] <... prctl resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 6490] setpgid(0, 0 [pid 5000] fstat(4, [pid 6490] <... setpgid resumed>) = 0 [pid 6482] <... pwritev resumed>) = 1114112 [pid 6490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6482] exit_group(0 [pid 6490] <... openat resumed>) = 3 [pid 6482] <... exit_group resumed>) = ? [pid 5000] getdents64(4, [pid 6490] write(3, "1000", 4 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./121/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [ 130.222152][ T6487] loop3: detected capacity change from 0 to 4096 [pid 5000] rmdir("./121") = 0 [pid 6490] <... write resumed>) = 4 [pid 6487] <... mount resumed>) = 0 [pid 5000] mkdir("./122", 0777 [pid 6487] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] <... mkdir resumed>) = 0 [pid 6487] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6487] chdir("./file0" [pid 5000] <... openat resumed>) = 3 [pid 6487] <... chdir resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 6487] ioctl(4, LOOP_CLR_FD [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6487] <... ioctl resumed>) = 0 [pid 5000] close(3 [pid 6487] close(4 [pid 5000] <... close resumed>) = 0 [pid 6487] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6487] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6490] close(3 [pid 6487] <... openat resumed>) = 4 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6492 [pid 6490] <... close resumed>) = 0 [pid 6487] unlink("./file1"./strace-static-x86_64: Process 6492 attached [pid 6490] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6490] memfd_create("syzkaller", 0 [pid 6492] chdir("./122" [pid 6490] <... memfd_create resumed>) = 3 [pid 6492] <... chdir resumed>) = 0 [pid 6490] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6492] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6490] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6492] <... prctl resumed>) = 0 [pid 6492] setpgid(0, 0) = 0 [pid 6492] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6492] write(3, "1000", 4) = 4 [pid 6492] close(3) = 0 [pid 6492] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6492] memfd_create("syzkaller", 0) = 3 [pid 6492] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6484] <... pwritev resumed>) = 1114112 [pid 6484] exit_group(0) = ? [ 130.278149][ T6491] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6490] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6492] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6487] <... unlink resumed>) = 0 [pid 6487] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6482] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6482, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4999] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, [pid 6490] <... write resumed>) = 2097152 [pid 6485] <... pwritev resumed>) = 1114112 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6490] munmap(0x7f0ed4ac1000, 2097152 [pid 6485] exit_group(0 [pid 4999] getdents64(3, [pid 6490] <... munmap resumed>) = 0 [pid 6485] <... exit_group resumed>) = ? [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6490] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./120/binderfs") = 0 [pid 4999] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6490] <... openat resumed>) = 4 [pid 6490] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./120/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6490] <... ioctl resumed>) = 0 [pid 6490] close(3) = 0 [pid 6490] mkdir("./file0", 0777 [pid 6484] +++ exited with 0 +++ [pid 6490] <... mkdir resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6484, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6490] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] <... openat resumed>) = 4 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(4, [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(4, [pid 6492] <... write resumed>) = 2097152 [pid 5002] lstat("./124/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] unlink("./124/binderfs") = 0 [pid 4999] getdents64(4, [pid 5002] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./120/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./120") = 0 [pid 4999] mkdir("./121", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6492] munmap(0x7f0ed4ac1000, 2097152 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6494 [pid 6490] <... mount resumed>) = 0 [pid 6490] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 6494 attached ) = 3 [pid 6490] chdir("./file0") = 0 [pid 6490] ioctl(4, LOOP_CLR_FD) = 0 [pid 6492] <... munmap resumed>) = 0 [pid 6492] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6490] close(4 [pid 6492] <... openat resumed>) = 4 [pid 6490] <... close resumed>) = 0 [pid 6492] ioctl(4, LOOP_SET_FD, 3 [pid 6490] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6494] chdir("./121") = 0 [pid 6494] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6494] setpgid(0, 0) = 0 [ 130.391701][ T6490] loop0: detected capacity change from 0 to 4096 [ 130.422855][ T6493] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6494] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6494] write(3, "1000", 4) = 4 [pid 6494] close(3) = 0 [pid 6494] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6494] memfd_create("syzkaller", 0) = 3 [pid 6494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6490] <... openat resumed>) = 4 [pid 6490] unlink("./file1" [pid 6485] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6485, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 6492] <... ioctl resumed>) = 0 [pid 5003] <... restart_syscall resumed>) = 0 [pid 6492] close(3) = 0 [pid 5003] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6492] mkdir("./file0", 0777 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6492] <... mkdir resumed>) = 0 [pid 5003] fstat(3, [pid 6492] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./122/binderfs") = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5003] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./124/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 130.446980][ T6492] loop2: detected capacity change from 0 to 4096 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./124/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6490] <... unlink resumed>) = 0 [pid 5002] close(3 [pid 6490] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./124") = 0 [pid 5002] mkdir("./125", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 6494] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6492] <... mount resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6496 ./strace-static-x86_64: Process 6496 attached [pid 6492] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6492] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6492] chdir("./file0" [pid 5003] lstat("./122/file0", [pid 6496] chdir("./125" [pid 6492] <... chdir resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6496] <... chdir resumed>) = 0 [pid 6492] ioctl(4, LOOP_CLR_FD [pid 5003] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6496] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6492] <... ioctl resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6496] <... prctl resumed>) = 0 [pid 6492] close(4 [pid 5003] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6496] setpgid(0, 0 [pid 6492] <... close resumed>) = 0 [pid 5003] <... openat resumed>) = 4 [pid 6496] <... setpgid resumed>) = 0 [pid 6496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6496] write(3, "1000", 4) = 4 [pid 6496] close(3 [pid 6492] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5003] fstat(4, [pid 6496] <... close resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6496] symlink("/dev/binderfs", "./binderfs" [pid 5003] getdents64(4, [pid 6496] <... symlink resumed>) = 0 [pid 6492] <... openat resumed>) = 4 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6496] memfd_create("syzkaller", 0 [pid 6492] unlink("./file1" [pid 5003] getdents64(4, [pid 6496] <... memfd_create resumed>) = 3 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6496] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] close(4 [pid 6496] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] <... close resumed>) = 0 [pid 6496] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] rmdir("./122/file0" [pid 6487] <... pwritev resumed>) = 1114112 [pid 5003] <... rmdir resumed>) = 0 [pid 6487] exit_group(0 [pid 5003] getdents64(3, [pid 6487] <... exit_group resumed>) = ? [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3 [pid 6494] <... write resumed>) = 2097152 [pid 6494] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./122" [pid 6494] <... munmap resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5003] mkdir("./123", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 130.533120][ T6495] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6494] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] <... openat resumed>) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6494] <... openat resumed>) = 4 [pid 5003] close(3 [pid 6494] ioctl(4, LOOP_SET_FD, 3 [pid 6492] <... unlink resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 6494] <... ioctl resumed>) = 0 [pid 6492] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6497 ./strace-static-x86_64: Process 6497 attached [pid 6497] chdir("./123") = 0 [pid 6497] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6496] <... write resumed>) = 2097152 [pid 6494] close(3 [pid 6497] <... prctl resumed>) = 0 [pid 6494] <... close resumed>) = 0 [pid 6497] setpgid(0, 0 [pid 6494] mkdir("./file0", 0777 [pid 6497] <... setpgid resumed>) = 0 [pid 6497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6494] <... mkdir resumed>) = 0 [pid 6497] <... openat resumed>) = 3 [pid 6494] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6487] +++ exited with 0 +++ [pid 6497] write(3, "1000", 4 [pid 6490] <... pwritev resumed>) = 1114112 [pid 6497] <... write resumed>) = 4 [pid 6490] exit_group(0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6487, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6497] close(3 [pid 6490] <... exit_group resumed>) = ? [pid 5001] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6497] <... close resumed>) = 0 [pid 6497] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6497] memfd_create("syzkaller", 0) = 3 [pid 6497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 130.601390][ T6494] loop1: detected capacity change from 0 to 4096 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6496] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6496] <... munmap resumed>) = 0 [pid 5001] unlink("./123/binderfs" [pid 6496] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] <... unlink resumed>) = 0 [pid 5001] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6496] <... openat resumed>) = 4 [pid 6496] ioctl(4, LOOP_SET_FD, 3 [pid 6494] <... mount resumed>) = 0 [pid 6494] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6494] chdir("./file0") = 0 [pid 6494] ioctl(4, LOOP_CLR_FD) = 0 [pid 6494] close(4) = 0 [pid 6494] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6494] unlink("./file1" [pid 6497] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6490] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6490, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6496] <... ioctl resumed>) = 0 [pid 6496] close(3) = 0 [ 130.670695][ T6498] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.671936][ T6496] loop4: detected capacity change from 0 to 4096 [pid 6496] mkdir("./file0", 0777 [pid 4998] lstat("./123/binderfs", [pid 6497] <... write resumed>) = 2097152 [pid 6494] <... unlink resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6496] <... mkdir resumed>) = 0 [pid 6494] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5001] lstat("./123/file0", [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] unlink("./123/binderfs" [pid 5001] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6497] munmap(0x7f0ed4ac1000, 2097152 [pid 6496] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... unlink resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 4 [pid 6497] <... munmap resumed>) = 0 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 6497] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] close(4 [pid 6497] <... openat resumed>) = 4 [pid 5001] <... close resumed>) = 0 [pid 6497] ioctl(4, LOOP_SET_FD, 3 [pid 6492] <... pwritev resumed>) = 1114112 [pid 5001] rmdir("./123/file0" [pid 6492] exit_group(0 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 6492] <... exit_group resumed>) = ? [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./123") = 0 [pid 5001] mkdir("./124", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6500 [pid 6496] <... mount resumed>) = 0 [pid 6496] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6496] chdir("./file0") = 0 [pid 6496] ioctl(4, LOOP_CLR_FD) = 0 [pid 6496] close(4) = 0 [pid 6496] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6496] unlink("./file1" [pid 6497] <... ioctl resumed>) = 0 [pid 6497] close(3) = 0 [pid 6497] mkdir("./file0", 0777) = 0 [pid 6497] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, ""./strace-static-x86_64: Process 6500 attached [pid 6500] chdir("./124") = 0 [pid 6500] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6500] setpgid(0, 0) = 0 [pid 6500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] <... umount2 resumed>) = 0 [pid 6500] write(3, "1000", 4 [pid 4998] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6500] <... write resumed>) = 4 [pid 6500] close(3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6500] <... close resumed>) = 0 [pid 4998] lstat("./123/file0", [pid 6500] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6500] memfd_create("syzkaller", 0 [pid 6497] <... mount resumed>) = 0 [pid 4998] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6497] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6500] <... memfd_create resumed>) = 3 [pid 6497] <... openat resumed>) = 3 [pid 6500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6497] chdir("./file0" [pid 4998] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6497] <... chdir resumed>) = 0 [pid 6497] ioctl(4, LOOP_CLR_FD) = 0 [ 130.759315][ T6497] loop5: detected capacity change from 0 to 4096 [ 130.774034][ T6499] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6497] close(4 [pid 6500] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6497] <... close resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 6497] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 4998] fstat(4, [pid 6497] unlink("./file1" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./123/file0") = 0 [pid 4998] getdents64(3, [pid 6496] <... unlink resumed>) = 0 [pid 6496] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6500] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 6492] +++ exited with 0 +++ [pid 4998] <... close resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6492, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4998] rmdir("./123" [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./124", 0777) = 0 [pid 5000] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] getdents64(3, [pid 4998] close(3 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] <... close resumed>) = 0 [pid 5000] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] lstat("./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./122/binderfs" [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6502 [pid 5000] <... unlink resumed>) = 0 [ 130.813576][ T6501] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6502 attached [pid 6502] chdir("./124") = 0 [pid 6502] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6502] setpgid(0, 0) = 0 [pid 6502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6497] <... unlink resumed>) = 0 [pid 6502] write(3, "1000", 4 [pid 6497] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6502] <... write resumed>) = 4 [pid 5000] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6502] close(3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6502] <... close resumed>) = 0 [pid 5000] lstat("./122/file0", [pid 6502] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6502] memfd_create("syzkaller", 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6502] <... memfd_create resumed>) = 3 [pid 5000] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6502] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6502] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5000] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./122/file0") = 0 [pid 5000] getdents64(3, [pid 6502] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 6494] <... pwritev resumed>) = 1114112 [pid 6494] exit_group(0 [pid 5000] <... close resumed>) = 0 [pid 6494] <... exit_group resumed>) = ? [pid 5000] rmdir("./122") = 0 [pid 5000] mkdir("./123", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6500] <... write resumed>) = 2097152 [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 6500] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 6500] <... munmap resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6500] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6503 [pid 6500] <... openat resumed>) = 4 [pid 6500] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6503 attached [pid 6503] chdir("./123") = 0 [pid 6503] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6503] setpgid(0, 0) = 0 [pid 6503] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6503] write(3, "1000", 4 [pid 6500] <... ioctl resumed>) = 0 [pid 6503] <... write resumed>) = 4 [pid 6503] close(3 [pid 6500] close(3 [pid 6503] <... close resumed>) = 0 [pid 6500] <... close resumed>) = 0 [pid 6494] +++ exited with 0 +++ [pid 6503] symlink("/dev/binderfs", "./binderfs" [pid 6502] <... write resumed>) = 2097152 [pid 6500] mkdir("./file0", 0777 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6494, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6503] <... symlink resumed>) = 0 [pid 6502] munmap(0x7f0ed4ac1000, 2097152 [pid 6500] <... mkdir resumed>) = 0 [pid 6503] memfd_create("syzkaller", 0) = 3 [pid 6500] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6502] <... munmap resumed>) = 0 [pid 6503] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6502] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6496] <... pwritev resumed>) = 1114112 [pid 6502] <... openat resumed>) = 4 [pid 6496] exit_group(0 [ 130.966738][ T6500] loop3: detected capacity change from 0 to 4096 [ 131.005288][ T6502] loop0: detected capacity change from 0 to 4096 [pid 6502] ioctl(4, LOOP_SET_FD, 3 [pid 6500] <... mount resumed>) = 0 [pid 6496] <... exit_group resumed>) = ? [pid 6502] <... ioctl resumed>) = 0 [pid 6502] close(3) = 0 [pid 6502] mkdir("./file0", 0777) = 0 [pid 6502] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6500] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6497] <... pwritev resumed>) = 1114112 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6500] <... openat resumed>) = 3 [pid 6497] exit_group(0 [pid 4999] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6500] chdir("./file0") = 0 [pid 6497] <... exit_group resumed>) = ? [pid 4999] <... openat resumed>) = 3 [pid 6500] ioctl(4, LOOP_CLR_FD [pid 4999] fstat(3, [pid 6500] <... ioctl resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6500] close(4) = 0 [pid 4999] getdents64(3, [pid 6503] <... write resumed>) = 2097152 [pid 6500] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6500] <... openat resumed>) = 4 [pid 6503] munmap(0x7f0ed4ac1000, 2097152 [pid 4999] lstat("./121/binderfs", [pid 6500] unlink("./file1" [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6503] <... munmap resumed>) = 0 [pid 6500] <... unlink resumed>) = 0 [ 131.010834][ T6504] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] unlink("./121/binderfs" [pid 6503] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6500] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6503] <... openat resumed>) = 4 [pid 6503] ioctl(4, LOOP_SET_FD, 3 [pid 6496] +++ exited with 0 +++ [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./121/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6496, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] rmdir("./121/file0" [pid 5002] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, [pid 4999] getdents64(3, [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] close(3 [pid 5002] lstat("./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./125/binderfs") = 0 [pid 4999] <... close resumed>) = 0 [pid 5002] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./121") = 0 [pid 4999] mkdir("./122", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6506 ./strace-static-x86_64: Process 6506 attached [pid 6503] <... ioctl resumed>) = 0 [pid 6502] <... mount resumed>) = 0 [pid 6502] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6503] close(3 [pid 6502] chdir("./file0" [pid 6503] <... close resumed>) = 0 [pid 6502] <... chdir resumed>) = 0 [pid 6502] ioctl(4, LOOP_CLR_FD) = 0 [pid 6502] close(4 [pid 6503] mkdir("./file0", 0777 [pid 6502] <... close resumed>) = 0 [pid 6502] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6503] <... mkdir resumed>) = 0 [pid 6503] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6502] <... openat resumed>) = 4 [pid 6497] +++ exited with 0 +++ [pid 6506] chdir("./122" [pid 6502] unlink("./file1" [pid 6506] <... chdir resumed>) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6497, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 6506] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... umount2 resumed>) = 0 [pid 6506] <... prctl resumed>) = 0 [pid 5002] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6506] setpgid(0, 0 [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6506] <... setpgid resumed>) = 0 [pid 5002] lstat("./125/file0", [pid 6506] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6502] <... unlink resumed>) = 0 [pid 5003] <... restart_syscall resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6506] <... openat resumed>) = 3 [ 131.071507][ T6503] loop2: detected capacity change from 0 to 4096 [ 131.095160][ T6505] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6502] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6506] write(3, "1000", 4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6506] <... write resumed>) = 4 [pid 5002] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6506] close(3 [pid 5003] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 4 [pid 6506] <... close resumed>) = 0 [pid 5002] fstat(4, [pid 6506] symlink("/dev/binderfs", "./binderfs" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6506] <... symlink resumed>) = 0 [pid 5002] getdents64(4, [pid 6506] memfd_create("syzkaller", 0 [pid 5003] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6506] <... memfd_create resumed>) = 3 [pid 5003] <... openat resumed>) = 3 [pid 5002] getdents64(4, [pid 6506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] fstat(3, [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6506] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] close(4 [pid 6506] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6500] <... pwritev resumed>) = 1114112 [pid 5003] getdents64(3, [pid 5002] <... close resumed>) = 0 [pid 6500] exit_group(0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] rmdir("./125/file0" [pid 6503] <... mount resumed>) = 0 [pid 6500] <... exit_group resumed>) = ? [pid 5003] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... rmdir resumed>) = 0 [pid 6503] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] close(3 [pid 6503] <... openat resumed>) = 3 [pid 5003] lstat("./123/binderfs", [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./125" [pid 6503] chdir("./file0" [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./126", 0777 [pid 6503] <... chdir resumed>) = 0 [pid 5003] unlink("./123/binderfs" [pid 5002] <... mkdir resumed>) = 0 [pid 6503] ioctl(4, LOOP_CLR_FD [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6503] <... ioctl resumed>) = 0 [pid 5003] <... unlink resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 6503] close(4 [pid 5003] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6508 [pid 6503] <... close resumed>) = 0 ./strace-static-x86_64: Process 6508 attached [pid 6503] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6508] chdir("./126" [pid 6503] <... openat resumed>) = 4 [pid 6502] <... pwritev resumed>) = 1114112 [pid 5003] <... umount2 resumed>) = 0 [pid 6508] <... chdir resumed>) = 0 [pid 6503] unlink("./file1" [ 131.177947][ T6507] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6502] exit_group(0 [pid 6508] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6508] setpgid(0, 0 [pid 6502] <... exit_group resumed>) = ? [pid 6508] <... setpgid resumed>) = 0 [pid 5003] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./123/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 6508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6503] <... unlink resumed>) = 0 [pid 6503] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6508] write(3, "1000", 4 [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 6508] <... write resumed>) = 4 [pid 5003] rmdir("./123/file0" [pid 6508] close(3 [pid 5003] <... rmdir resumed>) = 0 [pid 6508] <... close resumed>) = 0 [pid 5003] getdents64(3, [pid 6508] symlink("/dev/binderfs", "./binderfs" [pid 6506] <... write resumed>) = 2097152 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3 [pid 6508] <... symlink resumed>) = 0 [pid 6506] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] <... close resumed>) = 0 [pid 6500] +++ exited with 0 +++ [pid 6508] memfd_create("syzkaller", 0 [pid 5003] rmdir("./123" [pid 6508] <... memfd_create resumed>) = 3 [pid 5003] <... rmdir resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6500, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5003] mkdir("./124", 0777 [pid 6508] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6506] <... munmap resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 6506] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6508] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5001] <... restart_syscall resumed>) = 0 [pid 6506] <... openat resumed>) = 4 [pid 5003] <... openat resumed>) = 3 [pid 6506] ioctl(4, LOOP_SET_FD, 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3 [pid 5001] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6508] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6509 [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, ./strace-static-x86_64: Process 6509 attached 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./124/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./124/binderfs" [pid 6509] chdir("./124") = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5001] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6509] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6509] setpgid(0, 0) = 0 [pid 6509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6509] write(3, "1000", 4) = 4 [pid 6509] close(3) = 0 [pid 6509] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6509] memfd_create("syzkaller", 0) = 3 [pid 6509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5001] <... umount2 resumed>) = 0 [pid 6506] <... ioctl resumed>) = 0 [pid 6506] close(3) = 0 [pid 6506] mkdir("./file0", 0777) = 0 [pid 6509] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6506] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./124/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./124/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./124") = 0 [pid 5001] mkdir("./125", 0777 [pid 6502] +++ exited with 0 +++ [pid 5001] <... mkdir resumed>) = 0 [ 131.266042][ T6506] loop1: detected capacity change from 0 to 4096 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6502, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6506] <... mount resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4998] <... restart_syscall resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 6508] <... write resumed>) = 2097152 [pid 6506] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] <... close resumed>) = 0 [pid 4998] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6508] munmap(0x7f0ed4ac1000, 2097152 [pid 6506] <... openat resumed>) = 3 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6508] <... munmap resumed>) = 0 [pid 6506] chdir("./file0" [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6511 [pid 4998] <... openat resumed>) = 3 [pid 6508] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6506] <... chdir resumed>) = 0 [pid 4998] fstat(3, [pid 6506] ioctl(4, LOOP_CLR_FD [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6508] <... openat resumed>) = 4 [pid 6506] <... ioctl resumed>) = 0 [pid 4998] getdents64(3, [pid 6508] ioctl(4, LOOP_SET_FD, 3 [pid 6506] close(4 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6506] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./124/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./124/binderfs") = 0 [pid 4998] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6506] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000./strace-static-x86_64: Process 6511 attached [pid 6511] chdir("./125") = 0 [pid 6511] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6511] setpgid(0, 0) = 0 [pid 6511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6511] write(3, "1000", 4 [pid 6508] <... ioctl resumed>) = 0 [pid 6506] <... openat resumed>) = 4 [pid 4998] <... umount2 resumed>) = 0 [pid 6511] <... write resumed>) = 4 [pid 6508] close(3 [pid 6506] unlink("./file1" [pid 6511] close(3) = 0 [pid 6511] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6511] memfd_create("syzkaller", 0) = 3 [pid 6511] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6509] <... write resumed>) = 2097152 [pid 6508] <... close resumed>) = 0 [pid 6506] <... unlink resumed>) = 0 [pid 4998] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6511] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6508] mkdir("./file0", 0777 [pid 6506] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6511] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6508] <... mkdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6508] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6509] munmap(0x7f0ed4ac1000, 2097152 [pid 4998] lstat("./124/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6509] <... munmap resumed>) = 0 [pid 4998] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6509] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 131.326431][ T6510] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.346123][ T6508] loop4: detected capacity change from 0 to 4096 [pid 6509] ioctl(4, LOOP_SET_FD, 3 [pid 4998] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 6508] <... mount resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6508] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 6508] <... openat resumed>) = 3 [pid 4998] close(4 [pid 6508] chdir("./file0") = 0 [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./124/file0" [pid 6508] ioctl(4, LOOP_CLR_FD [pid 4998] <... rmdir resumed>) = 0 [pid 6508] <... ioctl resumed>) = 0 [pid 6508] close(4 [pid 4998] getdents64(3, [pid 6508] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 6508] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./124") = 0 [pid 6508] <... openat resumed>) = 4 [pid 6508] unlink("./file1" [pid 4998] mkdir("./125", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6509] <... ioctl resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 6509] close(3 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6509] <... close resumed>) = 0 [pid 6509] mkdir("./file0", 0777) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6513 [pid 6509] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, ""./strace-static-x86_64: Process 6513 attached [pid 6513] chdir("./125") = 0 [pid 6513] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6513] setpgid(0, 0) = 0 [ 131.393160][ T6509] loop5: detected capacity change from 0 to 4096 [ 131.401893][ T6512] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6513] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6513] write(3, "1000", 4) = 4 [pid 6513] close(3) = 0 [pid 6513] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6513] memfd_create("syzkaller", 0) = 3 [pid 6508] <... unlink resumed>) = 0 [pid 6513] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6509] <... mount resumed>) = 0 [pid 6508] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6503] <... pwritev resumed>) = 1114112 [pid 6511] <... write resumed>) = 2097152 [pid 6511] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6511] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6511] ioctl(4, LOOP_SET_FD, 3 [pid 6513] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6503] exit_group(0 [pid 6511] <... ioctl resumed>) = 0 [pid 6511] close(3) = 0 [pid 6511] mkdir("./file0", 0777) = 0 [pid 6511] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6503] <... exit_group resumed>) = ? [pid 6509] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6509] chdir("./file0") = 0 [pid 6509] ioctl(4, LOOP_CLR_FD) = 0 [pid 6509] close(4) = 0 [pid 6509] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6509] unlink("./file1") = 0 [ 131.463857][ T6514] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.481080][ T6511] loop3: detected capacity change from 0 to 4096 [pid 6509] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6513] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6511] <... mount resumed>) = 0 [pid 6511] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6511] chdir("./file0") = 0 [pid 6511] ioctl(4, LOOP_CLR_FD) = 0 [pid 6511] close(4) = 0 [pid 6511] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6511] unlink("./file1" [pid 6506] <... pwritev resumed>) = 1114112 [pid 6506] exit_group(0) = ? [pid 6503] +++ exited with 0 +++ [pid 6511] <... unlink resumed>) = 0 [ 131.527554][ T6515] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6511] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6503, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6513] <... write resumed>) = 2097152 [pid 6513] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6506] +++ exited with 0 +++ [pid 5000] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6513] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6506, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6513] <... openat resumed>) = 4 [pid 5000] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6513] ioctl(4, LOOP_SET_FD, 3 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 6513] <... ioctl resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4999] <... restart_syscall resumed>) = 0 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6513] close(3) = 0 [pid 5000] getdents64(3, [pid 4999] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6513] mkdir("./file0", 0777 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6513] <... mkdir resumed>) = 0 [pid 5000] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6513] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 3 [pid 5000] lstat("./123/binderfs", [pid 4999] fstat(3, [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] unlink("./123/binderfs" [pid 4999] getdents64(3, [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6513] <... mount resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] unlink("./122/binderfs") = 0 [pid 4999] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6513] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6513] chdir("./file0") = 0 [pid 6513] ioctl(4, LOOP_CLR_FD) = 0 [pid 6513] close(4) = 0 [pid 6513] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6513] unlink("./file1" [pid 6508] <... pwritev resumed>) = 1114112 [pid 4999] <... umount2 resumed>) = 0 [pid 6508] exit_group(0) = ? [pid 5000] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6509] <... pwritev resumed>) = 1114112 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6509] exit_group(0 [pid 5000] lstat("./123/file0", [pid 4999] lstat("./122/file0", [pid 6509] <... exit_group resumed>) = ? [ 131.623784][ T6513] loop0: detected capacity change from 0 to 4096 [ 131.662299][ T6516] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6511] <... pwritev resumed>) = 1114112 [pid 5000] <... openat resumed>) = 4 [pid 4999] <... openat resumed>) = 4 [pid 6511] exit_group(0 [pid 5000] fstat(4, [pid 4999] fstat(4, [pid 6511] <... exit_group resumed>) = ? [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 4999] getdents64(4, [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 4999] getdents64(4, [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 4999] close(4 [pid 5000] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5000] rmdir("./123/file0" [pid 4999] rmdir("./122/file0" [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, [pid 4999] getdents64(3, [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] close(3 [pid 5000] rmdir("./123" [pid 4999] <... close resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] rmdir("./122" [pid 5000] mkdir("./124", 0777 [pid 4999] <... rmdir resumed>) = 0 [pid 6511] +++ exited with 0 +++ [pid 5000] <... mkdir resumed>) = 0 [pid 4999] mkdir("./123", 0777 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] <... mkdir resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6511, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5000] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] <... openat resumed>) = 3 [pid 6513] <... unlink resumed>) = 0 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6513] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] close(3 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... close resumed>) = 0 [pid 4999] close(3 [pid 5001] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... close resumed>) = 0 [pid 6509] +++ exited with 0 +++ [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6509, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5001] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6517 [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 5001] <... openat resumed>) = 3 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6518 [pid 5003] <... restart_syscall resumed>) = 0 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6517 attached [pid 5003] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6517] chdir("./124" [pid 5003] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6517] <... chdir resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6517] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] fstat(3, [pid 5001] lstat("./125/binderfs", [pid 6517] <... prctl resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] getdents64(3, [pid 5001] unlink("./125/binderfs"./strace-static-x86_64: Process 6518 attached [pid 6517] setpgid(0, 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] <... unlink resumed>) = 0 [pid 5003] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6517] <... setpgid resumed>) = 0 [pid 6508] +++ exited with 0 +++ [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./124/binderfs", [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6508, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 6518] chdir("./123" [pid 6517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./124/binderfs") = 0 [pid 6517] <... openat resumed>) = 3 [pid 5003] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6518] <... chdir resumed>) = 0 [pid 6517] write(3, "1000", 4 [pid 6518] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6517] <... write resumed>) = 4 [pid 5003] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 6517] close(3 [pid 6518] <... prctl resumed>) = 0 [pid 5002] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6518] setpgid(0, 0 [pid 6517] <... close resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 3 [pid 6518] <... setpgid resumed>) = 0 [pid 6517] symlink("/dev/binderfs", "./binderfs" [pid 5002] fstat(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 6517] <... symlink resumed>) = 0 [pid 6518] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6517] memfd_create("syzkaller", 0 [pid 5002] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6518] <... openat resumed>) = 3 [pid 6517] <... memfd_create resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./126/binderfs", [pid 6518] write(3, "1000", 4 [pid 6517] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] lstat("./125/file0", [pid 6518] <... write resumed>) = 4 [pid 5002] unlink("./126/binderfs" [pid 6518] close(3 [pid 6517] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5002] <... unlink resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6518] <... close resumed>) = 0 [pid 5002] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./124/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, [pid 6518] symlink("/dev/binderfs", "./binderfs" [pid 6517] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6518] <... symlink resumed>) = 0 [pid 5003] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 6518] memfd_create("syzkaller", 0 [pid 5003] getdents64(4, [pid 6518] <... memfd_create resumed>) = 3 [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6518] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6517] <... write resumed>) = 2097152 [pid 5003] close(4) = 0 [pid 5001] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6518] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6517] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] rmdir("./124/file0") = 0 [pid 5001] <... openat resumed>) = 4 [pid 5003] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./124") = 0 [pid 5003] mkdir("./125", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6519 [pid 5002] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./126/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./126/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./126" [pid 6518] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] fstat(4, ./strace-static-x86_64: Process 6519 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6519] chdir("./125" [pid 6517] <... munmap resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] getdents64(4, [pid 6519] <... chdir resumed>) = 0 [pid 5002] mkdir("./127", 0777 [pid 6517] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6519] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6517] <... openat resumed>) = 4 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] getdents64(4, [pid 6519] <... prctl resumed>) = 0 [pid 6517] ioctl(4, LOOP_SET_FD, 3 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6519] setpgid(0, 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] close(4 [pid 6519] <... setpgid resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 6519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6519] <... openat resumed>) = 3 [pid 5002] close(3 [pid 6519] write(3, "1000", 4 [pid 5002] <... close resumed>) = 0 [pid 6519] <... write resumed>) = 4 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6519] close(3) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6520 [pid 6519] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6519] memfd_create("syzkaller", 0) = 3 [pid 6519] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./125/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./125") = 0 [pid 5001] mkdir("./126", 0777./strace-static-x86_64: Process 6520 attached [pid 6520] chdir("./127" [pid 5001] <... mkdir resumed>) = 0 [pid 6520] <... chdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6520] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5001] <... openat resumed>) = 3 [pid 6520] setpgid(0, 0) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 6520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6520] write(3, "1000", 4 [pid 5001] close(3 [pid 6520] <... write resumed>) = 4 [pid 6520] close(3 [pid 6519] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... close resumed>) = 0 [pid 6520] <... close resumed>) = 0 [pid 6513] <... pwritev resumed>) = 1114112 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6520] symlink("/dev/binderfs", "./binderfs" [pid 6513] exit_group(0 [pid 6520] <... symlink resumed>) = 0 [pid 6520] memfd_create("syzkaller", 0) = 3 [pid 6513] <... exit_group resumed>) = ? [pid 6520] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6520] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6521 [pid 6517] <... ioctl resumed>) = 0 [pid 6517] close(3./strace-static-x86_64: Process 6521 attached ) = 0 [pid 6517] mkdir("./file0", 0777) = 0 [pid 6517] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6521] chdir("./126") = 0 [pid 6521] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6521] setpgid(0, 0) = 0 [pid 6521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6521] write(3, "1000", 4) = 4 [pid 6521] close(3) = 0 [pid 6521] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6521] memfd_create("syzkaller", 0) = 3 [pid 6521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [ 131.837118][ T6517] loop2: detected capacity change from 0 to 4096 [pid 6518] <... write resumed>) = 2097152 [pid 6518] munmap(0x7f0ed4ac1000, 2097152 [pid 6519] <... write resumed>) = 2097152 [pid 6519] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6519] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6519] ioctl(4, LOOP_SET_FD, 3 [pid 6518] <... munmap resumed>) = 0 [pid 6517] <... mount resumed>) = 0 [pid 6513] +++ exited with 0 +++ [pid 6518] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6517] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6513, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6518] <... openat resumed>) = 4 [pid 6517] <... openat resumed>) = 3 [pid 6518] ioctl(4, LOOP_SET_FD, 3 [pid 6517] chdir("./file0" [pid 4998] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6520] <... write resumed>) = 2097152 [pid 6517] <... chdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./125/binderfs") = 0 [pid 4998] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6520] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6517] ioctl(4, LOOP_CLR_FD [pid 6520] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6517] <... ioctl resumed>) = 0 [pid 6517] close(4) = 0 [pid 6517] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6520] <... openat resumed>) = 4 [pid 6517] <... openat resumed>) = 4 [pid 6520] ioctl(4, LOOP_SET_FD, 3 [pid 6517] unlink("./file1" [pid 6521] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6518] <... ioctl resumed>) = 0 [pid 6519] <... ioctl resumed>) = 0 [pid 6519] close(3) = 0 [pid 6519] mkdir("./file0", 0777) = 0 [pid 6519] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6518] close(3) = 0 [pid 6518] mkdir("./file0", 0777) = 0 [pid 6518] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./125/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6517] <... unlink resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 131.916292][ T6522] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.929422][ T6519] loop5: detected capacity change from 0 to 4096 [ 131.939669][ T6518] loop1: detected capacity change from 0 to 4096 [ 131.949975][ T6520] loop4: detected capacity change from 0 to 4096 [pid 6517] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] <... openat resumed>) = 4 [pid 6521] <... write resumed>) = 2097152 [pid 6520] <... ioctl resumed>) = 0 [pid 6521] munmap(0x7f0ed4ac1000, 2097152 [pid 6520] close(3 [pid 6521] <... munmap resumed>) = 0 [pid 6520] <... close resumed>) = 0 [pid 6518] <... mount resumed>) = 0 [pid 6521] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6520] mkdir("./file0", 0777 [pid 6521] <... openat resumed>) = 4 [pid 6521] ioctl(4, LOOP_SET_FD, 3 [pid 6520] <... mkdir resumed>) = 0 [pid 6520] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6518] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] fstat(4, [pid 6521] <... ioctl resumed>) = 0 [pid 6518] <... openat resumed>) = 3 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6518] chdir("./file0") = 0 [pid 4998] getdents64(4, [pid 6521] close(3 [pid 6518] ioctl(4, LOOP_CLR_FD [pid 6521] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6521] mkdir("./file0", 0777 [pid 6518] <... ioctl resumed>) = 0 [pid 4998] getdents64(4, [pid 6521] <... mkdir resumed>) = 0 [pid 6518] close(4 [pid 4998] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6521] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6518] <... close resumed>) = 0 [pid 6518] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] close(4 [pid 6518] <... openat resumed>) = 4 [ 131.998844][ T6523] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.016441][ T6521] loop3: detected capacity change from 0 to 4096 [pid 6518] unlink("./file1" [pid 4998] <... close resumed>) = 0 [pid 6519] <... mount resumed>) = 0 [pid 6518] <... unlink resumed>) = 0 [pid 4998] rmdir("./125/file0" [pid 6519] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6518] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6519] <... openat resumed>) = 3 [pid 4998] <... rmdir resumed>) = 0 [pid 6519] chdir("./file0") = 0 [pid 4998] getdents64(3, [pid 6519] ioctl(4, LOOP_CLR_FD) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6519] close(4 [pid 4998] close(3 [pid 6519] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 6519] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4998] rmdir("./125") = 0 [pid 6519] <... openat resumed>) = 4 [pid 4998] mkdir("./126", 0777 [pid 6519] unlink("./file1" [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 6519] <... unlink resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 6519] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6521] <... mount resumed>) = 0 [pid 6521] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6521] chdir("./file0") = 0 [pid 4998] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6527 [pid 6521] ioctl(4, LOOP_CLR_FD) = 0 [pid 6521] close(4) = 0 [pid 6521] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 132.045283][ T6524] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6521] unlink("./file1"./strace-static-x86_64: Process 6527 attached [pid 6527] chdir("./126") = 0 [pid 6520] <... mount resumed>) = 0 [pid 6520] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6520] chdir("./file0") = 0 [pid 6520] ioctl(4, LOOP_CLR_FD) = 0 [pid 6520] close(4) = 0 [pid 6520] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6520] unlink("./file1" [pid 6527] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6527] setpgid(0, 0) = 0 [pid 6527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6527] write(3, "1000", 4) = 4 [pid 6527] close(3) = 0 [pid 6527] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6527] memfd_create("syzkaller", 0) = 3 [pid 6527] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6521] <... unlink resumed>) = 0 [pid 6521] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6517] <... pwritev resumed>) = 1114112 [ 132.097381][ T6526] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.123015][ T6525] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6517] exit_group(0) = ? [pid 6527] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6520] <... unlink resumed>) = 0 [pid 6520] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6527] <... write resumed>) = 2097152 [pid 6527] munmap(0x7f0ed4ac1000, 2097152 [pid 6517] +++ exited with 0 +++ [pid 6527] <... munmap resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6517, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 6527] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] <... restart_syscall resumed>) = 0 [pid 6527] <... openat resumed>) = 4 [pid 6527] ioctl(4, LOOP_SET_FD, 3 [pid 5000] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./124/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6518] <... pwritev resumed>) = 1114112 [pid 5000] unlink("./124/binderfs" [pid 6527] <... ioctl resumed>) = 0 [pid 6527] close(3) = 0 [pid 6527] mkdir("./file0", 0777) = 0 [pid 6527] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6518] exit_group(0 [pid 5000] <... unlink resumed>) = 0 [pid 6519] <... pwritev resumed>) = 1114112 [pid 6518] <... exit_group resumed>) = ? [pid 5000] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6519] exit_group(0) = ? [ 132.300121][ T6527] loop0: detected capacity change from 0 to 4096 [pid 6521] <... pwritev resumed>) = 1114112 [pid 6521] exit_group(0 [pid 6520] <... pwritev resumed>) = 1114112 [pid 6521] <... exit_group resumed>) = ? [pid 6520] exit_group(0) = ? [pid 5000] <... umount2 resumed>) = 0 [pid 6527] <... mount resumed>) = 0 [pid 6527] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6527] chdir("./file0") = 0 [pid 6527] ioctl(4, LOOP_CLR_FD) = 0 [pid 6527] close(4) = 0 [pid 6527] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6527] unlink("./file1" [pid 5000] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./124/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6518] +++ exited with 0 +++ [pid 5000] <... openat resumed>) = 4 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6518, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5000] getdents64(4, [pid 4999] <... restart_syscall resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6519] +++ exited with 0 +++ [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6519, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5000] close(4 [pid 4999] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] rmdir("./124/file0" [pid 4999] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6520] +++ exited with 0 +++ [pid 5000] <... rmdir resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6520, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4999] <... openat resumed>) = 3 [pid 5003] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(3, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] getdents64(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(3, [pid 5003] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] fstat(3, [pid 5000] close(3 [pid 4999] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./123/binderfs", [pid 5003] getdents64(3, [pid 5002] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] rmdir("./124" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] <... openat resumed>) = 3 [pid 5003] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] unlink("./123/binderfs" [pid 5002] fstat(3, [pid 6527] <... unlink resumed>) = 0 [pid 6527] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5002] getdents64(3, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] mkdir("./125", 0777 [pid 5003] lstat("./125/binderfs", [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6521] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6521, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5001] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 132.412776][ T6528] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] lstat("./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./126/binderfs") = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] unlink("./125/binderfs" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5003] <... unlink resumed>) = 0 [pid 5002] lstat("./127/binderfs", [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] unlink("./127/binderfs" [pid 5003] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(3 [pid 5002] <... unlink resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6529 ./strace-static-x86_64: Process 6529 attached [pid 6529] chdir("./125") = 0 [pid 6529] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6529] setpgid(0, 0) = 0 [pid 6529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6529] write(3, "1000", 4) = 4 [pid 6529] close(3) = 0 [pid 6529] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6529] memfd_create("syzkaller", 0) = 3 [pid 6529] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6529] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = 0 [pid 4999] lstat("./123/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./123/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] close(3) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] rmdir("./123") = 0 [pid 4999] mkdir("./124", 0777 [pid 5002] lstat("./127/file0", [pid 4999] <... mkdir resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] close(3 [pid 5002] <... openat resumed>) = 4 [pid 4999] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5001] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./126/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] lstat("./125/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5003] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] fstat(4, [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] getdents64(4, [pid 5001] getdents64(4, [pid 5003] fstat(4, [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6530 [pid 6529] <... write resumed>) = 2097152 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 5001] close(4./strace-static-x86_64: Process 6530 attached [pid 5003] getdents64(4, [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] <... close resumed>) = 0 [pid 6530] chdir("./124" [pid 5003] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] close(4 [pid 5001] rmdir("./126/file0" [pid 6530] <... chdir resumed>) = 0 [pid 5003] getdents64(4, [pid 5002] <... close resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 6530] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] rmdir("./127/file0" [pid 5001] getdents64(3, [pid 6530] <... prctl resumed>) = 0 [pid 5003] close(4 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6530] setpgid(0, 0 [pid 5003] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 6530] <... setpgid resumed>) = 0 [pid 5003] rmdir("./125/file0" [pid 5002] getdents64(3, [pid 5001] close(3 [pid 6530] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] <... close resumed>) = 0 [pid 6530] <... openat resumed>) = 3 [pid 5003] getdents64(3, [pid 5002] close(3 [pid 5001] rmdir("./126" [pid 6530] write(3, "1000", 4 [pid 5003] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 6530] <... write resumed>) = 4 [pid 5003] close(3 [pid 5002] rmdir("./127" [pid 5001] mkdir("./127", 0777 [pid 6530] close(3 [pid 5003] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 6530] <... close resumed>) = 0 [pid 5003] rmdir("./125" [pid 5002] mkdir("./128", 0777 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6530] symlink("/dev/binderfs", "./binderfs" [pid 5003] <... rmdir resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5002] <... mkdir resumed>) = 0 [pid 6530] <... symlink resumed>) = 0 [pid 6529] munmap(0x7f0ed4ac1000, 2097152 [pid 5003] mkdir("./126", 0777 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] ioctl(3, LOOP_CLR_FD [pid 6530] memfd_create("syzkaller", 0 [pid 6529] <... munmap resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6530] <... memfd_create resumed>) = 3 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] close(3 [pid 6530] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... openat resumed>) = 3 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... close resumed>) = 0 [pid 6529] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6529] <... openat resumed>) = 4 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6529] ioctl(4, LOOP_SET_FD, 3 [pid 5003] close(3 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6531 [pid 6530] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6527] <... pwritev resumed>) = 1114112 [pid 5003] <... close resumed>) = 0 [pid 5002] close(3 [pid 6527] exit_group(0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... close resumed>) = 0 [pid 6527] <... exit_group resumed>) = ? [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6527] +++ exited with 0 +++ [pid 5003] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6532 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6527, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6533 ./strace-static-x86_64: Process 6532 attached [pid 6530] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6532] chdir("./126"./strace-static-x86_64: Process 6533 attached ) = 0 [pid 6532] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6533] chdir("./128" [pid 6532] <... prctl resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6533] <... chdir resumed>) = 0 [pid 6532] setpgid(0, 0 [pid 4998] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6531 attached [pid 6533] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6532] <... setpgid resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 6533] <... prctl resumed>) = 0 [pid 6532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6531] chdir("./127" [pid 4998] fstat(3, [pid 6533] setpgid(0, 0 [pid 6532] <... openat resumed>) = 3 [pid 6531] <... chdir resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6533] <... setpgid resumed>) = 0 [pid 6532] write(3, "1000", 4 [pid 6531] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] getdents64(3, [pid 6533] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6532] <... write resumed>) = 4 [pid 6531] <... prctl resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6533] <... openat resumed>) = 3 [pid 6532] close(3 [pid 6531] setpgid(0, 0 [pid 4998] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6533] write(3, "1000", 4 [pid 6532] <... close resumed>) = 0 [pid 6531] <... setpgid resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6533] <... write resumed>) = 4 [pid 6532] symlink("/dev/binderfs", "./binderfs" [pid 6531] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6530] <... write resumed>) = 2097152 [pid 4998] lstat("./126/binderfs", [pid 6533] close(3 [pid 6532] <... symlink resumed>) = 0 [pid 6531] <... openat resumed>) = 3 [pid 6530] munmap(0x7f0ed4ac1000, 2097152 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6533] <... close resumed>) = 0 [pid 6532] memfd_create("syzkaller", 0 [pid 6531] write(3, "1000", 4 [pid 6529] <... ioctl resumed>) = 0 [pid 4998] unlink("./126/binderfs" [pid 6533] symlink("/dev/binderfs", "./binderfs" [pid 6532] <... memfd_create resumed>) = 3 [pid 6531] <... write resumed>) = 4 [pid 6529] close(3 [pid 4998] <... unlink resumed>) = 0 [pid 6530] <... munmap resumed>) = 0 [pid 6533] <... symlink resumed>) = 0 [pid 6532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6531] close(3 [pid 6529] <... close resumed>) = 0 [pid 4998] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6533] memfd_create("syzkaller", 0 [pid 6532] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6531] <... close resumed>) = 0 [pid 6530] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6529] mkdir("./file0", 0777 [pid 6533] <... memfd_create resumed>) = 3 [pid 6531] symlink("/dev/binderfs", "./binderfs" [pid 6529] <... mkdir resumed>) = 0 [pid 6531] <... symlink resumed>) = 0 [pid 6529] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6531] memfd_create("syzkaller", 0) = 3 [pid 6531] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6530] <... openat resumed>) = 4 [ 132.628370][ T6529] loop2: detected capacity change from 0 to 4096 [pid 6531] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6533] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6530] ioctl(4, LOOP_SET_FD, 3 [pid 6533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6529] <... mount resumed>) = 0 [pid 6529] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6529] chdir("./file0") = 0 [pid 6529] ioctl(4, LOOP_CLR_FD) = 0 [pid 6529] close(4 [pid 6532] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6529] <... close resumed>) = 0 [pid 6529] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6529] unlink("./file1" [pid 6530] <... ioctl resumed>) = 0 [pid 6530] close(3) = 0 [pid 6530] mkdir("./file0", 0777) = 0 [pid 6530] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6531] <... write resumed>) = 2097152 [pid 6531] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6531] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 132.694640][ T6530] loop1: detected capacity change from 0 to 4096 [ 132.696401][ T6534] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6531] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6533] <... write resumed>) = 2097152 [pid 6530] <... mount resumed>) = 0 [pid 6533] munmap(0x7f0ed4ac1000, 2097152 [pid 6530] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6532] <... write resumed>) = 2097152 [pid 6530] <... openat resumed>) = 3 [pid 6530] chdir("./file0" [pid 6532] munmap(0x7f0ed4ac1000, 2097152 [pid 6530] <... chdir resumed>) = 0 [pid 6530] ioctl(4, LOOP_CLR_FD) = 0 [pid 6530] close(4 [pid 6533] <... munmap resumed>) = 0 [pid 6532] <... munmap resumed>) = 0 [pid 6530] <... close resumed>) = 0 [pid 6533] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6532] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6530] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6533] <... openat resumed>) = 4 [pid 6532] <... openat resumed>) = 4 [pid 6532] ioctl(4, LOOP_SET_FD, 3 [pid 6533] ioctl(4, LOOP_SET_FD, 3 [pid 6531] close(3) = 0 [pid 6531] mkdir("./file0", 0777) = 0 [pid 6531] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6532] <... ioctl resumed>) = 0 [pid 6530] <... openat resumed>) = 4 [pid 6532] close(3 [pid 6530] unlink("./file1" [pid 6532] <... close resumed>) = 0 [pid 6532] mkdir("./file0", 0777 [pid 6529] <... unlink resumed>) = 0 [pid 6532] <... mkdir resumed>) = 0 [pid 6529] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6532] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6533] <... ioctl resumed>) = 0 [pid 6533] close(3) = 0 [pid 6533] mkdir("./file0", 0777) = 0 [ 132.756505][ T6531] loop3: detected capacity change from 0 to 4096 [ 132.764426][ T6535] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.782048][ T6532] loop5: detected capacity change from 0 to 4096 [ 132.790271][ T6533] loop4: detected capacity change from 0 to 4096 [pid 6533] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6531] <... mount resumed>) = 0 [pid 6531] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6531] chdir("./file0") = 0 [pid 6531] ioctl(4, LOOP_CLR_FD) = 0 [pid 6531] close(4) = 0 [pid 6531] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6531] unlink("./file1" [pid 6530] <... unlink resumed>) = 0 [pid 6530] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6532] <... mount resumed>) = 0 [pid 6532] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6532] chdir("./file0") = 0 [pid 6532] ioctl(4, LOOP_CLR_FD) = 0 [pid 6532] close(4) = 0 [ 132.820346][ T6536] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.839926][ T6537] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6532] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6533] <... mount resumed>) = 0 [pid 6533] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6533] chdir("./file0") = 0 [pid 6533] ioctl(4, LOOP_CLR_FD) = 0 [pid 6533] close(4) = 0 [pid 6533] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6532] <... openat resumed>) = 4 [pid 6532] unlink("./file1" [pid 6533] <... openat resumed>) = 4 [pid 6533] unlink("./file1" [pid 6531] <... unlink resumed>) = 0 [ 132.860661][ T6538] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6531] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6532] <... unlink resumed>) = 0 [pid 6532] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6533] <... unlink resumed>) = 0 [pid 6533] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6530] <... pwritev resumed>) = 1114112 [pid 6530] exit_group(0) = ? [pid 6529] <... pwritev resumed>) = 1114112 [pid 6529] exit_group(0) = ? [pid 6529] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6529, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6530] +++ exited with 0 +++ [pid 5000] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6532] <... pwritev resumed>) = 1114112 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6530, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6532] exit_group(0 [pid 5000] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6532] <... exit_group resumed>) = ? [pid 6532] +++ exited with 0 +++ [pid 5000] <... openat resumed>) = 3 [pid 4999] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6532, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(3, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] fstat(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(3, [pid 5003] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5003] fstat(3, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] getdents64(3, [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] lstat("./124/binderfs", [pid 5003] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] unlink("./124/binderfs" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./125/binderfs", [pid 4999] <... unlink resumed>) = 0 [pid 5003] lstat("./126/binderfs", [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./125/binderfs" [pid 5003] unlink("./126/binderfs") = 0 [pid 5003] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./124/file0", [pid 6533] <... pwritev resumed>) = 1114112 [pid 6533] exit_group(0) = ? [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./124/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./124") = 0 [pid 4999] mkdir("./125", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6539 [pid 6531] <... pwritev resumed>) = 1114112 [pid 6531] exit_group(0) = ? ./strace-static-x86_64: Process 6539 attached [pid 6539] chdir("./125") = 0 [pid 6539] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6539] setpgid(0, 0) = 0 [pid 6539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6539] write(3, "1000", 4) = 4 [pid 6539] close(3) = 0 [pid 6539] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6539] memfd_create("syzkaller", 0) = 3 [pid 6539] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6533] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6533, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5002] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./128/binderfs") = 0 [pid 5002] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6531] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6531, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./127/binderfs") = 0 [pid 5001] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./125/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6539] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./125/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./125") = 0 [pid 5000] mkdir("./126", 0777) = 0 [pid 6539] <... write resumed>) = 2097152 [pid 5002] <... umount2 resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6539] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] <... openat resumed>) = 3 [pid 6539] <... munmap resumed>) = 0 [pid 5002] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] ioctl(3, LOOP_CLR_FD [pid 6539] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] close(3 [pid 6539] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./127/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 6539] ioctl(4, LOOP_SET_FD, 3 [pid 5002] lstat("./128/file0", [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6542 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./127/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./127") = 0 [pid 5001] mkdir("./128", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6539] <... ioctl resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6542 attached [pid 5002] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, [pid 6539] close(3 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6543 attached [pid 6539] <... close resumed>) = 0 [pid 5002] close(4 [pid 6539] mkdir("./file0", 0777 [pid 5002] <... close resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6543 [pid 6539] <... mkdir resumed>) = 0 [pid 5002] rmdir("./128/file0" [pid 6539] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6543] chdir("./128" [pid 6542] chdir("./126" [pid 5002] close(3 [pid 6543] <... chdir resumed>) = 0 [pid 6542] <... chdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 6543] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6542] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6539] <... mount resumed>) = 0 [pid 5002] rmdir("./128" [pid 6543] <... prctl resumed>) = 0 [pid 6542] <... prctl resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 6543] setpgid(0, 0 [pid 6542] setpgid(0, 0 [pid 5002] mkdir("./129", 0777 [pid 6543] <... setpgid resumed>) = 0 [pid 6542] <... setpgid resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 6543] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6542] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6543] <... openat resumed>) = 3 [pid 6542] <... openat resumed>) = 3 [pid 5002] <... openat resumed>) = 3 [pid 6543] write(3, "1000", 4 [pid 6542] write(3, "1000", 4 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 6543] <... write resumed>) = 4 [pid 6542] <... write resumed>) = 4 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6543] close(3 [pid 6542] close(3 [pid 5002] close(3 [pid 6543] <... close resumed>) = 0 [pid 6542] <... close resumed>) = 0 [pid 6539] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] <... close resumed>) = 0 [pid 6543] symlink("/dev/binderfs", "./binderfs" [pid 6542] symlink("/dev/binderfs", "./binderfs" [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6543] <... symlink resumed>) = 0 [pid 6542] <... symlink resumed>) = 0 [pid 6543] memfd_create("syzkaller", 0 [pid 6542] memfd_create("syzkaller", 0 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6545 [pid 6543] <... memfd_create resumed>) = 3 [pid 6542] <... memfd_create resumed>) = 3 [pid 6543] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6542] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6543] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6542] <... mmap resumed>) = 0x7f0ed4ac1000 ./strace-static-x86_64: Process 6545 attached [pid 6539] <... openat resumed>) = 3 [pid 6545] chdir("./129" [pid 6539] chdir("./file0" [pid 6545] <... chdir resumed>) = 0 [pid 6539] <... chdir resumed>) = 0 [pid 6545] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6539] ioctl(4, LOOP_CLR_FD [pid 6545] <... prctl resumed>) = 0 [pid 6539] <... ioctl resumed>) = 0 [pid 6545] setpgid(0, 0 [pid 6539] close(4 [pid 6545] <... setpgid resumed>) = 0 [pid 6539] <... close resumed>) = 0 [pid 6545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6539] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6545] <... openat resumed>) = 3 [pid 6539] <... openat resumed>) = 4 [pid 6545] write(3, "1000", 4 [pid 6539] unlink("./file1" [pid 6545] <... write resumed>) = 4 [pid 6539] <... unlink resumed>) = 0 [pid 6545] close(3 [pid 6539] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6545] <... close resumed>) = 0 [pid 6543] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6542] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6545] symlink("/dev/binderfs", "./binderfs") = 0 [ 133.230757][ T6539] loop1: detected capacity change from 0 to 4096 [ 133.252293][ T6544] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6545] memfd_create("syzkaller", 0) = 3 [pid 6545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6542] <... write resumed>) = 2097152 [pid 6542] munmap(0x7f0ed4ac1000, 2097152 [pid 6545] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6543] <... write resumed>) = 2097152 [pid 6542] <... munmap resumed>) = 0 [pid 6543] munmap(0x7f0ed4ac1000, 2097152 [pid 6542] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6542] ioctl(4, LOOP_SET_FD, 3 [pid 6543] <... munmap resumed>) = 0 [pid 6543] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6543] ioctl(4, LOOP_SET_FD, 3 [pid 6542] <... ioctl resumed>) = 0 [pid 6542] close(3) = 0 [pid 6542] mkdir("./file0", 0777) = 0 [pid 6542] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6545] <... write resumed>) = 2097152 [pid 6543] <... ioctl resumed>) = 0 [pid 6543] close(3) = 0 [pid 6543] mkdir("./file0", 0777 [pid 6545] munmap(0x7f0ed4ac1000, 2097152 [pid 6543] <... mkdir resumed>) = 0 [pid 6543] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6545] <... munmap resumed>) = 0 [pid 6545] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6545] ioctl(4, LOOP_SET_FD, 3 [pid 6542] <... mount resumed>) = 0 [pid 6542] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6542] chdir("./file0") = 0 [pid 6542] ioctl(4, LOOP_CLR_FD) = 0 [pid 6542] close(4) = 0 [pid 6542] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6545] <... ioctl resumed>) = 0 [pid 6545] close(3) = 0 [pid 6545] mkdir("./file0", 0777) = 0 [pid 6545] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6542] <... openat resumed>) = 4 [pid 6542] unlink("./file1") = 0 [pid 6542] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6539] <... pwritev resumed>) = 1114112 [pid 6539] exit_group(0) = ? [ 133.336491][ T6542] loop2: detected capacity change from 0 to 4096 [ 133.352521][ T6543] loop3: detected capacity change from 0 to 4096 [ 133.368900][ T6546] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.373320][ T6545] loop4: detected capacity change from 0 to 4096 [pid 6545] <... mount resumed>) = 0 [pid 6545] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6545] chdir("./file0") = 0 [pid 6545] ioctl(4, LOOP_CLR_FD) = 0 [pid 6545] close(4) = 0 [pid 6545] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6545] unlink("./file1" [pid 6543] <... mount resumed>) = 0 [pid 6543] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6543] chdir("./file0" [pid 6545] <... unlink resumed>) = 0 [pid 6543] <... chdir resumed>) = 0 [pid 6545] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6543] ioctl(4, LOOP_CLR_FD) = 0 [pid 6543] close(4) = 0 [pid 6543] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6539] +++ exited with 0 +++ [pid 6543] <... openat resumed>) = 4 [pid 6543] unlink("./file1" [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6539, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 6543] <... unlink resumed>) = 0 [pid 6543] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./125/binderfs") = 0 [ 133.412560][ T6547] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.436536][ T6548] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 6542] <... pwritev resumed>) = 1114112 [pid 6542] exit_group(0) = ? [pid 4999] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./125/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./125/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./125") = 0 [pid 4999] mkdir("./126", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6549 [pid 6542] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6542, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./126/binderfs") = 0 [pid 5000] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6549 attached [pid 6549] chdir("./126") = 0 [pid 6549] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6549] setpgid(0, 0) = 0 [pid 6549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6549] write(3, "1000", 4) = 4 [pid 6549] close(3) = 0 [pid 6549] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6549] memfd_create("syzkaller", 0) = 3 [pid 6549] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6545] <... pwritev resumed>) = 1114112 [pid 6545] exit_group(0) = ? [pid 5000] <... umount2 resumed>) = 0 [pid 6549] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./126/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6543] <... pwritev resumed>) = 1114112 [pid 5000] openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6543] exit_group(0 [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, [pid 6543] <... exit_group resumed>) = ? [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 6549] <... write resumed>) = 2097152 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./126/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./126") = 0 [pid 5000] mkdir("./127", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 6549] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6549] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6549] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6545] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6545, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6550 [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./129/binderfs") = 0 [pid 5002] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6550 attached [pid 6550] chdir("./127") = 0 [pid 6550] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6550] setpgid(0, 0) = 0 [pid 6550] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6550] write(3, "1000", 4) = 4 [pid 6550] close(3) = 0 [pid 6550] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6550] memfd_create("syzkaller", 0) = 3 [pid 6549] <... ioctl resumed>) = 0 [pid 6550] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6549] close(3 [pid 6550] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6549] <... close resumed>) = 0 [pid 6549] mkdir("./file0", 0777) = 0 [pid 6549] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6543] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6543, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5001] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 5002] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./129/file0", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] lstat("./128/binderfs", [pid 5002] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] unlink("./128/binderfs" [pid 5002] openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... unlink resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5001] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 6550] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./129/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./129") = 0 [pid 5002] mkdir("./130", 0777) = 0 [ 133.649030][ T6549] loop1: detected capacity change from 0 to 4096 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6551 ./strace-static-x86_64: Process 6551 attached [pid 6551] chdir("./130") = 0 [pid 6551] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6551] setpgid(0, 0) = 0 [pid 6551] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6551] write(3, "1000", 4) = 4 [pid 6551] close(3) = 0 [pid 6551] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6551] memfd_create("syzkaller", 0) = 3 [pid 6551] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./128/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6550] <... write resumed>) = 2097152 [pid 5001] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6550] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./128/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./128") = 0 [pid 6550] <... munmap resumed>) = 0 [pid 5001] mkdir("./129", 0777 [pid 6550] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6549] <... mount resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 6549] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6549] chdir("./file0") = 0 [pid 6549] ioctl(4, LOOP_CLR_FD) = 0 [pid 6549] close(4) = 0 [pid 6549] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6549] unlink("./file1" [pid 6551] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6550] <... openat resumed>) = 4 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6550] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6551] <... write resumed>) = 2097152 [pid 6551] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6553 [pid 6551] <... munmap resumed>) = 0 [pid 6551] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6551] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6553 attached [pid 6550] <... ioctl resumed>) = 0 [pid 6550] close(3) = 0 [pid 6550] mkdir("./file0", 0777) = 0 [pid 6550] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6551] <... ioctl resumed>) = 0 [pid 6551] close(3) = 0 [pid 6551] mkdir("./file0", 0777 [pid 6553] chdir("./129") = 0 [pid 6553] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6553] setpgid(0, 0) = 0 [pid 6553] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6553] write(3, "1000", 4) = 4 [pid 6553] close(3) = 0 [pid 6553] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6553] memfd_create("syzkaller", 0 [pid 6549] <... unlink resumed>) = 0 [ 133.746529][ T6552] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.767383][ T6550] loop2: detected capacity change from 0 to 4096 [ 133.783737][ T6551] loop4: detected capacity change from 0 to 4096 [pid 6549] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6551] <... mkdir resumed>) = 0 [pid 6550] <... mount resumed>) = 0 [pid 6553] <... memfd_create resumed>) = 3 [pid 6553] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6551] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6550] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6550] chdir("./file0") = 0 [pid 6550] ioctl(4, LOOP_CLR_FD) = 0 [pid 6550] close(4) = 0 [pid 6551] <... mount resumed>) = 0 [pid 6550] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6551] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6551] chdir("./file0") = 0 [pid 6551] ioctl(4, LOOP_CLR_FD) = 0 [pid 6551] close(4) = 0 [pid 6551] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6551] unlink("./file1" [pid 6550] <... openat resumed>) = 4 [pid 6550] unlink("./file1") = 0 [pid 6550] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 133.800787][ T6554] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.831166][ T6555] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6553] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6551] <... unlink resumed>) = 0 [pid 6551] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6549] <... pwritev resumed>) = 1114112 [pid 6549] exit_group(0) = ? [pid 6553] <... write resumed>) = 2097152 [pid 6553] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6553] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6553] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6553] close(3) = 0 [pid 6553] mkdir("./file0", 0777) = 0 [pid 6553] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 6553] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6553] chdir("./file0") = 0 [pid 6553] ioctl(4, LOOP_CLR_FD) = 0 [pid 6553] close(4) = 0 [pid 6549] +++ exited with 0 +++ [pid 6553] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6550] <... pwritev resumed>) = 1114112 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6549, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6550] exit_group(0 [pid 6553] <... openat resumed>) = 4 [pid 6553] unlink("./file1" [pid 6550] <... exit_group resumed>) = ? [pid 4999] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./126/binderfs") = 0 [ 133.902974][ T6553] loop3: detected capacity change from 0 to 4096 [ 133.941155][ T6556] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6553] <... unlink resumed>) = 0 [pid 6553] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6551] <... pwritev resumed>) = 1114112 [pid 6551] exit_group(0) = ? [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./126/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./126/file0" [pid 6550] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6550, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] <... rmdir resumed>) = 0 [pid 5000] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./126") = 0 [pid 4999] mkdir("./127", 0777 [pid 5000] lstat("./127/binderfs", [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5000] unlink("./127/binderfs" [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6557 attached [pid 5000] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6557 [pid 6551] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6551, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5002] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6557] chdir("./127" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 6557] <... chdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] <... umount2 resumed>) = 0 [pid 6557] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6557] <... prctl resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6557] setpgid(0, 0 [pid 5002] lstat("./130/binderfs", [pid 6557] <... setpgid resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] unlink("./130/binderfs" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6557] <... openat resumed>) = 3 [pid 5002] <... unlink resumed>) = 0 [pid 6557] write(3, "1000", 4 [pid 5002] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] lstat("./127/file0", [pid 6557] <... write resumed>) = 4 [pid 6557] close(3 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6557] <... close resumed>) = 0 [pid 6557] symlink("/dev/binderfs", "./binderfs" [pid 5000] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6557] <... symlink resumed>) = 0 [pid 6557] memfd_create("syzkaller", 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6557] <... memfd_create resumed>) = 3 [pid 6557] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6557] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5002] <... umount2 resumed>) = 0 [pid 6557] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./130/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] fstat(4, [pid 5002] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] getdents64(4, [pid 5002] openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] <... openat resumed>) = 4 [pid 5000] getdents64(4, [pid 5002] fstat(4, [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] close(4 [pid 6553] <... pwritev resumed>) = 1114112 [pid 5002] getdents64(4, [pid 5000] <... close resumed>) = 0 [pid 6553] exit_group(0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] rmdir("./127/file0" [pid 6553] <... exit_group resumed>) = ? [pid 5002] getdents64(4, [pid 5000] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./127") = 0 [pid 5000] mkdir("./128", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(4 [pid 5000] close(3 [pid 5002] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6558 [pid 5002] rmdir("./130/file0"./strace-static-x86_64: Process 6558 attached ) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./130" [pid 6558] chdir("./128" [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./131", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6558] <... chdir resumed>) = 0 [pid 6558] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6559 [pid 6558] setpgid(0, 0) = 0 [pid 6558] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6558] write(3, "1000", 4) = 4 [pid 6558] close(3) = 0 [pid 6558] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6559 attached ) = 0 [pid 6558] memfd_create("syzkaller", 0 [pid 6559] chdir("./131" [pid 6558] <... memfd_create resumed>) = 3 [pid 6558] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6559] <... chdir resumed>) = 0 [pid 6557] <... write resumed>) = 2097152 [pid 6553] +++ exited with 0 +++ [pid 6559] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6557] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6553, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6559] <... prctl resumed>) = 0 [pid 6559] setpgid(0, 0) = 0 [pid 5001] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6559] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6559] <... openat resumed>) = 3 [pid 6557] <... munmap resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6559] write(3, "1000", 4 [pid 6557] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] <... openat resumed>) = 3 [pid 6559] <... write resumed>) = 4 [pid 6557] <... openat resumed>) = 4 [pid 5001] fstat(3, [pid 6559] close(3 [pid 6557] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6559] <... close resumed>) = 0 [pid 6558] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6559] symlink("/dev/binderfs", "./binderfs" [pid 6557] <... ioctl resumed>) = 0 [pid 5001] getdents64(3, [pid 6559] <... symlink resumed>) = 0 [pid 6557] close(3 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6559] memfd_create("syzkaller", 0 [pid 6557] <... close resumed>) = 0 [pid 5001] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6559] <... memfd_create resumed>) = 3 [pid 6557] mkdir("./file0", 0777 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6557] <... mkdir resumed>) = 0 [pid 5001] lstat("./129/binderfs", [pid 6559] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6557] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./129/binderfs") = 0 [pid 5001] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6558] <... write resumed>) = 2097152 [pid 6558] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6558] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6558] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6558] close(3) = 0 [pid 6558] mkdir("./file0", 0777) = 0 [pid 6558] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6559] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6557] <... mount resumed>) = 0 [ 134.149126][ T6557] loop1: detected capacity change from 0 to 4096 [ 134.176695][ T6558] loop2: detected capacity change from 0 to 4096 [pid 6559] <... write resumed>) = 2097152 [pid 6557] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] <... umount2 resumed>) = 0 [pid 6557] <... openat resumed>) = 3 [pid 5001] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6557] chdir("./file0" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6557] <... chdir resumed>) = 0 [pid 5001] lstat("./129/file0", [pid 6557] ioctl(4, LOOP_CLR_FD [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6557] <... ioctl resumed>) = 0 [pid 5001] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6557] close(4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6557] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6557] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] <... openat resumed>) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./129/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./129") = 0 [pid 5001] mkdir("./130", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6562 [pid 6557] <... openat resumed>) = 4 [pid 6558] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6562 attached [pid 6557] unlink("./file1" [pid 6562] chdir("./130") = 0 [pid 6562] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6562] setpgid(0, 0 [pid 6559] munmap(0x7f0ed4ac1000, 2097152 [pid 6558] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6562] <... setpgid resumed>) = 0 [pid 6562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6558] <... openat resumed>) = 3 [pid 6558] chdir("./file0" [pid 6557] <... unlink resumed>) = 0 [pid 6557] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6558] <... chdir resumed>) = 0 [pid 6562] <... openat resumed>) = 3 [pid 6562] write(3, "1000", 4) = 4 [pid 6562] close(3) = 0 [pid 6562] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6562] memfd_create("syzkaller", 0) = 3 [pid 6562] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6558] ioctl(4, LOOP_CLR_FD) = 0 [pid 6558] close(4) = 0 [pid 6558] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6558] unlink("./file1" [pid 6559] <... munmap resumed>) = 0 [pid 6559] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 134.201359][ T6560] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.206043][ T6561] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6559] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6559] close(3) = 0 [pid 6559] mkdir("./file0", 0777) = 0 [pid 6559] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6562] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6558] <... unlink resumed>) = 0 [ 134.252831][ T6559] loop4: detected capacity change from 0 to 4096 [pid 6558] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6559] <... mount resumed>) = 0 [pid 6559] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6559] chdir("./file0") = 0 [pid 6559] ioctl(4, LOOP_CLR_FD) = 0 [pid 6559] close(4) = 0 [pid 6559] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6559] unlink("./file1" [pid 6562] <... write resumed>) = 2097152 [pid 6562] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6562] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 134.294962][ T6563] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6562] ioctl(4, LOOP_SET_FD, 3 [pid 6559] <... unlink resumed>) = 0 [pid 6559] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6557] <... pwritev resumed>) = 1114112 [pid 6557] exit_group(0) = ? [pid 6562] <... ioctl resumed>) = 0 [pid 6562] close(3) = 0 [pid 6562] mkdir("./file0", 0777) = 0 [pid 6558] <... pwritev resumed>) = 1114112 [pid 6562] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6558] exit_group(0) = ? [ 134.354475][ T6562] loop3: detected capacity change from 0 to 4096 [pid 6562] <... mount resumed>) = 0 [pid 6562] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6562] chdir("./file0") = 0 [pid 6562] ioctl(4, LOOP_CLR_FD) = 0 [pid 6562] close(4) = 0 [pid 6562] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6562] unlink("./file1" [pid 6559] <... pwritev resumed>) = 1114112 [pid 6559] exit_group(0) = ? [pid 6557] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6557, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4999] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6562] <... unlink resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 6562] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./127/binderfs") = 0 [pid 4999] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6558] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6558, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./128/binderfs") = 0 [ 134.416517][ T6564] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./127/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./127/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./127" [pid 5000] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./128", 0777 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] lstat("./128/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6565 [pid 5000] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, ./strace-static-x86_64: Process 6565 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6565] chdir("./128") = 0 [pid 5000] getdents64(4, [pid 6565] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6565] setpgid(0, 0) = 0 [pid 6565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6565] <... openat resumed>) = 3 [pid 6565] write(3, "1000", 4 [pid 6559] +++ exited with 0 +++ [pid 5000] getdents64(4, [pid 6565] <... write resumed>) = 4 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6559, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6565] close(3) = 0 [pid 6565] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 6565] <... symlink resumed>) = 0 [pid 5002] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(4 [pid 6565] memfd_create("syzkaller", 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 6565] <... memfd_create resumed>) = 3 [pid 6562] <... pwritev resumed>) = 1114112 [pid 5002] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6565] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6562] exit_group(0 [pid 5002] <... openat resumed>) = 3 [pid 5000] rmdir("./128/file0" [pid 6565] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6562] <... exit_group resumed>) = ? [pid 5002] fstat(3, [pid 5000] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./128") = 0 [pid 5000] mkdir("./129", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 6565] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... close resumed>) = 0 [pid 5002] getdents64(3, [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6566 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./131/binderfs") = 0 [pid 5002] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6566 attached [pid 6566] chdir("./129") = 0 [pid 6566] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6566] setpgid(0, 0) = 0 [pid 6566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6566] write(3, "1000", 4) = 4 [pid 6566] close(3) = 0 [pid 6566] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6566] memfd_create("syzkaller", 0) = 3 [pid 5002] <... umount2 resumed>) = 0 [pid 6566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6566] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6565] <... write resumed>) = 2097152 [pid 5002] lstat("./131/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6562] +++ exited with 0 +++ [pid 6566] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6565] munmap(0x7f0ed4ac1000, 2097152 [pid 5002] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6565] <... munmap resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6562, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6565] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 6565] <... openat resumed>) = 4 [pid 6565] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... openat resumed>) = 4 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(4, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] <... openat resumed>) = 3 [pid 6565] <... ioctl resumed>) = 0 [pid 5002] close(4 [pid 5001] fstat(3, [pid 5002] <... close resumed>) = 0 [pid 6565] close(3 [pid 5002] rmdir("./131/file0" [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 6565] <... close resumed>) = 0 [pid 5002] getdents64(3, [pid 6565] mkdir("./file0", 0777 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] close(3 [pid 5001] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] rmdir("./131" [pid 5001] lstat("./130/binderfs", [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./132", 0777 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] unlink("./130/binderfs" [pid 6565] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] <... unlink resumed>) = 0 [pid 6566] <... write resumed>) = 2097152 [pid 6566] munmap(0x7f0ed4ac1000, 2097152 [pid 6565] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] <... openat resumed>) = 3 [pid 5001] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] ioctl(3, LOOP_CLR_FD [pid 6566] <... munmap resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6567 [pid 6566] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6566] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6567 attached ) = 0 [pid 6566] close(3) = 0 [pid 6566] mkdir("./file0", 0777) = 0 [pid 6566] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6567] chdir("./132") = 0 [pid 6567] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6567] setpgid(0, 0) = 0 [pid 6567] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6567] write(3, "1000", 4) = 4 [pid 6567] close(3) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 6567] symlink("/dev/binderfs", "./binderfs" [pid 5001] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6567] <... symlink resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./130/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6567] memfd_create("syzkaller", 0 [pid 5001] openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6567] <... memfd_create resumed>) = 3 [ 134.595974][ T6565] loop1: detected capacity change from 0 to 4096 [ 134.626834][ T6566] loop2: detected capacity change from 0 to 4096 [pid 6567] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5001] <... openat resumed>) = 4 [pid 5001] fstat(4, [pid 6565] <... mount resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6565] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] getdents64(4, [pid 6565] <... openat resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4 [pid 6565] chdir("./file0" [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./130/file0" [pid 6565] <... chdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 6565] ioctl(4, LOOP_CLR_FD) = 0 [pid 6565] close(4 [pid 6567] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6565] <... close resumed>) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./130") = 0 [pid 5001] mkdir("./131", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6570 attached [pid 6565] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6570 [pid 6570] chdir("./131" [pid 6565] <... openat resumed>) = 4 [pid 6570] <... chdir resumed>) = 0 [pid 6565] unlink("./file1" [pid 6570] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6565] <... unlink resumed>) = 0 [pid 6570] setpgid(0, 0 [pid 6565] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6570] <... setpgid resumed>) = 0 [ 134.654620][ T6568] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6566] <... mount resumed>) = 0 [pid 6570] <... openat resumed>) = 3 [pid 6566] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6570] write(3, "1000", 4) = 4 [pid 6566] <... openat resumed>) = 3 [pid 6570] close(3 [pid 6566] chdir("./file0" [pid 6570] <... close resumed>) = 0 [pid 6566] <... chdir resumed>) = 0 [pid 6570] symlink("/dev/binderfs", "./binderfs" [pid 6566] ioctl(4, LOOP_CLR_FD [pid 6570] <... symlink resumed>) = 0 [pid 6566] <... ioctl resumed>) = 0 [pid 6570] memfd_create("syzkaller", 0 [pid 6566] close(4 [pid 6570] <... memfd_create resumed>) = 3 [pid 6566] <... close resumed>) = 0 [pid 6570] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6566] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6570] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6567] <... write resumed>) = 2097152 [pid 6567] munmap(0x7f0ed4ac1000, 2097152 [pid 6566] <... openat resumed>) = 4 [pid 6566] unlink("./file1" [pid 6567] <... munmap resumed>) = 0 [pid 6567] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6567] ioctl(4, LOOP_SET_FD, 3 [pid 6570] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6567] <... ioctl resumed>) = 0 [pid 6566] <... unlink resumed>) = 0 [pid 6566] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6567] close(3) = 0 [pid 6567] mkdir("./file0", 0777) = 0 [pid 6567] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 6567] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6567] chdir("./file0") = 0 [pid 6567] ioctl(4, LOOP_CLR_FD) = 0 [ 134.695731][ T6569] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.724227][ T6567] loop4: detected capacity change from 0 to 4096 [pid 6567] close(4) = 0 [pid 6567] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6567] unlink("./file1") = 0 [pid 6567] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6570] <... write resumed>) = 2097152 [pid 6570] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6570] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 134.750802][ T6571] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6570] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6570] close(3) = 0 [pid 6570] mkdir("./file0", 0777) = 0 [pid 6570] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 6570] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6570] chdir("./file0") = 0 [pid 6570] ioctl(4, LOOP_CLR_FD) = 0 [pid 6570] close(4) = 0 [pid 6570] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6570] unlink("./file1") = 0 [ 134.801917][ T6570] loop3: detected capacity change from 0 to 4096 [ 134.840081][ T6572] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6570] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6565] <... pwritev resumed>) = 1114112 [pid 6565] exit_group(0) = ? [pid 6566] <... pwritev resumed>) = 1114112 [pid 6566] exit_group(0) = ? [pid 6565] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6565, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, [pid 6567] <... pwritev resumed>) = 1114112 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6567] exit_group(0 [pid 4999] getdents64(3, [pid 6567] <... exit_group resumed>) = ? [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./128/binderfs") = 0 [pid 4999] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 4999] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./128/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./128/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./128") = 0 [pid 4999] mkdir("./129", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6573 ./strace-static-x86_64: Process 6573 attached [pid 6573] chdir("./129" [pid 6566] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6566, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6573] <... chdir resumed>) = 0 [pid 5000] unlink("./129/binderfs" [pid 6573] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... unlink resumed>) = 0 [pid 6573] <... prctl resumed>) = 0 [pid 5000] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6573] setpgid(0, 0) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 6573] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6573] write(3, "1000", 4 [pid 6567] +++ exited with 0 +++ [pid 6573] <... write resumed>) = 4 [pid 6573] close(3 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6567, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 6573] <... close resumed>) = 0 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 6573] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... restart_syscall resumed>) = 0 [pid 6573] <... symlink resumed>) = 0 [pid 6573] memfd_create("syzkaller", 0) = 3 [pid 5002] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6573] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6573] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 5002] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6570] <... pwritev resumed>) = 1114112 [pid 5002] <... openat resumed>) = 3 [pid 6570] exit_group(0 [pid 5002] fstat(3, [pid 6570] <... exit_group resumed>) = ? [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./129/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 5002] getdents64(3, [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] close(4 [pid 5002] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] rmdir("./129/file0" [pid 5002] lstat("./132/binderfs", [pid 5000] <... rmdir resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] getdents64(3, [pid 5002] unlink("./132/binderfs") = 0 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(3) = 0 [pid 5000] rmdir("./129") = 0 [pid 5000] mkdir("./130", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6574 [pid 6573] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 6574 attached [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6574] chdir("./130") = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./132/file0", [pid 6574] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6570] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6570, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./131/binderfs") = 0 [pid 5001] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6574] setpgid(0, 0) = 0 [pid 6573] <... write resumed>) = 2097152 [pid 6574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6574] write(3, "1000", 4) = 4 [pid 6574] close(3) = 0 [pid 6574] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6574] memfd_create("syzkaller", 0) = 3 [pid 6574] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./131/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, [pid 6574] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6573] munmap(0x7f0ed4ac1000, 2097152 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./131/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [pid 6573] <... munmap resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6573] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6573] <... openat resumed>) = 4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6573] ioctl(4, LOOP_SET_FD, 3 [pid 5002] openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./131") = 0 [pid 5001] mkdir("./132", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 5002] <... openat resumed>) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6573] <... ioctl resumed>) = 0 [pid 5002] getdents64(4, [pid 6573] close(3 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6573] <... close resumed>) = 0 [pid 5002] getdents64(4, [pid 6573] mkdir("./file0", 0777 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 6573] <... mkdir resumed>) = 0 [pid 5002] rmdir("./132/file0" [pid 6573] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, [pid 5001] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] close(3) = 0 [pid 5002] rmdir("./132" [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6575 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./133", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6575 attached [pid 6575] chdir("./132" [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6576 [pid 6575] <... chdir resumed>) = 0 [pid 6575] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6575] setpgid(0, 0) = 0 [pid 6575] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 6576 attached ) = 3 [pid 6574] <... write resumed>) = 2097152 [pid 6575] write(3, "1000", 4 [pid 6576] chdir("./133" [pid 6575] <... write resumed>) = 4 [pid 6576] <... chdir resumed>) = 0 [pid 6575] close(3 [pid 6574] munmap(0x7f0ed4ac1000, 2097152 [pid 6576] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6575] <... close resumed>) = 0 [pid 6576] <... prctl resumed>) = 0 [pid 6575] symlink("/dev/binderfs", "./binderfs" [pid 6576] setpgid(0, 0 [pid 6575] <... symlink resumed>) = 0 [pid 6576] <... setpgid resumed>) = 0 [pid 6575] memfd_create("syzkaller", 0 [pid 6574] <... munmap resumed>) = 0 [pid 6575] <... memfd_create resumed>) = 3 [pid 6575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6576] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6574] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6573] <... mount resumed>) = 0 [ 135.088001][ T6573] loop1: detected capacity change from 0 to 4096 [pid 6573] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6573] chdir("./file0") = 0 [pid 6573] ioctl(4, LOOP_CLR_FD) = 0 [pid 6573] close(4) = 0 [pid 6573] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6573] unlink("./file1" [pid 6576] <... openat resumed>) = 3 [pid 6576] write(3, "1000", 4) = 4 [pid 6574] <... openat resumed>) = 4 [pid 6576] close(3 [pid 6574] ioctl(4, LOOP_SET_FD, 3 [pid 6576] <... close resumed>) = 0 [pid 6576] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6576] memfd_create("syzkaller", 0) = 3 [pid 6576] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6575] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6576] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6574] <... ioctl resumed>) = 0 [pid 6574] close(3) = 0 [pid 6574] mkdir("./file0", 0777) = 0 [pid 6574] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6573] <... unlink resumed>) = 0 [pid 6576] <... write resumed>) = 2097152 [ 135.133878][ T6577] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.146917][ T6574] loop2: detected capacity change from 0 to 4096 [pid 6573] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6574] <... mount resumed>) = 0 [pid 6576] munmap(0x7f0ed4ac1000, 2097152 [pid 6574] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6575] <... write resumed>) = 2097152 [pid 6576] <... munmap resumed>) = 0 [pid 6574] <... openat resumed>) = 3 [pid 6576] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6574] chdir("./file0" [pid 6576] <... openat resumed>) = 4 [pid 6574] <... chdir resumed>) = 0 [pid 6576] ioctl(4, LOOP_SET_FD, 3 [pid 6574] ioctl(4, LOOP_CLR_FD [pid 6575] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6575] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6575] ioctl(4, LOOP_SET_FD, 3 [pid 6576] <... ioctl resumed>) = 0 [pid 6574] <... ioctl resumed>) = 0 [pid 6576] close(3 [pid 6574] close(4 [pid 6576] <... close resumed>) = 0 [pid 6574] <... close resumed>) = 0 [pid 6575] <... ioctl resumed>) = 0 [pid 6575] close(3) = 0 [pid 6575] mkdir("./file0", 0777) = 0 [pid 6575] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6576] mkdir("./file0", 0777 [pid 6574] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6576] <... mkdir resumed>) = 0 [pid 6576] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6574] <... openat resumed>) = 4 [pid 6574] unlink("./file1") = 0 [pid 6574] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6575] <... mount resumed>) = 0 [pid 6575] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6575] chdir("./file0") = 0 [pid 6575] ioctl(4, LOOP_CLR_FD) = 0 [pid 6575] close(4) = 0 [pid 6575] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 135.193605][ T6578] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.211037][ T6576] loop4: detected capacity change from 0 to 4096 [ 135.215335][ T6575] loop3: detected capacity change from 0 to 4096 [pid 6575] unlink("./file1" [pid 6576] <... mount resumed>) = 0 [pid 6576] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6576] chdir("./file0") = 0 [pid 6576] ioctl(4, LOOP_CLR_FD) = 0 [pid 6576] close(4) = 0 [pid 6576] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6576] unlink("./file1" [pid 6575] <... unlink resumed>) = 0 [pid 6575] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6576] <... unlink resumed>) = 0 [ 135.270678][ T6580] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.278282][ T6579] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6576] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6573] <... pwritev resumed>) = 1114112 [pid 6573] exit_group(0) = ? [pid 6574] <... pwritev resumed>) = 1114112 [pid 6574] exit_group(0) = ? [pid 6573] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6573, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4999] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./129/binderfs") = 0 [pid 4999] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6575] <... pwritev resumed>) = 1114112 [pid 6575] exit_group(0) = ? [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./129/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./129/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./129") = 0 [pid 4999] mkdir("./130", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6581 [pid 6574] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6574, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 ./strace-static-x86_64: Process 6581 attached [pid 6576] <... pwritev resumed>) = 1114112 [pid 5000] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6581] chdir("./130" [pid 6576] exit_group(0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6581] <... chdir resumed>) = 0 [pid 6576] <... exit_group resumed>) = ? [pid 5000] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./130/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./130/binderfs") = 0 [pid 5000] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6581] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6581] setpgid(0, 0 [pid 6575] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6575, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6581] <... setpgid resumed>) = 0 [pid 5001] fstat(3, [pid 6581] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6581] <... openat resumed>) = 3 [pid 5001] getdents64(3, [pid 6581] write(3, "1000", 4 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6581] <... write resumed>) = 4 [pid 5001] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6581] close(3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./132/binderfs", [pid 6581] <... close resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6581] symlink("/dev/binderfs", "./binderfs" [pid 5001] unlink("./132/binderfs" [pid 5000] <... umount2 resumed>) = 0 [pid 6581] <... symlink resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 6581] memfd_create("syzkaller", 0 [pid 5001] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6581] <... memfd_create resumed>) = 3 [pid 6576] +++ exited with 0 +++ [pid 5000] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6581] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6581] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6576, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5001] <... umount2 resumed>) = 0 [pid 5000] lstat("./130/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] fstat(4, [pid 5002] <... openat resumed>) = 3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] fstat(3, [pid 5000] getdents64(4, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(3, [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] close(4 [pid 5002] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] rmdir("./130/file0" [pid 5002] lstat("./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5002] unlink("./133/binderfs" [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./130") = 0 [pid 5000] mkdir("./131", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6582 [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6581] <... write resumed>) = 2097152 [pid 6581] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6581] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6581] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5001] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6581] close(3) = 0 [pid 6581] mkdir("./file0", 0777 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6581] <... mkdir resumed>) = 0 [pid 6581] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, ""./strace-static-x86_64: Process 6582 attached ) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] lstat("./132/file0", [pid 6582] chdir("./131" [pid 6581] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6582] <... chdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6582] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] lstat("./133/file0", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6582] <... prctl resumed>) = 0 [pid 6582] setpgid(0, 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6582] <... setpgid resumed>) = 0 [pid 6581] <... openat resumed>) = 3 [pid 5002] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 4 [pid 6582] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] fstat(4, [pid 6582] <... openat resumed>) = 3 [pid 5002] openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5001] getdents64(4, [pid 6582] write(3, "1000", 4 [pid 5002] fstat(4, [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6582] <... write resumed>) = 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, [pid 5002] getdents64(4, [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] close(4 [pid 5002] getdents64(4, [pid 5001] <... close resumed>) = 0 [pid 6582] close(3 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] rmdir("./132/file0" [pid 6582] <... close resumed>) = 0 [pid 6581] chdir("./file0" [pid 5002] close(4 [pid 5001] <... rmdir resumed>) = 0 [pid 6582] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... close resumed>) = 0 [pid 5001] getdents64(3, [pid 5002] rmdir("./133/file0" [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6582] <... symlink resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] close(3 [pid 5002] getdents64(3, [pid 5001] <... close resumed>) = 0 [pid 6582] memfd_create("syzkaller", 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] rmdir("./132" [pid 6582] <... memfd_create resumed>) = 3 [pid 6581] <... chdir resumed>) = 0 [pid 5002] close(3 [pid 5001] <... rmdir resumed>) = 0 [pid 6582] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... close resumed>) = 0 [pid 5001] mkdir("./133", 0777 [pid 6582] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6581] ioctl(4, LOOP_CLR_FD [pid 5002] rmdir("./133" [pid 5001] <... mkdir resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] mkdir("./134", 0777 [pid 5001] <... openat resumed>) = 3 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... openat resumed>) = 3 [pid 5001] close(3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] <... close resumed>) = 0 [pid 6581] <... ioctl resumed>) = 0 [pid 6581] close(4) = 0 [pid 6581] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6582] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] close(3 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6581] <... openat resumed>) = 4 [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6584 [pid 6581] unlink("./file1" [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6585 ./strace-static-x86_64: Process 6585 attached [pid 6585] chdir("./134" [pid 6581] <... unlink resumed>) = 0 [pid 6581] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6585] <... chdir resumed>) = 0 [pid 6585] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 6584 attached [pid 6584] chdir("./133" [pid 6585] setpgid(0, 0 [pid 6584] <... chdir resumed>) = 0 [pid 6584] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6585] <... setpgid resumed>) = 0 [pid 6584] setpgid(0, 0 [pid 6585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6584] <... setpgid resumed>) = 0 [pid 6585] <... openat resumed>) = 3 [pid 6584] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6585] write(3, "1000", 4 [pid 6584] <... openat resumed>) = 3 [pid 6585] <... write resumed>) = 4 [pid 6584] write(3, "1000", 4 [pid 6585] close(3 [pid 6584] <... write resumed>) = 4 [pid 6585] <... close resumed>) = 0 [pid 6584] close(3 [pid 6585] symlink("/dev/binderfs", "./binderfs" [pid 6584] <... close resumed>) = 0 [pid 6585] <... symlink resumed>) = 0 [pid 6584] symlink("/dev/binderfs", "./binderfs" [pid 6585] memfd_create("syzkaller", 0 [pid 6584] <... symlink resumed>) = 0 [pid 6585] <... memfd_create resumed>) = 3 [ 135.542319][ T6581] loop1: detected capacity change from 0 to 4096 [ 135.565672][ T6583] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6584] memfd_create("syzkaller", 0 [pid 6585] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6584] <... memfd_create resumed>) = 3 [pid 6582] <... write resumed>) = 2097152 [pid 6584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6582] munmap(0x7f0ed4ac1000, 2097152 [pid 6585] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6584] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6585] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6582] <... munmap resumed>) = 0 [pid 6582] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6582] ioctl(4, LOOP_SET_FD, 3 [pid 6584] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6582] <... ioctl resumed>) = 0 [pid 6582] close(3) = 0 [pid 6582] mkdir("./file0", 0777) = 0 [pid 6582] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6585] <... write resumed>) = 2097152 [pid 6585] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6585] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6584] <... write resumed>) = 2097152 [pid 6585] <... openat resumed>) = 4 [pid 6585] ioctl(4, LOOP_SET_FD, 3 [pid 6584] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6582] <... mount resumed>) = 0 [pid 6584] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 135.649880][ T6582] loop2: detected capacity change from 0 to 4096 [ 135.686969][ T6585] loop4: detected capacity change from 0 to 4096 [pid 6584] ioctl(4, LOOP_SET_FD, 3 [pid 6582] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6582] chdir("./file0") = 0 [pid 6582] ioctl(4, LOOP_CLR_FD [pid 6585] <... ioctl resumed>) = 0 [pid 6584] <... ioctl resumed>) = 0 [pid 6581] <... pwritev resumed>) = 1114112 [pid 6582] <... ioctl resumed>) = 0 [pid 6585] close(3 [pid 6584] close(3 [pid 6582] close(4 [pid 6585] <... close resumed>) = 0 [pid 6584] <... close resumed>) = 0 [pid 6581] exit_group(0 [pid 6585] mkdir("./file0", 0777 [pid 6584] mkdir("./file0", 0777 [pid 6582] <... close resumed>) = 0 [pid 6581] <... exit_group resumed>) = ? [pid 6585] <... mkdir resumed>) = 0 [pid 6584] <... mkdir resumed>) = 0 [pid 6582] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6585] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6584] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6582] <... openat resumed>) = 4 [ 135.696035][ T6586] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.698917][ T6584] loop3: detected capacity change from 0 to 4096 [pid 6582] unlink("./file1") = 0 [pid 6582] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6585] <... mount resumed>) = 0 [pid 6585] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6584] <... mount resumed>) = 0 [pid 6585] chdir("./file0") = 0 [pid 6585] ioctl(4, LOOP_CLR_FD [pid 6584] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6585] <... ioctl resumed>) = 0 [pid 6585] close(4 [pid 6584] <... openat resumed>) = 3 [pid 6585] <... close resumed>) = 0 [pid 6584] chdir("./file0") = 0 [pid 6584] ioctl(4, LOOP_CLR_FD) = 0 [pid 6584] close(4) = 0 [pid 6584] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6584] unlink("./file1" [pid 6585] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6585] unlink("./file1" [pid 6581] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6581, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6585] <... unlink resumed>) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 6585] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 4999] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./130/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./130/binderfs") = 0 [pid 4999] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6584] <... unlink resumed>) = 0 [ 135.740477][ T6587] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.757548][ T6588] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6584] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./130/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./130/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./130") = 0 [pid 4999] mkdir("./131", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6589 ./strace-static-x86_64: Process 6589 attached [pid 6589] chdir("./131") = 0 [pid 6589] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6589] setpgid(0, 0) = 0 [pid 6589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6589] write(3, "1000", 4) = 4 [pid 6589] close(3) = 0 [pid 6589] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6589] memfd_create("syzkaller", 0) = 3 [pid 6589] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6585] <... pwritev resumed>) = 1114112 [pid 6585] exit_group(0) = ? [pid 6582] <... pwritev resumed>) = 1114112 [pid 6582] exit_group(0) = ? [pid 6589] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6584] <... pwritev resumed>) = 1114112 [pid 6584] exit_group(0) = ? [pid 6585] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6585, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 6582] +++ exited with 0 +++ [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6582, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5002] <... restart_syscall resumed>) = 0 [pid 5002] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] fstat(3, [pid 5000] <... openat resumed>) = 3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] fstat(3, [pid 5002] getdents64(3, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] getdents64(3, [pid 5002] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6589] <... write resumed>) = 2097152 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] unlink("./134/binderfs" [pid 5000] lstat("./131/binderfs", [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6589] munmap(0x7f0ed4ac1000, 2097152 [pid 5000] unlink("./131/binderfs" [pid 6589] <... munmap resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 6589] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6589] ioctl(4, LOOP_SET_FD, 3 [pid 5000] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6589] <... ioctl resumed>) = 0 [pid 6589] close(3) = 0 [pid 6589] mkdir("./file0", 0777) = 0 [pid 6589] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6584] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6584, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6589] <... mount resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6589] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6589] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 6589] chdir("./file0" [pid 5001] fstat(3, [pid 6589] <... chdir resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6589] ioctl(4, LOOP_CLR_FD [pid 5001] getdents64(3, [pid 6589] <... ioctl resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6589] close(4 [pid 5001] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6589] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6589] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5001] lstat("./133/binderfs", [pid 6589] <... openat resumed>) = 4 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6589] unlink("./file1" [pid 5001] unlink("./133/binderfs") = 0 [pid 5001] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 6589] <... unlink resumed>) = 0 [pid 6589] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./134/file0", [pid 5000] lstat("./131/file0", [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... openat resumed>) = 4 [pid 5002] fstat(4, [pid 5000] <... openat resumed>) = 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./133/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./133/file0" [pid 5000] fstat(4, [pid 5002] getdents64(4, [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [ 135.975255][ T6589] loop1: detected capacity change from 0 to 4096 [ 136.013054][ T6590] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] close(3) = 0 [pid 5001] rmdir("./133") = 0 [pid 5001] mkdir("./134", 0777 [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 5000] getdents64(4, [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] close(4 [pid 5000] getdents64(4, [pid 5002] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] rmdir("./134/file0" [pid 5000] close(4 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] rmdir("./131/file0" [pid 5002] getdents64(3, [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] <... rmdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(3, [pid 5002] close(3 [pid 5000] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] close(3 [pid 5002] rmdir("./134" [pid 5001] close(3 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./135", 0777 [pid 5000] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] rmdir("./131" [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... mkdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5000] mkdir("./132", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6591 [pid 5002] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] <... openat resumed>) = 3 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5002] close(3 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... close resumed>) = 0 [pid 5000] close(3 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6593 [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6592 ./strace-static-x86_64: Process 6593 attached [pid 6593] chdir("./135") = 0 [pid 6593] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6593] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 6591 attached [pid 6593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6591] chdir("./134") = 0 [pid 6591] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6593] <... openat resumed>) = 3 [pid 6591] setpgid(0, 0) = 0 [pid 6593] write(3, "1000", 4 [pid 6591] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 6592 attached [pid 6593] <... write resumed>) = 4 [pid 6592] chdir("./132" [pid 6591] <... openat resumed>) = 3 [pid 6592] <... chdir resumed>) = 0 [pid 6592] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6592] setpgid(0, 0 [pid 6593] close(3 [pid 6591] write(3, "1000", 4 [pid 6592] <... setpgid resumed>) = 0 [pid 6591] <... write resumed>) = 4 [pid 6592] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6591] close(3) = 0 [pid 6591] symlink("/dev/binderfs", "./binderfs" [pid 6592] <... openat resumed>) = 3 [pid 6591] <... symlink resumed>) = 0 [pid 6593] <... close resumed>) = 0 [pid 6593] symlink("/dev/binderfs", "./binderfs" [pid 6592] write(3, "1000", 4 [pid 6591] memfd_create("syzkaller", 0 [pid 6592] <... write resumed>) = 4 [pid 6591] <... memfd_create resumed>) = 3 [pid 6593] <... symlink resumed>) = 0 [pid 6592] close(3 [pid 6591] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6593] memfd_create("syzkaller", 0 [pid 6592] <... close resumed>) = 0 [pid 6591] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6593] <... memfd_create resumed>) = 3 [pid 6592] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6592] memfd_create("syzkaller", 0) = 3 [pid 6592] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6592] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6593] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6591] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6592] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6589] <... pwritev resumed>) = 1114112 [pid 6589] exit_group(0) = ? [pid 6593] <... write resumed>) = 2097152 [pid 6593] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6593] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6593] ioctl(4, LOOP_SET_FD, 3 [pid 6592] <... write resumed>) = 2097152 [pid 6592] munmap(0x7f0ed4ac1000, 2097152 [pid 6591] <... write resumed>) = 2097152 [pid 6591] munmap(0x7f0ed4ac1000, 2097152 [pid 6592] <... munmap resumed>) = 0 [pid 6591] <... munmap resumed>) = 0 [pid 6592] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6591] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6592] ioctl(4, LOOP_SET_FD, 3 [pid 6591] ioctl(4, LOOP_SET_FD, 3 [pid 6593] <... ioctl resumed>) = 0 [pid 6592] <... ioctl resumed>) = 0 [pid 6589] +++ exited with 0 +++ [pid 6593] close(3 [pid 6592] close(3 [pid 6591] <... ioctl resumed>) = 0 [pid 6591] close(3) = 0 [pid 6592] <... close resumed>) = 0 [pid 6591] mkdir("./file0", 0777 [pid 6592] mkdir("./file0", 0777 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6589, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6593] <... close resumed>) = 0 [pid 6592] <... mkdir resumed>) = 0 [pid 6591] <... mkdir resumed>) = 0 [pid 6593] mkdir("./file0", 0777 [pid 6592] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6591] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6593] <... mkdir resumed>) = 0 [pid 4999] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6593] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./131/binderfs") = 0 [pid 4999] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 4999] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./131/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./131/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./131") = 0 [ 136.169457][ T6593] loop4: detected capacity change from 0 to 4096 [ 136.174014][ T6592] loop2: detected capacity change from 0 to 4096 [ 136.183231][ T6591] loop3: detected capacity change from 0 to 4096 [pid 6593] <... mount resumed>) = 0 [pid 6592] <... mount resumed>) = 0 [pid 6591] <... mount resumed>) = 0 [pid 4999] mkdir("./132", 0777 [pid 6593] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6592] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6591] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] <... mkdir resumed>) = 0 [pid 6593] <... openat resumed>) = 3 [pid 6592] <... openat resumed>) = 3 [pid 6591] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6593] chdir("./file0" [pid 6592] chdir("./file0" [pid 6591] chdir("./file0" [pid 4999] <... openat resumed>) = 3 [pid 6593] <... chdir resumed>) = 0 [pid 6592] <... chdir resumed>) = 0 [pid 6591] <... chdir resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6593] ioctl(4, LOOP_CLR_FD [pid 6592] ioctl(4, LOOP_CLR_FD [pid 6591] ioctl(4, LOOP_CLR_FD [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6593] <... ioctl resumed>) = 0 [pid 6592] <... ioctl resumed>) = 0 [pid 6591] <... ioctl resumed>) = 0 [pid 4999] close(3 [pid 6593] close(4 [pid 6592] close(4 [pid 6591] close(4 [pid 4999] <... close resumed>) = 0 [pid 6593] <... close resumed>) = 0 [pid 6592] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6593] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6592] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6591] <... close resumed>) = 0 [pid 6593] <... openat resumed>) = 4 [pid 6592] <... openat resumed>) = 4 [pid 6593] unlink("./file1" [pid 6592] unlink("./file1" [pid 6591] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6597 ./strace-static-x86_64: Process 6597 attached [pid 6593] <... unlink resumed>) = 0 [pid 6597] chdir("./132" [pid 6593] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6591] <... openat resumed>) = 4 [pid 6597] <... chdir resumed>) = 0 [pid 6597] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6597] setpgid(0, 0) = 0 [pid 6597] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6597] write(3, "1000", 4) = 4 [pid 6597] close(3) = 0 [pid 6597] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6597] memfd_create("syzkaller", 0) = 3 [pid 6597] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6597] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6591] unlink("./file1" [pid 6592] <... unlink resumed>) = 0 [pid 6592] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6591] <... unlink resumed>) = 0 [ 136.218498][ T6595] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.221825][ T6596] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.229331][ T6594] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6591] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6597] <... write resumed>) = 2097152 [pid 6597] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6597] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6597] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6597] close(3) = 0 [pid 6597] mkdir("./file0", 0777) = 0 [ 136.333029][ T6597] loop1: detected capacity change from 0 to 4096 [pid 6597] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6592] <... pwritev resumed>) = 1114112 [pid 6592] exit_group(0) = ? [pid 6597] <... mount resumed>) = 0 [pid 6597] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6597] chdir("./file0") = 0 [pid 6597] ioctl(4, LOOP_CLR_FD) = 0 [pid 6597] close(4) = 0 [pid 6597] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6597] unlink("./file1") = 0 [pid 6591] <... pwritev resumed>) = 1114112 [pid 6597] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6591] exit_group(0 [pid 6593] <... pwritev resumed>) = 1114112 [pid 6591] <... exit_group resumed>) = ? [pid 6593] exit_group(0) = ? [ 136.400620][ T6598] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6592] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6592, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./132/binderfs") = 0 [pid 5000] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6593] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6593, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5002] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./135/binderfs") = 0 [pid 5002] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./132/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./132/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./132" [pid 6591] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6591, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./134/binderfs") = 0 [pid 5001] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... rmdir resumed>) = 0 [pid 5000] mkdir("./133", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6599 ./strace-static-x86_64: Process 6599 attached [pid 6599] chdir("./133") = 0 [pid 6599] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6599] setpgid(0, 0) = 0 [pid 6599] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6599] write(3, "1000", 4) = 4 [pid 6599] close(3) = 0 [pid 6599] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6599] memfd_create("syzkaller", 0) = 3 [pid 6599] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5001] <... umount2 resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./135/file0", [pid 5001] lstat("./134/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] <... openat resumed>) = 4 [pid 5001] fstat(4, [pid 5002] fstat(4, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] getdents64(4, [pid 5001] close(4 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] <... close resumed>) = 0 [pid 5002] close(4) = 0 [pid 5001] rmdir("./134/file0") = 0 [pid 5002] rmdir("./135/file0") = 0 [pid 5001] getdents64(3, [pid 5002] getdents64(3, [pid 5001] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5002] close(3 [pid 5001] rmdir("./134") = 0 [pid 5002] <... close resumed>) = 0 [pid 6599] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] rmdir("./135" [pid 5001] mkdir("./135", 0777 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5002] mkdir("./136", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] <... openat resumed>) = 3 [pid 5002] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5002] close(3 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6597] <... pwritev resumed>) = 1114112 [pid 5002] <... close resumed>) = 0 [pid 6597] exit_group(0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6600 [pid 6597] <... exit_group resumed>) = ? [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6601 ./strace-static-x86_64: Process 6600 attached [pid 6600] chdir("./135") = 0 [pid 6600] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6600] setpgid(0, 0) = 0 [pid 6600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6600] write(3, "1000", 4) = 4 [pid 6600] close(3) = 0 [pid 6600] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6600] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 6601 attached [pid 6600] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6601] chdir("./136") = 0 [pid 6600] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6599] <... write resumed>) = 2097152 [pid 6597] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6597, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6601] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6599] munmap(0x7f0ed4ac1000, 2097152 [pid 4999] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./132/binderfs") = 0 [pid 4999] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6601] <... prctl resumed>) = 0 [pid 6599] <... munmap resumed>) = 0 [pid 6601] setpgid(0, 0 [pid 6599] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6601] <... setpgid resumed>) = 0 [pid 6601] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6599] <... openat resumed>) = 4 [pid 6601] <... openat resumed>) = 3 [pid 6599] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6601] write(3, "1000", 4) = 4 [pid 6601] close(3) = 0 [pid 6601] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6601] memfd_create("syzkaller", 0) = 3 [pid 6601] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6599] close(3) = 0 [pid 6599] mkdir("./file0", 0777 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./132/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./132/file0") = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6601] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6600] <... write resumed>) = 2097152 [pid 6599] <... mkdir resumed>) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./132") = 0 [pid 4999] mkdir("./133", 0777 [pid 6599] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6600] munmap(0x7f0ed4ac1000, 2097152 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 6601] <... write resumed>) = 2097152 [pid 6600] <... munmap resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 6600] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 136.621371][ T6599] loop2: detected capacity change from 0 to 4096 [pid 6600] ioctl(4, LOOP_SET_FD, 3 [pid 6599] <... mount resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6603 [pid 6601] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6601] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6601] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6603 attached [pid 6600] <... ioctl resumed>) = 0 [pid 6599] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6603] chdir("./133" [pid 6599] <... openat resumed>) = 3 [pid 6603] <... chdir resumed>) = 0 [pid 6599] chdir("./file0" [pid 6603] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6599] <... chdir resumed>) = 0 [pid 6603] <... prctl resumed>) = 0 [pid 6599] ioctl(4, LOOP_CLR_FD [pid 6603] setpgid(0, 0 [pid 6599] <... ioctl resumed>) = 0 [pid 6603] <... setpgid resumed>) = 0 [pid 6599] close(4 [pid 6603] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6599] <... close resumed>) = 0 [pid 6603] <... openat resumed>) = 3 [pid 6599] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6603] write(3, "1000", 4 [pid 6599] <... openat resumed>) = 4 [pid 6603] <... write resumed>) = 4 [pid 6599] unlink("./file1" [pid 6603] close(3) = 0 [pid 6603] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6603] memfd_create("syzkaller", 0) = 3 [pid 6603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6601] <... ioctl resumed>) = 0 [pid 6600] close(3 [pid 6601] close(3 [pid 6600] <... close resumed>) = 0 [pid 6601] <... close resumed>) = 0 [pid 6600] mkdir("./file0", 0777 [pid 6599] <... unlink resumed>) = 0 [pid 6601] mkdir("./file0", 0777 [pid 6600] <... mkdir resumed>) = 0 [pid 6599] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6601] <... mkdir resumed>) = 0 [pid 6600] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6601] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 136.678084][ T6600] loop3: detected capacity change from 0 to 4096 [ 136.680290][ T6602] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.692417][ T6601] loop4: detected capacity change from 0 to 4096 [pid 6603] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6600] <... mount resumed>) = 0 [pid 6600] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6600] chdir("./file0") = 0 [pid 6600] ioctl(4, LOOP_CLR_FD) = 0 [pid 6600] close(4) = 0 [pid 6600] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6603] <... write resumed>) = 2097152 [pid 6603] munmap(0x7f0ed4ac1000, 2097152 [pid 6600] <... openat resumed>) = 4 [pid 6600] unlink("./file1" [pid 6603] <... munmap resumed>) = 0 [pid 6601] <... mount resumed>) = 0 [pid 6601] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6601] chdir("./file0" [pid 6600] <... unlink resumed>) = 0 [pid 6601] <... chdir resumed>) = 0 [pid 6600] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6601] ioctl(4, LOOP_CLR_FD) = 0 [pid 6601] close(4) = 0 [pid 6601] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6603] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6601] <... openat resumed>) = 4 [pid 6601] unlink("./file1" [pid 6603] <... openat resumed>) = 4 [ 136.733628][ T6604] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.762805][ T6605] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6603] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6603] close(3) = 0 [pid 6603] mkdir("./file0", 0777) = 0 [pid 6603] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6601] <... unlink resumed>) = 0 [ 136.784351][ T6603] loop1: detected capacity change from 0 to 4096 [pid 6601] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6599] <... pwritev resumed>) = 1114112 [pid 6603] <... mount resumed>) = 0 [pid 6599] exit_group(0 [pid 6603] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6599] <... exit_group resumed>) = ? [pid 6603] <... openat resumed>) = 3 [pid 6603] chdir("./file0") = 0 [pid 6603] ioctl(4, LOOP_CLR_FD) = 0 [pid 6603] close(4) = 0 [pid 6603] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6603] unlink("./file1") = 0 [pid 6603] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6601] <... pwritev resumed>) = 1114112 [pid 6600] <... pwritev resumed>) = 1114112 [pid 6601] exit_group(0 [pid 6600] exit_group(0) = ? [ 136.852504][ T6606] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6601] <... exit_group resumed>) = ? [pid 6599] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6599, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./133/binderfs") = 0 [pid 5000] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6601] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6601, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./136/binderfs") = 0 [pid 5002] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./133/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./133/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./133") = 0 [pid 5000] mkdir("./134", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6607 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6600] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6600, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./136/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./135/binderfs", [pid 5002] getdents64(4, [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./135/binderfs" [pid 5002] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] <... unlink resumed>) = 0 [pid 5001] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./136/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./136") = 0 [pid 5002] mkdir("./137", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6608 ./strace-static-x86_64: Process 6608 attached [pid 6608] chdir("./137") = 0 [pid 6608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6608] setpgid(0, 0) = 0 [pid 6608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6608] write(3, "1000", 4) = 4 [pid 6608] close(3) = 0 ./strace-static-x86_64: Process 6607 attached [pid 6607] chdir("./134") = 0 [pid 6608] symlink("/dev/binderfs", "./binderfs" [pid 6607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6607] setpgid(0, 0 [pid 6608] <... symlink resumed>) = 0 [pid 6608] memfd_create("syzkaller", 0 [pid 6607] <... setpgid resumed>) = 0 [pid 6608] <... memfd_create resumed>) = 3 [pid 6607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6608] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6607] <... openat resumed>) = 3 [pid 6607] write(3, "1000", 4) = 4 [pid 6607] close(3) = 0 [pid 6607] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6607] memfd_create("syzkaller", 0) = 3 [pid 6607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./135/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 6608] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./135/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./135") = 0 [pid 5001] mkdir("./136", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 6607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6609 ./strace-static-x86_64: Process 6609 attached [pid 6609] chdir("./136") = 0 [pid 6609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6609] setpgid(0, 0) = 0 [pid 6609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6609] write(3, "1000", 4 [pid 6607] <... write resumed>) = 2097152 [pid 6609] <... write resumed>) = 4 [pid 6609] close(3) = 0 [pid 6609] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6609] memfd_create("syzkaller", 0) = 3 [pid 6609] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6608] <... write resumed>) = 2097152 [pid 6607] munmap(0x7f0ed4ac1000, 2097152 [pid 6603] <... pwritev resumed>) = 1114112 [pid 6608] munmap(0x7f0ed4ac1000, 2097152 [pid 6607] <... munmap resumed>) = 0 [pid 6603] exit_group(0 [pid 6608] <... munmap resumed>) = 0 [pid 6607] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6603] <... exit_group resumed>) = ? [pid 6609] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6608] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6607] <... openat resumed>) = 4 [pid 6608] <... openat resumed>) = 4 [pid 6607] ioctl(4, LOOP_SET_FD, 3 [pid 6608] ioctl(4, LOOP_SET_FD, 3 [pid 6607] <... ioctl resumed>) = 0 [pid 6607] close(3) = 0 [pid 6608] <... ioctl resumed>) = 0 [pid 6607] mkdir("./file0", 0777 [pid 6603] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6603, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6608] close(3 [pid 6607] <... mkdir resumed>) = 0 [pid 6608] <... close resumed>) = 0 [pid 6607] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6608] mkdir("./file0", 0777 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./133/binderfs") = 0 [pid 6608] <... mkdir resumed>) = 0 [pid 4999] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6608] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6609] <... write resumed>) = 2097152 [pid 6607] <... mount resumed>) = 0 [pid 6607] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6608] <... mount resumed>) = 0 [ 137.099086][ T6607] loop2: detected capacity change from 0 to 4096 [ 137.099811][ T6608] loop4: detected capacity change from 0 to 4096 [ 137.137009][ T6610] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6607] chdir("./file0" [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./133/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 6609] munmap(0x7f0ed4ac1000, 2097152 [pid 6608] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6607] <... chdir resumed>) = 0 [pid 4999] close(4) = 0 [pid 6609] <... munmap resumed>) = 0 [pid 6608] <... openat resumed>) = 3 [pid 6607] ioctl(4, LOOP_CLR_FD [pid 6609] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6608] chdir("./file0" [pid 6609] <... openat resumed>) = 4 [pid 6607] <... ioctl resumed>) = 0 [pid 6609] ioctl(4, LOOP_SET_FD, 3 [pid 6608] <... chdir resumed>) = 0 [pid 6607] close(4 [pid 4999] rmdir("./133/file0" [pid 6608] ioctl(4, LOOP_CLR_FD) = 0 [pid 6608] close(4 [pid 6609] <... ioctl resumed>) = 0 [pid 6608] <... close resumed>) = 0 [pid 6607] <... close resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 6608] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6607] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6608] <... openat resumed>) = 4 [pid 6607] <... openat resumed>) = 4 [pid 4999] getdents64(3, [pid 6609] close(3 [pid 6608] unlink("./file1" [pid 6607] unlink("./file1" [pid 6609] <... close resumed>) = 0 [pid 6608] <... unlink resumed>) = 0 [pid 6607] <... unlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6609] mkdir("./file0", 0777 [pid 6608] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6607] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6609] <... mkdir resumed>) = 0 [pid 4999] close(3 [pid 6609] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./133") = 0 [pid 4999] mkdir("./134", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6613 [ 137.149284][ T6611] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.163994][ T6609] loop3: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 6613 attached [pid 6613] chdir("./134") = 0 [pid 6609] <... mount resumed>) = 0 [pid 6609] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6609] chdir("./file0") = 0 [pid 6609] ioctl(4, LOOP_CLR_FD) = 0 [pid 6609] close(4) = 0 [pid 6609] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6613] setpgid(0, 0 [pid 6609] <... openat resumed>) = 4 [pid 6609] unlink("./file1" [pid 6613] <... setpgid resumed>) = 0 [pid 6613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6613] write(3, "1000", 4) = 4 [pid 6613] close(3) = 0 [pid 6613] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6613] memfd_create("syzkaller", 0) = 3 [pid 6613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6609] <... unlink resumed>) = 0 [pid 6609] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 137.204154][ T6612] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6613] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6613] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6613] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6607] <... pwritev resumed>) = 1114112 [pid 6607] exit_group(0) = ? [pid 6613] close(3) = 0 [pid 6613] mkdir("./file0", 0777) = 0 [pid 6613] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6608] <... pwritev resumed>) = 1114112 [pid 6608] exit_group(0) = ? [pid 6613] <... mount resumed>) = 0 [pid 6613] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6613] chdir("./file0") = 0 [pid 6613] ioctl(4, LOOP_CLR_FD) = 0 [pid 6613] close(4) = 0 [pid 6613] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6613] unlink("./file1" [pid 6607] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6607, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./134/binderfs") = 0 [ 137.305642][ T6613] loop1: detected capacity change from 0 to 4096 [ 137.341359][ T6614] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6613] <... unlink resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 6613] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5000] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6608] +++ exited with 0 +++ [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6608, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5000] lstat("./134/file0", [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] fstat(3, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] getdents64(3, [pid 5000] <... openat resumed>) = 4 [pid 5002] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] fstat(4, [pid 5002] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] getdents64(4, [pid 5002] lstat("./137/binderfs", [pid 5000] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./137/binderfs" [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5000] close(4) = 0 [pid 5002] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] rmdir("./134/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./134") = 0 [pid 5000] mkdir("./135", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./137/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, [pid 5000] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6615 [pid 5002] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./137/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./137") = 0 [pid 5002] mkdir("./138", 0777) = 0 ./strace-static-x86_64: Process 6615 attached [pid 6615] chdir("./135" [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6615] <... chdir resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 6615] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6615] <... prctl resumed>) = 0 [pid 6615] setpgid(0, 0) = 0 [pid 5002] close(3 [pid 6615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6609] <... pwritev resumed>) = 1114112 [pid 6609] exit_group(0) = ? [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6615] <... openat resumed>) = 3 [pid 6615] write(3, "1000", 4) = 4 [pid 6615] close(3) = 0 [pid 6615] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5002] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6616 [pid 6615] memfd_create("syzkaller", 0) = 3 [pid 6615] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 ./strace-static-x86_64: Process 6616 attached [pid 6616] chdir("./138") = 0 [pid 6616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6616] setpgid(0, 0) = 0 [pid 6616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6616] write(3, "1000", 4) = 4 [pid 6616] close(3) = 0 [pid 6616] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6616] memfd_create("syzkaller", 0) = 3 [pid 6616] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6615] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6609] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6609, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./136/binderfs") = 0 [pid 5001] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6613] <... pwritev resumed>) = 1114112 [pid 6613] exit_group(0) = ? [pid 6616] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6615] <... write resumed>) = 2097152 [pid 6615] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6615] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6615] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./136/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./136/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./136") = 0 [pid 5001] mkdir("./137", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6617 [pid 6616] <... write resumed>) = 2097152 [pid 6615] <... ioctl resumed>) = 0 [pid 6616] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6616] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6615] close(3./strace-static-x86_64: Process 6617 attached [pid 6616] <... openat resumed>) = 4 [pid 6615] <... close resumed>) = 0 [pid 6617] chdir("./137" [pid 6616] ioctl(4, LOOP_SET_FD, 3 [pid 6615] mkdir("./file0", 0777 [pid 6617] <... chdir resumed>) = 0 [pid 6613] +++ exited with 0 +++ [pid 6617] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6613, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6617] <... prctl resumed>) = 0 [pid 6617] setpgid(0, 0) = 0 [pid 6617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6617] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6617] write(3, "1000", 4) = 4 [pid 4999] <... openat resumed>) = 3 [pid 6617] close(3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 6617] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 4 entries */, 32768) = 112 [pid 6617] symlink("/dev/binderfs", "./binderfs" [pid 4999] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6617] <... symlink resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./134/binderfs" [pid 6617] memfd_create("syzkaller", 0 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6617] <... memfd_create resumed>) = 3 [pid 6615] <... mkdir resumed>) = 0 [pid 6617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6615] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6617] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 4999] <... umount2 resumed>) = 0 [pid 6616] <... ioctl resumed>) = 0 [pid 6616] close(3 [pid 4999] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6616] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6616] mkdir("./file0", 0777 [pid 4999] lstat("./134/file0", [pid 6616] <... mkdir resumed>) = 0 [pid 6616] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 137.548153][ T6615] loop2: detected capacity change from 0 to 4096 [ 137.574044][ T6616] loop4: detected capacity change from 0 to 4096 [pid 4999] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6615] <... mount resumed>) = 0 [pid 6615] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6617] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6615] <... openat resumed>) = 3 [pid 6615] chdir("./file0") = 0 [pid 6615] ioctl(4, LOOP_CLR_FD) = 0 [pid 6615] close(4) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6615] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 4999] openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6615] unlink("./file1" [pid 6616] <... mount resumed>) = 0 [pid 6616] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] <... openat resumed>) = 4 [pid 6616] <... openat resumed>) = 3 [pid 4999] fstat(4, [pid 6616] chdir("./file0") = 0 [pid 6616] ioctl(4, LOOP_CLR_FD) = 0 [pid 6616] close(4) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 6615] <... unlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556045660 /* 2 entries */, 32768) = 48 [pid 6615] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6617] <... write resumed>) = 2097152 [pid 4999] getdents64(4, [pid 6616] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6616] unlink("./file1" [pid 4999] <... getdents64 resumed>0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./134/file0") = 0 [pid 6617] munmap(0x7f0ed4ac1000, 2097152 [pid 4999] getdents64(3, [pid 6617] <... munmap resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555603d620 /* 0 entries */, 32768) = 0 [pid 6617] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] close(3) = 0 [pid 6617] <... openat resumed>) = 4 [pid 4999] rmdir("./134" [ 137.612524][ T6618] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.649801][ T6619] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6617] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./135", 0777 [pid 6617] <... ioctl resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 6616] <... unlink resumed>) = 0 [pid 6616] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6617] close(3 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6617] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 6617] mkdir("./file0", 0777 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6617] <... mkdir resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6617] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6617] <... mount resumed>) = 0 [pid 6617] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6617] chdir("./file0") = 0 [pid 6617] ioctl(4, LOOP_CLR_FD) = 0 [pid 6617] close(4) = 0 [pid 6617] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6617] unlink("./file1" [pid 4999] <... clone resumed>, child_tidptr=0x55555603c5d0) = 6621 ./strace-static-x86_64: Process 6621 attached [pid 6621] chdir("./135") = 0 [pid 6621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6621] setpgid(0, 0) = 0 [pid 6621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6621] write(3, "1000", 4) = 4 [pid 6621] close(3) = 0 [pid 6621] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6621] memfd_create("syzkaller", 0) = 3 [pid 6621] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6617] <... unlink resumed>) = 0 [ 137.672949][ T6617] loop3: detected capacity change from 0 to 4096 [ 137.707466][ T6620] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6617] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6621] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6615] <... pwritev resumed>) = 1114112 [pid 6615] exit_group(0) = ? [pid 6621] <... write resumed>) = 2097152 [pid 6621] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6621] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6621] ioctl(4, LOOP_SET_FD, 3 [pid 6615] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6615, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./135/binderfs") = 0 [pid 5000] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6621] <... ioctl resumed>) = 0 [pid 6621] close(3) = 0 [pid 6621] mkdir("./file0", 0777) = 0 [pid 6621] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./135/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./135/file0") = 0 [pid 5000] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./135") = 0 [pid 5000] mkdir("./136", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6623 [ 137.798058][ T6621] loop1: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 6623 attached [pid 6623] chdir("./136") = 0 [pid 6623] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6623] setpgid(0, 0) = 0 [pid 6623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6621] <... mount resumed>) = 0 [pid 6623] <... openat resumed>) = 3 [pid 6623] write(3, "1000", 4) = 4 [pid 6621] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6623] close(3) = 0 [pid 6623] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6623] memfd_create("syzkaller", 0 [pid 6621] <... openat resumed>) = 3 [pid 6623] <... memfd_create resumed>) = 3 [pid 6621] chdir("./file0" [pid 6623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6621] <... chdir resumed>) = 0 [pid 6623] <... mmap resumed>) = 0x7f0ed4ac1000 [pid 6621] ioctl(4, LOOP_CLR_FD) = 0 [pid 6617] <... pwritev resumed>) = 1114112 [pid 6621] close(4 [pid 6617] exit_group(0 [pid 6623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6621] <... close resumed>) = 0 [pid 6616] <... pwritev resumed>) = 1114112 [pid 6621] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 6617] <... exit_group resumed>) = ? [pid 6616] exit_group(0 [pid 6621] <... openat resumed>) = 4 [pid 6616] <... exit_group resumed>) = ? [pid 6621] unlink("./file1") = 0 [pid 6621] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 6617] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6617, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 137.860794][ T6622] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./137/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./137/binderfs") = 0 [pid 5001] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6623] <... write resumed>) = 2097152 [pid 6623] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6623] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6623] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... umount2 resumed>) = 0 [pid 6623] <... ioctl resumed>) = 0 [pid 6623] close(3) = 0 [pid 6623] mkdir("./file0", 0777) = 0 [pid 6623] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5001] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./137/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./137/file0") = 0 [pid 5001] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./137") = 0 [pid 5001] mkdir("./138", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6616] +++ exited with 0 +++ [pid 6623] <... mount resumed>) = 0 [pid 6623] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6623] chdir("./file0") = 0 [pid 6623] ioctl(4, LOOP_CLR_FD) = 0 [pid 6623] close(4) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6616, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6623] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5002] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] <... openat resumed>) = 3 [pid 5002] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 6623] <... openat resumed>) = 4 [pid 5002] fstat(3, [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6623] unlink("./file1" [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] close(3 [pid 5002] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6625 ./strace-static-x86_64: Process 6625 attached [pid 6625] chdir("./138") = 0 [pid 5002] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./138/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./138/binderfs" [pid 6625] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6625] <... prctl resumed>) = 0 [pid 6625] setpgid(0, 0) = 0 [pid 6625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6625] write(3, "1000", 4) = 4 [pid 6625] close(3) = 0 [pid 6625] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6625] memfd_create("syzkaller", 0) = 3 [ 137.932412][ T6623] loop2: detected capacity change from 0 to 4096 [ 137.965261][ T6624] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6623] <... unlink resumed>) = 0 [pid 6623] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6625] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] lstat("./138/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./138/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./138/file0") = 0 [pid 5002] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./138") = 0 [pid 5002] mkdir("./139", 0777 [pid 6625] <... write resumed>) = 2097152 [pid 6621] <... pwritev resumed>) = 1114112 [pid 5002] <... mkdir resumed>) = 0 [pid 6621] exit_group(0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6625] munmap(0x7f0ed4ac1000, 2097152 [pid 6621] <... exit_group resumed>) = ? [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 6625] <... munmap resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555603c5d0) = 6626 [pid 6625] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6625] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6626 attached [pid 6626] chdir("./139") = 0 [pid 6626] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6626] setpgid(0, 0) = 0 [pid 6626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6626] write(3, "1000", 4) = 4 [pid 6626] close(3) = 0 [pid 6625] <... ioctl resumed>) = 0 [pid 6625] close(3) = 0 [pid 6625] mkdir("./file0", 0777 [pid 6626] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6626] memfd_create("syzkaller", 0) = 3 [pid 6626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0ed4ac1000 [pid 6625] <... mkdir resumed>) = 0 [pid 6625] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 6626] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6621] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6621, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./135/binderfs") = 0 [pid 4999] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6626] <... write resumed>) = 2097152 [pid 6626] munmap(0x7f0ed4ac1000, 2097152) = 0 [pid 6626] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 138.082328][ T6625] loop3: detected capacity change from 0 to 4096 [pid 6626] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... umount2 resumed>) = 0 [pid 6626] <... ioctl resumed>) = 0 [pid 6626] close(3) = 0 [pid 6625] <... mount resumed>) = 0 [pid 4999] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6625] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6625] chdir("./file0") = 0 [pid 6625] ioctl(4, LOOP_CLR_FD) = 0 [pid 6625] close(4) = 0 [pid 6625] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 6625] unlink("./file1" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./135/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556045660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556045660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 6623] <... pwritev resumed>) = 1114112 [pid 4999] rmdir("./135/file0" [pid 6623] exit_group(0 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, 0x55555603d620 /* 0 entries */, 32768) = 0 [ 138.137341][ T6626] loop4: detected capacity change from 0 to 4096 [ 138.146369][ T6627] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.170414][ C1] ================================================================== [ 138.178485][ C1] BUG: KASAN: slab-use-after-free in __lock_acquire+0x3ffd/0x5df0 [ 138.186326][ C1] Read of size 8 at addr ffff8880282a4580 by task ksoftirqd/1/21 [ 138.194037][ C1] [ 138.196355][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.4.0-rc2-syzkaller-00163-g2d1bcbc6cd70 #0 [ 138.206241][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 138.216279][ C1] Call Trace: [ 138.219541][ C1] [ 138.222466][ C1] dump_stack_lvl+0xd9/0x150 [ 138.227098][ C1] print_address_description.constprop.0+0x2c/0x3c0 [ 138.233687][ C1] ? __lock_acquire+0x3ffd/0x5df0 [ 138.238704][ C1] kasan_report+0x11c/0x130 [ 138.243204][ C1] ? __lock_acquire+0x3ffd/0x5df0 [ 138.248221][ C1] __lock_acquire+0x3ffd/0x5df0 [ 138.253064][ C1] ? print_usage_bug.part.0+0x660/0x660 [ 138.258606][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 138.264587][ C1] ? lockdep_unlock+0x11b/0x290 [ 138.269426][ C1] ? __lock_acquire+0x280a/0x5df0 [ 138.274445][ C1] lock_acquire+0x1b1/0x520 [ 138.279030][ C1] ? try_to_wake_up+0xab/0x1c40 [ 138.283871][ C1] ? lock_sync+0x190/0x190 [ 138.288294][ C1] ? _raw_spin_lock_irqsave+0x52/0x60 [ 138.293660][ C1] _raw_spin_lock_irqsave+0x3d/0x60 [ 138.298883][ C1] ? try_to_wake_up+0xab/0x1c40 [ 138.303721][ C1] try_to_wake_up+0xab/0x1c40 [ 138.308383][ C1] ? lock_sync+0x190/0x190 [ 138.312789][ C1] ? lock_downgrade+0x690/0x690 [ 138.317632][ C1] ? sched_ttwu_pending+0x550/0x550 [ 138.322816][ C1] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 138.328867][ C1] call_timer_fn+0x1a0/0x580 [ 138.333453][ C1] ? msleep_interruptible+0x180/0x180 [ 138.338808][ C1] ? lock_downgrade+0x690/0x690 [ 138.343650][ C1] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 138.349969][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 138.355166][ C1] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 138.361228][ C1] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 138.367453][ C1] expire_timers+0x29b/0x4b0 [ 138.372040][ C1] run_timer_softirq+0x326/0x910 [ 138.376972][ C1] ? expire_timers+0x4b0/0x4b0 [ 138.381812][ C1] ? io_schedule_timeout+0x150/0x150 [ 138.387088][ C1] __do_softirq+0x1d4/0x905 [ 138.391593][ C1] ? __irq_exit_rcu+0x190/0x190 [ 138.396432][ C1] run_ksoftirqd+0x31/0x60 [ 138.400839][ C1] smpboot_thread_fn+0x659/0x9e0 [ 138.405768][ C1] ? sort_range+0x30/0x30 [ 138.410111][ C1] kthread+0x344/0x440 [ 138.414196][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 138.419830][ C1] ret_from_fork+0x1f/0x30 [ 138.424254][ C1] [ 138.427260][ C1] [ 138.429572][ C1] Allocated by task 2: [ 138.433624][ C1] kasan_save_stack+0x22/0x40 [ 138.438300][ C1] kasan_set_track+0x25/0x30 [ 138.442881][ C1] __kasan_slab_alloc+0x7f/0x90 [ 138.447727][ C1] kmem_cache_alloc_node+0x185/0x3e0 [ 138.453001][ C1] copy_process+0x3c0/0x7600 [ 138.457580][ C1] kernel_clone+0xeb/0x890 [ 138.461983][ C1] kernel_thread+0xc0/0x100 [ 138.466474][ C1] kthreadd+0x50c/0x790 [ 138.470621][ C1] ret_from_fork+0x1f/0x30 [ 138.475030][ C1] [ 138.477335][ C1] Freed by task 21: [ 138.481124][ C1] kasan_save_stack+0x22/0x40 [ 138.485791][ C1] kasan_set_track+0x25/0x30 [ 138.490373][ C1] kasan_save_free_info+0x2e/0x40 [ 138.495388][ C1] ____kasan_slab_free+0x160/0x1c0 [ 138.500493][ C1] slab_free_freelist_hook+0x8b/0x1c0 [ 138.505852][ C1] kmem_cache_free+0xe9/0x480 [ 138.510531][ C1] delayed_put_task_struct+0x1f5/0x280 [ 138.515981][ C1] rcu_core+0x806/0x1ad0 [ 138.520209][ C1] __do_softirq+0x1d4/0x905 [ 138.524705][ C1] [ 138.527013][ C1] Last potentially related work creation: [ 138.532711][ C1] kasan_save_stack+0x22/0x40 [ 138.537404][ C1] __kasan_record_aux_stack+0xbc/0xd0 [ 138.542763][ C1] __call_rcu_common.constprop.0+0x99/0x7e0 [ 138.548643][ C1] put_task_struct_rcu_user+0x87/0xc0 [ 138.554002][ C1] __schedule+0xca2/0x5880 [ 138.558406][ C1] preempt_schedule_irq+0x52/0x90 [ 138.563506][ C1] irqentry_exit+0x35/0x80 [ 138.567917][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 138.573464][ C1] [ 138.575792][ C1] Second to last potentially related work creation: [ 138.582358][ C1] kasan_save_stack+0x22/0x40 [ 138.587050][ C1] __kasan_record_aux_stack+0xbc/0xd0 [ 138.592672][ C1] __call_rcu_common.constprop.0+0x99/0x7e0 [ 138.598558][ C1] put_task_struct_rcu_user+0x87/0xc0 [ 138.603917][ C1] __schedule+0xca2/0x5880 [ 138.608320][ C1] schedule+0xde/0x1a0 [ 138.612376][ C1] worker_thread+0x160/0x10c0 [ 138.617053][ C1] kthread+0x344/0x440 [ 138.621117][ C1] ret_from_fork+0x1f/0x30 [ 138.625531][ C1] [ 138.627847][ C1] The buggy address belongs to the object at ffff8880282a3b80 [ 138.627847][ C1] which belongs to the cache task_struct of size 7360 [ 138.642064][ C1] The buggy address is located 2560 bytes inside of [ 138.642064][ C1] freed 7360-byte region [ffff8880282a3b80, ffff8880282a5840) [ 138.656023][ C1] [ 138.658331][ C1] The buggy address belongs to the physical page: [ 138.664724][ C1] page:ffffea0000a0a800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x282a0 [ 138.674949][ C1] head:ffffea0000a0a800 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 138.683871][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 138.691837][ C1] page_type: 0xffffffff() [ 138.696160][ C1] raw: 00fff00000010200 ffff888140007500 ffffea0000497600 dead000000000002 [ 138.704736][ C1] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 138.713301][ C1] page dumped because: kasan: bad access detected [ 138.719689][ C1] page_owner tracks the page as allocated [ 138.725647][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 38, tgid 38 (kworker/u4:2), ts 8246742959, free_ts 0 [ 138.745696][ C1] post_alloc_hook+0x2db/0x350 [ 138.750462][ C1] get_page_from_freelist+0xf41/0x2c00 [ 138.755915][ C1] __alloc_pages+0x1cb/0x4a0 [ 138.760521][ C1] alloc_pages+0x1aa/0x270 [ 138.764932][ C1] allocate_slab+0x25f/0x390 [ 138.769508][ C1] ___slab_alloc+0xa91/0x1400 [ 138.774178][ C1] __slab_alloc.constprop.0+0x56/0xa0 [ 138.779540][ C1] kmem_cache_alloc_node+0x138/0x3e0 [ 138.784816][ C1] copy_process+0x3c0/0x7600 [ 138.789394][ C1] kernel_clone+0xeb/0x890 [ 138.793798][ C1] user_mode_thread+0xb1/0xf0 [ 138.798465][ C1] call_usermodehelper_exec_work+0xd0/0x180 [ 138.804345][ C1] process_one_work+0x99a/0x15e0 [ 138.809270][ C1] worker_thread+0x67d/0x10c0 [ 138.813936][ C1] kthread+0x344/0x440 [ 138.817990][ C1] ret_from_fork+0x1f/0x30 [ 138.822402][ C1] page_owner free stack trace missing [ 138.827746][ C1] [ 138.830048][ C1] Memory state around the buggy address: [ 138.835658][ C1] ffff8880282a4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.843701][ C1] ffff8880282a4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.851747][ C1] >ffff8880282a4580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.859790][ C1] ^ [ 138.863861][ C1] ffff8880282a4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.871909][ C1] ffff8880282a4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.879976][ C1] ================================================================== [ 138.888107][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 138.895366][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.4.0-rc2-syzkaller-00163-g2d1bcbc6cd70 #0 [ 138.905238][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 138.915277][ C1] Call Trace: [ 138.918540][ C1] [ 138.921459][ C1] dump_stack_lvl+0xd9/0x150 [ 138.926046][ C1] panic+0x686/0x730 [ 138.929933][ C1] ? panic_smp_self_stop+0xa0/0xa0 [ 138.935037][ C1] ? lock_downgrade+0x690/0x690 [ 138.939883][ C1] check_panic_on_warn+0xb1/0xc0 [ 138.944812][ C1] end_report+0xe9/0x120 [ 138.949051][ C1] ? __lock_acquire+0x3ffd/0x5df0 [ 138.954064][ C1] kasan_report+0xf9/0x130 [ 138.958474][ C1] ? __lock_acquire+0x3ffd/0x5df0 [ 138.963491][ C1] __lock_acquire+0x3ffd/0x5df0 [ 138.968331][ C1] ? print_usage_bug.part.0+0x660/0x660 [ 138.973873][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 138.979933][ C1] ? lockdep_unlock+0x11b/0x290 [ 138.984770][ C1] ? __lock_acquire+0x280a/0x5df0 [ 138.989789][ C1] lock_acquire+0x1b1/0x520 [ 138.994282][ C1] ? try_to_wake_up+0xab/0x1c40 [ 138.999122][ C1] ? lock_sync+0x190/0x190 [ 139.003529][ C1] ? _raw_spin_lock_irqsave+0x52/0x60 [ 139.008900][ C1] _raw_spin_lock_irqsave+0x3d/0x60 [ 139.014089][ C1] ? try_to_wake_up+0xab/0x1c40 [ 139.019188][ C1] try_to_wake_up+0xab/0x1c40 [ 139.023852][ C1] ? lock_sync+0x190/0x190 [ 139.028284][ C1] ? lock_downgrade+0x690/0x690 [ 139.033131][ C1] ? sched_ttwu_pending+0x550/0x550 [ 139.038320][ C1] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 139.044379][ C1] call_timer_fn+0x1a0/0x580 [ 139.048963][ C1] ? msleep_interruptible+0x180/0x180 [ 139.054321][ C1] ? lock_downgrade+0x690/0x690 [ 139.059165][ C1] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 139.065218][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.070410][ C1] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 139.076458][ C1] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 139.082509][ C1] expire_timers+0x29b/0x4b0 [ 139.087112][ C1] run_timer_softirq+0x326/0x910 [ 139.092037][ C1] ? expire_timers+0x4b0/0x4b0 [ 139.096781][ C1] ? io_schedule_timeout+0x150/0x150 [ 139.102056][ C1] __do_softirq+0x1d4/0x905 [ 139.106558][ C1] ? __irq_exit_rcu+0x190/0x190 [ 139.111394][ C1] run_ksoftirqd+0x31/0x60 [ 139.115797][ C1] smpboot_thread_fn+0x659/0x9e0 [ 139.120723][ C1] ? sort_range+0x30/0x30 [ 139.125033][ C1] kthread+0x344/0x440 [ 139.129181][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 139.134810][ C1] ret_from_fork+0x1f/0x30 [ 139.139232][ C1] [ 139.142898][ C1] Kernel Offset: disabled [ 139.147231][ C1] Rebooting in 86400 seconds..