./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1936634124 <...> 5959] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5960] <... futex resumed>) = 0 [pid 5960] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5960] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] <... futex resumed>) = 0 [pid 5959] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5959] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5960] <... futex resumed>) = 1 [pid 5960] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5960] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] <... futex resumed>) = 0 [pid 5959] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5959] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5960] <... futex resumed>) = 1 [pid 5960] ftruncate(5, 33587195) = 0 [pid 5960] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] <... futex resumed>) = 0 [pid 5959] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5959] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5960] <... futex resumed>) = 1 [ 201.756212][ T5961] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5960] sendfile(4, 5, NULL, 281474978811909 [pid 5959] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5959] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5959] exit_group(0) = ? [pid 5960] <... sendfile resumed>) = ? [pid 5960] +++ exited with 0 +++ [pid 5959] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5959, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- umount2("./315", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./315", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./315/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./315/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./315/binderfs") = 0 umount2("./315/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./315/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./315/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./315/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./315/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./315/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./315") = 0 mkdir("./316", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 5962 ./strace-static-x86_64: Process 5962 attached [pid 5962] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 5962] chdir("./316") = 0 [pid 5962] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5962] setpgid(0, 0) = 0 [pid 5962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5962] write(3, "1000", 4) = 4 [pid 5962] close(3) = 0 [pid 5962] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5962] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5962] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 5962] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5962] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5963], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 5963 [pid 5962] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5963 attached ) = 0 [pid 5962] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5963] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 5963] memfd_create("syzkaller", 0) = 3 [pid 5963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 5963] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5963] munmap(0x7f927cba2000, 2097152) = 0 [pid 5963] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5963] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5963] close(3) = 0 [pid 5963] mkdir("./file0", 0777) = 0 [pid 5963] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 5963] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5963] chdir("./file0") = 0 [ 202.106699][ T5963] loop0: detected capacity change from 0 to 4096 [ 202.122440][ T5963] NILFS (loop0): invalid segment: Checksum error in segment payload [ 202.130527][ T5963] NILFS (loop0): trying rollback from an earlier position [ 202.145746][ T5963] NILFS (loop0): recovery complete [pid 5963] ioctl(4, LOOP_CLR_FD) = 0 [pid 5963] close(4) = 0 [pid 5963] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5963] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5962] <... futex resumed>) = 0 [pid 5962] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5962] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5963] <... futex resumed>) = 0 [pid 5963] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5963] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5962] <... futex resumed>) = 0 [pid 5962] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5962] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5963] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5963] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5962] <... futex resumed>) = 0 [pid 5963] ftruncate(5, 33587195 [pid 5962] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5962] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5963] <... ftruncate resumed>) = 0 [pid 5963] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5962] <... futex resumed>) = 0 [pid 5963] sendfile(4, 5, NULL, 281474978811909 [pid 5962] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 202.151527][ T5964] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5962] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5962] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5962] exit_group(0) = ? [pid 5963] <... sendfile resumed>) = ? [pid 5963] +++ exited with 0 +++ [pid 5962] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5962, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./316", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./316", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./316/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./316/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./316/binderfs") = 0 umount2("./316/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./316/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./316/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./316/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./316/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./316/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./316") = 0 mkdir("./317", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 5965 ./strace-static-x86_64: Process 5965 attached [pid 5965] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 5965] chdir("./317") = 0 [pid 5965] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5965] setpgid(0, 0) = 0 [pid 5965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5965] write(3, "1000", 4) = 4 [pid 5965] close(3) = 0 [pid 5965] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5965] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5965] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 5965] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5965] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5966 attached [pid 5966] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 5966] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5965] <... clone resumed>, parent_tid=[5966], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 5966 [pid 5965] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] <... futex resumed>) = 0 [pid 5965] <... futex resumed>) = 1 [pid 5965] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5966] memfd_create("syzkaller", 0) = 3 [pid 5966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 5966] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5966] munmap(0x7f927cba2000, 2097152) = 0 [pid 5966] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5966] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5966] close(3) = 0 [pid 5966] mkdir("./file0", 0777) = 0 [ 202.536534][ T5966] loop0: detected capacity change from 0 to 4096 [ 202.551691][ T5966] NILFS (loop0): invalid segment: Checksum error in segment payload [ 202.559763][ T5966] NILFS (loop0): trying rollback from an earlier position [ 202.575223][ T5966] NILFS (loop0): recovery complete [pid 5966] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 5966] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5966] chdir("./file0") = 0 [pid 5966] ioctl(4, LOOP_CLR_FD) = 0 [pid 5966] close(4) = 0 [pid 5966] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5966] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5965] <... futex resumed>) = 0 [pid 5965] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] <... futex resumed>) = 0 [pid 5965] <... futex resumed>) = 1 [pid 5966] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5965] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5966] <... open resumed>) = 4 [pid 5966] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5965] <... futex resumed>) = 0 [pid 5965] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5966] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5965] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5966] <... open resumed>) = 5 [pid 5966] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5965] <... futex resumed>) = 0 [pid 5966] ftruncate(5, 33587195 [pid 5965] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5965] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5966] <... ftruncate resumed>) = 0 [pid 5966] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5965] <... futex resumed>) = 0 [pid 5965] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5965] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 202.581060][ T5967] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5966] sendfile(4, 5, NULL, 281474978811909 [pid 5965] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5965] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5965] exit_group(0) = ? [pid 5966] <... sendfile resumed>) = ? [pid 5966] +++ exited with 0 +++ [pid 5965] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5965, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./317", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./317", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./317/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./317/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./317/binderfs") = 0 umount2("./317/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./317/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./317/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./317/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./317/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./317/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./317") = 0 mkdir("./318", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 5968 ./strace-static-x86_64: Process 5968 attached [pid 5968] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 5968] chdir("./318") = 0 [pid 5968] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5968] setpgid(0, 0) = 0 [pid 5968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5968] write(3, "1000", 4) = 4 [pid 5968] close(3) = 0 [pid 5968] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5968] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5968] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 5968] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5968] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5969], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 5969 [pid 5968] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5968] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5969 attached [pid 5969] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 5969] memfd_create("syzkaller", 0) = 3 [pid 5969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 5969] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5969] munmap(0x7f927cba2000, 2097152) = 0 [pid 5969] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5969] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5969] close(3) = 0 [pid 5969] mkdir("./file0", 0777) = 0 [pid 5969] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 5969] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5969] chdir("./file0") = 0 [ 202.923132][ T5969] loop0: detected capacity change from 0 to 4096 [ 202.938439][ T5969] NILFS (loop0): invalid segment: Checksum error in segment payload [ 202.946497][ T5969] NILFS (loop0): trying rollback from an earlier position [ 202.961793][ T5969] NILFS (loop0): recovery complete [pid 5969] ioctl(4, LOOP_CLR_FD) = 0 [pid 5969] close(4) = 0 [pid 5969] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5969] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5968] <... futex resumed>) = 0 [pid 5968] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5969] <... futex resumed>) = 0 [pid 5968] <... futex resumed>) = 1 [pid 5969] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5968] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5969] <... open resumed>) = 4 [pid 5969] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5968] <... futex resumed>) = 0 [pid 5968] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5968] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5969] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5969] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5968] <... futex resumed>) = 0 [pid 5969] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5968] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5969] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5968] <... futex resumed>) = 0 [pid 5969] ftruncate(5, 33587195 [pid 5968] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5969] <... ftruncate resumed>) = 0 [pid 5969] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5968] <... futex resumed>) = 0 [pid 5969] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5968] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5969] sendfile(4, 5, NULL, 281474978811909 [pid 5968] <... futex resumed>) = 0 [ 202.967938][ T5970] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5968] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5968] exit_group(0) = ? [pid 5969] <... sendfile resumed>) = ? [pid 5969] +++ exited with 0 +++ [pid 5968] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5968, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- umount2("./318", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./318", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./318/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./318/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./318/binderfs") = 0 umount2("./318/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./318/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./318/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./318/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./318/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./318/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./318") = 0 mkdir("./319", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 5971 ./strace-static-x86_64: Process 5971 attached [pid 5971] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 5971] chdir("./319") = 0 [pid 5971] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5971] setpgid(0, 0) = 0 [pid 5971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5971] write(3, "1000", 4) = 4 [pid 5971] close(3) = 0 [pid 5971] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5971] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5971] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 5971] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5971] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5972], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 5972 [pid 5971] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5971] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5972 attached [pid 5972] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 5972] memfd_create("syzkaller", 0) = 3 [pid 5972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 5972] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5972] munmap(0x7f927cba2000, 2097152) = 0 [pid 5972] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5972] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5972] close(3) = 0 [pid 5972] mkdir("./file0", 0777) = 0 [ 203.329726][ T5972] loop0: detected capacity change from 0 to 4096 [ 203.346716][ T5972] NILFS (loop0): invalid segment: Checksum error in segment payload [ 203.355050][ T5972] NILFS (loop0): trying rollback from an earlier position [ 203.372421][ T5972] NILFS (loop0): recovery complete [pid 5972] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 5972] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5972] chdir("./file0") = 0 [pid 5972] ioctl(4, LOOP_CLR_FD) = 0 [pid 5972] close(4) = 0 [pid 5972] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5971] <... futex resumed>) = 0 [pid 5971] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5971] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5972] <... futex resumed>) = 1 [pid 5972] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5972] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5971] <... futex resumed>) = 0 [pid 5971] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5971] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5972] <... futex resumed>) = 1 [pid 5972] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5972] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5971] <... futex resumed>) = 0 [pid 5972] ftruncate(5, 33587195 [pid 5971] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5972] <... ftruncate resumed>) = 0 [pid 5971] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5972] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5971] <... futex resumed>) = 0 [pid 5972] sendfile(4, 5, NULL, 281474978811909 [pid 5971] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 203.378644][ T5973] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5971] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5971] exit_group(0) = ? [pid 5972] <... sendfile resumed>) = ? [pid 5972] +++ exited with 0 +++ [pid 5971] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5971, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./319", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./319", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./319/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./319/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./319/binderfs") = 0 umount2("./319/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./319/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./319/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./319/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./319/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./319/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./319") = 0 mkdir("./320", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 5974 ./strace-static-x86_64: Process 5974 attached [pid 5974] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 5974] chdir("./320") = 0 [pid 5974] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5974] setpgid(0, 0) = 0 [pid 5974] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5974] write(3, "1000", 4) = 4 [pid 5974] close(3) = 0 [pid 5974] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5974] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5974] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 5974] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5974] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5975], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 5975 [pid 5974] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5974] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5975 attached [pid 5975] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 5975] memfd_create("syzkaller", 0) = 3 [pid 5975] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 5975] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5975] munmap(0x7f927cba2000, 2097152) = 0 [pid 5975] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5975] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5975] close(3) = 0 [pid 5975] mkdir("./file0", 0777) = 0 [ 203.742890][ T5975] loop0: detected capacity change from 0 to 4096 [ 203.759834][ T5975] NILFS (loop0): invalid segment: Checksum error in segment payload [ 203.768065][ T5975] NILFS (loop0): trying rollback from an earlier position [ 203.784313][ T5975] NILFS (loop0): recovery complete [pid 5975] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 5975] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5975] chdir("./file0") = 0 [pid 5975] ioctl(4, LOOP_CLR_FD) = 0 [pid 5975] close(4) = 0 [pid 5975] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5974] <... futex resumed>) = 0 [pid 5975] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5974] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5975] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5974] <... futex resumed>) = 0 [pid 5975] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5974] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5975] <... open resumed>) = 4 [pid 5975] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5974] <... futex resumed>) = 0 [pid 5975] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5974] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5975] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5974] <... futex resumed>) = 0 [pid 5975] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5974] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5975] <... open resumed>) = 5 [pid 5975] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5974] <... futex resumed>) = 0 [pid 5975] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5974] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5975] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5974] <... futex resumed>) = 0 [pid 5975] ftruncate(5, 33587195 [pid 5974] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5975] <... ftruncate resumed>) = 0 [pid 5975] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5974] <... futex resumed>) = 0 [pid 5975] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5974] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5975] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5974] <... futex resumed>) = 0 [pid 5975] sendfile(4, 5, NULL, 281474978811909 [ 203.790423][ T5976] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5974] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5974] exit_group(0) = ? [pid 5975] <... sendfile resumed>) = ? [pid 5975] +++ exited with 0 +++ [pid 5974] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5974, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- umount2("./320", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./320/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./320/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./320/binderfs") = 0 umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./320/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./320/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./320/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./320") = 0 mkdir("./321", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 5977 ./strace-static-x86_64: Process 5977 attached [pid 5977] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 5977] chdir("./321") = 0 [pid 5977] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5977] setpgid(0, 0) = 0 [pid 5977] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5977] write(3, "1000", 4) = 4 [pid 5977] close(3) = 0 [pid 5977] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5977] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5977] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 5977] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5977] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5978 attached [pid 5978] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 5978] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5977] <... clone resumed>, parent_tid=[5978], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 5978 [pid 5977] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5978] <... futex resumed>) = 0 [pid 5978] memfd_create("syzkaller", 0 [pid 5977] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5978] <... memfd_create resumed>) = 3 [pid 5978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 5978] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5978] munmap(0x7f927cba2000, 2097152) = 0 [pid 5978] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5978] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5978] close(3) = 0 [pid 5978] mkdir("./file0", 0777) = 0 [ 204.117610][ T5978] loop0: detected capacity change from 0 to 4096 [ 204.132663][ T5978] NILFS (loop0): invalid segment: Checksum error in segment payload [ 204.140809][ T5978] NILFS (loop0): trying rollback from an earlier position [ 204.156001][ T5978] NILFS (loop0): recovery complete [pid 5978] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 5978] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5978] chdir("./file0") = 0 [pid 5978] ioctl(4, LOOP_CLR_FD) = 0 [pid 5978] close(4) = 0 [pid 5978] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5978] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5977] <... futex resumed>) = 0 [pid 5977] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5977] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5978] <... futex resumed>) = 0 [pid 5978] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5978] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5977] <... futex resumed>) = 0 [pid 5978] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5977] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5977] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5978] <... futex resumed>) = 0 [pid 5978] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5978] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5977] <... futex resumed>) = 0 [pid 5977] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5977] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5978] <... futex resumed>) = 1 [pid 5978] ftruncate(5, 33587195) = 0 [pid 5978] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5977] <... futex resumed>) = 0 [pid 5977] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5977] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5978] <... futex resumed>) = 1 [ 204.162182][ T5979] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5978] sendfile(4, 5, NULL, 281474978811909 [pid 5977] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5977] exit_group(0) = ? [pid 5978] <... sendfile resumed>) = ? [pid 5978] +++ exited with 0 +++ [pid 5977] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5977, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./321", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./321/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./321/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./321/binderfs") = 0 umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./321/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./321/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./321/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./321") = 0 mkdir("./322", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 5980 ./strace-static-x86_64: Process 5980 attached [pid 5980] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 5980] chdir("./322") = 0 [pid 5980] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5980] setpgid(0, 0) = 0 [pid 5980] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5980] write(3, "1000", 4) = 4 [pid 5980] close(3) = 0 [pid 5980] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5980] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5980] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 5980] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5980] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5981 attached , parent_tid=[5981], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 5981 [pid 5981] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 5981] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5980] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5980] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5981] <... futex resumed>) = 0 [pid 5981] memfd_create("syzkaller", 0) = 3 [pid 5981] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 5981] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5981] munmap(0x7f927cba2000, 2097152) = 0 [pid 5981] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5981] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5981] close(3) = 0 [pid 5981] mkdir("./file0", 0777) = 0 [pid 5981] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 5981] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5981] chdir("./file0") = 0 [pid 5981] ioctl(4, LOOP_CLR_FD) = 0 [ 204.520597][ T5981] loop0: detected capacity change from 0 to 4096 [ 204.536519][ T5981] NILFS (loop0): invalid segment: Checksum error in segment payload [ 204.544629][ T5981] NILFS (loop0): trying rollback from an earlier position [ 204.559452][ T5981] NILFS (loop0): recovery complete [pid 5981] close(4) = 0 [pid 5981] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5981] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5980] <... futex resumed>) = 0 [pid 5980] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5980] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5981] <... futex resumed>) = 0 [pid 5981] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5981] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5980] <... futex resumed>) = 0 [pid 5980] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5981] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5980] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5981] <... open resumed>) = 5 [pid 5981] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5980] <... futex resumed>) = 0 [pid 5980] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5980] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5981] ftruncate(5, 33587195) = 0 [pid 5981] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5980] <... futex resumed>) = 0 [pid 5981] sendfile(4, 5, NULL, 281474978811909 [pid 5980] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 204.565377][ T5982] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5980] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5980] exit_group(0) = ? [pid 5981] <... sendfile resumed>) = ? [pid 5981] +++ exited with 0 +++ [pid 5980] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5980, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./322", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./322/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./322/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./322/binderfs") = 0 umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./322/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./322/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./322/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./322") = 0 mkdir("./323", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 5983 ./strace-static-x86_64: Process 5983 attached [pid 5983] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 5983] chdir("./323") = 0 [pid 5983] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5983] setpgid(0, 0) = 0 [pid 5983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5983] write(3, "1000", 4) = 4 [pid 5983] close(3) = 0 [pid 5983] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5983] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5983] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 5983] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5983] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5984], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 5984 [pid 5983] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5984 attached ) = 0 [pid 5983] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5984] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 5984] memfd_create("syzkaller", 0) = 3 [pid 5984] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 5984] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5984] munmap(0x7f927cba2000, 2097152) = 0 [pid 5984] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5984] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5984] close(3) = 0 [pid 5984] mkdir("./file0", 0777) = 0 [ 204.898774][ T5984] loop0: detected capacity change from 0 to 4096 [ 204.915618][ T5984] NILFS (loop0): invalid segment: Checksum error in segment payload [ 204.923702][ T5984] NILFS (loop0): trying rollback from an earlier position [ 204.940442][ T5984] NILFS (loop0): recovery complete [pid 5984] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 5984] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5984] chdir("./file0") = 0 [pid 5984] ioctl(4, LOOP_CLR_FD) = 0 [pid 5984] close(4) = 0 [pid 5984] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5983] <... futex resumed>) = 0 [pid 5983] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5983] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5984] <... futex resumed>) = 1 [pid 5984] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5984] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5983] <... futex resumed>) = 0 [pid 5983] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5983] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5984] <... futex resumed>) = 1 [pid 5984] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5984] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5983] <... futex resumed>) = 0 [pid 5983] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5983] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5984] <... futex resumed>) = 1 [pid 5984] ftruncate(5, 33587195) = 0 [pid 5984] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5983] <... futex resumed>) = 0 [pid 5983] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5983] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5984] <... futex resumed>) = 1 [ 204.946938][ T5985] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5984] sendfile(4, 5, NULL, 281474978811909 [pid 5983] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5983] exit_group(0) = ? [pid 5984] <... sendfile resumed>) = ? [pid 5984] +++ exited with 0 +++ [pid 5983] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5983, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./323", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./323/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./323/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./323/binderfs") = 0 umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./323/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./323/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./323/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./323") = 0 mkdir("./324", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 5986 ./strace-static-x86_64: Process 5986 attached [pid 5986] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 5986] chdir("./324") = 0 [pid 5986] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5986] setpgid(0, 0) = 0 [pid 5986] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5986] write(3, "1000", 4) = 4 [pid 5986] close(3) = 0 [pid 5986] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5986] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5986] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 5986] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5986] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5987 attached [pid 5987] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 5987] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5986] <... clone resumed>, parent_tid=[5987], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 5987 [pid 5986] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5987] <... futex resumed>) = 0 [pid 5986] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5987] memfd_create("syzkaller", 0) = 3 [pid 5987] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 5987] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5987] munmap(0x7f927cba2000, 2097152) = 0 [pid 5987] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5987] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5987] close(3) = 0 [pid 5987] mkdir("./file0", 0777) = 0 [pid 5987] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 205.292201][ T5987] loop0: detected capacity change from 0 to 4096 [ 205.309936][ T5987] NILFS (loop0): invalid segment: Checksum error in segment payload [ 205.318088][ T5987] NILFS (loop0): trying rollback from an earlier position [ 205.333231][ T5987] NILFS (loop0): recovery complete [pid 5987] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5987] chdir("./file0") = 0 [pid 5987] ioctl(4, LOOP_CLR_FD) = 0 [pid 5987] close(4) = 0 [pid 5987] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5986] <... futex resumed>) = 0 [pid 5986] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5986] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5987] <... futex resumed>) = 1 [pid 5987] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5987] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5986] <... futex resumed>) = 0 [pid 5986] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5986] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5987] <... futex resumed>) = 1 [pid 5987] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5987] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5986] <... futex resumed>) = 0 [pid 5987] <... futex resumed>) = 1 [pid 5986] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5987] ftruncate(5, 33587195 [pid 5986] <... futex resumed>) = 0 [pid 5987] <... ftruncate resumed>) = 0 [pid 5986] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5987] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5986] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5987] <... futex resumed>) = 0 [pid 5986] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5987] sendfile(4, 5, NULL, 281474978811909 [pid 5986] <... futex resumed>) = 0 [ 205.339341][ T5988] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5986] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5986] exit_group(0) = ? [pid 5987] <... sendfile resumed>) = ? [pid 5987] +++ exited with 0 +++ [pid 5986] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5986, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./324", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./324/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./324/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./324/binderfs") = 0 umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./324/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./324/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./324/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./324") = 0 mkdir("./325", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 5989 ./strace-static-x86_64: Process 5989 attached [pid 5989] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 5989] chdir("./325") = 0 [pid 5989] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5989] setpgid(0, 0) = 0 [pid 5989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5989] write(3, "1000", 4) = 4 [pid 5989] close(3) = 0 [pid 5989] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5989] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5989] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 5989] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5989] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5990], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 5990 [pid 5989] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5989] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5990 attached [pid 5990] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 5990] memfd_create("syzkaller", 0) = 3 [pid 5990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 5990] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5990] munmap(0x7f927cba2000, 2097152) = 0 [pid 5990] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5990] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5990] close(3) = 0 [pid 5990] mkdir("./file0", 0777) = 0 [pid 5990] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 5990] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 205.667127][ T5990] loop0: detected capacity change from 0 to 4096 [ 205.684169][ T5990] NILFS (loop0): invalid segment: Checksum error in segment payload [ 205.692277][ T5990] NILFS (loop0): trying rollback from an earlier position [ 205.708161][ T5990] NILFS (loop0): recovery complete [pid 5990] chdir("./file0") = 0 [pid 5990] ioctl(4, LOOP_CLR_FD) = 0 [pid 5990] close(4) = 0 [pid 5990] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] <... futex resumed>) = 0 [pid 5989] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5989] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5990] <... futex resumed>) = 1 [pid 5990] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5990] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] <... futex resumed>) = 0 [pid 5989] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5989] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5990] <... futex resumed>) = 1 [pid 5990] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5990] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] <... futex resumed>) = 0 [pid 5989] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5989] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5990] <... futex resumed>) = 1 [pid 5990] ftruncate(5, 33587195) = 0 [pid 5990] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] <... futex resumed>) = 0 [pid 5989] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5989] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5990] <... futex resumed>) = 1 [ 205.714550][ T5991] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5990] sendfile(4, 5, NULL, 281474978811909 [pid 5989] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5989] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5989] exit_group(0) = ? [pid 5990] <... sendfile resumed>) = ? [pid 5990] +++ exited with 0 +++ [pid 5989] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5989, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./325", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./325/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./325/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./325/binderfs") = 0 umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./325/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./325/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./325/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./325") = 0 mkdir("./326", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 5992 ./strace-static-x86_64: Process 5992 attached [pid 5992] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 5992] chdir("./326") = 0 [pid 5992] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5992] setpgid(0, 0) = 0 [pid 5992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5992] write(3, "1000", 4) = 4 [pid 5992] close(3) = 0 [pid 5992] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5992] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5992] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 5992] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5992] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5993 attached , parent_tid=[5993], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 5993 [pid 5993] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 5993] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5992] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5992] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5993] <... futex resumed>) = 0 [pid 5993] memfd_create("syzkaller", 0) = 3 [pid 5993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 5993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5993] munmap(0x7f927cba2000, 2097152) = 0 [pid 5993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5993] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5993] close(3) = 0 [pid 5993] mkdir("./file0", 0777) = 0 [ 206.032744][ T5993] loop0: detected capacity change from 0 to 4096 [ 206.050513][ T5993] NILFS (loop0): invalid segment: Checksum error in segment payload [ 206.058623][ T5993] NILFS (loop0): trying rollback from an earlier position [ 206.074624][ T5993] NILFS (loop0): recovery complete [pid 5993] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 5993] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5993] chdir("./file0") = 0 [pid 5993] ioctl(4, LOOP_CLR_FD) = 0 [pid 5993] close(4) = 0 [pid 5993] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5992] <... futex resumed>) = 0 [pid 5992] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5992] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] <... futex resumed>) = 1 [pid 5993] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5993] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5992] <... futex resumed>) = 0 [pid 5992] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5992] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] <... futex resumed>) = 1 [pid 5993] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5993] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5992] <... futex resumed>) = 0 [pid 5992] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5992] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] <... futex resumed>) = 1 [pid 5993] ftruncate(5, 33587195) = 0 [pid 5993] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5992] <... futex resumed>) = 0 [pid 5992] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5992] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] <... futex resumed>) = 1 [ 206.080639][ T5994] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5993] sendfile(4, 5, NULL, 281474978811909 [pid 5992] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5992] exit_group(0) = ? [pid 5993] <... sendfile resumed>) = ? [pid 5993] +++ exited with 0 +++ [pid 5992] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5992, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- umount2("./326", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./326/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./326/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./326/binderfs") = 0 umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./326/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./326/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./326/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./326") = 0 mkdir("./327", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 5995 ./strace-static-x86_64: Process 5995 attached [pid 5995] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 5995] chdir("./327") = 0 [pid 5995] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5995] setpgid(0, 0) = 0 [pid 5995] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5995] write(3, "1000", 4) = 4 [pid 5995] close(3) = 0 [pid 5995] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5995] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5995] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 5995] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5995] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5996 attached , parent_tid=[5996], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 5996 [pid 5995] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5995] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5996] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 5996] memfd_create("syzkaller", 0) = 3 [pid 5996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 5996] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5996] munmap(0x7f927cba2000, 2097152) = 0 [pid 5996] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5996] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5996] close(3) = 0 [pid 5996] mkdir("./file0", 0777) = 0 [ 206.413226][ T5996] loop0: detected capacity change from 0 to 4096 [ 206.430152][ T5996] NILFS (loop0): invalid segment: Checksum error in segment payload [ 206.438222][ T5996] NILFS (loop0): trying rollback from an earlier position [ 206.453254][ T5996] NILFS (loop0): recovery complete [pid 5996] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 5996] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5996] chdir("./file0") = 0 [pid 5996] ioctl(4, LOOP_CLR_FD) = 0 [pid 5996] close(4) = 0 [pid 5996] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5995] <... futex resumed>) = 0 [pid 5995] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5995] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5996] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5996] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5995] <... futex resumed>) = 0 [pid 5995] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5995] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5996] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5996] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5995] <... futex resumed>) = 0 [pid 5995] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5995] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5996] ftruncate(5, 33587195) = 0 [pid 5996] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5995] <... futex resumed>) = 0 [pid 5995] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5995] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 206.459535][ T5997] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5996] sendfile(4, 5, NULL, 281474978811909 [pid 5995] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5995] exit_group(0) = ? [pid 5996] <... sendfile resumed>) = ? [pid 5996] +++ exited with 0 +++ [pid 5995] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5995, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./327", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./327/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./327/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./327/binderfs") = 0 umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./327/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./327/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./327/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./327") = 0 mkdir("./328", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 5998 ./strace-static-x86_64: Process 5998 attached [pid 5998] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 5998] chdir("./328") = 0 [pid 5998] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5998] setpgid(0, 0) = 0 [pid 5998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5998] write(3, "1000", 4) = 4 [pid 5998] close(3) = 0 [pid 5998] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5998] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5998] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 5998] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5998] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5999 attached , parent_tid=[5999], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 5999 [pid 5999] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 5999] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5998] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5999] <... futex resumed>) = 0 [pid 5998] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5999] memfd_create("syzkaller", 0) = 3 [pid 5999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 5999] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5999] munmap(0x7f927cba2000, 2097152) = 0 [pid 5999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5999] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5999] close(3) = 0 [pid 5999] mkdir("./file0", 0777) = 0 [pid 5999] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 5999] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5999] chdir("./file0") = 0 [pid 5999] ioctl(4, LOOP_CLR_FD) = 0 [ 206.797758][ T5999] loop0: detected capacity change from 0 to 4096 [ 206.812761][ T5999] NILFS (loop0): invalid segment: Checksum error in segment payload [ 206.820902][ T5999] NILFS (loop0): trying rollback from an earlier position [ 206.835912][ T5999] NILFS (loop0): recovery complete [pid 5999] close(4) = 0 [pid 5999] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5998] <... futex resumed>) = 0 [pid 5998] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5998] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5999] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5999] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5998] <... futex resumed>) = 0 [pid 5998] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5998] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5999] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [ 206.841720][ T6000] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5999] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5998] <... futex resumed>) = 0 [pid 5998] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5999] ftruncate(5, 33587195 [pid 5998] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5999] <... ftruncate resumed>) = 0 [pid 5999] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5998] <... futex resumed>) = 0 [pid 5998] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5999] sendfile(4, 5, NULL, 281474978811909 [pid 5998] <... futex resumed>) = 0 [pid 5998] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5998] exit_group(0) = ? [pid 5999] <... sendfile resumed>) = ? [pid 5999] +++ exited with 0 +++ [pid 5998] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5998, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./328", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./328/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./328/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./328/binderfs") = 0 umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./328/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./328/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./328/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./328") = 0 mkdir("./329", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6001 ./strace-static-x86_64: Process 6001 attached [pid 6001] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6001] chdir("./329") = 0 [pid 6001] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6001] setpgid(0, 0) = 0 [pid 6001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6001] write(3, "1000", 4) = 4 [pid 6001] close(3) = 0 [pid 6001] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6001] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6001] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6001] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6001] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6002 attached , parent_tid=[6002], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6002 [pid 6001] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6001] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6002] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6002] memfd_create("syzkaller", 0) = 3 [pid 6002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6002] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6002] munmap(0x7f927cba2000, 2097152) = 0 [pid 6002] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6002] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6002] close(3) = 0 [pid 6002] mkdir("./file0", 0777) = 0 [ 207.206604][ T6002] loop0: detected capacity change from 0 to 4096 [ 207.223095][ T6002] NILFS (loop0): invalid segment: Checksum error in segment payload [ 207.231302][ T6002] NILFS (loop0): trying rollback from an earlier position [ 207.246095][ T6002] NILFS (loop0): recovery complete [pid 6002] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6002] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6002] chdir("./file0") = 0 [pid 6002] ioctl(4, LOOP_CLR_FD) = 0 [pid 6002] close(4) = 0 [pid 6002] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6002] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6001] <... futex resumed>) = 0 [pid 6001] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] <... futex resumed>) = 0 [pid 6001] <... futex resumed>) = 1 [pid 6002] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6001] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6002] <... open resumed>) = 4 [pid 6002] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6001] <... futex resumed>) = 0 [pid 6002] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6001] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] <... open resumed>) = 5 [pid 6001] <... futex resumed>) = 0 [pid 6001] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6002] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6001] <... futex resumed>) = 0 [pid 6002] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6001] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6001] <... futex resumed>) = 0 [pid 6002] ftruncate(5, 33587195 [pid 6001] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6002] <... ftruncate resumed>) = 0 [pid 6002] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6001] <... futex resumed>) = 0 [pid 6002] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6001] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6001] <... futex resumed>) = 0 [pid 6002] sendfile(4, 5, NULL, 281474978811909 [ 207.252009][ T6003] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6001] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6001] exit_group(0) = ? [pid 6002] <... sendfile resumed>) = ? [pid 6002] +++ exited with 0 +++ [pid 6001] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6001, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./329", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./329/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./329/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./329/binderfs") = 0 umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./329/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./329/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./329/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./329") = 0 mkdir("./330", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6004 ./strace-static-x86_64: Process 6004 attached [pid 6004] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6004] chdir("./330") = 0 [pid 6004] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6004] setpgid(0, 0) = 0 [pid 6004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6004] write(3, "1000", 4) = 4 [pid 6004] close(3) = 0 [pid 6004] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6004] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6004] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6004] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6005], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6005 [pid 6004] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6004] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6005 attached [pid 6005] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6005] memfd_create("syzkaller", 0) = 3 [pid 6005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6005] munmap(0x7f927cba2000, 2097152) = 0 [pid 6005] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6005] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6005] close(3) = 0 [pid 6005] mkdir("./file0", 0777) = 0 [ 207.583334][ T6005] loop0: detected capacity change from 0 to 4096 [ 207.598563][ T6005] NILFS (loop0): invalid segment: Checksum error in segment payload [ 207.606653][ T6005] NILFS (loop0): trying rollback from an earlier position [ 207.622114][ T6005] NILFS (loop0): recovery complete [pid 6005] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6005] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6005] chdir("./file0") = 0 [pid 6005] ioctl(4, LOOP_CLR_FD) = 0 [pid 6005] close(4) = 0 [pid 6005] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6004] <... futex resumed>) = 0 [pid 6004] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6004] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6005] <... futex resumed>) = 1 [pid 6005] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6005] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6004] <... futex resumed>) = 0 [pid 6004] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6004] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6005] <... futex resumed>) = 1 [pid 6005] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6005] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6004] <... futex resumed>) = 0 [pid 6004] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6004] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6005] <... futex resumed>) = 1 [pid 6005] ftruncate(5, 33587195) = 0 [pid 6005] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6004] <... futex resumed>) = 0 [pid 6004] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6004] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6005] <... futex resumed>) = 1 [ 207.628211][ T6006] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6005] sendfile(4, 5, NULL, 281474978811909 [pid 6004] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6004] exit_group(0) = ? [pid 6005] <... sendfile resumed>) = ? [pid 6005] +++ exited with 0 +++ [pid 6004] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6004, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./330", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./330/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./330/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./330/binderfs") = 0 umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./330/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./330/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./330/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./330") = 0 mkdir("./331", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6007 ./strace-static-x86_64: Process 6007 attached [pid 6007] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6007] chdir("./331") = 0 [pid 6007] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6007] setpgid(0, 0) = 0 [pid 6007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6007] write(3, "1000", 4) = 4 [pid 6007] close(3) = 0 [pid 6007] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6007] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6007] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6007] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6007] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6008], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6008 [pid 6007] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6007] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6008 attached [pid 6008] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6008] memfd_create("syzkaller", 0) = 3 [pid 6008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6008] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6008] munmap(0x7f927cba2000, 2097152) = 0 [pid 6008] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6008] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6008] close(3) = 0 [pid 6008] mkdir("./file0", 0777) = 0 [ 207.955441][ T6008] loop0: detected capacity change from 0 to 4096 [ 207.971828][ T6008] NILFS (loop0): invalid segment: Checksum error in segment payload [ 207.979910][ T6008] NILFS (loop0): trying rollback from an earlier position [ 207.994564][ T6008] NILFS (loop0): recovery complete [pid 6008] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6008] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6008] chdir("./file0") = 0 [pid 6008] ioctl(4, LOOP_CLR_FD) = 0 [pid 6008] close(4) = 0 [pid 6008] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6007] <... futex resumed>) = 0 [pid 6007] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6007] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6008] <... futex resumed>) = 1 [pid 6008] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6008] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6007] <... futex resumed>) = 0 [pid 6007] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6007] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6008] <... futex resumed>) = 1 [pid 6008] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6008] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6007] <... futex resumed>) = 0 [pid 6007] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6007] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6008] <... futex resumed>) = 1 [pid 6008] ftruncate(5, 33587195) = 0 [pid 6008] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6007] <... futex resumed>) = 0 [pid 6007] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6007] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6008] <... futex resumed>) = 1 [ 208.000459][ T6009] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6008] sendfile(4, 5, NULL, 281474978811909 [pid 6007] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6007] exit_group(0) = ? [pid 6008] <... sendfile resumed>) = ? [pid 6008] +++ exited with 0 +++ [pid 6007] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6007, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- umount2("./331", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./331/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./331/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./331/binderfs") = 0 umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./331/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./331/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./331/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./331") = 0 mkdir("./332", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6010 ./strace-static-x86_64: Process 6010 attached [pid 6010] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6010] chdir("./332") = 0 [pid 6010] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6010] setpgid(0, 0) = 0 [pid 6010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6010] write(3, "1000", 4) = 4 [pid 6010] close(3) = 0 [pid 6010] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6010] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6010] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6010] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6010] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6011], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6011 [pid 6010] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6010] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6011 attached [pid 6011] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6011] memfd_create("syzkaller", 0) = 3 [pid 6011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6011] munmap(0x7f927cba2000, 2097152) = 0 [pid 6011] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6011] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6011] close(3) = 0 [pid 6011] mkdir("./file0", 0777) = 0 [ 208.363953][ T6011] loop0: detected capacity change from 0 to 4096 [ 208.379866][ T6011] NILFS (loop0): invalid segment: Checksum error in segment payload [ 208.387964][ T6011] NILFS (loop0): trying rollback from an earlier position [ 208.402901][ T6011] NILFS (loop0): recovery complete [pid 6011] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6011] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6011] chdir("./file0") = 0 [pid 6011] ioctl(4, LOOP_CLR_FD) = 0 [pid 6011] close(4) = 0 [pid 6011] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] <... futex resumed>) = 0 [pid 6010] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6010] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6011] <... futex resumed>) = 1 [pid 6011] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6011] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] <... futex resumed>) = 0 [pid 6010] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6010] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6011] <... futex resumed>) = 1 [pid 6011] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6011] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] <... futex resumed>) = 0 [pid 6010] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6010] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6011] <... futex resumed>) = 1 [pid 6011] ftruncate(5, 33587195) = 0 [pid 6011] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] <... futex resumed>) = 0 [pid 6010] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6010] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6011] <... futex resumed>) = 1 [ 208.408904][ T6012] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6011] sendfile(4, 5, NULL, 281474978811909 [pid 6010] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6010] exit_group(0) = ? [pid 6011] <... sendfile resumed>) = ? [pid 6011] +++ exited with 0 +++ [pid 6010] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6010, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./332", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./332/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./332/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./332/binderfs") = 0 umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./332/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./332/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./332/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./332") = 0 mkdir("./333", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6013 ./strace-static-x86_64: Process 6013 attached [pid 6013] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6013] chdir("./333") = 0 [pid 6013] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6013] setpgid(0, 0) = 0 [pid 6013] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6013] write(3, "1000", 4) = 4 [pid 6013] close(3) = 0 [pid 6013] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6013] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6013] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6013] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6013] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6014], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6014 ./strace-static-x86_64: Process 6014 attached [pid 6013] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6013] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6014] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6014] memfd_create("syzkaller", 0) = 3 [pid 6014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6014] munmap(0x7f927cba2000, 2097152) = 0 [pid 6014] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6014] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6014] close(3) = 0 [pid 6014] mkdir("./file0", 0777) = 0 [pid 6014] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 208.750219][ T6014] loop0: detected capacity change from 0 to 4096 [ 208.767998][ T6014] NILFS (loop0): invalid segment: Checksum error in segment payload [ 208.776065][ T6014] NILFS (loop0): trying rollback from an earlier position [ 208.792793][ T6014] NILFS (loop0): recovery complete [pid 6014] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6014] chdir("./file0") = 0 [pid 6014] ioctl(4, LOOP_CLR_FD) = 0 [pid 6014] close(4) = 0 [pid 6014] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6013] <... futex resumed>) = 0 [pid 6014] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6013] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6013] <... futex resumed>) = 0 [pid 6014] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6013] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6014] <... open resumed>) = 4 [pid 6014] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6013] <... futex resumed>) = 0 [pid 6014] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6013] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6013] <... futex resumed>) = 0 [pid 6014] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6013] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6014] <... open resumed>) = 5 [pid 6014] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6013] <... futex resumed>) = 0 [pid 6014] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6013] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6013] <... futex resumed>) = 0 [pid 6014] ftruncate(5, 33587195 [pid 6013] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6014] <... ftruncate resumed>) = 0 [pid 6014] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6013] <... futex resumed>) = 0 [pid 6014] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6013] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6013] <... futex resumed>) = 0 [pid 6014] sendfile(4, 5, NULL, 281474978811909 [ 208.799359][ T6015] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6013] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6013] exit_group(0) = ? [pid 6014] <... sendfile resumed>) = ? [pid 6014] +++ exited with 0 +++ [pid 6013] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6013, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./333", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./333/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./333/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./333/binderfs") = 0 umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./333/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./333/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./333/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./333") = 0 mkdir("./334", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6016 ./strace-static-x86_64: Process 6016 attached [pid 6016] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6016] chdir("./334") = 0 [pid 6016] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6016] setpgid(0, 0) = 0 [pid 6016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6016] write(3, "1000", 4) = 4 [pid 6016] close(3) = 0 [pid 6016] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6016] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6016] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6016] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6016] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6017 attached , parent_tid=[6017], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6017 [pid 6016] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6016] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6017] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6017] memfd_create("syzkaller", 0) = 3 [pid 6017] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6017] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6017] munmap(0x7f927cba2000, 2097152) = 0 [pid 6017] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6017] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6017] close(3) = 0 [pid 6017] mkdir("./file0", 0777) = 0 [ 209.157041][ T6017] loop0: detected capacity change from 0 to 4096 [ 209.173417][ T6017] NILFS (loop0): invalid segment: Checksum error in segment payload [ 209.181649][ T6017] NILFS (loop0): trying rollback from an earlier position [ 209.197052][ T6017] NILFS (loop0): recovery complete [pid 6017] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6017] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6017] chdir("./file0") = 0 [pid 6017] ioctl(4, LOOP_CLR_FD) = 0 [pid 6017] close(4) = 0 [pid 6017] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6016] <... futex resumed>) = 0 [pid 6016] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6016] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6017] <... futex resumed>) = 1 [pid 6017] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6017] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6016] <... futex resumed>) = 0 [pid 6016] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6016] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6017] <... futex resumed>) = 1 [pid 6017] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6017] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6016] <... futex resumed>) = 0 [pid 6016] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6016] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6017] <... futex resumed>) = 1 [pid 6017] ftruncate(5, 33587195) = 0 [pid 6017] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6016] <... futex resumed>) = 0 [pid 6016] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6016] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6017] <... futex resumed>) = 1 [ 209.202887][ T6018] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6017] sendfile(4, 5, NULL, 281474978811909 [pid 6016] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6016] exit_group(0) = ? [pid 6017] <... sendfile resumed>) = ? [pid 6017] +++ exited with 0 +++ [pid 6016] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6016, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./334", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./334/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./334/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./334/binderfs") = 0 umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./334/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./334/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./334/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./334") = 0 mkdir("./335", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6019 attached , child_tidptr=0x555555e2e5d0) = 6019 [pid 6019] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6019] chdir("./335") = 0 [pid 6019] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6019] setpgid(0, 0) = 0 [pid 6019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6019] write(3, "1000", 4) = 4 [pid 6019] close(3) = 0 [pid 6019] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6019] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6019] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6019] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6019] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6020 attached , parent_tid=[6020], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6020 [pid 6019] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6019] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6020] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6020] memfd_create("syzkaller", 0) = 3 [pid 6020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6020] munmap(0x7f927cba2000, 2097152) = 0 [pid 6020] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6020] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6020] close(3) = 0 [pid 6020] mkdir("./file0", 0777) = 0 [ 209.533232][ T6020] loop0: detected capacity change from 0 to 4096 [ 209.562216][ T6020] NILFS (loop0): invalid segment: Checksum error in segment payload [ 209.570435][ T6020] NILFS (loop0): trying rollback from an earlier position [pid 6020] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6020] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6020] chdir("./file0") = 0 [pid 6020] ioctl(4, LOOP_CLR_FD) = 0 [pid 6020] close(4) = 0 [pid 6020] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6019] <... futex resumed>) = 0 [pid 6019] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6019] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6020] <... futex resumed>) = 1 [pid 6020] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6020] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6019] <... futex resumed>) = 0 [pid 6019] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6019] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6020] <... futex resumed>) = 1 [pid 6020] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6020] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6019] <... futex resumed>) = 0 [pid 6019] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6019] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6020] <... futex resumed>) = 1 [pid 6020] ftruncate(5, 33587195) = 0 [pid 6020] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6019] <... futex resumed>) = 0 [pid 6019] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6019] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6020] <... futex resumed>) = 1 [ 209.593383][ T6020] NILFS (loop0): recovery complete [pid 6020] sendfile(4, 5, NULL, 281474978811909 [pid 6019] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 209.622047][ T6021] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6019] exit_group(0) = ? [pid 6020] <... sendfile resumed>) = ? [pid 6020] +++ exited with 0 +++ [pid 6019] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6019, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./335", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./335/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./335/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./335/binderfs") = 0 umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./335/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./335/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./335/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./335") = 0 mkdir("./336", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6022 ./strace-static-x86_64: Process 6022 attached [pid 6022] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6022] chdir("./336") = 0 [pid 6022] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6022] setpgid(0, 0) = 0 [pid 6022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6022] write(3, "1000", 4) = 4 [pid 6022] close(3) = 0 [pid 6022] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6022] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6022] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6022] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6022] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6023], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6023 [pid 6022] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6022] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6023 attached [pid 6023] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6023] memfd_create("syzkaller", 0) = 3 [pid 6023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6023] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6023] munmap(0x7f927cba2000, 2097152) = 0 [pid 6023] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6023] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6023] close(3) = 0 [pid 6023] mkdir("./file0", 0777) = 0 [ 210.002802][ T6023] loop0: detected capacity change from 0 to 4096 [ 210.022947][ T6023] NILFS (loop0): invalid segment: Checksum error in segment payload [ 210.031933][ T6023] NILFS (loop0): trying rollback from an earlier position [pid 6023] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6023] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6023] chdir("./file0") = 0 [pid 6023] ioctl(4, LOOP_CLR_FD) = 0 [pid 6023] close(4) = 0 [pid 6023] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6022] <... futex resumed>) = 0 [pid 6023] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6022] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6022] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6023] <... open resumed>) = 4 [pid 6023] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6022] <... futex resumed>) = 0 [pid 6023] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6022] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6023] <... open resumed>) = 5 [pid 6022] <... futex resumed>) = 0 [pid 6023] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6023] <... futex resumed>) = 0 [pid 6022] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6023] ftruncate(5, 33587195 [pid 6022] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6023] <... ftruncate resumed>) = 0 [pid 6022] <... futex resumed>) = 0 [pid 6023] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6023] <... futex resumed>) = 0 [pid 6022] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6023] sendfile(4, 5, NULL, 281474978811909 [pid 6022] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 210.051693][ T6023] NILFS (loop0): recovery complete [ 210.059225][ T6024] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6022] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6022] exit_group(0) = ? [pid 6023] <... sendfile resumed>) = ? [pid 6023] +++ exited with 0 +++ [pid 6022] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6022, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./336", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./336/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./336/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./336/binderfs") = 0 umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./336/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./336/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./336/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./336") = 0 mkdir("./337", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6025 ./strace-static-x86_64: Process 6025 attached [pid 6025] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6025] chdir("./337") = 0 [pid 6025] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6025] setpgid(0, 0) = 0 [pid 6025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6025] write(3, "1000", 4) = 4 [pid 6025] close(3) = 0 [pid 6025] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6025] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6025] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6025] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6026], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6026 [pid 6025] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6025] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6026 attached [pid 6026] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6026] memfd_create("syzkaller", 0) = 3 [pid 6026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6026] munmap(0x7f927cba2000, 2097152) = 0 [pid 6026] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6026] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6026] close(3) = 0 [pid 6026] mkdir("./file0", 0777) = 0 [ 210.439610][ T6026] loop0: detected capacity change from 0 to 4096 [ 210.456139][ T6026] NILFS (loop0): invalid segment: Checksum error in segment payload [ 210.464203][ T6026] NILFS (loop0): trying rollback from an earlier position [ 210.479311][ T6026] NILFS (loop0): recovery complete [pid 6026] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6026] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6026] chdir("./file0") = 0 [pid 6026] ioctl(4, LOOP_CLR_FD) = 0 [pid 6026] close(4) = 0 [pid 6026] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6025] <... futex resumed>) = 0 [pid 6025] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6025] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6026] <... futex resumed>) = 1 [pid 6026] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6026] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6025] <... futex resumed>) = 0 [pid 6025] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6025] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6026] <... futex resumed>) = 1 [pid 6026] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6026] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6025] <... futex resumed>) = 0 [pid 6025] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6025] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6026] <... futex resumed>) = 1 [pid 6026] ftruncate(5, 33587195) = 0 [pid 6026] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6025] <... futex resumed>) = 0 [pid 6025] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6025] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6026] <... futex resumed>) = 1 [pid 6026] sendfile(4, 5, NULL, 281474978811909 [pid 6025] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6025] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 210.485392][ T6027] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6025] exit_group(0 [pid 6026] <... sendfile resumed>) = ? [pid 6025] <... exit_group resumed>) = ? [pid 6026] +++ exited with 0 +++ [pid 6025] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6025, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- umount2("./337", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./337/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./337/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./337/binderfs") = 0 umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./337/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./337/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./337/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./337") = 0 mkdir("./338", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6028 ./strace-static-x86_64: Process 6028 attached [pid 6028] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6028] chdir("./338") = 0 [pid 6028] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6028] setpgid(0, 0) = 0 [pid 6028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6028] write(3, "1000", 4) = 4 [pid 6028] close(3) = 0 [pid 6028] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6028] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6028] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6028] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6028] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6029 attached , parent_tid=[6029], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6029 [pid 6028] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6028] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6029] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6029] memfd_create("syzkaller", 0) = 3 [pid 6029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6029] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6029] munmap(0x7f927cba2000, 2097152) = 0 [pid 6029] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6029] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6029] close(3) = 0 [pid 6029] mkdir("./file0", 0777) = 0 [pid 6029] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6029] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 210.817197][ T6029] loop0: detected capacity change from 0 to 4096 [ 210.832508][ T6029] NILFS (loop0): invalid segment: Checksum error in segment payload [ 210.840651][ T6029] NILFS (loop0): trying rollback from an earlier position [ 210.855946][ T6029] NILFS (loop0): recovery complete [pid 6029] chdir("./file0") = 0 [pid 6029] ioctl(4, LOOP_CLR_FD) = 0 [pid 6029] close(4) = 0 [pid 6029] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6028] <... futex resumed>) = 0 [pid 6029] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6028] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6028] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6029] <... futex resumed>) = 0 [pid 6029] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6029] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6028] <... futex resumed>) = 0 [pid 6028] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6028] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6029] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6029] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6028] <... futex resumed>) = 0 [pid 6028] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6028] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6029] ftruncate(5, 33587195) = 0 [pid 6029] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6029] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6028] <... futex resumed>) = 0 [pid 6028] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6028] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6029] <... futex resumed>) = 0 [ 210.862193][ T6030] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6029] sendfile(4, 5, NULL, 281474978811909 [pid 6028] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6028] exit_group(0) = ? [pid 6029] <... sendfile resumed>) = ? [pid 6029] +++ exited with 0 +++ [pid 6028] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6028, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./338", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./338/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./338/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./338/binderfs") = 0 umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./338/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./338/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./338/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./338") = 0 mkdir("./339", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6031 ./strace-static-x86_64: Process 6031 attached [pid 6031] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6031] chdir("./339") = 0 [pid 6031] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6031] setpgid(0, 0) = 0 [pid 6031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6031] write(3, "1000", 4) = 4 [pid 6031] close(3) = 0 [pid 6031] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6031] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6031] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6031] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6031] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6032], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6032 [pid 6031] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6031] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6032 attached [pid 6032] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6032] memfd_create("syzkaller", 0) = 3 [pid 6032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6032] munmap(0x7f927cba2000, 2097152) = 0 [pid 6032] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6032] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6032] close(3) = 0 [pid 6032] mkdir("./file0", 0777) = 0 [ 211.214436][ T6032] loop0: detected capacity change from 0 to 4096 [ 211.229632][ T6032] NILFS (loop0): invalid segment: Checksum error in segment payload [ 211.237763][ T6032] NILFS (loop0): trying rollback from an earlier position [ 211.252859][ T6032] NILFS (loop0): recovery complete [pid 6032] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6032] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6032] chdir("./file0") = 0 [pid 6032] ioctl(4, LOOP_CLR_FD) = 0 [pid 6032] close(4) = 0 [pid 6032] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6031] <... futex resumed>) = 0 [pid 6032] <... futex resumed>) = 1 [pid 6031] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6032] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6031] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6032] <... open resumed>) = 4 [pid 6032] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6031] <... futex resumed>) = 0 [pid 6031] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6031] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6032] <... futex resumed>) = 1 [pid 6032] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6032] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6031] <... futex resumed>) = 0 [pid 6031] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6031] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6032] <... futex resumed>) = 1 [pid 6032] ftruncate(5, 33587195) = 0 [pid 6032] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6031] <... futex resumed>) = 0 [pid 6031] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6031] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6032] <... futex resumed>) = 1 [ 211.258821][ T6033] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6032] sendfile(4, 5, NULL, 281474978811909 [pid 6031] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6031] exit_group(0) = ? [pid 6032] <... sendfile resumed>) = ? [pid 6032] +++ exited with 0 +++ [pid 6031] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6031, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./339", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./339/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./339/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./339/binderfs") = 0 umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./339/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./339/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./339/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./339") = 0 mkdir("./340", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6034 ./strace-static-x86_64: Process 6034 attached [pid 6034] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6034] chdir("./340") = 0 [pid 6034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6034] setpgid(0, 0) = 0 [pid 6034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6034] write(3, "1000", 4) = 4 [pid 6034] close(3) = 0 [pid 6034] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6034] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6034] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6034] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6034] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6035], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6035 [pid 6034] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6034] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6035 attached [pid 6035] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6035] memfd_create("syzkaller", 0) = 3 [pid 6035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6035] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6035] munmap(0x7f927cba2000, 2097152) = 0 [pid 6035] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6035] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6035] close(3) = 0 [pid 6035] mkdir("./file0", 0777) = 0 [ 211.582300][ T6035] loop0: detected capacity change from 0 to 4096 [ 211.597292][ T6035] NILFS (loop0): invalid segment: Checksum error in segment payload [ 211.605333][ T6035] NILFS (loop0): trying rollback from an earlier position [ 211.620082][ T6035] NILFS (loop0): recovery complete [pid 6035] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6035] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6035] chdir("./file0") = 0 [pid 6035] ioctl(4, LOOP_CLR_FD) = 0 [pid 6035] close(4) = 0 [pid 6035] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6035] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6034] <... futex resumed>) = 0 [pid 6034] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6035] <... futex resumed>) = 0 [pid 6034] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6035] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6035] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] <... futex resumed>) = 0 [pid 6034] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6034] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6035] <... futex resumed>) = 1 [pid 6035] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6035] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] <... futex resumed>) = 0 [pid 6034] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6034] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6035] <... futex resumed>) = 1 [pid 6035] ftruncate(5, 33587195) = 0 [pid 6035] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] <... futex resumed>) = 0 [pid 6034] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6034] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6035] <... futex resumed>) = 1 [ 211.626013][ T6036] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6035] sendfile(4, 5, NULL, 281474978811909 [pid 6034] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6034] exit_group(0) = ? [pid 6035] <... sendfile resumed>) = ? [pid 6035] +++ exited with 0 +++ [pid 6034] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6034, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- umount2("./340", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./340/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./340/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./340/binderfs") = 0 umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./340/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./340/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./340/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./340") = 0 mkdir("./341", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6037 ./strace-static-x86_64: Process 6037 attached [pid 6037] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6037] chdir("./341") = 0 [pid 6037] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6037] setpgid(0, 0) = 0 [pid 6037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6037] write(3, "1000", 4) = 4 [pid 6037] close(3) = 0 [pid 6037] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6037] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6037] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6037] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6037] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6038], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6038 [pid 6037] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6037] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6038 attached [pid 6038] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6038] memfd_create("syzkaller", 0) = 3 [pid 6038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6038] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6038] munmap(0x7f927cba2000, 2097152) = 0 [pid 6038] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6038] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6038] close(3) = 0 [pid 6038] mkdir("./file0", 0777) = 0 [ 211.996090][ T6038] loop0: detected capacity change from 0 to 4096 [ 212.012334][ T6038] NILFS (loop0): invalid segment: Checksum error in segment payload [ 212.020552][ T6038] NILFS (loop0): trying rollback from an earlier position [ 212.037266][ T6038] NILFS (loop0): recovery complete [pid 6038] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6038] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6038] chdir("./file0") = 0 [pid 6038] ioctl(4, LOOP_CLR_FD) = 0 [pid 6038] close(4) = 0 [pid 6038] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6037] <... futex resumed>) = 0 [pid 6037] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6037] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6038] <... futex resumed>) = 1 [pid 6038] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6038] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6037] <... futex resumed>) = 0 [pid 6037] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6038] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6037] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6038] <... open resumed>) = 5 [pid 6038] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6037] <... futex resumed>) = 0 [pid 6037] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6037] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6038] <... futex resumed>) = 1 [pid 6038] ftruncate(5, 33587195) = 0 [pid 6038] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6037] <... futex resumed>) = 0 [pid 6037] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6037] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6038] <... futex resumed>) = 1 [ 212.043337][ T6039] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6038] sendfile(4, 5, NULL, 281474978811909 [pid 6037] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6037] exit_group(0) = ? [pid 6038] <... sendfile resumed>) = ? [pid 6038] +++ exited with 0 +++ [pid 6037] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6037, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./341/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./341/binderfs") = 0 umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./341/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./341/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./341/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./341") = 0 mkdir("./342", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6040 ./strace-static-x86_64: Process 6040 attached [pid 6040] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6040] chdir("./342") = 0 [pid 6040] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6040] setpgid(0, 0) = 0 [pid 6040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6040] write(3, "1000", 4) = 4 [pid 6040] close(3) = 0 [pid 6040] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6040] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6040] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6040] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6040] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6041 attached , parent_tid=[6041], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6041 [pid 6040] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6040] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6041] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6041] memfd_create("syzkaller", 0) = 3 [pid 6041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6041] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6041] munmap(0x7f927cba2000, 2097152) = 0 [pid 6041] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6041] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6041] close(3) = 0 [pid 6041] mkdir("./file0", 0777) = 0 [ 212.373221][ T6041] loop0: detected capacity change from 0 to 4096 [ 212.390525][ T6041] NILFS (loop0): invalid segment: Checksum error in segment payload [ 212.398693][ T6041] NILFS (loop0): trying rollback from an earlier position [ 212.412995][ T6041] NILFS (loop0): recovery complete [pid 6041] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6041] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6041] chdir("./file0") = 0 [pid 6041] ioctl(4, LOOP_CLR_FD) = 0 [pid 6041] close(4) = 0 [pid 6041] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6041] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6040] <... futex resumed>) = 0 [pid 6040] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6041] <... futex resumed>) = 0 [pid 6041] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6040] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6041] <... open resumed>) = 4 [pid 6041] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6041] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6040] <... futex resumed>) = 0 [pid 6040] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6041] <... futex resumed>) = 0 [pid 6040] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6041] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6041] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6040] <... futex resumed>) = 0 [pid 6041] ftruncate(5, 33587195 [pid 6040] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6040] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6041] <... ftruncate resumed>) = 0 [pid 6041] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6040] <... futex resumed>) = 0 [pid 6041] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6040] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6040] <... futex resumed>) = 0 [pid 6040] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 212.418944][ T6042] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6041] sendfile(4, 5, NULL, 281474978811909 [pid 6040] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6040] exit_group(0) = ? [pid 6041] <... sendfile resumed>) = ? [pid 6041] +++ exited with 0 +++ [pid 6040] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6040, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./342/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./342/binderfs") = 0 umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./342/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./342/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./342/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./342") = 0 mkdir("./343", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6043 ./strace-static-x86_64: Process 6043 attached [pid 6043] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6043] chdir("./343") = 0 [pid 6043] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6043] setpgid(0, 0) = 0 [pid 6043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6043] write(3, "1000", 4) = 4 [pid 6043] close(3) = 0 [pid 6043] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6043] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6043] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6043] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6044 attached , parent_tid=[6044], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6044 [pid 6044] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6044] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6043] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6043] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6044] <... futex resumed>) = 0 [pid 6044] memfd_create("syzkaller", 0) = 3 [pid 6044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6044] munmap(0x7f927cba2000, 2097152) = 0 [pid 6044] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6044] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6044] close(3) = 0 [pid 6044] mkdir("./file0", 0777) = 0 [pid 6044] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6044] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 212.785407][ T6044] loop0: detected capacity change from 0 to 4096 [ 212.802501][ T6044] NILFS (loop0): invalid segment: Checksum error in segment payload [ 212.810678][ T6044] NILFS (loop0): trying rollback from an earlier position [ 212.825770][ T6044] NILFS (loop0): recovery complete [pid 6044] chdir("./file0") = 0 [pid 6044] ioctl(4, LOOP_CLR_FD) = 0 [pid 6044] close(4) = 0 [pid 6044] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6043] <... futex resumed>) = 0 [pid 6044] <... futex resumed>) = 1 [pid 6043] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6044] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6043] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6044] <... open resumed>) = 4 [pid 6044] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6043] <... futex resumed>) = 0 [pid 6043] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6044] <... futex resumed>) = 1 [pid 6044] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6044] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6043] <... futex resumed>) = 0 [pid 6043] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6044] ftruncate(5, 33587195) = 0 [pid 6044] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6043] <... futex resumed>) = 0 [pid 6044] sendfile(4, 5, NULL, 281474978811909 [pid 6043] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 212.831634][ T6045] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6043] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6043] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6043] exit_group(0 [pid 6044] <... sendfile resumed>) = ? [pid 6043] <... exit_group resumed>) = ? [pid 6044] +++ exited with 0 +++ [pid 6043] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6043, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./343/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./343/binderfs") = 0 umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./343/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./343/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./343/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./343") = 0 mkdir("./344", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6046 ./strace-static-x86_64: Process 6046 attached [pid 6046] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6046] chdir("./344") = 0 [pid 6046] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6046] setpgid(0, 0) = 0 [pid 6046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6046] write(3, "1000", 4) = 4 [pid 6046] close(3) = 0 [pid 6046] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6046] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6046] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6046] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6047 attached , parent_tid=[6047], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6047 [pid 6046] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6046] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6047] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6047] memfd_create("syzkaller", 0) = 3 [pid 6047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6047] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6047] munmap(0x7f927cba2000, 2097152) = 0 [pid 6047] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6047] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6047] close(3) = 0 [pid 6047] mkdir("./file0", 0777) = 0 [ 213.218333][ T6047] loop0: detected capacity change from 0 to 4096 [ 213.233987][ T6047] NILFS (loop0): invalid segment: Checksum error in segment payload [ 213.242032][ T6047] NILFS (loop0): trying rollback from an earlier position [ 213.257665][ T6047] NILFS (loop0): recovery complete [pid 6047] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6047] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6047] chdir("./file0") = 0 [pid 6047] ioctl(4, LOOP_CLR_FD) = 0 [pid 6047] close(4) = 0 [pid 6047] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6047] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6046] <... futex resumed>) = 0 [pid 6046] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6046] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6047] <... futex resumed>) = 0 [pid 6047] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6047] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6046] <... futex resumed>) = 0 [pid 6047] <... futex resumed>) = 1 [pid 6046] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6047] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6046] <... futex resumed>) = 0 [pid 6046] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6047] <... open resumed>) = 5 [pid 6047] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6046] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6046] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6047] ftruncate(5, 33587195) = 0 [pid 6047] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6046] <... futex resumed>) = 0 [pid 6046] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6046] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6047] <... futex resumed>) = 1 [ 213.263724][ T6048] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6047] sendfile(4, 5, NULL, 281474978811909 [pid 6046] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6046] exit_group(0) = ? [pid 6047] <... sendfile resumed>) = ? [pid 6047] +++ exited with 0 +++ [pid 6046] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6046, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./344/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./344/binderfs") = 0 umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./344/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./344/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./344/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./344") = 0 mkdir("./345", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6049 ./strace-static-x86_64: Process 6049 attached [pid 6049] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6049] chdir("./345") = 0 [pid 6049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6049] setpgid(0, 0) = 0 [pid 6049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6049] write(3, "1000", 4) = 4 [pid 6049] close(3) = 0 [pid 6049] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6049] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6049] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6049] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6050], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6050 [pid 6049] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6050 attached [pid 6050] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6050] memfd_create("syzkaller", 0) = 3 [pid 6050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6050] munmap(0x7f927cba2000, 2097152) = 0 [pid 6050] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6050] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6050] close(3) = 0 [pid 6050] mkdir("./file0", 0777) = 0 [pid 6050] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6050] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 213.597680][ T6050] loop0: detected capacity change from 0 to 4096 [ 213.614275][ T6050] NILFS (loop0): invalid segment: Checksum error in segment payload [ 213.622346][ T6050] NILFS (loop0): trying rollback from an earlier position [ 213.637846][ T6050] NILFS (loop0): recovery complete [pid 6050] chdir("./file0") = 0 [pid 6050] ioctl(4, LOOP_CLR_FD) = 0 [pid 6050] close(4) = 0 [pid 6050] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6050] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] <... futex resumed>) = 0 [pid 6049] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6050] <... futex resumed>) = 0 [pid 6050] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6050] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6049] <... futex resumed>) = 0 [pid 6049] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6050] <... futex resumed>) = 1 [pid 6050] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6050] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6049] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6050] ftruncate(5, 33587195) = 0 [pid 6050] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6049] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 213.644084][ T6051] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6050] sendfile(4, 5, NULL, 281474978811909 [pid 6049] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6049] exit_group(0) = ? [pid 6050] <... sendfile resumed>) = ? [pid 6050] +++ exited with 0 +++ [pid 6049] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6049, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./345/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./345/binderfs") = 0 umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./345/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./345/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./345/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./345") = 0 mkdir("./346", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6052 ./strace-static-x86_64: Process 6052 attached [pid 6052] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6052] chdir("./346") = 0 [pid 6052] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6052] setpgid(0, 0) = 0 [pid 6052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6052] write(3, "1000", 4) = 4 [pid 6052] close(3) = 0 [pid 6052] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6052] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6052] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6052] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6052] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6053], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6053 [pid 6052] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6052] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6053 attached [pid 6053] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6053] memfd_create("syzkaller", 0) = 3 [pid 6053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6053] munmap(0x7f927cba2000, 2097152) = 0 [pid 6053] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6053] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6053] close(3) = 0 [pid 6053] mkdir("./file0", 0777) = 0 [pid 6053] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6053] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 213.989190][ T6053] loop0: detected capacity change from 0 to 4096 [ 214.007011][ T6053] NILFS (loop0): invalid segment: Checksum error in segment payload [ 214.015235][ T6053] NILFS (loop0): trying rollback from an earlier position [ 214.030138][ T6053] NILFS (loop0): recovery complete [pid 6053] chdir("./file0") = 0 [pid 6053] ioctl(4, LOOP_CLR_FD) = 0 [pid 6053] close(4) = 0 [pid 6053] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6052] <... futex resumed>) = 0 [pid 6053] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6052] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6052] <... futex resumed>) = 0 [pid 6052] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6053] <... open resumed>) = 4 [pid 6053] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6052] <... futex resumed>) = 0 [pid 6052] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6052] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6053] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6053] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6052] <... futex resumed>) = 0 [pid 6052] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6052] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6053] ftruncate(5, 33587195) = 0 [pid 6053] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6052] <... futex resumed>) = 0 [pid 6052] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6052] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 214.036214][ T6054] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6053] sendfile(4, 5, NULL, 281474978811909 [pid 6052] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6052] exit_group(0) = ? [pid 6053] <... sendfile resumed>) = ? [pid 6053] +++ exited with 0 +++ [pid 6052] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6052, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./346/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./346/binderfs") = 0 umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./346/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./346/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./346/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./346") = 0 mkdir("./347", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6055 ./strace-static-x86_64: Process 6055 attached [pid 6055] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6055] chdir("./347") = 0 [pid 6055] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6055] setpgid(0, 0) = 0 [pid 6055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6055] write(3, "1000", 4) = 4 [pid 6055] close(3) = 0 [pid 6055] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6055] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6055] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6055] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6055] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6056], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6056 ./strace-static-x86_64: Process 6056 attached [pid 6055] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6056] set_robust_list(0x7f9284fc29e0, 24 [pid 6055] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6056] <... set_robust_list resumed>) = 0 [pid 6056] memfd_create("syzkaller", 0) = 3 [pid 6056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6056] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6056] munmap(0x7f927cba2000, 2097152) = 0 [pid 6056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6056] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6056] close(3) = 0 [pid 6056] mkdir("./file0", 0777) = 0 [ 214.374084][ T6056] loop0: detected capacity change from 0 to 4096 [ 214.392316][ T6056] NILFS (loop0): invalid segment: Checksum error in segment payload [ 214.400386][ T6056] NILFS (loop0): trying rollback from an earlier position [ 214.414765][ T6056] NILFS (loop0): recovery complete [pid 6056] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6056] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6056] chdir("./file0") = 0 [pid 6056] ioctl(4, LOOP_CLR_FD) = 0 [pid 6056] close(4) = 0 [pid 6056] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6056] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6055] <... futex resumed>) = 0 [pid 6055] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6056] <... futex resumed>) = 0 [pid 6055] <... futex resumed>) = 1 [pid 6056] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6055] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6056] <... open resumed>) = 4 [pid 6056] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6055] <... futex resumed>) = 0 [pid 6056] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6055] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6055] <... futex resumed>) = 0 [pid 6056] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6055] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6056] <... open resumed>) = 5 [pid 6056] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6055] <... futex resumed>) = 0 [pid 6056] ftruncate(5, 33587195 [pid 6055] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6055] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6056] <... ftruncate resumed>) = 0 [pid 6056] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6055] <... futex resumed>) = 0 [pid 6056] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6055] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6055] <... futex resumed>) = 0 [pid 6056] sendfile(4, 5, NULL, 281474978811909 [ 214.420622][ T6057] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6055] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6055] exit_group(0) = ? [pid 6056] <... sendfile resumed>) = ? [pid 6056] +++ exited with 0 +++ [pid 6055] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6055, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./347/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./347/binderfs") = 0 umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./347/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./347/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./347/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./347") = 0 mkdir("./348", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6058 ./strace-static-x86_64: Process 6058 attached [pid 6058] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6058] chdir("./348") = 0 [pid 6058] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6058] setpgid(0, 0) = 0 [pid 6058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6058] write(3, "1000", 4) = 4 [pid 6058] close(3) = 0 [pid 6058] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6058] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6058] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6058] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6059], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6059 ./strace-static-x86_64: Process 6059 attached [pid 6058] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6059] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6058] <... futex resumed>) = 0 [pid 6059] memfd_create("syzkaller", 0 [pid 6058] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6059] <... memfd_create resumed>) = 3 [pid 6059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6059] munmap(0x7f927cba2000, 2097152) = 0 [pid 6059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6059] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6059] close(3) = 0 [pid 6059] mkdir("./file0", 0777) = 0 [pid 6059] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 214.795060][ T6059] loop0: detected capacity change from 0 to 4096 [ 214.810372][ T6059] NILFS (loop0): invalid segment: Checksum error in segment payload [ 214.818441][ T6059] NILFS (loop0): trying rollback from an earlier position [ 214.833938][ T6059] NILFS (loop0): recovery complete [pid 6059] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6059] chdir("./file0") = 0 [pid 6059] ioctl(4, LOOP_CLR_FD) = 0 [pid 6059] close(4) = 0 [pid 6059] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6059] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6058] <... futex resumed>) = 0 [pid 6058] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6058] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6059] <... futex resumed>) = 0 [pid 6059] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6059] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6058] <... futex resumed>) = 0 [pid 6059] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6058] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6059] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6058] <... futex resumed>) = 0 [pid 6059] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6058] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6059] <... open resumed>) = 5 [pid 6059] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6058] <... futex resumed>) = 0 [pid 6059] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6058] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6059] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6058] <... futex resumed>) = 0 [pid 6059] ftruncate(5, 33587195 [pid 6058] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6059] <... ftruncate resumed>) = 0 [pid 6059] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6058] <... futex resumed>) = 0 [pid 6059] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6058] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6059] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6058] <... futex resumed>) = 0 [pid 6059] sendfile(4, 5, NULL, 281474978811909 [ 214.840655][ T6060] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6058] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6058] exit_group(0) = ? [pid 6059] <... sendfile resumed>) = ? [pid 6059] +++ exited with 0 +++ [pid 6058] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6058, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./348/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./348/binderfs") = 0 umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./348/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./348/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./348/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./348") = 0 mkdir("./349", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6061 ./strace-static-x86_64: Process 6061 attached [pid 6061] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6061] chdir("./349") = 0 [pid 6061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6061] setpgid(0, 0) = 0 [pid 6061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6061] write(3, "1000", 4) = 4 [pid 6061] close(3) = 0 [pid 6061] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6061] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6061] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6061] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6062], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6062 [pid 6061] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6061] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6062 attached [pid 6062] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6062] memfd_create("syzkaller", 0) = 3 [pid 6062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6062] munmap(0x7f927cba2000, 2097152) = 0 [pid 6062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6062] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6062] close(3) = 0 [pid 6062] mkdir("./file0", 0777) = 0 [ 215.167262][ T6062] loop0: detected capacity change from 0 to 4096 [ 215.184709][ T6062] NILFS (loop0): invalid segment: Checksum error in segment payload [ 215.192796][ T6062] NILFS (loop0): trying rollback from an earlier position [ 215.208043][ T6062] NILFS (loop0): recovery complete [pid 6062] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6062] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6062] chdir("./file0") = 0 [pid 6062] ioctl(4, LOOP_CLR_FD) = 0 [pid 6062] close(4) = 0 [pid 6062] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6062] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6061] <... futex resumed>) = 0 [pid 6061] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6062] <... futex resumed>) = 0 [pid 6061] <... futex resumed>) = 1 [pid 6062] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6061] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6062] <... open resumed>) = 4 [pid 6062] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6061] <... futex resumed>) = 0 [pid 6062] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6061] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6062] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6061] <... futex resumed>) = 0 [pid 6062] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6061] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6062] <... open resumed>) = 5 [pid 6062] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6061] <... futex resumed>) = 0 [pid 6062] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6061] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6062] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6061] <... futex resumed>) = 0 [pid 6062] ftruncate(5, 33587195 [pid 6061] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6062] <... ftruncate resumed>) = 0 [pid 6062] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6061] <... futex resumed>) = 0 [pid 6062] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6061] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6062] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6061] <... futex resumed>) = 0 [pid 6062] sendfile(4, 5, NULL, 281474978811909 [ 215.214859][ T6063] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6061] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6061] exit_group(0 [pid 6062] <... sendfile resumed>) = ? [pid 6061] <... exit_group resumed>) = ? [pid 6062] +++ exited with 0 +++ [pid 6061] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6061, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./349/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./349/binderfs") = 0 umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./349/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./349/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./349/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./349") = 0 mkdir("./350", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6064 ./strace-static-x86_64: Process 6064 attached [pid 6064] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6064] chdir("./350") = 0 [pid 6064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6064] setpgid(0, 0) = 0 [pid 6064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6064] write(3, "1000", 4) = 4 [pid 6064] close(3) = 0 [pid 6064] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6064] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6064] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6064] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6065 attached , parent_tid=[6065], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6065 [pid 6064] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6064] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6065] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6065] memfd_create("syzkaller", 0) = 3 [pid 6065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6065] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6065] munmap(0x7f927cba2000, 2097152) = 0 [pid 6065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6065] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6065] close(3) = 0 [pid 6065] mkdir("./file0", 0777) = 0 [ 215.565667][ T6065] loop0: detected capacity change from 0 to 4096 [ 215.581356][ T6065] NILFS (loop0): invalid segment: Checksum error in segment payload [ 215.589460][ T6065] NILFS (loop0): trying rollback from an earlier position [ 215.605090][ T6065] NILFS (loop0): recovery complete [pid 6065] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6065] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6065] chdir("./file0") = 0 [pid 6065] ioctl(4, LOOP_CLR_FD) = 0 [pid 6065] close(4) = 0 [pid 6065] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6064] <... futex resumed>) = 0 [pid 6064] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6064] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6065] <... futex resumed>) = 1 [pid 6065] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6065] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6064] <... futex resumed>) = 0 [pid 6064] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6064] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6065] <... futex resumed>) = 1 [pid 6065] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6065] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6064] <... futex resumed>) = 0 [pid 6064] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6064] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6065] <... futex resumed>) = 1 [pid 6065] ftruncate(5, 33587195) = 0 [pid 6065] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6064] <... futex resumed>) = 0 [pid 6064] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6064] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6065] <... futex resumed>) = 1 [ 215.611312][ T6066] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6065] sendfile(4, 5, NULL, 281474978811909 [pid 6064] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6064] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6064] exit_group(0) = ? [pid 6065] <... sendfile resumed>) = ? [pid 6065] +++ exited with 0 +++ [pid 6064] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6064, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./350/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./350/binderfs") = 0 umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./350/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./350/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./350/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./350") = 0 mkdir("./351", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6067 ./strace-static-x86_64: Process 6067 attached [pid 6067] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6067] chdir("./351") = 0 [pid 6067] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6067] setpgid(0, 0) = 0 [pid 6067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6067] write(3, "1000", 4) = 4 [pid 6067] close(3) = 0 [pid 6067] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6067] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6067] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6067] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6068], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6068 [pid 6067] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6067] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6068 attached [pid 6068] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6068] memfd_create("syzkaller", 0) = 3 [pid 6068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6068] munmap(0x7f927cba2000, 2097152) = 0 [pid 6068] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6068] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6068] close(3) = 0 [pid 6068] mkdir("./file0", 0777) = 0 [ 215.937254][ T6068] loop0: detected capacity change from 0 to 4096 [ 215.953443][ T6068] NILFS (loop0): invalid segment: Checksum error in segment payload [ 215.961802][ T6068] NILFS (loop0): trying rollback from an earlier position [ 215.979630][ T6068] NILFS (loop0): recovery complete [pid 6068] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6068] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6068] chdir("./file0") = 0 [pid 6068] ioctl(4, LOOP_CLR_FD) = 0 [pid 6068] close(4) = 0 [pid 6068] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6067] <... futex resumed>) = 0 [pid 6068] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6067] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6068] <... open resumed>) = 4 [pid 6067] <... futex resumed>) = 0 [pid 6068] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6067] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6068] <... futex resumed>) = 0 [pid 6067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6068] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6067] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6068] <... open resumed>) = 5 [pid 6067] <... futex resumed>) = 0 [pid 6068] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6067] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6068] <... futex resumed>) = 0 [pid 6067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6068] ftruncate(5, 33587195 [pid 6067] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6068] <... ftruncate resumed>) = 0 [pid 6067] <... futex resumed>) = 0 [pid 6068] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6067] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6068] <... futex resumed>) = 0 [pid 6067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6068] sendfile(4, 5, NULL, 281474978811909 [pid 6067] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6067] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 215.986238][ T6069] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6067] exit_group(0) = ? [pid 6068] <... sendfile resumed>) = ? [pid 6068] +++ exited with 0 +++ [pid 6067] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6067, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./351", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./351/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./351/binderfs") = 0 umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./351/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./351/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./351/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./351") = 0 mkdir("./352", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6070 ./strace-static-x86_64: Process 6070 attached [pid 6070] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6070] chdir("./352") = 0 [pid 6070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6070] setpgid(0, 0) = 0 [pid 6070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6070] write(3, "1000", 4) = 4 [pid 6070] close(3) = 0 [pid 6070] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6070] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6070] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6070] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6070] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6071], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6071 [pid 6070] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6070] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6071 attached [pid 6071] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6071] memfd_create("syzkaller", 0) = 3 [pid 6071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6071] munmap(0x7f927cba2000, 2097152) = 0 [pid 6071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6071] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6071] close(3) = 0 [pid 6071] mkdir("./file0", 0777) = 0 [pid 6071] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 216.327577][ T6071] loop0: detected capacity change from 0 to 4096 [ 216.344094][ T6071] NILFS (loop0): invalid segment: Checksum error in segment payload [ 216.352158][ T6071] NILFS (loop0): trying rollback from an earlier position [ 216.369162][ T6071] NILFS (loop0): recovery complete [pid 6071] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6071] chdir("./file0") = 0 [pid 6071] ioctl(4, LOOP_CLR_FD) = 0 [pid 6071] close(4) = 0 [pid 6071] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6071] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6070] <... futex resumed>) = 0 [pid 6070] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6070] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6071] <... futex resumed>) = 0 [pid 6071] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6071] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6070] <... futex resumed>) = 0 [pid 6070] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6070] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6071] <... futex resumed>) = 1 [pid 6071] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6071] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6070] <... futex resumed>) = 0 [pid 6070] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6070] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6071] <... futex resumed>) = 1 [pid 6071] ftruncate(5, 33587195) = 0 [pid 6071] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6070] <... futex resumed>) = 0 [pid 6070] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6070] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 216.375076][ T6072] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6071] sendfile(4, 5, NULL, 281474978811909 [pid 6070] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6070] exit_group(0) = ? [pid 6071] <... sendfile resumed>) = ? [pid 6071] +++ exited with 0 +++ [pid 6070] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6070, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./352", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./352/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./352/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./352/binderfs") = 0 umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./352/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./352/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./352/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./352") = 0 mkdir("./353", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6073 ./strace-static-x86_64: Process 6073 attached [pid 6073] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6073] chdir("./353") = 0 [pid 6073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6073] setpgid(0, 0) = 0 [pid 6073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6073] write(3, "1000", 4) = 4 [pid 6073] close(3) = 0 [pid 6073] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6073] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6073] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6073] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6074], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6074 [pid 6073] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6073] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6074 attached [pid 6074] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6074] memfd_create("syzkaller", 0) = 3 [pid 6074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6074] munmap(0x7f927cba2000, 2097152) = 0 [pid 6074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6074] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6074] close(3) = 0 [pid 6074] mkdir("./file0", 0777) = 0 [pid 6074] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6074] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6074] chdir("./file0") = 0 [ 216.719475][ T6074] loop0: detected capacity change from 0 to 4096 [ 216.735423][ T6074] NILFS (loop0): invalid segment: Checksum error in segment payload [ 216.743432][ T6074] NILFS (loop0): trying rollback from an earlier position [ 216.759825][ T6074] NILFS (loop0): recovery complete [pid 6074] ioctl(4, LOOP_CLR_FD) = 0 [pid 6074] close(4) = 0 [pid 6074] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6074] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6073] <... futex resumed>) = 0 [pid 6073] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6073] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6074] <... futex resumed>) = 0 [pid 6074] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6074] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6073] <... futex resumed>) = 0 [pid 6073] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6073] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6074] <... futex resumed>) = 1 [pid 6074] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6074] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6073] <... futex resumed>) = 0 [pid 6073] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6073] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6074] <... futex resumed>) = 1 [pid 6074] ftruncate(5, 33587195) = 0 [pid 6074] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6073] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6074] sendfile(4, 5, NULL, 281474978811909 [pid 6073] <... futex resumed>) = 0 [ 216.765663][ T6075] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6073] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6073] exit_group(0 [pid 6074] <... sendfile resumed>) = ? [pid 6073] <... exit_group resumed>) = ? [pid 6074] +++ exited with 0 +++ [pid 6073] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6073, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./353", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./353/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./353/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./353/binderfs") = 0 umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./353/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./353/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./353/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./353") = 0 mkdir("./354", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6076 ./strace-static-x86_64: Process 6076 attached [pid 6076] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6076] chdir("./354") = 0 [pid 6076] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6076] setpgid(0, 0) = 0 [pid 6076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6076] write(3, "1000", 4) = 4 [pid 6076] close(3) = 0 [pid 6076] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6076] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6076] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6076] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6077 attached [pid 6077] set_robust_list(0x7f9284fc29e0, 24 [pid 6076] <... clone resumed>, parent_tid=[6077], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6077 [pid 6077] <... set_robust_list resumed>) = 0 [pid 6076] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] memfd_create("syzkaller", 0 [pid 6076] <... futex resumed>) = 0 [pid 6077] <... memfd_create resumed>) = 3 [pid 6077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6076] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6077] munmap(0x7f927cba2000, 2097152) = 0 [pid 6077] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6077] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6077] close(3) = 0 [pid 6077] mkdir("./file0", 0777) = 0 [pid 6077] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6077] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6077] chdir("./file0") = 0 [ 217.094586][ T6077] loop0: detected capacity change from 0 to 4096 [ 217.109414][ T6077] NILFS (loop0): invalid segment: Checksum error in segment payload [ 217.117527][ T6077] NILFS (loop0): trying rollback from an earlier position [ 217.132824][ T6077] NILFS (loop0): recovery complete [pid 6077] ioctl(4, LOOP_CLR_FD) = 0 [pid 6077] close(4) = 0 [pid 6077] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6077] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6076] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] <... futex resumed>) = 0 [pid 6077] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6076] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6077] <... open resumed>) = 4 [pid 6077] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6077] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6077] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6076] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6077] <... open resumed>) = 5 [pid 6077] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6077] ftruncate(5, 33587195 [pid 6076] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] <... ftruncate resumed>) = 0 [pid 6076] <... futex resumed>) = 0 [pid 6077] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6077] <... futex resumed>) = 0 [pid 6076] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 217.138937][ T6078] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6077] sendfile(4, 5, NULL, 281474978811909 [pid 6076] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6076] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6076] exit_group(0) = ? [pid 6077] <... sendfile resumed>) = ? [pid 6077] +++ exited with 0 +++ [pid 6076] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6076, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./354", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./354/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./354/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./354/binderfs") = 0 umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./354/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./354/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./354/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./354") = 0 mkdir("./355", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6079 ./strace-static-x86_64: Process 6079 attached [pid 6079] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6079] chdir("./355") = 0 [pid 6079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6079] setpgid(0, 0) = 0 [pid 6079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6079] write(3, "1000", 4) = 4 [pid 6079] close(3) = 0 [pid 6079] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6079] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6079] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6079] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6080], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6080 [pid 6079] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6079] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6080 attached [pid 6080] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6080] memfd_create("syzkaller", 0) = 3 [pid 6080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6080] munmap(0x7f927cba2000, 2097152) = 0 [pid 6080] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6080] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6080] close(3) = 0 [pid 6080] mkdir("./file0", 0777) = 0 [ 217.487079][ T6080] loop0: detected capacity change from 0 to 4096 [ 217.505125][ T6080] NILFS (loop0): invalid segment: Checksum error in segment payload [ 217.513240][ T6080] NILFS (loop0): trying rollback from an earlier position [ 217.529434][ T6080] NILFS (loop0): recovery complete [pid 6080] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6080] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6080] chdir("./file0") = 0 [pid 6080] ioctl(4, LOOP_CLR_FD) = 0 [pid 6080] close(4) = 0 [pid 6080] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6080] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6079] <... futex resumed>) = 0 [pid 6079] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6079] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6080] <... futex resumed>) = 0 [pid 6080] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6080] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6079] <... futex resumed>) = 0 [pid 6079] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6079] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6080] <... futex resumed>) = 1 [pid 6080] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6080] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6079] <... futex resumed>) = 0 [pid 6079] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6079] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6080] <... futex resumed>) = 1 [pid 6080] ftruncate(5, 33587195) = 0 [pid 6080] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6080] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6079] <... futex resumed>) = 0 [pid 6079] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6080] <... futex resumed>) = 0 [pid 6079] <... futex resumed>) = 1 [pid 6080] sendfile(4, 5, NULL, 281474978811909 [ 217.535837][ T6081] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6079] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6079] exit_group(0) = ? [pid 6080] <... sendfile resumed>) = ? [pid 6080] +++ exited with 0 +++ [pid 6079] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6079, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./355", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./355/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./355/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./355/binderfs") = 0 umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./355/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./355/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./355/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./355") = 0 mkdir("./356", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6082 ./strace-static-x86_64: Process 6082 attached [pid 6082] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6082] chdir("./356") = 0 [pid 6082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6082] setpgid(0, 0) = 0 [pid 6082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6082] write(3, "1000", 4) = 4 [pid 6082] close(3) = 0 [pid 6082] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6082] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6082] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6082] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6083], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6083 [pid 6082] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6082] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6083 attached [pid 6083] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6083] memfd_create("syzkaller", 0) = 3 [pid 6083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6083] munmap(0x7f927cba2000, 2097152) = 0 [pid 6083] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6083] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6083] close(3) = 0 [pid 6083] mkdir("./file0", 0777) = 0 [ 217.871373][ T6083] loop0: detected capacity change from 0 to 4096 [ 217.888741][ T6083] NILFS (loop0): invalid segment: Checksum error in segment payload [ 217.896899][ T6083] NILFS (loop0): trying rollback from an earlier position [ 217.912283][ T6083] NILFS (loop0): recovery complete [pid 6083] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6083] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6083] chdir("./file0") = 0 [pid 6083] ioctl(4, LOOP_CLR_FD) = 0 [pid 6083] close(4) = 0 [pid 6083] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6082] <... futex resumed>) = 0 [pid 6083] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... futex resumed>) = 0 [pid 6083] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6082] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6083] <... open resumed>) = 4 [pid 6083] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6082] <... futex resumed>) = 0 [pid 6083] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6082] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6083] <... open resumed>) = 5 [pid 6082] <... futex resumed>) = 0 [pid 6083] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6083] <... futex resumed>) = 0 [pid 6082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6083] ftruncate(5, 33587195 [pid 6082] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6083] <... ftruncate resumed>) = 0 [pid 6082] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6083] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6082] <... futex resumed>) = 0 [pid 6082] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6083] sendfile(4, 5, NULL, 281474978811909 [pid 6082] <... futex resumed>) = 0 [ 217.918663][ T6084] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6082] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6082] exit_group(0) = ? [pid 6083] <... sendfile resumed>) = ? [pid 6083] +++ exited with 0 +++ [pid 6082] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6082, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./356", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./356/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./356/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./356/binderfs") = 0 umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./356/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./356/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./356/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./356") = 0 mkdir("./357", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6085 ./strace-static-x86_64: Process 6085 attached [pid 6085] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6085] chdir("./357") = 0 [pid 6085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6085] setpgid(0, 0) = 0 [pid 6085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6085] write(3, "1000", 4) = 4 [pid 6085] close(3) = 0 [pid 6085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6085] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6085] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6085] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6086], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6086 [pid 6085] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6085] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6086 attached [pid 6086] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6086] memfd_create("syzkaller", 0) = 3 [pid 6086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6086] munmap(0x7f927cba2000, 2097152) = 0 [pid 6086] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6086] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6086] close(3) = 0 [pid 6086] mkdir("./file0", 0777) = 0 [ 218.253973][ T6086] loop0: detected capacity change from 0 to 4096 [ 218.269499][ T6086] NILFS (loop0): invalid segment: Checksum error in segment payload [ 218.277599][ T6086] NILFS (loop0): trying rollback from an earlier position [ 218.292915][ T6086] NILFS (loop0): recovery complete [pid 6086] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6086] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6086] chdir("./file0") = 0 [pid 6086] ioctl(4, LOOP_CLR_FD) = 0 [pid 6086] close(4) = 0 [pid 6086] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6085] <... futex resumed>) = 0 [pid 6085] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6085] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6086] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6086] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] <... futex resumed>) = 0 [pid 6085] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6085] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6086] <... futex resumed>) = 1 [pid 6086] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6086] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] <... futex resumed>) = 0 [pid 6085] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6085] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6086] <... futex resumed>) = 1 [pid 6086] ftruncate(5, 33587195) = 0 [pid 6086] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] <... futex resumed>) = 0 [pid 6085] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6085] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6086] <... futex resumed>) = 1 [ 218.299106][ T6087] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6086] sendfile(4, 5, NULL, 281474978811909 [pid 6085] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6085] exit_group(0) = ? [pid 6086] <... sendfile resumed>) = ? [pid 6086] +++ exited with 0 +++ [pid 6085] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6085, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./357", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./357/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./357/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./357/binderfs") = 0 umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./357/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./357/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./357/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./357") = 0 mkdir("./358", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6088 ./strace-static-x86_64: Process 6088 attached [pid 6088] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6088] chdir("./358") = 0 [pid 6088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6088] setpgid(0, 0) = 0 [pid 6088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6088] write(3, "1000", 4) = 4 [pid 6088] close(3) = 0 [pid 6088] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6088] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6088] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6088] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6089], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6089 [pid 6088] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6089 attached [pid 6089] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6089] memfd_create("syzkaller", 0) = 3 [pid 6089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6089] munmap(0x7f927cba2000, 2097152) = 0 [pid 6089] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6089] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6089] close(3) = 0 [pid 6089] mkdir("./file0", 0777) = 0 [ 218.629561][ T6089] loop0: detected capacity change from 0 to 4096 [ 218.645568][ T6089] NILFS (loop0): invalid segment: Checksum error in segment payload [ 218.653697][ T6089] NILFS (loop0): trying rollback from an earlier position [ 218.668726][ T6089] NILFS (loop0): recovery complete [pid 6089] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6089] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6089] chdir("./file0") = 0 [pid 6089] ioctl(4, LOOP_CLR_FD) = 0 [pid 6089] close(4) = 0 [pid 6089] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] <... futex resumed>) = 0 [pid 6088] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6089] <... futex resumed>) = 1 [pid 6089] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6089] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] <... futex resumed>) = 0 [pid 6088] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6089] <... futex resumed>) = 1 [pid 6089] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6089] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] <... futex resumed>) = 0 [pid 6088] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6089] <... futex resumed>) = 1 [pid 6089] ftruncate(5, 33587195) = 0 [pid 6089] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] <... futex resumed>) = 0 [pid 6088] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6089] <... futex resumed>) = 1 [pid 6089] sendfile(4, 5, NULL, 281474978811909 [pid 6088] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 218.674795][ T6090] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6088] exit_group(0) = ? [pid 6089] <... sendfile resumed>) = ? [pid 6089] +++ exited with 0 +++ [pid 6088] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6088, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./358", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./358/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./358/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./358/binderfs") = 0 umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./358/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./358/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./358/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./358") = 0 mkdir("./359", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6091 ./strace-static-x86_64: Process 6091 attached [pid 6091] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6091] chdir("./359") = 0 [pid 6091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6091] setpgid(0, 0) = 0 [pid 6091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6091] write(3, "1000", 4) = 4 [pid 6091] close(3) = 0 [pid 6091] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6091] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6091] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6091] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6091] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6092], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6092 [pid 6091] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6091] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6092 attached [pid 6092] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6092] memfd_create("syzkaller", 0) = 3 [pid 6092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6092] munmap(0x7f927cba2000, 2097152) = 0 [pid 6092] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6092] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6092] close(3) = 0 [pid 6092] mkdir("./file0", 0777) = 0 [ 219.008458][ T6092] loop0: detected capacity change from 0 to 4096 [ 219.025329][ T6092] NILFS (loop0): invalid segment: Checksum error in segment payload [ 219.033436][ T6092] NILFS (loop0): trying rollback from an earlier position [ 219.048543][ T6092] NILFS (loop0): recovery complete [pid 6092] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6092] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6092] chdir("./file0") = 0 [pid 6092] ioctl(4, LOOP_CLR_FD) = 0 [pid 6092] close(4) = 0 [pid 6092] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6091] <... futex resumed>) = 0 [pid 6091] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6091] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6092] <... futex resumed>) = 1 [pid 6092] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6092] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6091] <... futex resumed>) = 0 [pid 6091] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6091] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6092] <... futex resumed>) = 1 [pid 6092] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6092] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6091] <... futex resumed>) = 0 [pid 6091] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6091] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6092] <... futex resumed>) = 1 [pid 6092] ftruncate(5, 33587195) = 0 [pid 6092] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6091] <... futex resumed>) = 0 [pid 6091] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6091] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6092] <... futex resumed>) = 1 [pid 6092] sendfile(4, 5, NULL, 281474978811909 [pid 6091] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6091] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 219.054825][ T6093] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6091] exit_group(0) = ? [pid 6092] <... sendfile resumed>) = ? [pid 6092] +++ exited with 0 +++ [pid 6091] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6091, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./359", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./359/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./359/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./359/binderfs") = 0 umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./359/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./359/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./359/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./359") = 0 mkdir("./360", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6094 attached , child_tidptr=0x555555e2e5d0) = 6094 [pid 6094] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6094] chdir("./360") = 0 [pid 6094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6094] setpgid(0, 0) = 0 [pid 6094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6094] write(3, "1000", 4) = 4 [pid 6094] close(3) = 0 [pid 6094] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6094] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6094] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6094] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6094] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6095], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6095 [pid 6094] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6094] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6095 attached [pid 6095] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6095] memfd_create("syzkaller", 0) = 3 [pid 6095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6095] munmap(0x7f927cba2000, 2097152) = 0 [pid 6095] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6095] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6095] close(3) = 0 [pid 6095] mkdir("./file0", 0777) = 0 [pid 6095] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6095] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6095] chdir("./file0") = 0 [pid 6095] ioctl(4, LOOP_CLR_FD) = 0 [pid 6095] close(4) = 0 [pid 6095] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 219.365287][ T6095] loop0: detected capacity change from 0 to 4096 [ 219.380051][ T6095] NILFS (loop0): invalid segment: Checksum error in segment payload [ 219.388200][ T6095] NILFS (loop0): trying rollback from an earlier position [ 219.403051][ T6095] NILFS (loop0): recovery complete [pid 6095] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6094] <... futex resumed>) = 0 [pid 6094] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6095] <... futex resumed>) = 0 [pid 6094] <... futex resumed>) = 1 [pid 6095] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6094] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6095] <... open resumed>) = 4 [pid 6095] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6094] <... futex resumed>) = 0 [pid 6094] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6094] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6095] <... futex resumed>) = 1 [pid 6095] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6095] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6094] <... futex resumed>) = 0 [pid 6095] ftruncate(5, 33587195 [pid 6094] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6095] <... ftruncate resumed>) = 0 [pid 6094] <... futex resumed>) = 0 [pid 6095] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6094] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6095] <... futex resumed>) = 0 [pid 6094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6095] sendfile(4, 5, NULL, 281474978811909 [pid 6094] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 219.409167][ T6096] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6094] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6094] exit_group(0 [pid 6095] <... sendfile resumed>) = ? [pid 6094] <... exit_group resumed>) = ? [pid 6095] +++ exited with 0 +++ [pid 6094] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6094, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./360", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./360/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./360/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./360/binderfs") = 0 umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./360/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./360/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./360/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./360") = 0 mkdir("./361", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6097 ./strace-static-x86_64: Process 6097 attached [pid 6097] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6097] chdir("./361") = 0 [pid 6097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6097] setpgid(0, 0) = 0 [pid 6097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6097] write(3, "1000", 4) = 4 [pid 6097] close(3) = 0 [pid 6097] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6097] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6097] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6097] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6097] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6098], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6098 [pid 6097] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6097] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6098 attached [pid 6098] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6098] memfd_create("syzkaller", 0) = 3 [pid 6098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6098] munmap(0x7f927cba2000, 2097152) = 0 [pid 6098] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6098] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6098] close(3) = 0 [pid 6098] mkdir("./file0", 0777) = 0 [ 219.750238][ T6098] loop0: detected capacity change from 0 to 4096 [ 219.767176][ T6098] NILFS (loop0): invalid segment: Checksum error in segment payload [ 219.775256][ T6098] NILFS (loop0): trying rollback from an earlier position [ 219.790401][ T6098] NILFS (loop0): recovery complete [pid 6098] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6098] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6098] chdir("./file0") = 0 [pid 6098] ioctl(4, LOOP_CLR_FD) = 0 [pid 6098] close(4) = 0 [pid 6098] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6097] <... futex resumed>) = 0 [pid 6097] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6097] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6098] <... futex resumed>) = 1 [pid 6098] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6098] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6097] <... futex resumed>) = 0 [pid 6097] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6097] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6098] <... futex resumed>) = 1 [pid 6098] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6098] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6097] <... futex resumed>) = 0 [pid 6097] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6097] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6098] <... futex resumed>) = 1 [pid 6098] ftruncate(5, 33587195) = 0 [pid 6098] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6097] <... futex resumed>) = 0 [pid 6097] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6097] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6098] <... futex resumed>) = 1 [ 219.796546][ T6099] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6098] sendfile(4, 5, NULL, 281474978811909 [pid 6097] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6097] exit_group(0) = ? [pid 6098] <... sendfile resumed>) = ? [pid 6098] +++ exited with 0 +++ [pid 6097] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6097, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./361", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./361/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./361/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./361/binderfs") = 0 umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./361/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./361/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./361/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./361") = 0 mkdir("./362", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6100 ./strace-static-x86_64: Process 6100 attached [pid 6100] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6100] chdir("./362") = 0 [pid 6100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6100] setpgid(0, 0) = 0 [pid 6100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6100] write(3, "1000", 4) = 4 [pid 6100] close(3) = 0 [pid 6100] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6100] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6100] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6100] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6101 attached , parent_tid=[6101], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6101 [pid 6100] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6100] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6101] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6101] memfd_create("syzkaller", 0) = 3 [pid 6101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6101] munmap(0x7f927cba2000, 2097152) = 0 [pid 6101] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6101] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6101] close(3) = 0 [pid 6101] mkdir("./file0", 0777) = 0 [pid 6101] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6101] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6101] chdir("./file0") = 0 [pid 6101] ioctl(4, LOOP_CLR_FD) = 0 [pid 6101] close(4) = 0 [pid 6101] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 220.118475][ T6101] loop0: detected capacity change from 0 to 4096 [ 220.135127][ T6101] NILFS (loop0): invalid segment: Checksum error in segment payload [ 220.143190][ T6101] NILFS (loop0): trying rollback from an earlier position [ 220.158690][ T6101] NILFS (loop0): recovery complete [pid 6101] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6100] <... futex resumed>) = 0 [pid 6100] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6100] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6101] <... futex resumed>) = 0 [pid 6101] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6101] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6100] <... futex resumed>) = 0 [pid 6100] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6100] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6101] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6101] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6100] <... futex resumed>) = 0 [pid 6100] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6100] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6101] ftruncate(5, 33587195) = 0 [pid 6101] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6100] <... futex resumed>) = 0 [pid 6101] <... futex resumed>) = 1 [pid 6100] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] sendfile(4, 5, NULL, 281474978811909 [pid 6100] <... futex resumed>) = 0 [ 220.164632][ T6102] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6100] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6100] exit_group(0) = ? [pid 6101] <... sendfile resumed>) = ? [pid 6101] +++ exited with 0 +++ [pid 6100] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6100, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./362", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./362/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./362/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./362/binderfs") = 0 umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./362/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./362/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./362/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./362") = 0 mkdir("./363", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6103 ./strace-static-x86_64: Process 6103 attached [pid 6103] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6103] chdir("./363") = 0 [pid 6103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6103] setpgid(0, 0) = 0 [pid 6103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6103] write(3, "1000", 4) = 4 [pid 6103] close(3) = 0 [pid 6103] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6103] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6103] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6103] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6104], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6104 ./strace-static-x86_64: Process 6104 attached [pid 6103] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6103] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6104] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6104] memfd_create("syzkaller", 0) = 3 [pid 6104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6104] munmap(0x7f927cba2000, 2097152) = 0 [pid 6104] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6104] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6104] close(3) = 0 [pid 6104] mkdir("./file0", 0777) = 0 [pid 6104] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6104] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 220.534037][ T6104] loop0: detected capacity change from 0 to 4096 [ 220.550920][ T6104] NILFS (loop0): invalid segment: Checksum error in segment payload [ 220.559309][ T6104] NILFS (loop0): trying rollback from an earlier position [ 220.574957][ T6104] NILFS (loop0): recovery complete [pid 6104] chdir("./file0") = 0 [pid 6104] ioctl(4, LOOP_CLR_FD) = 0 [pid 6104] close(4) = 0 [pid 6104] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6104] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6103] <... futex resumed>) = 0 [pid 6103] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6103] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6104] <... futex resumed>) = 0 [pid 6104] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6104] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6103] <... futex resumed>) = 0 [pid 6103] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6103] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6104] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6104] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6103] <... futex resumed>) = 0 [pid 6103] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6103] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6104] <... futex resumed>) = 1 [pid 6104] ftruncate(5, 33587195) = 0 [pid 6104] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6103] <... futex resumed>) = 0 [pid 6103] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6103] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6104] <... futex resumed>) = 1 [ 220.580831][ T6105] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6104] sendfile(4, 5, NULL, 281474978811909 [pid 6103] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6103] exit_group(0) = ? [pid 6104] <... sendfile resumed>) = ? [pid 6104] +++ exited with 0 +++ [pid 6103] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6103, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./363", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./363/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./363/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./363/binderfs") = 0 umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./363/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./363/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./363/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./363") = 0 mkdir("./364", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6106 ./strace-static-x86_64: Process 6106 attached [pid 6106] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6106] chdir("./364") = 0 [pid 6106] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6106] setpgid(0, 0) = 0 [pid 6106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6106] write(3, "1000", 4) = 4 [pid 6106] close(3) = 0 [pid 6106] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6106] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6106] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6106] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6107], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6107 [pid 6106] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6106] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6107 attached [pid 6107] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6107] memfd_create("syzkaller", 0) = 3 [pid 6107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6107] munmap(0x7f927cba2000, 2097152) = 0 [pid 6107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6107] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6107] close(3) = 0 [pid 6107] mkdir("./file0", 0777) = 0 [ 220.919311][ T6107] loop0: detected capacity change from 0 to 4096 [ 220.936428][ T6107] NILFS (loop0): invalid segment: Checksum error in segment payload [ 220.944526][ T6107] NILFS (loop0): trying rollback from an earlier position [ 220.961331][ T6107] NILFS (loop0): recovery complete [pid 6107] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6107] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6107] chdir("./file0") = 0 [pid 6107] ioctl(4, LOOP_CLR_FD) = 0 [pid 6107] close(4) = 0 [pid 6107] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6106] <... futex resumed>) = 0 [pid 6106] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6107] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6106] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6107] <... open resumed>) = 4 [pid 6107] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = 0 [pid 6106] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6106] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6107] <... futex resumed>) = 1 [pid 6107] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6107] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = 0 [pid 6106] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6106] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6107] <... futex resumed>) = 1 [pid 6107] ftruncate(5, 33587195) = 0 [pid 6107] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = 0 [pid 6106] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6107] <... futex resumed>) = 1 [pid 6106] <... futex resumed>) = 0 [pid 6106] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 220.967385][ T6108] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6107] sendfile(4, 5, NULL, 281474978811909 [pid 6106] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6106] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6106] exit_group(0) = ? [pid 6107] <... sendfile resumed>) = ? [pid 6107] +++ exited with 0 +++ [pid 6106] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6106, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./364", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./364/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./364/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./364/binderfs") = 0 umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./364/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./364/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./364/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./364") = 0 mkdir("./365", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6109 ./strace-static-x86_64: Process 6109 attached [pid 6109] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6109] chdir("./365") = 0 [pid 6109] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6109] setpgid(0, 0) = 0 [pid 6109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6109] write(3, "1000", 4) = 4 [pid 6109] close(3) = 0 [pid 6109] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6109] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6109] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6109] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6109] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6110 attached , parent_tid=[6110], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6110 [pid 6110] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6110] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6109] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] <... futex resumed>) = 0 [pid 6109] <... futex resumed>) = 1 [pid 6109] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6110] memfd_create("syzkaller", 0) = 3 [pid 6110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6110] munmap(0x7f927cba2000, 2097152) = 0 [pid 6110] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6110] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6110] close(3) = 0 [pid 6110] mkdir("./file0", 0777) = 0 [ 221.321189][ T6110] loop0: detected capacity change from 0 to 4096 [ 221.337952][ T6110] NILFS (loop0): invalid segment: Checksum error in segment payload [ 221.346083][ T6110] NILFS (loop0): trying rollback from an earlier position [ 221.361354][ T6110] NILFS (loop0): recovery complete [pid 6110] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6110] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6110] chdir("./file0") = 0 [pid 6110] ioctl(4, LOOP_CLR_FD) = 0 [pid 6110] close(4) = 0 [pid 6110] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6110] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6109] <... futex resumed>) = 0 [pid 6109] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6109] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6110] <... futex resumed>) = 0 [pid 6110] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6110] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... futex resumed>) = 0 [pid 6109] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6109] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6110] <... futex resumed>) = 1 [pid 6110] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6110] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... futex resumed>) = 0 [pid 6109] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6109] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6110] <... futex resumed>) = 1 [pid 6110] ftruncate(5, 33587195) = 0 [pid 6110] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... futex resumed>) = 0 [pid 6109] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6109] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6110] <... futex resumed>) = 1 [ 221.367390][ T6111] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6110] sendfile(4, 5, NULL, 281474978811909 [pid 6109] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6109] exit_group(0 [pid 6110] <... sendfile resumed>) = ? [pid 6109] <... exit_group resumed>) = ? [pid 6110] +++ exited with 0 +++ [pid 6109] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6109, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- umount2("./365", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./365/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./365/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./365/binderfs") = 0 umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./365/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./365/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./365/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./365") = 0 mkdir("./366", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6112 ./strace-static-x86_64: Process 6112 attached [pid 6112] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6112] chdir("./366") = 0 [pid 6112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6112] setpgid(0, 0) = 0 [pid 6112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6112] write(3, "1000", 4) = 4 [pid 6112] close(3) = 0 [pid 6112] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6112] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6112] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6112] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6112] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6113 attached , parent_tid=[6113], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6113 [pid 6112] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6112] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6113] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6113] memfd_create("syzkaller", 0) = 3 [pid 6113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6113] munmap(0x7f927cba2000, 2097152) = 0 [pid 6113] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6113] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6113] close(3) = 0 [pid 6113] mkdir("./file0", 0777) = 0 [ 221.708122][ T6113] loop0: detected capacity change from 0 to 4096 [ 221.724818][ T6113] NILFS (loop0): invalid segment: Checksum error in segment payload [ 221.733010][ T6113] NILFS (loop0): trying rollback from an earlier position [ 221.748956][ T6113] NILFS (loop0): recovery complete [pid 6113] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6113] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6113] chdir("./file0") = 0 [pid 6113] ioctl(4, LOOP_CLR_FD) = 0 [pid 6113] close(4) = 0 [pid 6113] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6113] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6112] <... futex resumed>) = 0 [pid 6112] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6112] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6113] <... futex resumed>) = 0 [pid 6113] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6113] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... futex resumed>) = 0 [pid 6112] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6112] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6113] <... futex resumed>) = 1 [pid 6113] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6113] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... futex resumed>) = 0 [pid 6112] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] <... futex resumed>) = 1 [pid 6113] ftruncate(5, 33587195) = 0 [pid 6113] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6112] <... futex resumed>) = 1 [pid 6112] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6112] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6112] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6113] <... futex resumed>) = 0 [ 221.754862][ T6114] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6113] sendfile(4, 5, NULL, 281474978811909 [pid 6112] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6112] exit_group(0) = ? [pid 6113] <... sendfile resumed>) = ? [pid 6113] +++ exited with 0 +++ [pid 6112] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6112, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./366", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./366/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./366/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./366/binderfs") = 0 umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./366/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./366/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./366/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./366") = 0 mkdir("./367", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6115 ./strace-static-x86_64: Process 6115 attached [pid 6115] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6115] chdir("./367") = 0 [pid 6115] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6115] setpgid(0, 0) = 0 [pid 6115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6115] write(3, "1000", 4) = 4 [pid 6115] close(3) = 0 [pid 6115] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6115] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6115] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6115] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6116 attached , parent_tid=[6116], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6116 [pid 6115] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6116] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6115] <... futex resumed>) = 0 [pid 6115] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6116] memfd_create("syzkaller", 0) = 3 [pid 6116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6116] munmap(0x7f927cba2000, 2097152) = 0 [pid 6116] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6116] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6116] close(3) = 0 [pid 6116] mkdir("./file0", 0777) = 0 [ 222.094490][ T6116] loop0: detected capacity change from 0 to 4096 [ 222.112062][ T6116] NILFS (loop0): invalid segment: Checksum error in segment payload [ 222.120176][ T6116] NILFS (loop0): trying rollback from an earlier position [ 222.135212][ T6116] NILFS (loop0): recovery complete [pid 6116] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6116] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6116] chdir("./file0") = 0 [pid 6116] ioctl(4, LOOP_CLR_FD) = 0 [pid 6116] close(4) = 0 [pid 6116] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6116] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6115] <... futex resumed>) = 0 [pid 6115] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6116] <... futex resumed>) = 0 [pid 6115] <... futex resumed>) = 1 [pid 6116] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6115] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6116] <... open resumed>) = 4 [pid 6116] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6116] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6115] <... futex resumed>) = 0 [pid 6115] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6115] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6116] <... futex resumed>) = 0 [pid 6116] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6116] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] <... futex resumed>) = 0 [pid 6115] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6115] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6116] <... futex resumed>) = 1 [pid 6116] ftruncate(5, 33587195) = 0 [pid 6116] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] <... futex resumed>) = 0 [pid 6115] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6115] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6116] <... futex resumed>) = 1 [ 222.140995][ T6117] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6116] sendfile(4, 5, NULL, 281474978811909 [pid 6115] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6115] exit_group(0) = ? [pid 6116] <... sendfile resumed>) = ? [pid 6116] +++ exited with 0 +++ [pid 6115] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6115, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./367", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./367/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./367/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./367/binderfs") = 0 umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./367/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./367/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./367/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./367") = 0 mkdir("./368", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6118 ./strace-static-x86_64: Process 6118 attached [pid 6118] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6118] chdir("./368") = 0 [pid 6118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6118] setpgid(0, 0) = 0 [pid 6118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6118] write(3, "1000", 4) = 4 [pid 6118] close(3) = 0 [pid 6118] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6118] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6118] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6118] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6119], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6119 [pid 6118] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6119 attached [pid 6118] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6119] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6119] memfd_create("syzkaller", 0) = 3 [pid 6119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6119] munmap(0x7f927cba2000, 2097152) = 0 [pid 6119] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6119] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6119] close(3) = 0 [pid 6119] mkdir("./file0", 0777) = 0 [pid 6119] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6119] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6119] chdir("./file0") = 0 [ 222.486220][ T6119] loop0: detected capacity change from 0 to 4096 [ 222.504423][ T6119] NILFS (loop0): invalid segment: Checksum error in segment payload [ 222.512463][ T6119] NILFS (loop0): trying rollback from an earlier position [ 222.527398][ T6119] NILFS (loop0): recovery complete [pid 6119] ioctl(4, LOOP_CLR_FD) = 0 [pid 6119] close(4) = 0 [pid 6119] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6118] <... futex resumed>) = 0 [pid 6119] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6118] <... futex resumed>) = 0 [pid 6119] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6118] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6119] <... open resumed>) = 4 [pid 6119] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6118] <... futex resumed>) = 0 [pid 6119] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6118] <... futex resumed>) = 0 [pid 6119] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6118] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6119] <... open resumed>) = 5 [pid 6119] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6118] <... futex resumed>) = 0 [pid 6119] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6118] <... futex resumed>) = 0 [pid 6119] ftruncate(5, 33587195 [pid 6118] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6119] <... ftruncate resumed>) = 0 [pid 6119] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6118] <... futex resumed>) = 0 [pid 6119] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6118] <... futex resumed>) = 0 [pid 6119] sendfile(4, 5, NULL, 281474978811909 [ 222.534288][ T6120] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6118] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6118] exit_group(0) = ? [pid 6119] <... sendfile resumed>) = ? [pid 6119] +++ exited with 0 +++ [pid 6118] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6118, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./368", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./368/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./368/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./368/binderfs") = 0 umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./368/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./368/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./368/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./368") = 0 mkdir("./369", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6121 ./strace-static-x86_64: Process 6121 attached [pid 6121] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6121] chdir("./369") = 0 [pid 6121] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6121] setpgid(0, 0) = 0 [pid 6121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6121] write(3, "1000", 4) = 4 [pid 6121] close(3) = 0 [pid 6121] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6121] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6121] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6121] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6121] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6122 attached , parent_tid=[6122], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6122 [pid 6121] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6122] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6121] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6122] memfd_create("syzkaller", 0) = 3 [pid 6122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6122] munmap(0x7f927cba2000, 2097152) = 0 [pid 6122] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6122] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6122] close(3) = 0 [pid 6122] mkdir("./file0", 0777) = 0 [pid 6122] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6122] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6122] chdir("./file0") = 0 [pid 6122] ioctl(4, LOOP_CLR_FD) = 0 [ 222.866148][ T6122] loop0: detected capacity change from 0 to 4096 [ 222.881586][ T6122] NILFS (loop0): invalid segment: Checksum error in segment payload [ 222.889691][ T6122] NILFS (loop0): trying rollback from an earlier position [ 222.904845][ T6122] NILFS (loop0): recovery complete [pid 6122] close(4) = 0 [pid 6122] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6121] <... futex resumed>) = 0 [pid 6122] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6121] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6121] <... futex resumed>) = 0 [pid 6122] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6121] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6122] <... open resumed>) = 4 [pid 6122] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6121] <... futex resumed>) = 0 [pid 6122] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6121] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6121] <... futex resumed>) = 0 [pid 6122] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6121] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6122] <... open resumed>) = 5 [pid 6122] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6121] <... futex resumed>) = 0 [pid 6122] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6121] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6121] <... futex resumed>) = 0 [pid 6122] ftruncate(5, 33587195 [pid 6121] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6122] <... ftruncate resumed>) = 0 [pid 6122] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6121] <... futex resumed>) = 0 [pid 6122] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6121] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6121] <... futex resumed>) = 0 [pid 6122] sendfile(4, 5, NULL, 281474978811909 [ 222.911463][ T6123] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6121] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6121] exit_group(0 [pid 6122] <... sendfile resumed>) = ? [pid 6121] <... exit_group resumed>) = ? [pid 6122] +++ exited with 0 +++ [pid 6121] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6121, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./369", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./369/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./369/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./369/binderfs") = 0 umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./369/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./369/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./369/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./369") = 0 mkdir("./370", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6124 ./strace-static-x86_64: Process 6124 attached [pid 6124] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6124] chdir("./370") = 0 [pid 6124] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6124] setpgid(0, 0) = 0 [pid 6124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6124] write(3, "1000", 4) = 4 [pid 6124] close(3) = 0 [pid 6124] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6124] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6124] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6124] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6125], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6125 [pid 6124] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6124] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6125 attached [pid 6125] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6125] memfd_create("syzkaller", 0) = 3 [pid 6125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6125] munmap(0x7f927cba2000, 2097152) = 0 [pid 6125] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6125] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6125] close(3) = 0 [pid 6125] mkdir("./file0", 0777) = 0 [ 223.262981][ T6125] loop0: detected capacity change from 0 to 4096 [ 223.277543][ T6125] NILFS (loop0): invalid segment: Checksum error in segment payload [ 223.285613][ T6125] NILFS (loop0): trying rollback from an earlier position [ 223.300568][ T6125] NILFS (loop0): recovery complete [pid 6125] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6125] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6125] chdir("./file0") = 0 [pid 6125] ioctl(4, LOOP_CLR_FD) = 0 [pid 6125] close(4) = 0 [pid 6125] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6124] <... futex resumed>) = 0 [pid 6125] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6124] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6124] <... futex resumed>) = 0 [pid 6125] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6124] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6125] <... open resumed>) = 4 [pid 6125] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6124] <... futex resumed>) = 0 [pid 6125] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6124] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6124] <... futex resumed>) = 0 [pid 6125] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6124] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6125] <... open resumed>) = 5 [pid 6125] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6124] <... futex resumed>) = 0 [pid 6125] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6124] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6124] <... futex resumed>) = 0 [pid 6125] ftruncate(5, 33587195 [pid 6124] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6125] <... ftruncate resumed>) = 0 [pid 6125] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6124] <... futex resumed>) = 0 [pid 6125] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6124] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6124] <... futex resumed>) = 0 [pid 6125] sendfile(4, 5, NULL, 281474978811909 [ 223.306723][ T6126] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6124] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6124] exit_group(0) = ? [pid 6125] <... sendfile resumed>) = ? [pid 6125] +++ exited with 0 +++ [pid 6124] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6124, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./370", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./370/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./370/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./370/binderfs") = 0 umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./370/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./370/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./370/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./370") = 0 mkdir("./371", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6127 ./strace-static-x86_64: Process 6127 attached [pid 6127] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6127] chdir("./371") = 0 [pid 6127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6127] setpgid(0, 0) = 0 [pid 6127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6127] write(3, "1000", 4) = 4 [pid 6127] close(3) = 0 [pid 6127] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6127] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6127] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6127] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6127] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6128 attached , parent_tid=[6128], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6128 [pid 6128] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6128] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6127] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6128] <... futex resumed>) = 0 [pid 6127] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6128] memfd_create("syzkaller", 0) = 3 [pid 6128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6128] munmap(0x7f927cba2000, 2097152) = 0 [pid 6128] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6128] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6128] close(3) = 0 [pid 6128] mkdir("./file0", 0777) = 0 [pid 6128] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6128] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 223.635951][ T6128] loop0: detected capacity change from 0 to 4096 [ 223.651005][ T6128] NILFS (loop0): invalid segment: Checksum error in segment payload [ 223.659094][ T6128] NILFS (loop0): trying rollback from an earlier position [ 223.677505][ T6128] NILFS (loop0): recovery complete [pid 6128] chdir("./file0") = 0 [pid 6128] ioctl(4, LOOP_CLR_FD) = 0 [pid 6128] close(4) = 0 [pid 6128] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6128] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6127] <... futex resumed>) = 0 [pid 6127] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6127] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6128] <... futex resumed>) = 0 [pid 6128] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6128] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6127] <... futex resumed>) = 0 [pid 6127] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6127] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6128] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6128] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6128] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6127] <... futex resumed>) = 0 [pid 6127] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6127] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6128] <... futex resumed>) = 0 [pid 6128] ftruncate(5, 33587195) = 0 [pid 6128] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] <... futex resumed>) = 0 [pid 6127] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6128] <... futex resumed>) = 1 [pid 6127] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 223.683847][ T6129] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6128] sendfile(4, 5, NULL, 281474978811909 [pid 6127] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6127] exit_group(0 [pid 6128] <... sendfile resumed>) = ? [pid 6127] <... exit_group resumed>) = ? [pid 6128] +++ exited with 0 +++ [pid 6127] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6127, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./371", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./371/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./371/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./371/binderfs") = 0 umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./371/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./371/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./371/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./371") = 0 mkdir("./372", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6130 ./strace-static-x86_64: Process 6130 attached [pid 6130] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6130] chdir("./372") = 0 [pid 6130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6130] setpgid(0, 0) = 0 [pid 6130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6130] write(3, "1000", 4) = 4 [pid 6130] close(3) = 0 [pid 6130] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6130] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6130] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6130] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6131], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6131 [pid 6130] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6131 attached [pid 6130] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6131] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6131] memfd_create("syzkaller", 0) = 3 [pid 6131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6131] munmap(0x7f927cba2000, 2097152) = 0 [pid 6131] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6131] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6131] close(3) = 0 [pid 6131] mkdir("./file0", 0777) = 0 [pid 6131] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6131] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 224.022581][ T6131] loop0: detected capacity change from 0 to 4096 [ 224.039218][ T6131] NILFS (loop0): invalid segment: Checksum error in segment payload [ 224.047270][ T6131] NILFS (loop0): trying rollback from an earlier position [ 224.062958][ T6131] NILFS (loop0): recovery complete [pid 6131] chdir("./file0") = 0 [pid 6131] ioctl(4, LOOP_CLR_FD) = 0 [pid 6131] close(4) = 0 [pid 6131] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6130] <... futex resumed>) = 0 [pid 6131] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6130] <... futex resumed>) = 0 [pid 6131] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6130] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6131] <... open resumed>) = 4 [pid 6131] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6130] <... futex resumed>) = 0 [pid 6131] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6130] <... futex resumed>) = 0 [pid 6131] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6130] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6131] <... open resumed>) = 5 [pid 6131] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6130] <... futex resumed>) = 0 [pid 6131] ftruncate(5, 33587195 [pid 6130] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6131] <... ftruncate resumed>) = 0 [pid 6130] <... futex resumed>) = 0 [pid 6131] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6131] <... futex resumed>) = 0 [pid 6130] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6131] sendfile(4, 5, NULL, 281474978811909 [pid 6130] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 224.069060][ T6132] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6130] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6130] exit_group(0) = ? [pid 6131] <... sendfile resumed>) = ? [pid 6131] +++ exited with 0 +++ [pid 6130] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6130, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./372", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./372/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./372/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./372/binderfs") = 0 umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./372/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./372/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./372/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./372") = 0 mkdir("./373", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6133 ./strace-static-x86_64: Process 6133 attached [pid 6133] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6133] chdir("./373") = 0 [pid 6133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6133] setpgid(0, 0) = 0 [pid 6133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6133] write(3, "1000", 4) = 4 [pid 6133] close(3) = 0 [pid 6133] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6133] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6133] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6133] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6134 attached , parent_tid=[6134], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6134 [pid 6133] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] set_robust_list(0x7f9284fc29e0, 24 [pid 6133] <... futex resumed>) = 0 [pid 6133] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6134] <... set_robust_list resumed>) = 0 [pid 6134] memfd_create("syzkaller", 0) = 3 [pid 6134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6134] munmap(0x7f927cba2000, 2097152) = 0 [pid 6134] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6134] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6134] close(3) = 0 [pid 6134] mkdir("./file0", 0777) = 0 [ 224.418728][ T6134] loop0: detected capacity change from 0 to 4096 [ 224.433008][ T6134] NILFS (loop0): invalid segment: Checksum error in segment payload [ 224.441374][ T6134] NILFS (loop0): trying rollback from an earlier position [ 224.456266][ T6134] NILFS (loop0): recovery complete [pid 6134] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6134] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6134] chdir("./file0") = 0 [pid 6134] ioctl(4, LOOP_CLR_FD) = 0 [pid 6134] close(4) = 0 [pid 6134] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6134] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6133] <... futex resumed>) = 0 [pid 6133] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6133] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6134] <... futex resumed>) = 0 [pid 6134] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6134] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6133] <... futex resumed>) = 0 [pid 6133] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6133] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6134] <... futex resumed>) = 1 [pid 6134] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6134] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6133] <... futex resumed>) = 0 [pid 6133] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6133] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6134] <... futex resumed>) = 1 [pid 6134] ftruncate(5, 33587195) = 0 [pid 6134] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6133] <... futex resumed>) = 0 [pid 6133] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6133] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6134] <... futex resumed>) = 1 [ 224.462223][ T6135] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6134] sendfile(4, 5, NULL, 281474978811909 [pid 6133] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6133] exit_group(0) = ? [pid 6134] <... sendfile resumed>) = ? [pid 6134] +++ exited with 0 +++ [pid 6133] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6133, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./373", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./373/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./373/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./373/binderfs") = 0 umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./373/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./373/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./373/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./373") = 0 mkdir("./374", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6136 ./strace-static-x86_64: Process 6136 attached [pid 6136] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6136] chdir("./374") = 0 [pid 6136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6136] setpgid(0, 0) = 0 [pid 6136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6136] write(3, "1000", 4) = 4 [pid 6136] close(3) = 0 [pid 6136] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6136] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6136] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6136] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6137], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6137 [pid 6136] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6137 attached [pid 6137] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6137] memfd_create("syzkaller", 0) = 3 [pid 6137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6137] munmap(0x7f927cba2000, 2097152) = 0 [pid 6137] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6137] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6137] close(3) = 0 [pid 6137] mkdir("./file0", 0777) = 0 [ 224.791263][ T6137] loop0: detected capacity change from 0 to 4096 [ 224.806568][ T6137] NILFS (loop0): invalid segment: Checksum error in segment payload [ 224.814644][ T6137] NILFS (loop0): trying rollback from an earlier position [ 224.830079][ T6137] NILFS (loop0): recovery complete [pid 6137] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6137] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6137] chdir("./file0") = 0 [pid 6137] ioctl(4, LOOP_CLR_FD) = 0 [pid 6137] close(4) = 0 [pid 6137] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6137] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6136] <... futex resumed>) = 0 [pid 6136] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] <... futex resumed>) = 0 [pid 6136] <... futex resumed>) = 1 [pid 6137] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6136] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6137] <... open resumed>) = 4 [pid 6137] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6137] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6136] <... futex resumed>) = 0 [pid 6136] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] <... futex resumed>) = 0 [pid 6136] <... futex resumed>) = 1 [pid 6137] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6136] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6137] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6137] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6136] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] <... futex resumed>) = 0 [pid 6136] <... futex resumed>) = 1 [pid 6137] ftruncate(5, 33587195 [pid 6136] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6137] <... ftruncate resumed>) = 0 [pid 6137] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6136] <... futex resumed>) = 0 [pid 6137] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6136] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] <... futex resumed>) = 0 [pid 6136] <... futex resumed>) = 1 [pid 6137] sendfile(4, 5, NULL, 281474978811909 [ 224.836890][ T6138] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6136] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6136] exit_group(0) = ? [pid 6137] <... sendfile resumed>) = ? [pid 6137] +++ exited with 0 +++ [pid 6136] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6136, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./374", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./374/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./374/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./374/binderfs") = 0 umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./374/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./374/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./374/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./374") = 0 mkdir("./375", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6139 ./strace-static-x86_64: Process 6139 attached [pid 6139] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6139] chdir("./375") = 0 [pid 6139] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6139] setpgid(0, 0) = 0 [pid 6139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6139] write(3, "1000", 4) = 4 [pid 6139] close(3) = 0 [pid 6139] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6139] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6139] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6139] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6139] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6140], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6140 [pid 6139] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6139] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6140 attached [pid 6140] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6140] memfd_create("syzkaller", 0) = 3 [pid 6140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6140] munmap(0x7f927cba2000, 2097152) = 0 [pid 6140] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6140] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6140] close(3) = 0 [pid 6140] mkdir("./file0", 0777) = 0 [ 225.164368][ T6140] loop0: detected capacity change from 0 to 4096 [ 225.179916][ T6140] NILFS (loop0): invalid segment: Checksum error in segment payload [ 225.187985][ T6140] NILFS (loop0): trying rollback from an earlier position [ 225.203140][ T6140] NILFS (loop0): recovery complete [pid 6140] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6140] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6140] chdir("./file0") = 0 [pid 6140] ioctl(4, LOOP_CLR_FD) = 0 [pid 6140] close(4) = 0 [pid 6140] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6139] <... futex resumed>) = 0 [pid 6139] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6139] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6140] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6140] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6139] <... futex resumed>) = 0 [pid 6139] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6139] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6140] <... open resumed>) = 5 [pid 6140] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] <... futex resumed>) = 0 [pid 6139] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6139] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6140] <... futex resumed>) = 1 [pid 6140] ftruncate(5, 33587195) = 0 [pid 6140] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] <... futex resumed>) = 0 [pid 6139] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6139] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6140] <... futex resumed>) = 1 [ 225.209147][ T6141] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6140] sendfile(4, 5, NULL, 281474978811909 [pid 6139] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6139] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6139] exit_group(0) = ? [pid 6140] <... sendfile resumed>) = ? [pid 6140] +++ exited with 0 +++ [pid 6139] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6139, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./375", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./375/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./375/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./375/binderfs") = 0 umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./375/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./375/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./375/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./375") = 0 mkdir("./376", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6142 ./strace-static-x86_64: Process 6142 attached [pid 6142] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6142] chdir("./376") = 0 [pid 6142] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6142] setpgid(0, 0) = 0 [pid 6142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6142] write(3, "1000", 4) = 4 [pid 6142] close(3) = 0 [pid 6142] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6142] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6142] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6142] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6143], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6143 ./strace-static-x86_64: Process 6143 attached [pid 6142] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6142] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6143] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6143] memfd_create("syzkaller", 0) = 3 [pid 6143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6143] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6143] munmap(0x7f927cba2000, 2097152) = 0 [pid 6143] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6143] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6143] close(3) = 0 [pid 6143] mkdir("./file0", 0777) = 0 [pid 6143] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 225.544313][ T6143] loop0: detected capacity change from 0 to 4096 [ 225.560511][ T6143] NILFS (loop0): invalid segment: Checksum error in segment payload [ 225.568692][ T6143] NILFS (loop0): trying rollback from an earlier position [ 225.582408][ T6143] NILFS (loop0): recovery complete [pid 6143] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6143] chdir("./file0") = 0 [pid 6143] ioctl(4, LOOP_CLR_FD) = 0 [pid 6143] close(4) = 0 [pid 6143] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] <... futex resumed>) = 0 [pid 6142] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6142] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6143] <... futex resumed>) = 1 [pid 6143] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6143] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] <... futex resumed>) = 0 [pid 6142] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6142] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6143] <... futex resumed>) = 1 [pid 6143] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6143] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] <... futex resumed>) = 0 [pid 6142] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6142] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6143] <... futex resumed>) = 1 [pid 6143] ftruncate(5, 33587195) = 0 [pid 6143] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] <... futex resumed>) = 0 [pid 6142] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6142] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6143] <... futex resumed>) = 1 [ 225.588581][ T6144] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6143] sendfile(4, 5, NULL, 281474978811909 [pid 6142] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6142] exit_group(0) = ? [pid 6143] <... sendfile resumed>) = ? [pid 6143] +++ exited with 0 +++ [pid 6142] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6142, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./376", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./376/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./376/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./376/binderfs") = 0 umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./376/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./376/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./376/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./376") = 0 mkdir("./377", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6145 ./strace-static-x86_64: Process 6145 attached [pid 6145] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6145] chdir("./377") = 0 [pid 6145] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6145] setpgid(0, 0) = 0 [pid 6145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6145] write(3, "1000", 4) = 4 [pid 6145] close(3) = 0 [pid 6145] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6145] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6145] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6145] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6145] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6146], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6146 [pid 6145] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6145] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6146 attached [pid 6146] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6146] memfd_create("syzkaller", 0) = 3 [pid 6146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6146] munmap(0x7f927cba2000, 2097152) = 0 [pid 6146] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6146] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6146] close(3) = 0 [pid 6146] mkdir("./file0", 0777) = 0 [pid 6146] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6146] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 225.915247][ T6146] loop0: detected capacity change from 0 to 4096 [ 225.932574][ T6146] NILFS (loop0): invalid segment: Checksum error in segment payload [ 225.940634][ T6146] NILFS (loop0): trying rollback from an earlier position [ 225.956289][ T6146] NILFS (loop0): recovery complete [pid 6146] chdir("./file0") = 0 [pid 6146] ioctl(4, LOOP_CLR_FD) = 0 [pid 6146] close(4) = 0 [pid 6146] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] <... futex resumed>) = 0 [pid 6145] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6145] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6146] <... futex resumed>) = 1 [pid 6146] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6146] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] <... futex resumed>) = 0 [pid 6145] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... futex resumed>) = 1 [pid 6145] <... futex resumed>) = 0 [pid 6146] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6145] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6146] <... open resumed>) = 5 [pid 6146] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6145] <... futex resumed>) = 0 [pid 6146] ftruncate(5, 33587195 [pid 6145] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... ftruncate resumed>) = 0 [pid 6145] <... futex resumed>) = 0 [pid 6146] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6146] <... futex resumed>) = 0 [pid 6145] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6146] sendfile(4, 5, NULL, 281474978811909 [pid 6145] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 225.962341][ T6147] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6145] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6145] exit_group(0) = ? [pid 6146] <... sendfile resumed>) = ? [pid 6146] +++ exited with 0 +++ [pid 6145] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6145, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./377", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./377/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./377/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./377/binderfs") = 0 umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./377/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./377/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./377/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./377") = 0 mkdir("./378", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6148 ./strace-static-x86_64: Process 6148 attached [pid 6148] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6148] chdir("./378") = 0 [pid 6148] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6148] setpgid(0, 0) = 0 [pid 6148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6148] write(3, "1000", 4) = 4 [pid 6148] close(3) = 0 [pid 6148] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6148] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6148] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6148] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6149 attached , parent_tid=[6149], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6149 [pid 6148] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6148] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6149] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6149] memfd_create("syzkaller", 0) = 3 [pid 6149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6149] munmap(0x7f927cba2000, 2097152) = 0 [pid 6149] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6149] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6149] close(3) = 0 [pid 6149] mkdir("./file0", 0777) = 0 [ 226.297799][ T6149] loop0: detected capacity change from 0 to 4096 [ 226.315953][ T6149] NILFS (loop0): invalid segment: Checksum error in segment payload [ 226.324055][ T6149] NILFS (loop0): trying rollback from an earlier position [ 226.339650][ T6149] NILFS (loop0): recovery complete [pid 6149] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6149] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6149] chdir("./file0") = 0 [pid 6149] ioctl(4, LOOP_CLR_FD) = 0 [pid 6149] close(4) = 0 [pid 6149] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6148] <... futex resumed>) = 0 [pid 6149] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6148] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6148] <... futex resumed>) = 0 [pid 6149] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6148] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6149] <... open resumed>) = 4 [pid 6149] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6149] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6148] <... futex resumed>) = 0 [pid 6148] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6149] <... futex resumed>) = 0 [pid 6148] <... futex resumed>) = 1 [pid 6149] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6148] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6149] <... open resumed>) = 5 [pid 6149] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6148] <... futex resumed>) = 0 [pid 6149] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6148] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6148] <... futex resumed>) = 0 [pid 6149] ftruncate(5, 33587195 [pid 6148] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6149] <... ftruncate resumed>) = 0 [pid 6149] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6149] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6148] <... futex resumed>) = 0 [pid 6148] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6149] <... futex resumed>) = 0 [pid 6148] <... futex resumed>) = 1 [pid 6149] sendfile(4, 5, NULL, 281474978811909 [ 226.346668][ T6150] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6148] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6148] exit_group(0) = ? [pid 6149] <... sendfile resumed>) = ? [pid 6149] +++ exited with 0 +++ [pid 6148] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6148, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./378", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./378/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./378/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./378/binderfs") = 0 umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./378/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./378/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./378/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./378") = 0 mkdir("./379", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6151 ./strace-static-x86_64: Process 6151 attached [pid 6151] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6151] chdir("./379") = 0 [pid 6151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6151] setpgid(0, 0) = 0 [pid 6151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6151] write(3, "1000", 4) = 4 [pid 6151] close(3) = 0 [pid 6151] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6151] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6151] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6151] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6152 attached , parent_tid=[6152], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6152 [pid 6151] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6151] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6152] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6152] memfd_create("syzkaller", 0) = 3 [pid 6152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6152] munmap(0x7f927cba2000, 2097152) = 0 [pid 6152] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6152] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6152] close(3) = 0 [pid 6152] mkdir("./file0", 0777) = 0 [ 226.674483][ T6152] loop0: detected capacity change from 0 to 4096 [ 226.689729][ T6152] NILFS (loop0): invalid segment: Checksum error in segment payload [ 226.697793][ T6152] NILFS (loop0): trying rollback from an earlier position [ 226.713128][ T6152] NILFS (loop0): recovery complete [pid 6152] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6152] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6152] chdir("./file0") = 0 [pid 6152] ioctl(4, LOOP_CLR_FD) = 0 [pid 6152] close(4) = 0 [pid 6152] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6151] <... futex resumed>) = 0 [pid 6151] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6151] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6152] <... futex resumed>) = 1 [pid 6152] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6152] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6151] <... futex resumed>) = 0 [pid 6151] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6151] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6152] <... futex resumed>) = 1 [pid 6152] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6152] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6151] <... futex resumed>) = 0 [pid 6151] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6151] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6152] <... futex resumed>) = 1 [pid 6152] ftruncate(5, 33587195) = 0 [pid 6152] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6151] <... futex resumed>) = 0 [pid 6151] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6151] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6152] <... futex resumed>) = 1 [pid 6152] sendfile(4, 5, NULL, 281474978811909 [pid 6151] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 226.719433][ T6153] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6151] exit_group(0) = ? [pid 6152] <... sendfile resumed>) = ? [pid 6152] +++ exited with 0 +++ [pid 6151] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6151, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./379", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./379/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./379/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./379/binderfs") = 0 umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./379/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./379/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./379/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./379") = 0 mkdir("./380", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6154 ./strace-static-x86_64: Process 6154 attached [pid 6154] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6154] chdir("./380") = 0 [pid 6154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6154] setpgid(0, 0) = 0 [pid 6154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6154] write(3, "1000", 4) = 4 [pid 6154] close(3) = 0 [pid 6154] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6154] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6154] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6154] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6155], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6155 [pid 6154] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6154] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6155 attached [pid 6155] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6155] memfd_create("syzkaller", 0) = 3 [pid 6155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6155] munmap(0x7f927cba2000, 2097152) = 0 [pid 6155] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6155] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6155] close(3) = 0 [pid 6155] mkdir("./file0", 0777) = 0 [ 227.067640][ T6155] loop0: detected capacity change from 0 to 4096 [ 227.083279][ T6155] NILFS (loop0): invalid segment: Checksum error in segment payload [ 227.091370][ T6155] NILFS (loop0): trying rollback from an earlier position [ 227.106754][ T6155] NILFS (loop0): recovery complete [pid 6155] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6155] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6155] chdir("./file0") = 0 [pid 6155] ioctl(4, LOOP_CLR_FD) = 0 [pid 6155] close(4) = 0 [pid 6155] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6155] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6154] <... futex resumed>) = 0 [pid 6154] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] <... futex resumed>) = 0 [pid 6154] <... futex resumed>) = 1 [pid 6155] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6154] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6155] <... open resumed>) = 4 [pid 6155] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6155] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6154] <... futex resumed>) = 0 [pid 6154] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] <... futex resumed>) = 0 [pid 6154] <... futex resumed>) = 1 [pid 6155] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6154] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6155] <... open resumed>) = 5 [pid 6155] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6155] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6154] <... futex resumed>) = 0 [pid 6155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6154] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] ftruncate(5, 33587195 [pid 6154] <... futex resumed>) = 0 [pid 6154] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6155] <... ftruncate resumed>) = 0 [pid 6155] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6154] <... futex resumed>) = 0 [pid 6155] sendfile(4, 5, NULL, 281474978811909 [pid 6154] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 227.113878][ T6156] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6154] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6154] exit_group(0 [pid 6155] <... sendfile resumed>) = ? [pid 6154] <... exit_group resumed>) = ? [pid 6155] +++ exited with 0 +++ [pid 6154] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6154, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./380", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./380/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./380/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./380/binderfs") = 0 umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./380/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./380/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./380/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./380") = 0 mkdir("./381", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6157 ./strace-static-x86_64: Process 6157 attached [pid 6157] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6157] chdir("./381") = 0 [pid 6157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6157] setpgid(0, 0) = 0 [pid 6157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6157] write(3, "1000", 4) = 4 [pid 6157] close(3) = 0 [pid 6157] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6157] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6157] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6157] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6157] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6158], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6158 [pid 6157] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6157] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6158 attached [pid 6158] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6158] memfd_create("syzkaller", 0) = 3 [pid 6158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6158] munmap(0x7f927cba2000, 2097152) = 0 [pid 6158] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6158] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6158] close(3) = 0 [pid 6158] mkdir("./file0", 0777) = 0 [ 227.458341][ T6158] loop0: detected capacity change from 0 to 4096 [ 227.485571][ T6158] NILFS (loop0): invalid segment: Checksum error in segment payload [ 227.493746][ T6158] NILFS (loop0): trying rollback from an earlier position [pid 6158] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6158] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6158] chdir("./file0") = 0 [pid 6158] ioctl(4, LOOP_CLR_FD) = 0 [pid 6158] close(4) = 0 [pid 6158] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6157] <... futex resumed>) = 0 [pid 6158] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6157] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6158] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6157] <... futex resumed>) = 0 [pid 6157] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6158] <... open resumed>) = 4 [pid 6158] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6158] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6157] <... futex resumed>) = 0 [pid 6157] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6157] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6158] <... futex resumed>) = 0 [pid 6158] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6158] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6157] <... futex resumed>) = 0 [pid 6157] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6157] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6158] <... futex resumed>) = 1 [pid 6158] ftruncate(5, 33587195) = 0 [pid 6158] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6157] <... futex resumed>) = 0 [pid 6157] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6157] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6158] <... futex resumed>) = 1 [ 227.508125][ T6158] NILFS (loop0): recovery complete [ 227.514081][ T6159] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6158] sendfile(4, 5, NULL, 281474978811909 [pid 6157] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6157] exit_group(0) = ? [pid 6158] <... sendfile resumed>) = ? [pid 6158] +++ exited with 0 +++ [pid 6157] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6157, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./381", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./381/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./381/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./381/binderfs") = 0 umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./381/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./381/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./381/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./381") = 0 mkdir("./382", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6160 ./strace-static-x86_64: Process 6160 attached [pid 6160] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6160] chdir("./382") = 0 [pid 6160] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6160] setpgid(0, 0) = 0 [pid 6160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6160] write(3, "1000", 4) = 4 [pid 6160] close(3) = 0 [pid 6160] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6160] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6160] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6160] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6160] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6161], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6161 [pid 6160] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6160] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6161 attached [pid 6161] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6161] memfd_create("syzkaller", 0) = 3 [pid 6161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6161] munmap(0x7f927cba2000, 2097152) = 0 [pid 6161] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6161] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6161] close(3) = 0 [pid 6161] mkdir("./file0", 0777) = 0 [ 227.840298][ T6161] loop0: detected capacity change from 0 to 4096 [ 227.857454][ T6161] NILFS (loop0): invalid segment: Checksum error in segment payload [ 227.865549][ T6161] NILFS (loop0): trying rollback from an earlier position [ 227.880801][ T6161] NILFS (loop0): recovery complete [pid 6161] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6161] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6161] chdir("./file0") = 0 [pid 6161] ioctl(4, LOOP_CLR_FD) = 0 [pid 6161] close(4) = 0 [pid 6161] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6161] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6160] <... futex resumed>) = 0 [pid 6160] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6160] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6161] <... futex resumed>) = 0 [pid 6161] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6161] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] <... futex resumed>) = 0 [pid 6160] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6160] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6161] <... futex resumed>) = 1 [pid 6161] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6161] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] <... futex resumed>) = 0 [pid 6160] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6160] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6161] <... futex resumed>) = 1 [pid 6161] ftruncate(5, 33587195) = 0 [pid 6161] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] <... futex resumed>) = 0 [pid 6160] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6160] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6161] <... futex resumed>) = 1 [ 227.886768][ T6162] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6161] sendfile(4, 5, NULL, 281474978811909 [pid 6160] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6160] exit_group(0) = ? [pid 6161] <... sendfile resumed>) = ? [pid 6161] +++ exited with 0 +++ [pid 6160] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6160, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./382", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./382/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./382/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./382/binderfs") = 0 umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./382/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./382/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./382/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./382") = 0 mkdir("./383", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6163 ./strace-static-x86_64: Process 6163 attached [pid 6163] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6163] chdir("./383") = 0 [pid 6163] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6163] setpgid(0, 0) = 0 [pid 6163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6163] write(3, "1000", 4) = 4 [pid 6163] close(3) = 0 [pid 6163] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6163] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6163] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6163] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6164 attached , parent_tid=[6164], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6164 [pid 6164] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6164] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6163] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6163] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6164] <... futex resumed>) = 0 [pid 6164] memfd_create("syzkaller", 0) = 3 [pid 6164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6164] munmap(0x7f927cba2000, 2097152) = 0 [pid 6164] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6164] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6164] close(3) = 0 [pid 6164] mkdir("./file0", 0777) = 0 [pid 6164] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6164] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6164] chdir("./file0") = 0 [pid 6164] ioctl(4, LOOP_CLR_FD) = 0 [pid 6164] close(4) = 0 [pid 6164] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 228.230163][ T6164] loop0: detected capacity change from 0 to 4096 [ 228.246457][ T6164] NILFS (loop0): invalid segment: Checksum error in segment payload [ 228.254584][ T6164] NILFS (loop0): trying rollback from an earlier position [ 228.270714][ T6164] NILFS (loop0): recovery complete [pid 6164] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6163] <... futex resumed>) = 0 [pid 6163] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6163] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6164] <... futex resumed>) = 0 [pid 6164] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6164] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6163] <... futex resumed>) = 0 [pid 6164] <... futex resumed>) = 1 [pid 6163] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6164] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6163] <... futex resumed>) = 0 [pid 6163] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6164] <... open resumed>) = 5 [pid 6164] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6163] <... futex resumed>) = 0 [pid 6164] <... futex resumed>) = 1 [pid 6163] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6164] ftruncate(5, 33587195 [pid 6163] <... futex resumed>) = 0 [pid 6164] <... ftruncate resumed>) = 0 [pid 6163] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6164] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6163] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6164] <... futex resumed>) = 0 [pid 6163] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6164] sendfile(4, 5, NULL, 281474978811909 [pid 6163] <... futex resumed>) = 0 [ 228.277117][ T6165] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6163] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6163] exit_group(0 [pid 6164] <... sendfile resumed>) = ? [pid 6163] <... exit_group resumed>) = ? [pid 6164] +++ exited with 0 +++ [pid 6163] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6163, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./383", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./383/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./383/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./383/binderfs") = 0 umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./383/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./383/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./383/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./383") = 0 mkdir("./384", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6166 ./strace-static-x86_64: Process 6166 attached [pid 6166] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6166] chdir("./384") = 0 [pid 6166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6166] setpgid(0, 0) = 0 [pid 6166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6166] write(3, "1000", 4) = 4 [pid 6166] close(3) = 0 [pid 6166] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6166] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6166] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6166] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6167 attached , parent_tid=[6167], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6167 [pid 6167] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6167] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6167] <... futex resumed>) = 0 [pid 6166] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6167] memfd_create("syzkaller", 0) = 3 [pid 6167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6167] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6167] munmap(0x7f927cba2000, 2097152) = 0 [pid 6167] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6167] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6167] close(3) = 0 [pid 6167] mkdir("./file0", 0777) = 0 [pid 6167] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6167] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 228.594436][ T6167] loop0: detected capacity change from 0 to 4096 [ 228.610610][ T6167] NILFS (loop0): invalid segment: Checksum error in segment payload [ 228.618976][ T6167] NILFS (loop0): trying rollback from an earlier position [ 228.634286][ T6167] NILFS (loop0): recovery complete [pid 6167] chdir("./file0") = 0 [pid 6167] ioctl(4, LOOP_CLR_FD) = 0 [pid 6167] close(4) = 0 [pid 6167] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6166] <... futex resumed>) = 0 [pid 6167] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6166] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] <... futex resumed>) = 0 [pid 6167] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6167] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6166] <... futex resumed>) = 0 [pid 6166] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6166] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6167] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6166] <... futex resumed>) = 0 [pid 6166] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6166] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] ftruncate(5, 33587195) = 0 [pid 6167] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6166] <... futex resumed>) = 0 [pid 6166] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6166] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 228.640127][ T6168] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6167] sendfile(4, 5, NULL, 281474978811909 [pid 6166] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6166] exit_group(0) = ? [pid 6167] <... sendfile resumed>) = ? [pid 6167] +++ exited with 0 +++ [pid 6166] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6166, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./384", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./384/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./384/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./384/binderfs") = 0 umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./384/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./384/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./384/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./384") = 0 mkdir("./385", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6169 ./strace-static-x86_64: Process 6169 attached [pid 6169] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6169] chdir("./385") = 0 [pid 6169] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6169] setpgid(0, 0) = 0 [pid 6169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6169] write(3, "1000", 4) = 4 [pid 6169] close(3) = 0 [pid 6169] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6169] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6169] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6169] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6170], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6170 [pid 6169] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6169] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6170 attached [pid 6170] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6170] memfd_create("syzkaller", 0) = 3 [pid 6170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6170] munmap(0x7f927cba2000, 2097152) = 0 [pid 6170] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6170] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6170] close(3) = 0 [pid 6170] mkdir("./file0", 0777) = 0 [ 228.968173][ T6170] loop0: detected capacity change from 0 to 4096 [ 228.984527][ T6170] NILFS (loop0): invalid segment: Checksum error in segment payload [ 228.992682][ T6170] NILFS (loop0): trying rollback from an earlier position [ 229.008348][ T6170] NILFS (loop0): recovery complete [pid 6170] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6170] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6170] chdir("./file0") = 0 [pid 6170] ioctl(4, LOOP_CLR_FD) = 0 [pid 6170] close(4) = 0 [pid 6170] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6170] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6169] <... futex resumed>) = 0 [pid 6169] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] <... futex resumed>) = 0 [pid 6169] <... futex resumed>) = 1 [pid 6170] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6169] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] <... open resumed>) = 4 [pid 6170] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6169] <... futex resumed>) = 0 [pid 6170] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6169] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6169] <... futex resumed>) = 0 [pid 6170] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6169] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] <... open resumed>) = 5 [pid 6170] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] <... futex resumed>) = 0 [pid 6169] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6169] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] <... futex resumed>) = 1 [pid 6170] ftruncate(5, 33587195) = 0 [pid 6170] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] <... futex resumed>) = 0 [pid 6169] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6169] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] <... futex resumed>) = 1 [ 229.014455][ T6171] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6170] sendfile(4, 5, NULL, 281474978811909 [pid 6169] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6169] exit_group(0) = ? [pid 6170] <... sendfile resumed>) = ? [pid 6170] +++ exited with 0 +++ [pid 6169] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6169, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./385", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./385/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./385/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./385/binderfs") = 0 umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./385/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./385/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./385/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./385") = 0 mkdir("./386", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6172 ./strace-static-x86_64: Process 6172 attached [pid 6172] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6172] chdir("./386") = 0 [pid 6172] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6172] setpgid(0, 0) = 0 [pid 6172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6172] write(3, "1000", 4) = 4 [pid 6172] close(3) = 0 [pid 6172] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6172] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6172] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6172] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6173 attached [pid 6173] set_robust_list(0x7f9284fc29e0, 24 [pid 6172] <... clone resumed>, parent_tid=[6173], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6173 [pid 6172] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6172] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6173] <... set_robust_list resumed>) = 0 [pid 6173] memfd_create("syzkaller", 0) = 3 [pid 6173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6173] munmap(0x7f927cba2000, 2097152) = 0 [pid 6173] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6173] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6173] close(3) = 0 [pid 6173] mkdir("./file0", 0777) = 0 [pid 6173] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 229.361457][ T6173] loop0: detected capacity change from 0 to 4096 [ 229.376119][ T6173] NILFS (loop0): invalid segment: Checksum error in segment payload [ 229.384263][ T6173] NILFS (loop0): trying rollback from an earlier position [ 229.399960][ T6173] NILFS (loop0): recovery complete [pid 6173] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6173] chdir("./file0") = 0 [pid 6173] ioctl(4, LOOP_CLR_FD) = 0 [pid 6173] close(4) = 0 [pid 6173] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6173] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6172] <... futex resumed>) = 0 [pid 6172] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6172] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6173] <... futex resumed>) = 0 [pid 6173] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6173] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6172] <... futex resumed>) = 0 [pid 6172] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6172] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6173] <... futex resumed>) = 1 [pid 6173] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6173] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6172] <... futex resumed>) = 0 [pid 6172] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6172] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6173] <... futex resumed>) = 1 [pid 6173] ftruncate(5, 33587195) = 0 [pid 6173] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6172] <... futex resumed>) = 0 [pid 6173] sendfile(4, 5, NULL, 281474978811909 [pid 6172] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 229.406261][ T6174] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6172] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6172] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6172] exit_group(0) = ? [pid 6173] <... sendfile resumed>) = ? [pid 6173] +++ exited with 0 +++ [pid 6172] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6172, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./386", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./386/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./386/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./386/binderfs") = 0 umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./386/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./386/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./386/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./386") = 0 mkdir("./387", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6175 ./strace-static-x86_64: Process 6175 attached [pid 6175] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6175] chdir("./387") = 0 [pid 6175] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6175] setpgid(0, 0) = 0 [pid 6175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6175] write(3, "1000", 4) = 4 [pid 6175] close(3) = 0 [pid 6175] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6175] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6175] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6175] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6176], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6176 [pid 6175] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6175] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6176 attached [pid 6176] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6176] memfd_create("syzkaller", 0) = 3 [pid 6176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6176] munmap(0x7f927cba2000, 2097152) = 0 [pid 6176] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6176] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6176] close(3) = 0 [pid 6176] mkdir("./file0", 0777) = 0 [ 229.733798][ T6176] loop0: detected capacity change from 0 to 4096 [ 229.748591][ T6176] NILFS (loop0): invalid segment: Checksum error in segment payload [ 229.756728][ T6176] NILFS (loop0): trying rollback from an earlier position [ 229.772342][ T6176] NILFS (loop0): recovery complete [pid 6176] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6176] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6176] chdir("./file0") = 0 [pid 6176] ioctl(4, LOOP_CLR_FD) = 0 [pid 6176] close(4) = 0 [pid 6176] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6175] <... futex resumed>) = 0 [pid 6175] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6175] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6176] <... futex resumed>) = 1 [pid 6176] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6176] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6175] <... futex resumed>) = 0 [pid 6175] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6175] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6176] <... futex resumed>) = 1 [pid 6176] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6176] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6175] <... futex resumed>) = 0 [pid 6175] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6175] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6176] <... futex resumed>) = 1 [pid 6176] ftruncate(5, 33587195) = 0 [pid 6176] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6175] <... futex resumed>) = 0 [pid 6175] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6175] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6176] <... futex resumed>) = 1 [ 229.778656][ T6177] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6176] sendfile(4, 5, NULL, 281474978811909 [pid 6175] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6175] exit_group(0) = ? [pid 6176] <... sendfile resumed>) = ? [pid 6176] +++ exited with 0 +++ [pid 6175] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6175, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./387", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./387/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./387/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./387/binderfs") = 0 umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./387/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./387/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./387/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./387") = 0 mkdir("./388", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6178 ./strace-static-x86_64: Process 6178 attached [pid 6178] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6178] chdir("./388") = 0 [pid 6178] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6178] setpgid(0, 0) = 0 [pid 6178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6178] write(3, "1000", 4) = 4 [pid 6178] close(3) = 0 [pid 6178] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6178] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6178] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6178] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6179 attached , parent_tid=[6179], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6179 [pid 6179] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6179] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6178] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... futex resumed>) = 0 [pid 6178] <... futex resumed>) = 1 [pid 6178] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6179] memfd_create("syzkaller", 0) = 3 [pid 6179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6179] munmap(0x7f927cba2000, 2097152) = 0 [pid 6179] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6179] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6179] close(3) = 0 [pid 6179] mkdir("./file0", 0777) = 0 [pid 6179] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 230.104987][ T6179] loop0: detected capacity change from 0 to 4096 [ 230.121774][ T6179] NILFS (loop0): invalid segment: Checksum error in segment payload [ 230.130079][ T6179] NILFS (loop0): trying rollback from an earlier position [ 230.145597][ T6179] NILFS (loop0): recovery complete [pid 6179] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6179] chdir("./file0") = 0 [pid 6179] ioctl(4, LOOP_CLR_FD) = 0 [pid 6179] close(4) = 0 [pid 6179] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6179] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6178] <... futex resumed>) = 0 [pid 6178] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6178] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] <... futex resumed>) = 0 [pid 6179] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6179] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6178] <... futex resumed>) = 0 [pid 6178] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6178] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] <... futex resumed>) = 1 [pid 6179] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6179] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6178] <... futex resumed>) = 0 [pid 6178] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6178] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] <... futex resumed>) = 1 [pid 6179] ftruncate(5, 33587195) = 0 [pid 6179] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6178] <... futex resumed>) = 0 [pid 6178] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6178] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] <... futex resumed>) = 1 [ 230.151779][ T6180] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6179] sendfile(4, 5, NULL, 281474978811909 [pid 6178] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6178] exit_group(0) = ? [pid 6179] <... sendfile resumed>) = ? [pid 6179] +++ exited with 0 +++ [pid 6178] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6178, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./388", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./388/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./388/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./388/binderfs") = 0 umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./388/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./388/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./388/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./388") = 0 mkdir("./389", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6181 ./strace-static-x86_64: Process 6181 attached [pid 6181] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6181] chdir("./389") = 0 [pid 6181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6181] setpgid(0, 0) = 0 [pid 6181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6181] write(3, "1000", 4) = 4 [pid 6181] close(3) = 0 [pid 6181] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6181] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6181] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6181] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6182 attached , parent_tid=[6182], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6182 [pid 6181] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6182] set_robust_list(0x7f9284fc29e0, 24 [pid 6181] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6182] <... set_robust_list resumed>) = 0 [pid 6182] memfd_create("syzkaller", 0) = 3 [pid 6182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6182] munmap(0x7f927cba2000, 2097152) = 0 [pid 6182] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6182] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6182] close(3) = 0 [pid 6182] mkdir("./file0", 0777) = 0 [ 230.475501][ T6182] loop0: detected capacity change from 0 to 4096 [ 230.494902][ T6182] NILFS (loop0): invalid segment: Checksum error in segment payload [ 230.502948][ T6182] NILFS (loop0): trying rollback from an earlier position [ 230.518341][ T6182] NILFS (loop0): recovery complete [pid 6182] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6182] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6182] chdir("./file0") = 0 [pid 6182] ioctl(4, LOOP_CLR_FD) = 0 [pid 6182] close(4) = 0 [pid 6182] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6181] <... futex resumed>) = 0 [pid 6181] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6181] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] <... futex resumed>) = 1 [pid 6182] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6182] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6181] <... futex resumed>) = 0 [pid 6181] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6181] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] <... futex resumed>) = 1 [pid 6182] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6182] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6181] <... futex resumed>) = 0 [pid 6182] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6181] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6181] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6182] ftruncate(5, 33587195) = 0 [pid 6182] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6181] <... futex resumed>) = 0 [pid 6182] sendfile(4, 5, NULL, 281474978811909 [pid 6181] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 230.524350][ T6183] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6181] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6181] exit_group(0) = ? [pid 6182] <... sendfile resumed>) = ? [pid 6182] +++ exited with 0 +++ [pid 6181] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6181, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./389", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./389/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./389/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./389/binderfs") = 0 umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./389/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./389/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./389/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./389") = 0 mkdir("./390", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6184 ./strace-static-x86_64: Process 6184 attached [pid 6184] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6184] chdir("./390") = 0 [pid 6184] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6184] setpgid(0, 0) = 0 [pid 6184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6184] write(3, "1000", 4) = 4 [pid 6184] close(3) = 0 [pid 6184] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6184] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6184] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6184] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6184] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6185], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6185 [pid 6184] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6184] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6185 attached [pid 6185] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6185] memfd_create("syzkaller", 0) = 3 [pid 6185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6185] munmap(0x7f927cba2000, 2097152) = 0 [pid 6185] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6185] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6185] close(3) = 0 [pid 6185] mkdir("./file0", 0777) = 0 [ 230.859384][ T6185] loop0: detected capacity change from 0 to 4096 [ 230.876041][ T6185] NILFS (loop0): invalid segment: Checksum error in segment payload [ 230.884093][ T6185] NILFS (loop0): trying rollback from an earlier position [ 230.899649][ T6185] NILFS (loop0): recovery complete [pid 6185] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6185] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6185] chdir("./file0") = 0 [pid 6185] ioctl(4, LOOP_CLR_FD) = 0 [pid 6185] close(4) = 0 [pid 6185] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6184] <... futex resumed>) = 0 [pid 6184] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6184] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6185] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6185] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6184] <... futex resumed>) = 0 [pid 6185] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6184] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] <... open resumed>) = 5 [pid 6184] <... futex resumed>) = 0 [pid 6185] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6185] <... futex resumed>) = 0 [pid 6185] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6184] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6184] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6185] <... futex resumed>) = 0 [pid 6185] ftruncate(5, 33587195) = 0 [pid 6185] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6184] <... futex resumed>) = 0 [pid 6184] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6184] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 230.905693][ T6186] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6185] sendfile(4, 5, NULL, 281474978811909 [pid 6184] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6184] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6184] exit_group(0) = ? [pid 6185] <... sendfile resumed>) = ? [pid 6185] +++ exited with 0 +++ [pid 6184] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6184, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./390", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./390/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./390/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./390/binderfs") = 0 umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./390/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./390/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./390/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./390") = 0 mkdir("./391", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6187 ./strace-static-x86_64: Process 6187 attached [pid 6187] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6187] chdir("./391") = 0 [pid 6187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6187] setpgid(0, 0) = 0 [pid 6187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6187] write(3, "1000", 4) = 4 [pid 6187] close(3) = 0 [pid 6187] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6187] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6187] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6187] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6187] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6188 attached , parent_tid=[6188], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6188 [pid 6188] set_robust_list(0x7f9284fc29e0, 24 [pid 6187] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6188] <... set_robust_list resumed>) = 0 [pid 6187] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6188] memfd_create("syzkaller", 0) = 3 [pid 6188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6188] munmap(0x7f927cba2000, 2097152) = 0 [pid 6188] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6188] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6188] close(3) = 0 [pid 6188] mkdir("./file0", 0777) = 0 [ 231.246235][ T6188] loop0: detected capacity change from 0 to 4096 [ 231.261388][ T6188] NILFS (loop0): invalid segment: Checksum error in segment payload [ 231.269473][ T6188] NILFS (loop0): trying rollback from an earlier position [ 231.285176][ T6188] NILFS (loop0): recovery complete [pid 6188] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6188] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6188] chdir("./file0") = 0 [pid 6188] ioctl(4, LOOP_CLR_FD) = 0 [pid 6188] close(4) = 0 [pid 6188] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6188] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] <... futex resumed>) = 0 [pid 6187] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] <... futex resumed>) = 0 [pid 6187] <... futex resumed>) = 1 [pid 6188] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6187] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6188] <... open resumed>) = 4 [pid 6188] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6187] <... futex resumed>) = 0 [pid 6188] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6187] <... futex resumed>) = 0 [pid 6188] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6187] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6188] <... open resumed>) = 5 [pid 6188] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6187] <... futex resumed>) = 0 [pid 6188] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6187] <... futex resumed>) = 0 [pid 6188] ftruncate(5, 33587195 [pid 6187] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6188] <... ftruncate resumed>) = 0 [pid 6188] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6187] <... futex resumed>) = 0 [pid 6188] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6187] <... futex resumed>) = 0 [pid 6188] sendfile(4, 5, NULL, 281474978811909 [ 231.291039][ T6189] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6187] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6187] exit_group(0) = ? [pid 6188] <... sendfile resumed>) = ? [pid 6188] +++ exited with 0 +++ [pid 6187] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6187, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./391", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./391/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./391/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./391/binderfs") = 0 umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./391/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./391/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./391/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./391") = 0 mkdir("./392", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6190 ./strace-static-x86_64: Process 6190 attached [pid 6190] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6190] chdir("./392") = 0 [pid 6190] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6190] setpgid(0, 0) = 0 [pid 6190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6190] write(3, "1000", 4) = 4 [pid 6190] close(3) = 0 [pid 6190] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6190] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6190] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6190] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6191 attached , parent_tid=[6191], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6191 [pid 6190] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6191] set_robust_list(0x7f9284fc29e0, 24 [pid 6190] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6191] <... set_robust_list resumed>) = 0 [pid 6191] memfd_create("syzkaller", 0) = 3 [pid 6191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6191] munmap(0x7f927cba2000, 2097152) = 0 [pid 6191] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6191] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6191] close(3) = 0 [pid 6191] mkdir("./file0", 0777) = 0 [pid 6191] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6191] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6191] chdir("./file0") = 0 [pid 6191] ioctl(4, LOOP_CLR_FD) = 0 [ 231.617742][ T6191] loop0: detected capacity change from 0 to 4096 [ 231.632678][ T6191] NILFS (loop0): invalid segment: Checksum error in segment payload [ 231.640781][ T6191] NILFS (loop0): trying rollback from an earlier position [ 231.655279][ T6191] NILFS (loop0): recovery complete [pid 6191] close(4) = 0 [pid 6191] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6191] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6190] <... futex resumed>) = 0 [pid 6190] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6190] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6191] <... futex resumed>) = 0 [pid 6191] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6191] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6190] <... futex resumed>) = 0 [pid 6190] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6190] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6191] <... futex resumed>) = 1 [pid 6191] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6191] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6190] <... futex resumed>) = 0 [pid 6190] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6190] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6191] <... futex resumed>) = 1 [pid 6191] ftruncate(5, 33587195) = 0 [pid 6191] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6190] <... futex resumed>) = 0 [pid 6190] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6190] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 231.661249][ T6192] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6191] sendfile(4, 5, NULL, 281474978811909 [pid 6190] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6190] exit_group(0) = ? [pid 6191] <... sendfile resumed>) = ? [pid 6191] +++ exited with 0 +++ [pid 6190] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6190, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./392", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./392/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./392/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./392/binderfs") = 0 umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./392/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./392/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./392/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./392") = 0 mkdir("./393", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6193 ./strace-static-x86_64: Process 6193 attached [pid 6193] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6193] chdir("./393") = 0 [pid 6193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6193] setpgid(0, 0) = 0 [pid 6193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6193] write(3, "1000", 4) = 4 [pid 6193] close(3) = 0 [pid 6193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6193] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6193] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6193] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6194], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6194 [pid 6193] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6193] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6194 attached [pid 6194] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6194] memfd_create("syzkaller", 0) = 3 [pid 6194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6194] munmap(0x7f927cba2000, 2097152) = 0 [pid 6194] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6194] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6194] close(3) = 0 [pid 6194] mkdir("./file0", 0777) = 0 [ 231.996592][ T6194] loop0: detected capacity change from 0 to 4096 [ 232.012354][ T6194] NILFS (loop0): invalid segment: Checksum error in segment payload [ 232.020423][ T6194] NILFS (loop0): trying rollback from an earlier position [ 232.036282][ T6194] NILFS (loop0): recovery complete [pid 6194] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6194] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6194] chdir("./file0") = 0 [pid 6194] ioctl(4, LOOP_CLR_FD) = 0 [pid 6194] close(4) = 0 [pid 6194] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6193] <... futex resumed>) = 0 [pid 6194] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6193] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6193] <... futex resumed>) = 0 [pid 6194] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6193] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6194] <... open resumed>) = 4 [pid 6194] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6193] <... futex resumed>) = 0 [pid 6194] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6193] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6193] <... futex resumed>) = 0 [pid 6194] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6193] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6194] <... open resumed>) = 5 [pid 6194] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6193] <... futex resumed>) = 0 [pid 6194] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6193] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6193] <... futex resumed>) = 0 [pid 6194] ftruncate(5, 33587195 [pid 6193] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6194] <... ftruncate resumed>) = 0 [pid 6194] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6193] <... futex resumed>) = 0 [pid 6194] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6193] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6193] <... futex resumed>) = 0 [pid 6194] sendfile(4, 5, NULL, 281474978811909 [ 232.042469][ T6195] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6193] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6193] exit_group(0) = ? [pid 6194] <... sendfile resumed>) = ? [pid 6194] +++ exited with 0 +++ [pid 6193] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6193, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- umount2("./393", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./393/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./393/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./393/binderfs") = 0 umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./393/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./393/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./393/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./393") = 0 mkdir("./394", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6196 ./strace-static-x86_64: Process 6196 attached [pid 6196] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6196] chdir("./394") = 0 [pid 6196] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6196] setpgid(0, 0) = 0 [pid 6196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6196] write(3, "1000", 4) = 4 [pid 6196] close(3) = 0 [pid 6196] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6196] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6196] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6196] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6196] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6197 attached , parent_tid=[6197], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6197 [pid 6196] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6197] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6196] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6197] memfd_create("syzkaller", 0) = 3 [pid 6197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6197] munmap(0x7f927cba2000, 2097152) = 0 [pid 6197] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6197] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6197] close(3) = 0 [pid 6197] mkdir("./file0", 0777) = 0 [ 232.393591][ T6197] loop0: detected capacity change from 0 to 4096 [ 232.410359][ T6197] NILFS (loop0): invalid segment: Checksum error in segment payload [ 232.418548][ T6197] NILFS (loop0): trying rollback from an earlier position [ 232.436787][ T6197] NILFS (loop0): recovery complete [pid 6197] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6197] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6197] chdir("./file0") = 0 [pid 6197] ioctl(4, LOOP_CLR_FD) = 0 [pid 6197] close(4) = 0 [pid 6197] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6197] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6196] <... futex resumed>) = 0 [pid 6196] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6196] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6197] <... futex resumed>) = 0 [pid 6197] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6197] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6196] <... futex resumed>) = 0 [pid 6196] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6196] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6197] <... futex resumed>) = 1 [pid 6197] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6197] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6196] <... futex resumed>) = 0 [pid 6196] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6196] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6197] <... futex resumed>) = 1 [pid 6197] ftruncate(5, 33587195) = 0 [pid 6197] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6196] <... futex resumed>) = 0 [pid 6196] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6196] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 232.442620][ T6198] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6197] sendfile(4, 5, NULL, 281474978811909 [pid 6196] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6196] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6196] exit_group(0) = ? [pid 6197] <... sendfile resumed>) = ? [pid 6197] +++ exited with 0 +++ [pid 6196] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6196, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./394", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./394/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./394/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./394/binderfs") = 0 umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./394/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./394/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./394/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./394") = 0 mkdir("./395", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6199 ./strace-static-x86_64: Process 6199 attached [pid 6199] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6199] chdir("./395") = 0 [pid 6199] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6199] setpgid(0, 0) = 0 [pid 6199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6199] write(3, "1000", 4) = 4 [pid 6199] close(3) = 0 [pid 6199] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6199] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6199] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6199] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6200 attached , parent_tid=[6200], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6200 [pid 6200] set_robust_list(0x7f9284fc29e0, 24 [pid 6199] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] <... set_robust_list resumed>) = 0 [pid 6199] <... futex resumed>) = 0 [pid 6199] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6200] memfd_create("syzkaller", 0) = 3 [pid 6200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6200] munmap(0x7f927cba2000, 2097152) = 0 [pid 6200] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6200] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6200] close(3) = 0 [pid 6200] mkdir("./file0", 0777) = 0 [ 232.744650][ T6200] loop0: detected capacity change from 0 to 4096 [ 232.760236][ T6200] NILFS (loop0): invalid segment: Checksum error in segment payload [ 232.768299][ T6200] NILFS (loop0): trying rollback from an earlier position [ 232.784140][ T6200] NILFS (loop0): recovery complete [pid 6200] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6200] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6200] chdir("./file0") = 0 [pid 6200] ioctl(4, LOOP_CLR_FD) = 0 [pid 6200] close(4) = 0 [pid 6200] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] <... futex resumed>) = 0 [pid 6199] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6199] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6200] <... futex resumed>) = 1 [pid 6200] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6200] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] <... futex resumed>) = 0 [pid 6199] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6199] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6200] <... futex resumed>) = 1 [pid 6200] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6200] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] <... futex resumed>) = 0 [pid 6199] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6199] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6200] <... futex resumed>) = 1 [pid 6200] ftruncate(5, 33587195) = 0 [pid 6200] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] <... futex resumed>) = 0 [pid 6199] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6199] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6200] <... futex resumed>) = 1 [ 232.790267][ T6201] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6200] sendfile(4, 5, NULL, 281474978811909 [pid 6199] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6199] exit_group(0) = ? [pid 6200] <... sendfile resumed>) = ? [pid 6200] +++ exited with 0 +++ [pid 6199] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6199, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./395", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./395/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./395/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./395/binderfs") = 0 umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./395/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./395/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./395/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./395") = 0 mkdir("./396", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6202 ./strace-static-x86_64: Process 6202 attached [pid 6202] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6202] chdir("./396") = 0 [pid 6202] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6202] setpgid(0, 0) = 0 [pid 6202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6202] write(3, "1000", 4) = 4 [pid 6202] close(3) = 0 [pid 6202] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6202] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6202] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6202] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6202] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6203], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6203 ./strace-static-x86_64: Process 6203 attached [pid 6202] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6202] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6203] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6203] memfd_create("syzkaller", 0) = 3 [pid 6203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6203] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6203] munmap(0x7f927cba2000, 2097152) = 0 [pid 6203] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6203] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6203] close(3) = 0 [pid 6203] mkdir("./file0", 0777) = 0 [ 233.111293][ T6203] loop0: detected capacity change from 0 to 4096 [ 233.126355][ T6203] NILFS (loop0): invalid segment: Checksum error in segment payload [ 233.134517][ T6203] NILFS (loop0): trying rollback from an earlier position [ 233.152017][ T6203] NILFS (loop0): recovery complete [pid 6203] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6203] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6203] chdir("./file0") = 0 [pid 6203] ioctl(4, LOOP_CLR_FD) = 0 [pid 6203] close(4) = 0 [pid 6203] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] <... futex resumed>) = 0 [pid 6203] <... futex resumed>) = 1 [pid 6202] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6202] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6203] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6203] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] <... futex resumed>) = 0 [pid 6202] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6202] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6203] <... futex resumed>) = 1 [pid 6203] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6203] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] <... futex resumed>) = 0 [pid 6202] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6202] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6203] <... futex resumed>) = 1 [pid 6203] ftruncate(5, 33587195) = 0 [pid 6203] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] <... futex resumed>) = 0 [pid 6202] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6202] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6203] <... futex resumed>) = 1 [ 233.158156][ T6204] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6203] sendfile(4, 5, NULL, 281474978811909 [pid 6202] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6202] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6202] exit_group(0) = ? [pid 6203] <... sendfile resumed>) = ? [pid 6203] +++ exited with 0 +++ [pid 6202] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6202, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./396", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./396/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./396/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./396/binderfs") = 0 umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./396/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./396/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./396/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./396") = 0 mkdir("./397", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6205 ./strace-static-x86_64: Process 6205 attached [pid 6205] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6205] chdir("./397") = 0 [pid 6205] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6205] setpgid(0, 0) = 0 [pid 6205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6205] write(3, "1000", 4) = 4 [pid 6205] close(3) = 0 [pid 6205] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6205] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6205] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6205] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6206], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6206 [pid 6205] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6205] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6206 attached [pid 6206] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6206] memfd_create("syzkaller", 0) = 3 [pid 6206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6206] munmap(0x7f927cba2000, 2097152) = 0 [pid 6206] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6206] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6206] close(3) = 0 [pid 6206] mkdir("./file0", 0777) = 0 [ 233.479707][ T6206] loop0: detected capacity change from 0 to 4096 [ 233.495589][ T6206] NILFS (loop0): invalid segment: Checksum error in segment payload [ 233.503677][ T6206] NILFS (loop0): trying rollback from an earlier position [ 233.519306][ T6206] NILFS (loop0): recovery complete [pid 6206] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6206] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6206] chdir("./file0") = 0 [pid 6206] ioctl(4, LOOP_CLR_FD) = 0 [pid 6206] close(4) = 0 [pid 6206] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6206] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] <... futex resumed>) = 0 [pid 6205] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6205] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6206] <... futex resumed>) = 0 [pid 6206] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6206] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6205] <... futex resumed>) = 0 [pid 6206] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6205] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... open resumed>) = 5 [pid 6205] <... futex resumed>) = 0 [pid 6206] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6206] <... futex resumed>) = 0 [pid 6205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6206] ftruncate(5, 33587195 [pid 6205] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... ftruncate resumed>) = 0 [pid 6205] <... futex resumed>) = 0 [pid 6206] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6206] <... futex resumed>) = 0 [pid 6205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6206] sendfile(4, 5, NULL, 281474978811909 [pid 6205] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 233.525246][ T6207] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6205] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6205] exit_group(0) = ? [pid 6206] <... sendfile resumed>) = ? [pid 6206] +++ exited with 0 +++ [pid 6205] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6205, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./397", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./397", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./397/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./397/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./397/binderfs") = 0 umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./397/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./397/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./397/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./397") = 0 mkdir("./398", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6208 ./strace-static-x86_64: Process 6208 attached [pid 6208] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6208] chdir("./398") = 0 [pid 6208] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6208] setpgid(0, 0) = 0 [pid 6208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6208] write(3, "1000", 4) = 4 [pid 6208] close(3) = 0 [pid 6208] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6208] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6208] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6208] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6208] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6209], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6209 ./strace-static-x86_64: Process 6209 attached [pid 6209] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6209] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6208] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6209] <... futex resumed>) = 0 [pid 6208] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6209] memfd_create("syzkaller", 0) = 3 [pid 6209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6209] munmap(0x7f927cba2000, 2097152) = 0 [pid 6209] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6209] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6209] close(3) = 0 [pid 6209] mkdir("./file0", 0777) = 0 [ 233.866007][ T6209] loop0: detected capacity change from 0 to 4096 [ 233.882275][ T6209] NILFS (loop0): invalid segment: Checksum error in segment payload [ 233.890411][ T6209] NILFS (loop0): trying rollback from an earlier position [ 233.905177][ T6209] NILFS (loop0): recovery complete [pid 6209] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6209] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6209] chdir("./file0") = 0 [pid 6209] ioctl(4, LOOP_CLR_FD) = 0 [pid 6209] close(4) = 0 [pid 6209] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6209] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6208] <... futex resumed>) = 0 [pid 6208] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6209] <... futex resumed>) = 0 [pid 6209] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6208] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6209] <... open resumed>) = 4 [pid 6209] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6209] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6208] <... futex resumed>) = 0 [pid 6208] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6209] <... futex resumed>) = 0 [pid 6209] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6208] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6209] <... open resumed>) = 5 [pid 6209] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6208] <... futex resumed>) = 0 [pid 6208] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] ftruncate(5, 33587195 [pid 6208] <... futex resumed>) = 0 [pid 6208] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6209] <... ftruncate resumed>) = 0 [pid 6209] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6208] <... futex resumed>) = 0 [pid 6208] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [ 233.911006][ T6210] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6209] sendfile(4, 5, NULL, 281474978811909 [pid 6208] <... futex resumed>) = 0 [pid 6208] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6208] exit_group(0) = ? [pid 6209] <... sendfile resumed>) = ? [pid 6209] +++ exited with 0 +++ [pid 6208] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6208, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./398", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./398", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./398/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./398/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./398/binderfs") = 0 umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./398/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./398/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./398/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./398") = 0 mkdir("./399", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6211 ./strace-static-x86_64: Process 6211 attached [pid 6211] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6211] chdir("./399") = 0 [pid 6211] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6211] setpgid(0, 0) = 0 [pid 6211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6211] write(3, "1000", 4) = 4 [pid 6211] close(3) = 0 [pid 6211] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6211] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6211] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6211] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6211] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6212], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6212 [pid 6211] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6211] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6212 attached [pid 6212] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6212] memfd_create("syzkaller", 0) = 3 [pid 6212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6212] munmap(0x7f927cba2000, 2097152) = 0 [pid 6212] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6212] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6212] close(3) = 0 [pid 6212] mkdir("./file0", 0777) = 0 [ 234.262298][ T6212] loop0: detected capacity change from 0 to 4096 [ 234.278052][ T6212] NILFS (loop0): invalid segment: Checksum error in segment payload [ 234.286122][ T6212] NILFS (loop0): trying rollback from an earlier position [ 234.301761][ T6212] NILFS (loop0): recovery complete [pid 6212] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6212] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6212] chdir("./file0") = 0 [pid 6212] ioctl(4, LOOP_CLR_FD) = 0 [pid 6212] close(4) = 0 [pid 6212] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6212] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6211] <... futex resumed>) = 0 [pid 6211] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6211] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6212] <... futex resumed>) = 0 [pid 6212] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6212] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6211] <... futex resumed>) = 0 [pid 6211] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6211] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6212] <... futex resumed>) = 1 [pid 6212] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6212] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6211] <... futex resumed>) = 0 [pid 6211] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6211] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6212] <... futex resumed>) = 1 [pid 6212] ftruncate(5, 33587195) = 0 [pid 6212] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6211] <... futex resumed>) = 0 [pid 6211] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6211] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6212] <... futex resumed>) = 1 [ 234.307700][ T6213] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6212] sendfile(4, 5, NULL, 281474978811909 [pid 6211] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6211] exit_group(0) = ? [pid 6212] <... sendfile resumed>) = ? [pid 6212] +++ exited with 0 +++ [pid 6211] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6211, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./399", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./399", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./399/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./399/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./399/binderfs") = 0 umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./399/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./399/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./399/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./399") = 0 mkdir("./400", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6214 ./strace-static-x86_64: Process 6214 attached [pid 6214] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6214] chdir("./400") = 0 [pid 6214] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6214] setpgid(0, 0) = 0 [pid 6214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6214] write(3, "1000", 4) = 4 [pid 6214] close(3) = 0 [pid 6214] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6214] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6214] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6214] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6214] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6215], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6215 [pid 6214] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6214] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6215 attached [pid 6215] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6215] memfd_create("syzkaller", 0) = 3 [pid 6215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6215] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6215] munmap(0x7f927cba2000, 2097152) = 0 [pid 6215] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6215] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6215] close(3) = 0 [pid 6215] mkdir("./file0", 0777) = 0 [ 234.623364][ T6215] loop0: detected capacity change from 0 to 4096 [ 234.639437][ T6215] NILFS (loop0): invalid segment: Checksum error in segment payload [ 234.647586][ T6215] NILFS (loop0): trying rollback from an earlier position [ 234.662493][ T6215] NILFS (loop0): recovery complete [pid 6215] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6215] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6215] chdir("./file0") = 0 [pid 6215] ioctl(4, LOOP_CLR_FD) = 0 [pid 6215] close(4) = 0 [pid 6215] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] <... futex resumed>) = 0 [pid 6214] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6214] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6215] <... futex resumed>) = 1 [pid 6215] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6215] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] <... futex resumed>) = 0 [pid 6214] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6214] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6215] <... futex resumed>) = 1 [pid 6215] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6215] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] <... futex resumed>) = 0 [pid 6214] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6214] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6215] <... futex resumed>) = 1 [pid 6215] ftruncate(5, 33587195) = 0 [pid 6215] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] <... futex resumed>) = 0 [pid 6214] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6214] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6215] <... futex resumed>) = 1 [ 234.668788][ T6216] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6215] sendfile(4, 5, NULL, 281474978811909 [pid 6214] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6214] exit_group(0) = ? [pid 6215] <... sendfile resumed>) = ? [pid 6215] +++ exited with 0 +++ [pid 6214] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6214, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./400", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./400", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./400/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./400/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./400/binderfs") = 0 umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./400/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./400/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./400/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./400") = 0 mkdir("./401", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6217 ./strace-static-x86_64: Process 6217 attached [pid 6217] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6217] chdir("./401") = 0 [pid 6217] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6217] setpgid(0, 0) = 0 [pid 6217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6217] write(3, "1000", 4) = 4 [pid 6217] close(3) = 0 [pid 6217] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6217] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6217] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6217] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6218], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6218 [pid 6217] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6217] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6218 attached [pid 6218] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6218] memfd_create("syzkaller", 0) = 3 [pid 6218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6218] munmap(0x7f927cba2000, 2097152) = 0 [pid 6218] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6218] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6218] close(3) = 0 [pid 6218] mkdir("./file0", 0777) = 0 [ 234.975736][ T6218] loop0: detected capacity change from 0 to 4096 [ 234.992324][ T6218] NILFS (loop0): invalid segment: Checksum error in segment payload [ 235.000482][ T6218] NILFS (loop0): trying rollback from an earlier position [ 235.017011][ T6218] NILFS (loop0): recovery complete [pid 6218] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6218] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6218] chdir("./file0") = 0 [pid 6218] ioctl(4, LOOP_CLR_FD) = 0 [pid 6218] close(4) = 0 [pid 6218] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6217] <... futex resumed>) = 0 [pid 6217] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6218] <... futex resumed>) = 1 [pid 6217] <... futex resumed>) = 0 [pid 6218] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6217] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6218] <... open resumed>) = 4 [pid 6218] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6217] <... futex resumed>) = 0 [pid 6217] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6217] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6218] <... futex resumed>) = 1 [pid 6218] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6218] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6217] <... futex resumed>) = 0 [pid 6218] <... futex resumed>) = 1 [pid 6217] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6218] ftruncate(5, 33587195 [pid 6217] <... futex resumed>) = 0 [pid 6218] <... ftruncate resumed>) = 0 [pid 6217] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6218] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6217] <... futex resumed>) = 0 [pid 6218] sendfile(4, 5, NULL, 281474978811909 [pid 6217] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 235.023186][ T6219] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6217] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6217] exit_group(0) = ? [pid 6218] <... sendfile resumed>) = ? [pid 6218] +++ exited with 0 +++ [pid 6217] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6217, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./401", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./401", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./401/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./401/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./401/binderfs") = 0 umount2("./401/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./401/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./401/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./401/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./401/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./401/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./401") = 0 mkdir("./402", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6220 ./strace-static-x86_64: Process 6220 attached [pid 6220] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6220] chdir("./402") = 0 [pid 6220] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6220] setpgid(0, 0) = 0 [pid 6220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6220] write(3, "1000", 4) = 4 [pid 6220] close(3) = 0 [pid 6220] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6220] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6220] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6220] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6221], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6221 [pid 6220] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6220] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6221 attached [pid 6221] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6221] memfd_create("syzkaller", 0) = 3 [pid 6221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6221] munmap(0x7f927cba2000, 2097152) = 0 [pid 6221] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6221] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6221] close(3) = 0 [pid 6221] mkdir("./file0", 0777) = 0 [pid 6221] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6221] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 235.346424][ T6221] loop0: detected capacity change from 0 to 4096 [ 235.362403][ T6221] NILFS (loop0): invalid segment: Checksum error in segment payload [ 235.370514][ T6221] NILFS (loop0): trying rollback from an earlier position [ 235.386341][ T6221] NILFS (loop0): recovery complete [pid 6221] chdir("./file0") = 0 [pid 6221] ioctl(4, LOOP_CLR_FD) = 0 [pid 6221] close(4) = 0 [pid 6221] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6220] <... futex resumed>) = 0 [pid 6221] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6220] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6221] <... open resumed>) = 4 [pid 6220] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6221] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6220] <... futex resumed>) = 0 [pid 6221] <... futex resumed>) = 1 [pid 6220] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6221] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6220] <... futex resumed>) = 0 [pid 6221] <... open resumed>) = 5 [pid 6220] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6221] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6220] <... futex resumed>) = 0 [pid 6221] ftruncate(5, 33587195 [pid 6220] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6221] <... ftruncate resumed>) = 0 [pid 6220] <... futex resumed>) = 0 [pid 6221] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6220] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6221] <... futex resumed>) = 0 [pid 6220] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6221] sendfile(4, 5, NULL, 281474978811909 [pid 6220] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 235.392492][ T6222] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6220] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6220] exit_group(0) = ? [pid 6221] <... sendfile resumed>) = ? [pid 6221] +++ exited with 0 +++ [pid 6220] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6220, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./402", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./402", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./402/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./402/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./402/binderfs") = 0 umount2("./402/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./402/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./402/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./402/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./402/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./402/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./402") = 0 mkdir("./403", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6223 ./strace-static-x86_64: Process 6223 attached [pid 6223] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6223] chdir("./403") = 0 [pid 6223] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6223] setpgid(0, 0) = 0 [pid 6223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6223] write(3, "1000", 4) = 4 [pid 6223] close(3) = 0 [pid 6223] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6223] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6223] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6223] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6224], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6224 [pid 6223] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6223] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6224 attached [pid 6224] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6224] memfd_create("syzkaller", 0) = 3 [pid 6224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6224] munmap(0x7f927cba2000, 2097152) = 0 [pid 6224] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6224] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6224] close(3) = 0 [pid 6224] mkdir("./file0", 0777) = 0 [ 235.699537][ T6224] loop0: detected capacity change from 0 to 4096 [ 235.716848][ T6224] NILFS (loop0): invalid segment: Checksum error in segment payload [ 235.724975][ T6224] NILFS (loop0): trying rollback from an earlier position [ 235.739994][ T6224] NILFS (loop0): recovery complete [pid 6224] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6224] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6224] chdir("./file0") = 0 [pid 6224] ioctl(4, LOOP_CLR_FD) = 0 [pid 6224] close(4) = 0 [pid 6224] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6223] <... futex resumed>) = 0 [pid 6224] <... futex resumed>) = 1 [pid 6224] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6223] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6223] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6224] <... open resumed>) = 4 [pid 6224] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6223] <... futex resumed>) = 0 [pid 6224] <... futex resumed>) = 1 [pid 6223] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6223] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6224] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6224] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6223] <... futex resumed>) = 0 [pid 6223] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6223] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6224] <... futex resumed>) = 1 [pid 6224] ftruncate(5, 33587195) = 0 [pid 6224] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6223] <... futex resumed>) = 0 [pid 6223] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6223] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6224] <... futex resumed>) = 1 [ 235.746043][ T6225] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6224] sendfile(4, 5, NULL, 281474978811909 [pid 6223] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6223] exit_group(0) = ? [pid 6224] <... sendfile resumed>) = ? [pid 6224] +++ exited with 0 +++ [pid 6223] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6223, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./403", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./403", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./403/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./403/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./403/binderfs") = 0 umount2("./403/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./403/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./403/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./403/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./403/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./403/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./403") = 0 mkdir("./404", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6226 ./strace-static-x86_64: Process 6226 attached [pid 6226] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6226] chdir("./404") = 0 [pid 6226] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6226] setpgid(0, 0) = 0 [pid 6226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6226] write(3, "1000", 4) = 4 [pid 6226] close(3) = 0 [pid 6226] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6226] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6226] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6226] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6227], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6227 [pid 6226] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6226] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6227 attached [pid 6227] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6227] memfd_create("syzkaller", 0) = 3 [pid 6227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6227] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6227] munmap(0x7f927cba2000, 2097152) = 0 [pid 6227] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6227] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6227] close(3) = 0 [pid 6227] mkdir("./file0", 0777) = 0 [ 236.060948][ T6227] loop0: detected capacity change from 0 to 4096 [ 236.078590][ T6227] NILFS (loop0): invalid segment: Checksum error in segment payload [ 236.086798][ T6227] NILFS (loop0): trying rollback from an earlier position [ 236.105183][ T6227] NILFS (loop0): recovery complete [pid 6227] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6227] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6227] chdir("./file0") = 0 [pid 6227] ioctl(4, LOOP_CLR_FD) = 0 [pid 6227] close(4) = 0 [pid 6227] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6226] <... futex resumed>) = 0 [pid 6227] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6226] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6227] <... open resumed>) = 4 [pid 6226] <... futex resumed>) = 0 [pid 6226] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6227] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6226] <... futex resumed>) = 0 [pid 6227] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6226] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6227] <... open resumed>) = 5 [pid 6226] <... futex resumed>) = 0 [pid 6227] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6226] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6227] <... futex resumed>) = 0 [pid 6226] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6227] ftruncate(5, 33587195 [pid 6226] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6227] <... ftruncate resumed>) = 0 [pid 6226] <... futex resumed>) = 0 [pid 6227] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6226] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6227] <... futex resumed>) = 0 [pid 6226] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6227] sendfile(4, 5, NULL, 281474978811909 [pid 6226] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 236.111258][ T6228] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6226] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6226] exit_group(0 [pid 6227] <... sendfile resumed>) = ? [pid 6226] <... exit_group resumed>) = ? [pid 6227] +++ exited with 0 +++ [pid 6226] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6226, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./404", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./404", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./404/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./404/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./404/binderfs") = 0 umount2("./404/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./404/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./404/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./404/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./404/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./404/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./404") = 0 mkdir("./405", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6229 ./strace-static-x86_64: Process 6229 attached [pid 6229] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6229] chdir("./405") = 0 [pid 6229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6229] setpgid(0, 0) = 0 [pid 6229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6229] write(3, "1000", 4) = 4 [pid 6229] close(3) = 0 [pid 6229] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6229] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6229] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6229] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6229] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6230], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6230 [pid 6229] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6229] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6230 attached [pid 6230] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6230] memfd_create("syzkaller", 0) = 3 [pid 6230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6230] munmap(0x7f927cba2000, 2097152) = 0 [pid 6230] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6230] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6230] close(3) = 0 [pid 6230] mkdir("./file0", 0777) = 0 [pid 6230] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6230] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 236.417407][ T6230] loop0: detected capacity change from 0 to 4096 [ 236.433443][ T6230] NILFS (loop0): invalid segment: Checksum error in segment payload [ 236.441848][ T6230] NILFS (loop0): trying rollback from an earlier position [ 236.459116][ T6230] NILFS (loop0): recovery complete [pid 6230] chdir("./file0") = 0 [pid 6230] ioctl(4, LOOP_CLR_FD) = 0 [pid 6230] close(4) = 0 [pid 6230] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6230] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6229] <... futex resumed>) = 0 [pid 6229] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6229] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6230] <... futex resumed>) = 0 [pid 6230] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6230] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6229] <... futex resumed>) = 0 [pid 6229] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6229] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6230] <... futex resumed>) = 1 [pid 6230] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6230] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6229] <... futex resumed>) = 0 [pid 6229] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6229] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6230] <... futex resumed>) = 1 [pid 6230] ftruncate(5, 33587195) = 0 [pid 6230] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6229] <... futex resumed>) = 0 [pid 6229] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6229] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6230] <... futex resumed>) = 1 [ 236.465210][ T6231] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6230] sendfile(4, 5, NULL, 281474978811909 [pid 6229] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6229] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6229] exit_group(0) = ? [pid 6230] <... sendfile resumed>) = ? [pid 6230] +++ exited with 0 +++ [pid 6229] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6229, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./405", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./405", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./405/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./405/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./405/binderfs") = 0 umount2("./405/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./405/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./405/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./405/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./405/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./405/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./405") = 0 mkdir("./406", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6232 ./strace-static-x86_64: Process 6232 attached [pid 6232] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6232] chdir("./406") = 0 [pid 6232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6232] setpgid(0, 0) = 0 [pid 6232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6232] write(3, "1000", 4) = 4 [pid 6232] close(3) = 0 [pid 6232] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6232] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6232] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6232] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6233], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6233 ./strace-static-x86_64: Process 6233 attached [pid 6232] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6233] memfd_create("syzkaller", 0) = 3 [pid 6232] <... futex resumed>) = 0 [pid 6233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6232] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6233] <... mmap resumed>) = 0x7f927cba2000 [pid 6233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6233] munmap(0x7f927cba2000, 2097152) = 0 [pid 6233] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6233] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6233] close(3) = 0 [pid 6233] mkdir("./file0", 0777) = 0 [ 236.791497][ T6233] loop0: detected capacity change from 0 to 4096 [ 236.809420][ T6233] NILFS (loop0): invalid segment: Checksum error in segment payload [ 236.817575][ T6233] NILFS (loop0): trying rollback from an earlier position [ 236.832812][ T6233] NILFS (loop0): recovery complete [pid 6233] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6233] chdir("./file0") = 0 [pid 6233] ioctl(4, LOOP_CLR_FD) = 0 [pid 6233] close(4) = 0 [pid 6233] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6232] <... futex resumed>) = 0 [pid 6233] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6232] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] <... open resumed>) = 4 [pid 6232] <... futex resumed>) = 0 [pid 6233] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6233] <... futex resumed>) = 0 [pid 6232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6233] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6232] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] <... open resumed>) = 5 [pid 6232] <... futex resumed>) = 0 [pid 6233] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6233] <... futex resumed>) = 0 [pid 6232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6233] ftruncate(5, 33587195 [pid 6232] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] <... ftruncate resumed>) = 0 [pid 6232] <... futex resumed>) = 0 [pid 6233] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6233] <... futex resumed>) = 0 [pid 6232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6233] sendfile(4, 5, NULL, 281474978811909 [pid 6232] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6232] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 236.839140][ T6234] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6232] exit_group(0) = ? [pid 6233] <... sendfile resumed>) = ? [pid 6233] +++ exited with 0 +++ [pid 6232] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6232, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./406", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./406", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./406/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./406/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./406/binderfs") = 0 umount2("./406/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./406/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./406/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./406/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./406/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./406/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./406") = 0 mkdir("./407", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6235 ./strace-static-x86_64: Process 6235 attached [pid 6235] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6235] chdir("./407") = 0 [pid 6235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6235] setpgid(0, 0) = 0 [pid 6235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6235] write(3, "1000", 4) = 4 [pid 6235] close(3) = 0 [pid 6235] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6235] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6235] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6235] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6236 attached , parent_tid=[6236], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6236 [pid 6236] set_robust_list(0x7f9284fc29e0, 24 [pid 6235] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] <... set_robust_list resumed>) = 0 [pid 6235] <... futex resumed>) = 0 [pid 6235] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6236] memfd_create("syzkaller", 0) = 3 [pid 6236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6236] munmap(0x7f927cba2000, 2097152) = 0 [pid 6236] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6236] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6236] close(3) = 0 [pid 6236] mkdir("./file0", 0777) = 0 [ 237.152728][ T6236] loop0: detected capacity change from 0 to 4096 [ 237.171609][ T6236] NILFS (loop0): invalid segment: Checksum error in segment payload [ 237.179693][ T6236] NILFS (loop0): trying rollback from an earlier position [ 237.194891][ T6236] NILFS (loop0): recovery complete [pid 6236] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6236] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6236] chdir("./file0") = 0 [pid 6236] ioctl(4, LOOP_CLR_FD) = 0 [pid 6236] close(4) = 0 [pid 6236] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6235] <... futex resumed>) = 0 [pid 6236] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6235] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6235] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6236] <... futex resumed>) = 0 [pid 6236] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6236] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6235] <... futex resumed>) = 0 [pid 6235] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6236] <... futex resumed>) = 1 [pid 6235] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6236] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6236] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6235] <... futex resumed>) = 0 [pid 6235] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6235] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6236] ftruncate(5, 33587195) = 0 [pid 6236] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6235] <... futex resumed>) = 0 [pid 6235] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6236] sendfile(4, 5, NULL, 281474978811909 [ 237.200758][ T6237] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6235] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6235] exit_group(0) = ? [pid 6236] <... sendfile resumed>) = ? [pid 6236] +++ exited with 0 +++ [pid 6235] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6235, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./407", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./407", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./407/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./407/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./407/binderfs") = 0 umount2("./407/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./407/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./407/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./407/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./407/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./407/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./407") = 0 mkdir("./408", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6238 ./strace-static-x86_64: Process 6238 attached [pid 6238] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6238] chdir("./408") = 0 [pid 6238] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6238] setpgid(0, 0) = 0 [pid 6238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6238] write(3, "1000", 4) = 4 [pid 6238] close(3) = 0 [pid 6238] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6238] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6238] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6238] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6238] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6239], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6239 [pid 6238] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6238] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6239 attached [pid 6239] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6239] memfd_create("syzkaller", 0) = 3 [pid 6239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6239] munmap(0x7f927cba2000, 2097152) = 0 [pid 6239] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6239] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6239] close(3) = 0 [pid 6239] mkdir("./file0", 0777) = 0 [pid 6239] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6239] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 237.540549][ T6239] loop0: detected capacity change from 0 to 4096 [ 237.557904][ T6239] NILFS (loop0): invalid segment: Checksum error in segment payload [ 237.566100][ T6239] NILFS (loop0): trying rollback from an earlier position [ 237.581291][ T6239] NILFS (loop0): recovery complete [pid 6239] chdir("./file0") = 0 [pid 6239] ioctl(4, LOOP_CLR_FD) = 0 [pid 6239] close(4) = 0 [pid 6239] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6239] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6238] <... futex resumed>) = 0 [pid 6238] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6239] <... futex resumed>) = 0 [pid 6238] <... futex resumed>) = 1 [pid 6239] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6238] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6239] <... open resumed>) = 4 [pid 6239] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] <... futex resumed>) = 0 [pid 6238] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6238] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6239] <... futex resumed>) = 1 [pid 6239] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6239] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] <... futex resumed>) = 0 [pid 6238] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6238] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6239] <... futex resumed>) = 1 [pid 6239] ftruncate(5, 33587195) = 0 [pid 6239] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] <... futex resumed>) = 0 [pid 6238] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6238] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6239] <... futex resumed>) = 1 [ 237.587814][ T6240] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6239] sendfile(4, 5, NULL, 281474978811909 [pid 6238] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6238] exit_group(0 [pid 6239] <... sendfile resumed>) = ? [pid 6238] <... exit_group resumed>) = ? [pid 6239] +++ exited with 0 +++ [pid 6238] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6238, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./408", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./408", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./408/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./408/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./408/binderfs") = 0 umount2("./408/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./408/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./408/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./408/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./408/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./408/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./408") = 0 mkdir("./409", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6241 ./strace-static-x86_64: Process 6241 attached [pid 6241] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6241] chdir("./409") = 0 [pid 6241] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6241] setpgid(0, 0) = 0 [pid 6241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6241] write(3, "1000", 4) = 4 [pid 6241] close(3) = 0 [pid 6241] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6241] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6241] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6241] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6242 attached , parent_tid=[6242], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6242 [pid 6241] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6241] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6242] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6242] memfd_create("syzkaller", 0) = 3 [pid 6242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6242] munmap(0x7f927cba2000, 2097152) = 0 [pid 6242] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6242] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6242] close(3) = 0 [pid 6242] mkdir("./file0", 0777) = 0 [ 237.927125][ T6242] loop0: detected capacity change from 0 to 4096 [ 237.944376][ T6242] NILFS (loop0): invalid segment: Checksum error in segment payload [ 237.952437][ T6242] NILFS (loop0): trying rollback from an earlier position [ 237.968909][ T6242] NILFS (loop0): recovery complete [pid 6242] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6242] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6242] chdir("./file0") = 0 [pid 6242] ioctl(4, LOOP_CLR_FD) = 0 [pid 6242] close(4) = 0 [pid 6242] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6241] <... futex resumed>) = 0 [pid 6242] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6241] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6241] <... futex resumed>) = 0 [pid 6242] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6241] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] <... open resumed>) = 4 [pid 6242] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6241] <... futex resumed>) = 0 [pid 6242] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6241] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] <... open resumed>) = 5 [pid 6241] <... futex resumed>) = 0 [pid 6242] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6241] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] <... futex resumed>) = 0 [pid 6241] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6242] ftruncate(5, 33587195 [pid 6241] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] <... ftruncate resumed>) = 0 [pid 6241] <... futex resumed>) = 0 [pid 6242] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6241] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] <... futex resumed>) = 0 [pid 6241] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6242] sendfile(4, 5, NULL, 281474978811909 [pid 6241] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 237.975781][ T6244] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6241] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6241] exit_group(0) = ? [pid 6242] <... sendfile resumed>) = ? [pid 6242] +++ exited with 0 +++ [pid 6241] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6241, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./409", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./409", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./409/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./409/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./409/binderfs") = 0 umount2("./409/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./409/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./409/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./409/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./409/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./409/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./409") = 0 mkdir("./410", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6245 ./strace-static-x86_64: Process 6245 attached [pid 6245] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6245] chdir("./410") = 0 [pid 6245] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6245] setpgid(0, 0) = 0 [pid 6245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6245] write(3, "1000", 4) = 4 [pid 6245] close(3) = 0 [pid 6245] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6245] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6245] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6245] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6246], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6246 [pid 6245] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6245] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6246 attached [pid 6246] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6246] memfd_create("syzkaller", 0) = 3 [pid 6246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6246] munmap(0x7f927cba2000, 2097152) = 0 [pid 6246] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6246] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6246] close(3) = 0 [pid 6246] mkdir("./file0", 0777) = 0 [pid 6246] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6246] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6246] chdir("./file0") = 0 [pid 6246] ioctl(4, LOOP_CLR_FD) = 0 [ 238.311728][ T6246] loop0: detected capacity change from 0 to 4096 [ 238.326922][ T6246] NILFS (loop0): invalid segment: Checksum error in segment payload [ 238.334981][ T6246] NILFS (loop0): trying rollback from an earlier position [ 238.349733][ T6246] NILFS (loop0): recovery complete [pid 6246] close(4) = 0 [pid 6246] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6245] <... futex resumed>) = 0 [pid 6245] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6245] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6246] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6246] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6245] <... futex resumed>) = 0 [pid 6245] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6246] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6245] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6246] <... open resumed>) = 5 [pid 6246] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = 0 [pid 6245] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6245] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6246] <... futex resumed>) = 1 [pid 6246] ftruncate(5, 33587195) = 0 [pid 6246] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = 0 [pid 6245] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6245] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6246] <... futex resumed>) = 1 [ 238.355901][ T6247] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6246] sendfile(4, 5, NULL, 281474978811909 [pid 6245] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6245] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6245] exit_group(0) = ? [pid 6246] <... sendfile resumed>) = ? [pid 6246] +++ exited with 0 +++ [pid 6245] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6245, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./410", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./410", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./410/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./410/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./410/binderfs") = 0 umount2("./410/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./410/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./410/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./410/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./410/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./410/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./410") = 0 mkdir("./411", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6248 ./strace-static-x86_64: Process 6248 attached [pid 6248] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6248] chdir("./411") = 0 [pid 6248] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6248] setpgid(0, 0) = 0 [pid 6248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6248] write(3, "1000", 4) = 4 [pid 6248] close(3) = 0 [pid 6248] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6248] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6248] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6248] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6249 attached , parent_tid=[6249], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6249 [pid 6248] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6249] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6249] memfd_create("syzkaller", 0) = 3 [pid 6249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6249] munmap(0x7f927cba2000, 2097152) = 0 [pid 6249] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6249] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6249] close(3) = 0 [pid 6249] mkdir("./file0", 0777) = 0 [ 238.702691][ T6249] loop0: detected capacity change from 0 to 4096 [ 238.719906][ T6249] NILFS (loop0): invalid segment: Checksum error in segment payload [ 238.728011][ T6249] NILFS (loop0): trying rollback from an earlier position [ 238.743140][ T6249] NILFS (loop0): recovery complete [pid 6249] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6249] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6249] chdir("./file0") = 0 [pid 6249] ioctl(4, LOOP_CLR_FD) = 0 [pid 6249] close(4) = 0 [pid 6249] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6248] <... futex resumed>) = 0 [pid 6248] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6249] <... futex resumed>) = 1 [pid 6249] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6249] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6248] <... futex resumed>) = 0 [pid 6248] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6249] <... futex resumed>) = 1 [pid 6249] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6249] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6248] <... futex resumed>) = 0 [pid 6248] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6249] <... futex resumed>) = 1 [pid 6249] ftruncate(5, 33587195) = 0 [pid 6249] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6248] <... futex resumed>) = 0 [pid 6248] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6249] <... futex resumed>) = 1 [ 238.749265][ T6250] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6249] sendfile(4, 5, NULL, 281474978811909 [pid 6248] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6248] exit_group(0) = ? [pid 6249] <... sendfile resumed>) = ? [pid 6249] +++ exited with 0 +++ [pid 6248] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6248, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./411", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./411", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./411/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./411/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./411/binderfs") = 0 umount2("./411/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./411/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./411/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./411/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./411/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./411/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./411") = 0 mkdir("./412", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6251 ./strace-static-x86_64: Process 6251 attached [pid 6251] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6251] chdir("./412") = 0 [pid 6251] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6251] setpgid(0, 0) = 0 [pid 6251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6251] write(3, "1000", 4) = 4 [pid 6251] close(3) = 0 [pid 6251] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6251] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6251] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6251] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6252 attached , parent_tid=[6252], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6252 [pid 6251] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6252] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6252] memfd_create("syzkaller", 0) = 3 [pid 6252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6252] munmap(0x7f927cba2000, 2097152) = 0 [pid 6252] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6252] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6252] close(3) = 0 [pid 6252] mkdir("./file0", 0777) = 0 [ 239.092776][ T6252] loop0: detected capacity change from 0 to 4096 [ 239.108602][ T6252] NILFS (loop0): invalid segment: Checksum error in segment payload [ 239.116678][ T6252] NILFS (loop0): trying rollback from an earlier position [ 239.131751][ T6252] NILFS (loop0): recovery complete [pid 6252] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6252] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6252] chdir("./file0") = 0 [pid 6252] ioctl(4, LOOP_CLR_FD) = 0 [pid 6252] close(4) = 0 [pid 6252] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6251] <... futex resumed>) = 0 [pid 6251] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6252] <... futex resumed>) = 1 [pid 6252] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6252] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6251] <... futex resumed>) = 0 [pid 6251] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6252] <... futex resumed>) = 1 [pid 6252] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6252] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6251] <... futex resumed>) = 0 [pid 6251] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6252] <... futex resumed>) = 1 [pid 6252] ftruncate(5, 33587195) = 0 [pid 6252] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6251] <... futex resumed>) = 0 [pid 6251] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6252] <... futex resumed>) = 1 [ 239.137703][ T6253] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6252] sendfile(4, 5, NULL, 281474978811909 [pid 6251] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6251] exit_group(0) = ? [pid 6252] <... sendfile resumed>) = ? [pid 6252] +++ exited with 0 +++ [pid 6251] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6251, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- umount2("./412", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./412", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./412/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./412/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./412/binderfs") = 0 umount2("./412/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./412/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./412/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./412/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./412/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./412/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./412") = 0 mkdir("./413", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6254 ./strace-static-x86_64: Process 6254 attached [pid 6254] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6254] chdir("./413") = 0 [pid 6254] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6254] setpgid(0, 0) = 0 [pid 6254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6254] write(3, "1000", 4) = 4 [pid 6254] close(3) = 0 [pid 6254] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6254] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6254] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6254] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6255], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6255 [pid 6254] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6255 attached ) = 0 [pid 6254] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6255] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6255] memfd_create("syzkaller", 0) = 3 [pid 6255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6255] munmap(0x7f927cba2000, 2097152) = 0 [pid 6255] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6255] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6255] close(3) = 0 [pid 6255] mkdir("./file0", 0777) = 0 [pid 6255] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6255] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6255] chdir("./file0") = 0 [pid 6255] ioctl(4, LOOP_CLR_FD) = 0 [pid 6255] close(4) = 0 [pid 6255] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 239.471738][ T6255] loop0: detected capacity change from 0 to 4096 [ 239.488351][ T6255] NILFS (loop0): invalid segment: Checksum error in segment payload [ 239.496442][ T6255] NILFS (loop0): trying rollback from an earlier position [ 239.511956][ T6255] NILFS (loop0): recovery complete [pid 6255] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6254] <... futex resumed>) = 0 [pid 6254] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6254] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6255] <... futex resumed>) = 0 [pid 6255] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6255] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6254] <... futex resumed>) = 0 [pid 6254] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6254] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6255] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6255] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6254] <... futex resumed>) = 0 [pid 6254] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6254] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6255] ftruncate(5, 33587195) = 0 [pid 6255] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6254] <... futex resumed>) = 0 [pid 6254] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6254] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 239.518158][ T6256] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6255] sendfile(4, 5, NULL, 281474978811909 [pid 6254] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6254] exit_group(0) = ? [pid 6255] <... sendfile resumed>) = ? [pid 6255] +++ exited with 0 +++ [pid 6254] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6254, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./413", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./413", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./413/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./413/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./413/binderfs") = 0 umount2("./413/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./413/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./413/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./413/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./413/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./413/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./413") = 0 mkdir("./414", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6257 ./strace-static-x86_64: Process 6257 attached [pid 6257] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6257] chdir("./414") = 0 [pid 6257] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6257] setpgid(0, 0) = 0 [pid 6257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6257] write(3, "1000", 4) = 4 [pid 6257] close(3) = 0 [pid 6257] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6257] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6257] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6257] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6258], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6258 [pid 6257] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6258 attached [pid 6258] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6258] memfd_create("syzkaller", 0) = 3 [pid 6258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6258] munmap(0x7f927cba2000, 2097152) = 0 [pid 6258] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6258] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6258] close(3) = 0 [pid 6258] mkdir("./file0", 0777) = 0 [ 239.862639][ T6258] loop0: detected capacity change from 0 to 4096 [ 239.879391][ T6258] NILFS (loop0): invalid segment: Checksum error in segment payload [ 239.887480][ T6258] NILFS (loop0): trying rollback from an earlier position [ 239.902795][ T6258] NILFS (loop0): recovery complete [pid 6258] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6258] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6258] chdir("./file0") = 0 [pid 6258] ioctl(4, LOOP_CLR_FD) = 0 [pid 6258] close(4) = 0 [pid 6258] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] <... futex resumed>) = 0 [pid 6257] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] <... futex resumed>) = 1 [pid 6258] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6258] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] <... futex resumed>) = 0 [pid 6257] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] <... futex resumed>) = 1 [pid 6258] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6258] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] <... futex resumed>) = 0 [pid 6257] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] <... futex resumed>) = 1 [pid 6258] ftruncate(5, 33587195) = 0 [pid 6258] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] <... futex resumed>) = 0 [pid 6257] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] <... futex resumed>) = 1 [ 239.909063][ T6259] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6258] sendfile(4, 5, NULL, 281474978811909 [pid 6257] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6257] exit_group(0) = ? [pid 6258] <... sendfile resumed>) = ? [pid 6258] +++ exited with 0 +++ [pid 6257] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6257, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./414", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./414", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./414/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./414/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./414/binderfs") = 0 umount2("./414/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./414/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./414/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./414/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./414/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./414/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./414") = 0 mkdir("./415", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6260 ./strace-static-x86_64: Process 6260 attached [pid 6260] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6260] chdir("./415") = 0 [pid 6260] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6260] setpgid(0, 0) = 0 [pid 6260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6260] write(3, "1000", 4) = 4 [pid 6260] close(3) = 0 [pid 6260] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6260] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6260] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6260] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6260] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6261], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6261 [pid 6260] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6260] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6261 attached [pid 6261] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6261] memfd_create("syzkaller", 0) = 3 [pid 6261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6261] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6261] munmap(0x7f927cba2000, 2097152) = 0 [pid 6261] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6261] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6261] close(3) = 0 [pid 6261] mkdir("./file0", 0777) = 0 [pid 6261] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6261] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6261] chdir("./file0") = 0 [pid 6261] ioctl(4, LOOP_CLR_FD) = 0 [pid 6261] close(4) = 0 [pid 6261] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 240.214932][ T6261] loop0: detected capacity change from 0 to 4096 [ 240.230559][ T6261] NILFS (loop0): invalid segment: Checksum error in segment payload [ 240.238632][ T6261] NILFS (loop0): trying rollback from an earlier position [ 240.253324][ T6261] NILFS (loop0): recovery complete [pid 6261] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6260] <... futex resumed>) = 0 [pid 6260] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6260] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6261] <... futex resumed>) = 0 [pid 6261] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6261] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6260] <... futex resumed>) = 0 [pid 6261] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6260] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6260] <... futex resumed>) = 0 [pid 6261] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6260] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6261] <... open resumed>) = 5 [pid 6261] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6260] <... futex resumed>) = 0 [pid 6261] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6260] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6260] <... futex resumed>) = 0 [pid 6261] ftruncate(5, 33587195 [pid 6260] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6261] <... ftruncate resumed>) = 0 [pid 6261] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6260] <... futex resumed>) = 0 [pid 6261] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6260] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6260] <... futex resumed>) = 0 [pid 6261] sendfile(4, 5, NULL, 281474978811909 [ 240.260058][ T6262] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6260] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6260] exit_group(0 [pid 6261] <... sendfile resumed>) = ? [pid 6260] <... exit_group resumed>) = ? [pid 6261] +++ exited with 0 +++ [pid 6260] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6260, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./415", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./415", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./415/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./415/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./415/binderfs") = 0 umount2("./415/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./415/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./415/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./415/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./415/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./415/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./415") = 0 mkdir("./416", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6263 ./strace-static-x86_64: Process 6263 attached [pid 6263] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6263] chdir("./416") = 0 [pid 6263] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6263] setpgid(0, 0) = 0 [pid 6263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6263] write(3, "1000", 4) = 4 [pid 6263] close(3) = 0 [pid 6263] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6263] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6263] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6263] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6264], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6264 ./strace-static-x86_64: Process 6264 attached [pid 6263] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6264] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6264] memfd_create("syzkaller", 0) = 3 [pid 6264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6264] munmap(0x7f927cba2000, 2097152) = 0 [pid 6264] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6264] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6264] close(3) = 0 [pid 6264] mkdir("./file0", 0777) = 0 [pid 6264] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6264] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6264] chdir("./file0") = 0 [ 240.596366][ T6264] loop0: detected capacity change from 0 to 4096 [ 240.611776][ T6264] NILFS (loop0): invalid segment: Checksum error in segment payload [ 240.619891][ T6264] NILFS (loop0): trying rollback from an earlier position [ 240.635144][ T6264] NILFS (loop0): recovery complete [pid 6264] ioctl(4, LOOP_CLR_FD) = 0 [pid 6264] close(4) = 0 [pid 6264] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6263] <... futex resumed>) = 0 [pid 6263] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6264] <... futex resumed>) = 1 [pid 6264] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6264] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6263] <... futex resumed>) = 0 [pid 6263] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6264] <... futex resumed>) = 1 [pid 6264] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6264] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6263] <... futex resumed>) = 0 [pid 6263] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6264] <... futex resumed>) = 1 [pid 6264] ftruncate(5, 33587195) = 0 [pid 6264] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6263] <... futex resumed>) = 0 [pid 6264] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6263] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6264] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6263] <... futex resumed>) = 0 [pid 6264] sendfile(4, 5, NULL, 281474978811909 [ 240.641294][ T6265] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6263] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6263] exit_group(0 [pid 6264] <... sendfile resumed>) = ? [pid 6263] <... exit_group resumed>) = ? [pid 6264] +++ exited with 0 +++ [pid 6263] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6263, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./416", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./416", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./416/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./416/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./416/binderfs") = 0 umount2("./416/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./416/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./416/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./416/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./416/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./416/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./416") = 0 mkdir("./417", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6268 ./strace-static-x86_64: Process 6268 attached [pid 6268] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6268] chdir("./417") = 0 [pid 6268] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6268] setpgid(0, 0) = 0 [pid 6268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6268] write(3, "1000", 4) = 4 [pid 6268] close(3) = 0 [pid 6268] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6268] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6268] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6268] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6269], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6269 [pid 6268] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6268] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6269 attached [pid 6269] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6269] memfd_create("syzkaller", 0) = 3 [pid 6269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6269] munmap(0x7f927cba2000, 2097152) = 0 [pid 6269] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6269] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6269] close(3) = 0 [pid 6269] mkdir("./file0", 0777) = 0 [pid 6269] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 240.991921][ T6269] loop0: detected capacity change from 0 to 4096 [ 241.008815][ T6269] NILFS (loop0): invalid segment: Checksum error in segment payload [ 241.017186][ T6269] NILFS (loop0): trying rollback from an earlier position [ 241.032622][ T6269] NILFS (loop0): recovery complete [pid 6269] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6269] chdir("./file0") = 0 [pid 6269] ioctl(4, LOOP_CLR_FD) = 0 [pid 6269] close(4) = 0 [pid 6269] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6268] <... futex resumed>) = 0 [pid 6268] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6268] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6269] <... futex resumed>) = 1 [pid 6269] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6269] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6268] <... futex resumed>) = 0 [pid 6268] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6268] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6269] <... futex resumed>) = 1 [pid 6269] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6269] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6268] <... futex resumed>) = 0 [pid 6268] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6268] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6269] <... futex resumed>) = 1 [pid 6269] ftruncate(5, 33587195) = 0 [pid 6269] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6268] <... futex resumed>) = 0 [pid 6268] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6268] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6269] <... futex resumed>) = 1 [ 241.039034][ T6270] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6269] sendfile(4, 5, NULL, 281474978811909 [pid 6268] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6268] exit_group(0 [pid 6269] <... sendfile resumed>) = ? [pid 6268] <... exit_group resumed>) = ? [pid 6269] +++ exited with 0 +++ [pid 6268] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6268, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./417", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./417", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./417/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./417/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./417/binderfs") = 0 umount2("./417/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./417/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./417/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./417/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./417/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./417/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./417") = 0 mkdir("./418", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6271 ./strace-static-x86_64: Process 6271 attached [pid 6271] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6271] chdir("./418") = 0 [pid 6271] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6271] setpgid(0, 0) = 0 [pid 6271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6271] write(3, "1000", 4) = 4 [pid 6271] close(3) = 0 [pid 6271] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6271] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6271] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6271] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6271] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6272], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6272 [pid 6271] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6271] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6272 attached [pid 6272] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6272] memfd_create("syzkaller", 0) = 3 [pid 6272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6272] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6272] munmap(0x7f927cba2000, 2097152) = 0 [pid 6272] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6272] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6272] close(3) = 0 [pid 6272] mkdir("./file0", 0777) = 0 [pid 6272] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6272] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6272] chdir("./file0") = 0 [pid 6272] ioctl(4, LOOP_CLR_FD) = 0 [pid 6272] close(4) = 0 [pid 6272] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 241.383868][ T6272] loop0: detected capacity change from 0 to 4096 [ 241.398676][ T6272] NILFS (loop0): invalid segment: Checksum error in segment payload [ 241.406773][ T6272] NILFS (loop0): trying rollback from an earlier position [ 241.421796][ T6272] NILFS (loop0): recovery complete [pid 6272] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6271] <... futex resumed>) = 0 [pid 6271] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6271] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6272] <... futex resumed>) = 0 [pid 6272] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6272] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6271] <... futex resumed>) = 0 [pid 6271] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6271] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6272] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6272] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6271] <... futex resumed>) = 0 [pid 6271] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6272] ftruncate(5, 33587195 [pid 6271] <... futex resumed>) = 0 [pid 6271] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6272] <... ftruncate resumed>) = 0 [pid 6272] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] <... futex resumed>) = 0 [pid 6271] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6271] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6272] <... futex resumed>) = 1 [ 241.428121][ T6273] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6272] sendfile(4, 5, NULL, 281474978811909 [pid 6271] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6271] exit_group(0 [pid 6272] <... sendfile resumed>) = ? [pid 6271] <... exit_group resumed>) = ? [pid 6272] +++ exited with 0 +++ [pid 6271] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6271, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./418", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./418", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./418/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./418/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./418/binderfs") = 0 umount2("./418/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./418/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./418/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./418/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./418/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./418/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./418") = 0 mkdir("./419", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6275 ./strace-static-x86_64: Process 6275 attached [pid 6275] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6275] chdir("./419") = 0 [pid 6275] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6275] setpgid(0, 0) = 0 [pid 6275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6275] write(3, "1000", 4) = 4 [pid 6275] close(3) = 0 [pid 6275] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6275] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6275] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6275] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6276], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6276 [pid 6275] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6275] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6276 attached [pid 6276] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6276] memfd_create("syzkaller", 0) = 3 [pid 6276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6276] munmap(0x7f927cba2000, 2097152) = 0 [pid 6276] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6276] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6276] close(3) = 0 [pid 6276] mkdir("./file0", 0777) = 0 [ 241.749218][ T6276] loop0: detected capacity change from 0 to 4096 [ 241.772541][ T6276] NILFS (loop0): invalid segment: Checksum error in segment payload [ 241.780711][ T6276] NILFS (loop0): trying rollback from an earlier position [pid 6276] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6276] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6276] chdir("./file0") = 0 [pid 6276] ioctl(4, LOOP_CLR_FD) = 0 [pid 6276] close(4) = 0 [pid 6276] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6275] <... futex resumed>) = 0 [pid 6276] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6275] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6275] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6276] <... open resumed>) = 4 [pid 6276] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6275] <... futex resumed>) = 0 [pid 6276] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6275] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6276] <... open resumed>) = 5 [pid 6275] <... futex resumed>) = 0 [pid 6276] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6275] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6276] <... futex resumed>) = 0 [pid 6275] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6276] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6275] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6275] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6276] ftruncate(5, 33587195) = 0 [pid 6276] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6275] <... futex resumed>) = 0 [pid 6276] sendfile(4, 5, NULL, 281474978811909 [pid 6275] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 241.795851][ T6276] NILFS (loop0): recovery complete [ 241.801707][ T6278] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6275] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6275] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6275] exit_group(0 [pid 6276] <... sendfile resumed>) = ? [pid 6275] <... exit_group resumed>) = ? [pid 6276] +++ exited with 0 +++ [pid 6275] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6275, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- umount2("./419", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./419", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./419/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./419/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./419/binderfs") = 0 umount2("./419/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./419/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./419/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./419/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./419/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./419/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./419") = 0 mkdir("./420", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6279 ./strace-static-x86_64: Process 6279 attached [pid 6279] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6279] chdir("./420") = 0 [pid 6279] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6279] setpgid(0, 0) = 0 [pid 6279] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6279] write(3, "1000", 4) = 4 [pid 6279] close(3) = 0 [pid 6279] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6279] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6279] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6279] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6279] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6280 attached , parent_tid=[6280], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6280 [pid 6279] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6279] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6280] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6280] memfd_create("syzkaller", 0) = 3 [pid 6280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6280] munmap(0x7f927cba2000, 2097152) = 0 [pid 6280] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6280] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6280] close(3) = 0 [pid 6280] mkdir("./file0", 0777) = 0 [ 242.146072][ T6280] loop0: detected capacity change from 0 to 4096 [ 242.161809][ T6280] NILFS (loop0): invalid segment: Checksum error in segment payload [ 242.169908][ T6280] NILFS (loop0): trying rollback from an earlier position [ 242.184542][ T6280] NILFS (loop0): recovery complete [pid 6280] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6280] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6280] chdir("./file0") = 0 [pid 6280] ioctl(4, LOOP_CLR_FD) = 0 [pid 6280] close(4) = 0 [pid 6280] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6279] <... futex resumed>) = 0 [pid 6279] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6279] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6280] <... futex resumed>) = 1 [pid 6280] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6280] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6279] <... futex resumed>) = 0 [pid 6279] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6279] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6280] <... futex resumed>) = 1 [pid 6280] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6280] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6279] <... futex resumed>) = 0 [pid 6279] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6279] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6280] <... futex resumed>) = 1 [pid 6280] ftruncate(5, 33587195) = 0 [pid 6280] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6279] <... futex resumed>) = 0 [pid 6279] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6279] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6280] <... futex resumed>) = 1 [ 242.190515][ T6281] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6280] sendfile(4, 5, NULL, 281474978811909 [pid 6279] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6279] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6279] exit_group(0) = ? [pid 6280] <... sendfile resumed>) = ? [pid 6280] +++ exited with 0 +++ [pid 6279] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6279, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./420", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./420", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./420/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./420/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./420/binderfs") = 0 umount2("./420/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./420/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./420/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./420/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./420/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./420/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./420") = 0 mkdir("./421", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6282 ./strace-static-x86_64: Process 6282 attached [pid 6282] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6282] chdir("./421") = 0 [pid 6282] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6282] setpgid(0, 0) = 0 [pid 6282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6282] write(3, "1000", 4) = 4 [pid 6282] close(3) = 0 [pid 6282] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6282] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6282] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6282] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6282] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6283], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6283 [pid 6282] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6282] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6283 attached [pid 6283] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6283] memfd_create("syzkaller", 0) = 3 [pid 6283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6283] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6283] munmap(0x7f927cba2000, 2097152) = 0 [pid 6283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6283] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6283] close(3) = 0 [pid 6283] mkdir("./file0", 0777) = 0 [ 242.494415][ T6283] loop0: detected capacity change from 0 to 4096 [ 242.511100][ T6283] NILFS (loop0): invalid segment: Checksum error in segment payload [ 242.519192][ T6283] NILFS (loop0): trying rollback from an earlier position [ 242.534128][ T6283] NILFS (loop0): recovery complete [pid 6283] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6283] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6283] chdir("./file0") = 0 [pid 6283] ioctl(4, LOOP_CLR_FD) = 0 [pid 6283] close(4) = 0 [pid 6283] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6282] <... futex resumed>) = 0 [pid 6282] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6282] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6283] <... futex resumed>) = 1 [pid 6283] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6283] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6282] <... futex resumed>) = 0 [pid 6282] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6282] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6283] <... futex resumed>) = 1 [pid 6283] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6283] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6282] <... futex resumed>) = 0 [pid 6282] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6282] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6283] <... futex resumed>) = 1 [pid 6283] ftruncate(5, 33587195) = 0 [pid 6283] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6282] <... futex resumed>) = 0 [pid 6282] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6282] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6283] <... futex resumed>) = 1 [pid 6283] sendfile(4, 5, NULL, 281474978811909 [pid 6282] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 242.539936][ T6284] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6282] exit_group(0) = ? [pid 6283] <... sendfile resumed>) = ? [pid 6283] +++ exited with 0 +++ [pid 6282] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6282, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./421", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./421", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./421/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./421/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./421/binderfs") = 0 umount2("./421/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./421/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./421/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./421/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./421/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./421/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./421") = 0 mkdir("./422", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6286 ./strace-static-x86_64: Process 6286 attached [pid 6286] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6286] chdir("./422") = 0 [pid 6286] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6286] setpgid(0, 0) = 0 [pid 6286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6286] write(3, "1000", 4) = 4 [pid 6286] close(3) = 0 [pid 6286] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6286] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6286] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6286] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6286] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6287 attached , parent_tid=[6287], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6287 [pid 6286] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6287] set_robust_list(0x7f9284fc29e0, 24 [pid 6286] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6287] <... set_robust_list resumed>) = 0 [pid 6287] memfd_create("syzkaller", 0) = 3 [pid 6287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6287] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6287] munmap(0x7f927cba2000, 2097152) = 0 [pid 6287] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6287] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6287] close(3) = 0 [pid 6287] mkdir("./file0", 0777) = 0 [ 242.854017][ T6287] loop0: detected capacity change from 0 to 4096 [ 242.869184][ T6287] NILFS (loop0): invalid segment: Checksum error in segment payload [ 242.877264][ T6287] NILFS (loop0): trying rollback from an earlier position [ 242.895506][ T6287] NILFS (loop0): recovery complete [pid 6287] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6287] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6287] chdir("./file0") = 0 [pid 6287] ioctl(4, LOOP_CLR_FD) = 0 [pid 6287] close(4) = 0 [pid 6287] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6286] <... futex resumed>) = 0 [pid 6286] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6286] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6287] <... futex resumed>) = 1 [pid 6287] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6287] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6286] <... futex resumed>) = 0 [pid 6286] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6286] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6287] <... futex resumed>) = 1 [pid 6287] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6287] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6286] <... futex resumed>) = 0 [pid 6286] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6286] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6287] <... futex resumed>) = 1 [pid 6287] ftruncate(5, 33587195) = 0 [pid 6287] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6286] <... futex resumed>) = 0 [pid 6286] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6286] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6287] <... futex resumed>) = 1 [pid 6287] sendfile(4, 5, NULL, 281474978811909 [pid 6286] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 242.902027][ T6288] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6286] exit_group(0) = ? [pid 6287] <... sendfile resumed>) = ? [pid 6287] +++ exited with 0 +++ [pid 6286] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6286, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./422", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./422", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./422/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./422/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./422/binderfs") = 0 umount2("./422/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./422/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./422/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./422/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./422/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./422/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./422") = 0 mkdir("./423", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6289 ./strace-static-x86_64: Process 6289 attached [pid 6289] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6289] chdir("./423") = 0 [pid 6289] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6289] setpgid(0, 0) = 0 [pid 6289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6289] write(3, "1000", 4) = 4 [pid 6289] close(3) = 0 [pid 6289] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6289] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6289] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6289] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6290], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6290 [pid 6289] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6289] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6290 attached [pid 6290] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6290] memfd_create("syzkaller", 0) = 3 [pid 6290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6290] munmap(0x7f927cba2000, 2097152) = 0 [pid 6290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6290] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6290] close(3) = 0 [pid 6290] mkdir("./file0", 0777) = 0 [ 243.205561][ T6290] loop0: detected capacity change from 0 to 4096 [ 243.221506][ T6290] NILFS (loop0): invalid segment: Checksum error in segment payload [ 243.229591][ T6290] NILFS (loop0): trying rollback from an earlier position [ 243.244332][ T6290] NILFS (loop0): recovery complete [pid 6290] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6290] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6290] chdir("./file0") = 0 [pid 6290] ioctl(4, LOOP_CLR_FD) = 0 [pid 6290] close(4) = 0 [pid 6290] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] <... futex resumed>) = 0 [pid 6289] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6289] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6290] <... futex resumed>) = 1 [pid 6290] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6290] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] <... futex resumed>) = 0 [pid 6289] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6289] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6290] <... futex resumed>) = 1 [pid 6290] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6290] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] <... futex resumed>) = 0 [pid 6289] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6289] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6290] <... futex resumed>) = 1 [pid 6290] ftruncate(5, 33587195) = 0 [pid 6290] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] <... futex resumed>) = 0 [pid 6289] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6289] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6290] <... futex resumed>) = 1 [ 243.250327][ T6291] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6290] sendfile(4, 5, NULL, 281474978811909 [pid 6289] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6289] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6289] exit_group(0) = ? [pid 6290] <... sendfile resumed>) = ? [pid 6290] +++ exited with 0 +++ [pid 6289] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6289, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./423", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./423", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./423/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./423/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./423/binderfs") = 0 umount2("./423/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./423/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./423/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./423/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./423/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./423/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./423") = 0 mkdir("./424", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6292 ./strace-static-x86_64: Process 6292 attached [pid 6292] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6292] chdir("./424") = 0 [pid 6292] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6292] setpgid(0, 0) = 0 [pid 6292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6292] write(3, "1000", 4) = 4 [pid 6292] close(3) = 0 [pid 6292] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6292] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6292] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6292] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6293 attached [pid 6293] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6293] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6292] <... clone resumed>, parent_tid=[6293], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6293 [pid 6292] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6293] <... futex resumed>) = 0 [pid 6293] memfd_create("syzkaller", 0 [pid 6292] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6293] <... memfd_create resumed>) = 3 [pid 6293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6293] munmap(0x7f927cba2000, 2097152) = 0 [pid 6293] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6293] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6293] close(3) = 0 [pid 6293] mkdir("./file0", 0777) = 0 [ 243.588701][ T6293] loop0: detected capacity change from 0 to 4096 [ 243.605874][ T6293] NILFS (loop0): invalid segment: Checksum error in segment payload [ 243.614005][ T6293] NILFS (loop0): trying rollback from an earlier position [ 243.629032][ T6293] NILFS (loop0): recovery complete [pid 6293] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6293] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6293] chdir("./file0") = 0 [pid 6293] ioctl(4, LOOP_CLR_FD) = 0 [pid 6293] close(4) = 0 [pid 6293] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6292] <... futex resumed>) = 0 [pid 6292] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6292] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6293] <... futex resumed>) = 1 [pid 6293] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6293] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6292] <... futex resumed>) = 0 [pid 6292] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6292] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6293] <... futex resumed>) = 1 [pid 6293] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6293] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6292] <... futex resumed>) = 0 [pid 6292] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6292] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6293] <... futex resumed>) = 1 [pid 6293] ftruncate(5, 33587195) = 0 [pid 6293] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6292] <... futex resumed>) = 0 [pid 6292] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6292] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6293] <... futex resumed>) = 1 [ 243.635304][ T6294] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6293] sendfile(4, 5, NULL, 281474978811909 [pid 6292] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6292] exit_group(0) = ? [pid 6293] <... sendfile resumed>) = ? [pid 6293] +++ exited with 0 +++ [pid 6292] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6292, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./424", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./424", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./424/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./424/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./424/binderfs") = 0 umount2("./424/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./424/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./424/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./424/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./424/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./424/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./424") = 0 mkdir("./425", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6295 ./strace-static-x86_64: Process 6295 attached [pid 6295] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6295] chdir("./425") = 0 [pid 6295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6295] setpgid(0, 0) = 0 [pid 6295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6295] write(3, "1000", 4) = 4 [pid 6295] close(3) = 0 [pid 6295] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6295] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6295] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6295] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6296], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6296 ./strace-static-x86_64: Process 6296 attached [pid 6295] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6295] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6296] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6296] memfd_create("syzkaller", 0) = 3 [pid 6296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6296] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6296] munmap(0x7f927cba2000, 2097152) = 0 [pid 6296] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6296] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6296] close(3) = 0 [pid 6296] mkdir("./file0", 0777) = 0 [pid 6296] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 243.947336][ T6296] loop0: detected capacity change from 0 to 4096 [ 243.964620][ T6296] NILFS (loop0): invalid segment: Checksum error in segment payload [ 243.972731][ T6296] NILFS (loop0): trying rollback from an earlier position [ 243.989852][ T6296] NILFS (loop0): recovery complete [pid 6296] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6296] chdir("./file0") = 0 [pid 6296] ioctl(4, LOOP_CLR_FD) = 0 [pid 6296] close(4) = 0 [pid 6296] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6296] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6295] <... futex resumed>) = 0 [pid 6295] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6295] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6296] <... futex resumed>) = 0 [pid 6296] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6296] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6295] <... futex resumed>) = 0 [pid 6296] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6295] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6295] <... futex resumed>) = 0 [pid 6296] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6295] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6296] <... open resumed>) = 5 [pid 6296] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6295] <... futex resumed>) = 0 [pid 6296] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6295] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6295] <... futex resumed>) = 0 [pid 6296] ftruncate(5, 33587195 [pid 6295] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6296] <... ftruncate resumed>) = 0 [pid 6296] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6295] <... futex resumed>) = 0 [pid 6296] sendfile(4, 5, NULL, 281474978811909 [pid 6295] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 243.995718][ T6297] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6295] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6295] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6295] exit_group(0) = ? [pid 6296] <... sendfile resumed>) = ? [pid 6296] +++ exited with 0 +++ [pid 6295] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6295, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./425", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./425", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./425/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./425/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./425/binderfs") = 0 umount2("./425/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./425/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./425/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./425/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./425/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./425/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./425") = 0 mkdir("./426", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6298 ./strace-static-x86_64: Process 6298 attached [pid 6298] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6298] chdir("./426") = 0 [pid 6298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6298] setpgid(0, 0) = 0 [pid 6298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6298] write(3, "1000", 4) = 4 [pid 6298] close(3) = 0 [pid 6298] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6298] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6298] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6298] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6299], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6299 [pid 6298] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6298] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6299 attached [pid 6299] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6299] memfd_create("syzkaller", 0) = 3 [pid 6299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6299] munmap(0x7f927cba2000, 2097152) = 0 [pid 6299] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6299] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6299] close(3) = 0 [pid 6299] mkdir("./file0", 0777) = 0 [pid 6299] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6299] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6299] chdir("./file0") = 0 [pid 6299] ioctl(4, LOOP_CLR_FD) = 0 [pid 6299] close(4) = 0 [ 244.319021][ T6299] loop0: detected capacity change from 0 to 4096 [ 244.334511][ T6299] NILFS (loop0): invalid segment: Checksum error in segment payload [ 244.342545][ T6299] NILFS (loop0): trying rollback from an earlier position [ 244.357926][ T6299] NILFS (loop0): recovery complete [pid 6299] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6299] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6298] <... futex resumed>) = 0 [pid 6298] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6298] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6299] <... futex resumed>) = 0 [pid 6299] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6299] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6298] <... futex resumed>) = 0 [pid 6298] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6298] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6299] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6299] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6298] <... futex resumed>) = 0 [pid 6298] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6298] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6299] ftruncate(5, 33587195) = 0 [pid 6299] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6298] <... futex resumed>) = 0 [pid 6298] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6298] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6299] <... futex resumed>) = 1 [ 244.364305][ T6300] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6299] sendfile(4, 5, NULL, 281474978811909 [pid 6298] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6298] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6298] exit_group(0 [pid 6299] <... sendfile resumed>) = ? [pid 6298] <... exit_group resumed>) = ? [pid 6299] +++ exited with 0 +++ [pid 6298] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6298, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./426", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./426", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./426/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./426/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./426/binderfs") = 0 umount2("./426/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./426/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./426/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./426/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./426/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./426/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./426") = 0 mkdir("./427", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6301 ./strace-static-x86_64: Process 6301 attached [pid 6301] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6301] chdir("./427") = 0 [pid 6301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6301] setpgid(0, 0) = 0 [pid 6301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6301] write(3, "1000", 4) = 4 [pid 6301] close(3) = 0 [pid 6301] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6301] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6301] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6301] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6301] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6302 attached , parent_tid=[6302], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6302 [pid 6302] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6302] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6301] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6302] <... futex resumed>) = 0 [pid 6301] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6302] memfd_create("syzkaller", 0) = 3 [pid 6302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6302] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6302] munmap(0x7f927cba2000, 2097152) = 0 [pid 6302] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6302] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6302] close(3) = 0 [pid 6302] mkdir("./file0", 0777) = 0 [pid 6302] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 244.690545][ T6302] loop0: detected capacity change from 0 to 4096 [ 244.707002][ T6302] NILFS (loop0): invalid segment: Checksum error in segment payload [ 244.715090][ T6302] NILFS (loop0): trying rollback from an earlier position [ 244.730743][ T6302] NILFS (loop0): recovery complete [pid 6302] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6302] chdir("./file0") = 0 [pid 6302] ioctl(4, LOOP_CLR_FD) = 0 [pid 6302] close(4) = 0 [pid 6302] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6301] <... futex resumed>) = 0 [pid 6302] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6301] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6301] <... futex resumed>) = 0 [pid 6302] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6301] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6302] <... open resumed>) = 4 [pid 6302] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6301] <... futex resumed>) = 0 [pid 6302] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6301] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6302] <... open resumed>) = 5 [pid 6301] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6302] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6301] <... futex resumed>) = 0 [pid 6302] ftruncate(5, 33587195 [pid 6301] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6301] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6302] <... ftruncate resumed>) = 0 [pid 6302] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6301] <... futex resumed>) = 0 [pid 6301] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6302] sendfile(4, 5, NULL, 281474978811909 [pid 6301] <... futex resumed>) = 0 [ 244.737408][ T6303] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6301] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6301] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6301] exit_group(0) = ? [pid 6302] <... sendfile resumed>) = ? [pid 6302] +++ exited with 0 +++ [pid 6301] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6301, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./427", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./427", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./427/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./427/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./427/binderfs") = 0 umount2("./427/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./427/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./427/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./427/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./427/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./427/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./427") = 0 mkdir("./428", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6304 ./strace-static-x86_64: Process 6304 attached [pid 6304] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6304] chdir("./428") = 0 [pid 6304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6304] setpgid(0, 0) = 0 [pid 6304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6304] write(3, "1000", 4) = 4 [pid 6304] close(3) = 0 [pid 6304] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6304] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6304] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6304] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6305 attached , parent_tid=[6305], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6305 [pid 6305] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6305] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6304] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6304] <... futex resumed>) = 0 [pid 6304] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6305] memfd_create("syzkaller", 0) = 3 [pid 6305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6305] munmap(0x7f927cba2000, 2097152) = 0 [pid 6305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6305] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6305] close(3) = 0 [pid 6305] mkdir("./file0", 0777) = 0 [pid 6305] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 245.076380][ T6305] loop0: detected capacity change from 0 to 4096 [ 245.092298][ T6305] NILFS (loop0): invalid segment: Checksum error in segment payload [ 245.100430][ T6305] NILFS (loop0): trying rollback from an earlier position [ 245.115875][ T6305] NILFS (loop0): recovery complete [pid 6305] chdir("./file0") = 0 [pid 6305] ioctl(4, LOOP_CLR_FD) = 0 [pid 6305] close(4) = 0 [pid 6305] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] <... futex resumed>) = 0 [pid 6304] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6304] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6305] <... futex resumed>) = 1 [pid 6305] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6305] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] <... futex resumed>) = 0 [pid 6304] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6304] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6305] <... futex resumed>) = 1 [pid 6305] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6305] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] <... futex resumed>) = 0 [pid 6304] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6304] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6305] <... futex resumed>) = 1 [pid 6305] ftruncate(5, 33587195) = 0 [pid 6305] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] <... futex resumed>) = 0 [pid 6304] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6304] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6305] <... futex resumed>) = 1 [ 245.121848][ T6306] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6305] sendfile(4, 5, NULL, 281474978811909 [pid 6304] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6304] exit_group(0) = ? [pid 6305] <... sendfile resumed>) = ? [pid 6305] +++ exited with 0 +++ [pid 6304] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6304, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- umount2("./428", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./428", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./428/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./428/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./428/binderfs") = 0 umount2("./428/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./428/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./428/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./428/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./428/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./428/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./428") = 0 mkdir("./429", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6307 ./strace-static-x86_64: Process 6307 attached [pid 6307] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6307] chdir("./429") = 0 [pid 6307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6307] setpgid(0, 0) = 0 [pid 6307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6307] write(3, "1000", 4) = 4 [pid 6307] close(3) = 0 [pid 6307] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6307] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6307] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6307] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6308 attached , parent_tid=[6308], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6308 [pid 6308] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6308] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6307] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6308] <... futex resumed>) = 0 [pid 6308] memfd_create("syzkaller", 0 [pid 6307] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6308] <... memfd_create resumed>) = 3 [pid 6308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6308] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6308] munmap(0x7f927cba2000, 2097152) = 0 [pid 6308] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6308] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6308] close(3) = 0 [pid 6308] mkdir("./file0", 0777) = 0 [ 245.440743][ T6308] loop0: detected capacity change from 0 to 4096 [ 245.456104][ T6308] NILFS (loop0): invalid segment: Checksum error in segment payload [ 245.464296][ T6308] NILFS (loop0): trying rollback from an earlier position [ 245.479464][ T6308] NILFS (loop0): recovery complete [pid 6308] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6308] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6308] chdir("./file0") = 0 [pid 6308] ioctl(4, LOOP_CLR_FD) = 0 [pid 6308] close(4) = 0 [pid 6308] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6308] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6307] <... futex resumed>) = 0 [pid 6307] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6307] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6308] <... futex resumed>) = 0 [pid 6308] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6308] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6307] <... futex resumed>) = 0 [pid 6307] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6307] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6308] <... futex resumed>) = 1 [pid 6308] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6308] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6307] <... futex resumed>) = 0 [pid 6307] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6307] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6308] <... futex resumed>) = 1 [pid 6308] ftruncate(5, 33587195) = 0 [pid 6308] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6307] <... futex resumed>) = 0 [pid 6307] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6307] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6308] <... futex resumed>) = 1 [ 245.485470][ T6309] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6308] sendfile(4, 5, NULL, 281474978811909 [pid 6307] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6307] exit_group(0) = ? [pid 6308] <... sendfile resumed>) = ? [pid 6308] +++ exited with 0 +++ [pid 6307] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6307, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- umount2("./429", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./429", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./429/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./429/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./429/binderfs") = 0 umount2("./429/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./429/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./429/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./429/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./429/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./429/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./429") = 0 mkdir("./430", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6310 ./strace-static-x86_64: Process 6310 attached [pid 6310] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6310] chdir("./430") = 0 [pid 6310] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6310] setpgid(0, 0) = 0 [pid 6310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6310] write(3, "1000", 4) = 4 [pid 6310] close(3) = 0 [pid 6310] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6310] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6310] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6310] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6311 attached , parent_tid=[6311], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6311 [pid 6310] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6311] set_robust_list(0x7f9284fc29e0, 24 [pid 6310] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6311] <... set_robust_list resumed>) = 0 [pid 6311] memfd_create("syzkaller", 0) = 3 [pid 6311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6311] munmap(0x7f927cba2000, 2097152) = 0 [pid 6311] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6311] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6311] close(3) = 0 [pid 6311] mkdir("./file0", 0777) = 0 [ 245.835055][ T6311] loop0: detected capacity change from 0 to 4096 [ 245.850854][ T6311] NILFS (loop0): invalid segment: Checksum error in segment payload [ 245.858958][ T6311] NILFS (loop0): trying rollback from an earlier position [ 245.874585][ T6311] NILFS (loop0): recovery complete [pid 6311] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6311] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6311] chdir("./file0") = 0 [pid 6311] ioctl(4, LOOP_CLR_FD) = 0 [pid 6311] close(4) = 0 [pid 6311] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6310] <... futex resumed>) = 0 [pid 6310] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6310] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6311] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6311] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6310] <... futex resumed>) = 0 [pid 6310] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6310] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6311] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6311] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6311] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6310] <... futex resumed>) = 0 [pid 6310] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6310] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6311] <... futex resumed>) = 0 [pid 6311] ftruncate(5, 33587195) = 0 [pid 6311] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6310] <... futex resumed>) = 0 [pid 6310] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6310] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6311] <... futex resumed>) = 1 [ 245.880857][ T6312] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6311] sendfile(4, 5, NULL, 281474978811909 [pid 6310] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6310] exit_group(0) = ? [pid 6311] <... sendfile resumed>) = ? [pid 6311] +++ exited with 0 +++ [pid 6310] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6310, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- umount2("./430", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./430", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./430/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./430/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./430/binderfs") = 0 umount2("./430/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./430/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./430/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./430/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./430/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./430/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./430") = 0 mkdir("./431", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6313 ./strace-static-x86_64: Process 6313 attached [pid 6313] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6313] chdir("./431") = 0 [pid 6313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6313] setpgid(0, 0) = 0 [pid 6313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6313] write(3, "1000", 4) = 4 [pid 6313] close(3) = 0 [pid 6313] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6313] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6313] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6313] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6314], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6314 [pid 6313] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6313] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6314 attached [pid 6314] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6314] memfd_create("syzkaller", 0) = 3 [pid 6314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6314] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6314] munmap(0x7f927cba2000, 2097152) = 0 [pid 6314] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6314] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6314] close(3) = 0 [pid 6314] mkdir("./file0", 0777) = 0 [ 246.202608][ T6314] loop0: detected capacity change from 0 to 4096 [ 246.218871][ T6314] NILFS (loop0): invalid segment: Checksum error in segment payload [ 246.227008][ T6314] NILFS (loop0): trying rollback from an earlier position [ 246.241952][ T6314] NILFS (loop0): recovery complete [pid 6314] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6314] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6314] chdir("./file0") = 0 [pid 6314] ioctl(4, LOOP_CLR_FD) = 0 [pid 6314] close(4) = 0 [pid 6314] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6313] <... futex resumed>) = 0 [pid 6313] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6313] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6314] <... futex resumed>) = 1 [pid 6314] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6314] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6313] <... futex resumed>) = 0 [pid 6313] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6313] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6314] <... futex resumed>) = 1 [pid 6314] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6314] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6313] <... futex resumed>) = 0 [pid 6313] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6313] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6314] <... futex resumed>) = 1 [pid 6314] ftruncate(5, 33587195) = 0 [pid 6314] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6313] <... futex resumed>) = 0 [pid 6313] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6313] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6314] <... futex resumed>) = 1 [ 246.248202][ T6315] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6314] sendfile(4, 5, NULL, 281474978811909 [pid 6313] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6313] exit_group(0 [pid 6314] <... sendfile resumed>) = ? [pid 6313] <... exit_group resumed>) = ? [pid 6314] +++ exited with 0 +++ [pid 6313] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6313, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./431", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./431", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./431/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./431/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./431/binderfs") = 0 umount2("./431/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./431/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./431/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./431/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./431/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./431/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./431") = 0 mkdir("./432", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6316 ./strace-static-x86_64: Process 6316 attached [pid 6316] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6316] chdir("./432") = 0 [pid 6316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6316] setpgid(0, 0) = 0 [pid 6316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6316] write(3, "1000", 4) = 4 [pid 6316] close(3) = 0 [pid 6316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6316] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6316] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6316] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6317 attached , parent_tid=[6317], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6317 [pid 6317] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6317] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6316] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6317] <... futex resumed>) = 0 [pid 6316] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6317] memfd_create("syzkaller", 0) = 3 [pid 6317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6317] munmap(0x7f927cba2000, 2097152) = 0 [pid 6317] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6317] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6317] close(3) = 0 [pid 6317] mkdir("./file0", 0777) = 0 [pid 6317] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6317] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6317] chdir("./file0") = 0 [pid 6317] ioctl(4, LOOP_CLR_FD) = 0 [pid 6317] close(4) = 0 [pid 6317] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 246.579180][ T6317] loop0: detected capacity change from 0 to 4096 [ 246.593878][ T6317] NILFS (loop0): invalid segment: Checksum error in segment payload [ 246.601922][ T6317] NILFS (loop0): trying rollback from an earlier position [ 246.617203][ T6317] NILFS (loop0): recovery complete [pid 6317] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6316] <... futex resumed>) = 0 [pid 6316] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6316] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6317] <... futex resumed>) = 0 [pid 6317] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6317] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6317] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6316] <... futex resumed>) = 0 [pid 6316] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6317] <... futex resumed>) = 0 [pid 6316] <... futex resumed>) = 1 [pid 6317] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6316] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6317] <... open resumed>) = 5 [pid 6317] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6317] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6316] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6317] <... futex resumed>) = 0 [pid 6316] <... futex resumed>) = 1 [pid 6317] ftruncate(5, 33587195) = 0 [pid 6316] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6317] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6317] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6316] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6317] sendfile(4, 5, NULL, 281474978811909 [pid 6316] <... futex resumed>) = 0 [ 246.623588][ T6318] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6316] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6316] exit_group(0) = ? [pid 6317] <... sendfile resumed>) = ? [pid 6317] +++ exited with 0 +++ [pid 6316] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6316, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- umount2("./432", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./432", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./432/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./432/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./432/binderfs") = 0 umount2("./432/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./432/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./432/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./432/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./432/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./432/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./432") = 0 mkdir("./433", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6319 ./strace-static-x86_64: Process 6319 attached [pid 6319] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6319] chdir("./433") = 0 [pid 6319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6319] setpgid(0, 0) = 0 [pid 6319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6319] write(3, "1000", 4) = 4 [pid 6319] close(3) = 0 [pid 6319] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6319] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6319] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6319] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6320], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6320 [pid 6319] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6319] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6320 attached [pid 6320] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6320] memfd_create("syzkaller", 0) = 3 [pid 6320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6320] munmap(0x7f927cba2000, 2097152) = 0 [pid 6320] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6320] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6320] close(3) = 0 [pid 6320] mkdir("./file0", 0777) = 0 [pid 6320] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6320] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6320] chdir("./file0") = 0 [pid 6320] ioctl(4, LOOP_CLR_FD) = 0 [pid 6320] close(4) = 0 [pid 6320] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6319] <... futex resumed>) = 0 [pid 6320] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6319] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6319] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6320] <... open resumed>) = 4 [pid 6320] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6319] <... futex resumed>) = 0 [pid 6319] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6319] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6320] <... futex resumed>) = 1 [pid 6320] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6320] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6319] <... futex resumed>) = 0 [pid 6319] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6319] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6320] <... futex resumed>) = 1 [ 246.968988][ T6320] loop0: detected capacity change from 0 to 4096 [ 246.984279][ T6320] NILFS (loop0): invalid segment: Checksum error in segment payload [ 246.992321][ T6320] NILFS (loop0): trying rollback from an earlier position [ 247.008077][ T6320] NILFS (loop0): recovery complete [pid 6320] ftruncate(5, 33587195) = 0 [pid 6320] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6319] <... futex resumed>) = 0 [pid 6320] sendfile(4, 5, NULL, 281474978811909 [pid 6319] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6319] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 247.033852][ T6321] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6319] exit_group(0) = ? [pid 6320] <... sendfile resumed>) = ? [pid 6320] +++ exited with 0 +++ [pid 6319] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6319, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./433", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./433", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./433/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./433/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./433/binderfs") = 0 umount2("./433/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./433/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./433/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./433/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./433/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./433/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./433") = 0 mkdir("./434", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6322 ./strace-static-x86_64: Process 6322 attached [pid 6322] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6322] chdir("./434") = 0 [pid 6322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6322] setpgid(0, 0) = 0 [pid 6322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6322] write(3, "1000", 4) = 4 [pid 6322] close(3) = 0 [pid 6322] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6322] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6322] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6322] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6322] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6323 attached , parent_tid=[6323], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6323 [pid 6322] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6322] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6323] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6323] memfd_create("syzkaller", 0) = 3 [pid 6323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6323] munmap(0x7f927cba2000, 2097152) = 0 [pid 6323] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6323] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6323] close(3) = 0 [pid 6323] mkdir("./file0", 0777) = 0 [ 247.352608][ T6323] loop0: detected capacity change from 0 to 4096 [ 247.369330][ T6323] NILFS (loop0): invalid segment: Checksum error in segment payload [ 247.377430][ T6323] NILFS (loop0): trying rollback from an earlier position [ 247.392766][ T6323] NILFS (loop0): recovery complete [pid 6323] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6323] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6323] chdir("./file0") = 0 [pid 6323] ioctl(4, LOOP_CLR_FD) = 0 [pid 6323] close(4) = 0 [pid 6323] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6323] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6322] <... futex resumed>) = 0 [pid 6322] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6322] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6323] <... futex resumed>) = 0 [pid 6323] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6323] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6322] <... futex resumed>) = 0 [pid 6322] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6322] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6323] <... futex resumed>) = 1 [pid 6323] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6323] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6322] <... futex resumed>) = 0 [pid 6323] ftruncate(5, 33587195 [pid 6322] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6322] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6323] <... ftruncate resumed>) = 0 [pid 6323] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6322] <... futex resumed>) = 0 [pid 6322] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6322] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6323] <... futex resumed>) = 1 [ 247.398929][ T6324] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6323] sendfile(4, 5, NULL, 281474978811909 [pid 6322] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6322] exit_group(0) = ? [pid 6323] <... sendfile resumed>) = ? [pid 6323] +++ exited with 0 +++ [pid 6322] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6322, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./434", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./434", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./434/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./434/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./434/binderfs") = 0 umount2("./434/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./434/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./434/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./434/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./434/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./434/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./434") = 0 mkdir("./435", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6325 ./strace-static-x86_64: Process 6325 attached [pid 6325] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6325] chdir("./435") = 0 [pid 6325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6325] setpgid(0, 0) = 0 [pid 6325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6325] write(3, "1000", 4) = 4 [pid 6325] close(3) = 0 [pid 6325] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6325] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6325] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6325] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6326], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6326 [pid 6325] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6325] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6326 attached [pid 6326] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6326] memfd_create("syzkaller", 0) = 3 [pid 6326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6326] munmap(0x7f927cba2000, 2097152) = 0 [pid 6326] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6326] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6326] close(3) = 0 [pid 6326] mkdir("./file0", 0777) = 0 [ 247.737496][ T6326] loop0: detected capacity change from 0 to 4096 [ 247.753248][ T6326] NILFS (loop0): invalid segment: Checksum error in segment payload [ 247.761476][ T6326] NILFS (loop0): trying rollback from an earlier position [ 247.776560][ T6326] NILFS (loop0): recovery complete [pid 6326] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6326] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6326] chdir("./file0") = 0 [pid 6326] ioctl(4, LOOP_CLR_FD) = 0 [pid 6326] close(4) = 0 [pid 6326] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6325] <... futex resumed>) = 0 [pid 6326] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6325] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] <... open resumed>) = 4 [pid 6325] <... futex resumed>) = 0 [pid 6326] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6325] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6326] <... futex resumed>) = 0 [pid 6325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6326] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6325] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] <... open resumed>) = 5 [pid 6325] <... futex resumed>) = 0 [pid 6326] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6325] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6326] <... futex resumed>) = 0 [pid 6325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6326] ftruncate(5, 33587195 [pid 6325] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] <... ftruncate resumed>) = 0 [pid 6325] <... futex resumed>) = 0 [pid 6326] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6325] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6326] <... futex resumed>) = 0 [pid 6325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6326] sendfile(4, 5, NULL, 281474978811909 [pid 6325] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 247.782964][ T6327] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6325] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6325] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6325] exit_group(0) = ? [pid 6326] <... sendfile resumed>) = ? [pid 6326] +++ exited with 0 +++ [pid 6325] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6325, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./435", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./435", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./435/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./435/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./435/binderfs") = 0 umount2("./435/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./435/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./435/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./435/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./435/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./435/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./435") = 0 mkdir("./436", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6328 ./strace-static-x86_64: Process 6328 attached [pid 6328] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6328] chdir("./436") = 0 [pid 6328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6328] setpgid(0, 0) = 0 [pid 6328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6328] write(3, "1000", 4) = 4 [pid 6328] close(3) = 0 [pid 6328] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6328] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6328] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6328] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6329 attached [pid 6329] set_robust_list(0x7f9284fc29e0, 24 [pid 6328] <... clone resumed>, parent_tid=[6329], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6329 [pid 6328] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6328] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6329] <... set_robust_list resumed>) = 0 [pid 6329] memfd_create("syzkaller", 0) = 3 [pid 6329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6329] munmap(0x7f927cba2000, 2097152) = 0 [pid 6329] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6329] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6329] close(3) = 0 [pid 6329] mkdir("./file0", 0777) = 0 [ 248.120470][ T6329] loop0: detected capacity change from 0 to 4096 [ 248.137088][ T6329] NILFS (loop0): invalid segment: Checksum error in segment payload [ 248.145171][ T6329] NILFS (loop0): trying rollback from an earlier position [ 248.160838][ T6329] NILFS (loop0): recovery complete [pid 6329] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6329] chdir("./file0") = 0 [pid 6329] ioctl(4, LOOP_CLR_FD) = 0 [pid 6329] close(4) = 0 [pid 6329] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6329] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6328] <... futex resumed>) = 0 [pid 6328] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6328] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6329] <... futex resumed>) = 0 [pid 6329] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6329] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6328] <... futex resumed>) = 0 [pid 6328] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6328] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6329] <... futex resumed>) = 1 [pid 6329] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6329] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6329] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6328] <... futex resumed>) = 0 [pid 6328] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6328] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6329] <... futex resumed>) = 0 [pid 6329] ftruncate(5, 33587195) = 0 [pid 6329] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6328] <... futex resumed>) = 0 [pid 6328] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6328] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6329] <... futex resumed>) = 1 [ 248.166770][ T6330] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6329] sendfile(4, 5, NULL, 281474978811909 [pid 6328] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6328] exit_group(0) = ? [pid 6329] <... sendfile resumed>) = ? [pid 6329] +++ exited with 0 +++ [pid 6328] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6328, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./436", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./436", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./436/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./436/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./436/binderfs") = 0 umount2("./436/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./436/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./436/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./436/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./436/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./436/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./436") = 0 mkdir("./437", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6331 ./strace-static-x86_64: Process 6331 attached [pid 6331] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6331] chdir("./437") = 0 [pid 6331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6331] setpgid(0, 0) = 0 [pid 6331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6331] write(3, "1000", 4) = 4 [pid 6331] close(3) = 0 [pid 6331] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6331] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6331] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6331] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6331] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6332], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6332 [pid 6331] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6331] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6332 attached [pid 6332] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6332] memfd_create("syzkaller", 0) = 3 [pid 6332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6332] munmap(0x7f927cba2000, 2097152) = 0 [pid 6332] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6332] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6332] close(3) = 0 [pid 6332] mkdir("./file0", 0777) = 0 [ 248.501216][ T6332] loop0: detected capacity change from 0 to 4096 [ 248.518148][ T6332] NILFS (loop0): invalid segment: Checksum error in segment payload [ 248.526263][ T6332] NILFS (loop0): trying rollback from an earlier position [ 248.543598][ T6332] NILFS (loop0): recovery complete [pid 6332] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6332] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6332] chdir("./file0") = 0 [pid 6332] ioctl(4, LOOP_CLR_FD) = 0 [pid 6332] close(4) = 0 [pid 6332] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6331] <... futex resumed>) = 0 [pid 6331] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6331] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6332] <... futex resumed>) = 1 [pid 6332] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6332] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6331] <... futex resumed>) = 0 [pid 6331] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6331] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6332] <... futex resumed>) = 1 [pid 6332] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6332] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6331] <... futex resumed>) = 0 [pid 6331] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6331] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6332] <... futex resumed>) = 1 [pid 6332] ftruncate(5, 33587195) = 0 [pid 6332] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6331] <... futex resumed>) = 0 [pid 6331] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6331] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6332] <... futex resumed>) = 1 [pid 6332] sendfile(4, 5, NULL, 281474978811909 [pid 6331] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 248.549530][ T6333] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6331] exit_group(0) = ? [pid 6332] <... sendfile resumed>) = ? [pid 6332] +++ exited with 0 +++ [pid 6331] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6331, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./437", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./437", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./437/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./437/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./437/binderfs") = 0 umount2("./437/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./437/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./437/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./437/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./437/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./437/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./437") = 0 mkdir("./438", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6334 ./strace-static-x86_64: Process 6334 attached [pid 6334] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6334] chdir("./438") = 0 [pid 6334] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6334] setpgid(0, 0) = 0 [pid 6334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6334] write(3, "1000", 4) = 4 [pid 6334] close(3) = 0 [pid 6334] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6334] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6334] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6334] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6334] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6335 attached , parent_tid=[6335], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6335 [pid 6335] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6335] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6334] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6334] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6335] <... futex resumed>) = 0 [pid 6335] memfd_create("syzkaller", 0) = 3 [pid 6335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6335] munmap(0x7f927cba2000, 2097152) = 0 [pid 6335] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6335] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6335] close(3) = 0 [pid 6335] mkdir("./file0", 0777) = 0 [pid 6335] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6335] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6335] chdir("./file0") = 0 [pid 6335] ioctl(4, LOOP_CLR_FD) = 0 [ 248.861087][ T6335] loop0: detected capacity change from 0 to 4096 [ 248.876272][ T6335] NILFS (loop0): invalid segment: Checksum error in segment payload [ 248.884377][ T6335] NILFS (loop0): trying rollback from an earlier position [ 248.899213][ T6335] NILFS (loop0): recovery complete [pid 6335] close(4) = 0 [pid 6335] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6335] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6334] <... futex resumed>) = 0 [pid 6334] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6334] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6335] <... futex resumed>) = 0 [pid 6335] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6335] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] <... futex resumed>) = 0 [pid 6334] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6334] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6335] <... futex resumed>) = 1 [pid 6335] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6335] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] <... futex resumed>) = 0 [pid 6334] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6334] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6335] <... futex resumed>) = 1 [pid 6335] ftruncate(5, 33587195) = 0 [pid 6335] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6335] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6334] <... futex resumed>) = 0 [pid 6334] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6334] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6335] <... futex resumed>) = 0 [ 248.905363][ T6336] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6335] sendfile(4, 5, NULL, 281474978811909 [pid 6334] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6334] exit_group(0 [pid 6335] <... sendfile resumed>) = ? [pid 6334] <... exit_group resumed>) = ? [pid 6335] +++ exited with 0 +++ [pid 6334] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6334, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./438", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./438", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./438/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./438/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./438/binderfs") = 0 umount2("./438/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./438/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./438/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./438/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./438/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./438/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./438") = 0 mkdir("./439", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6337 ./strace-static-x86_64: Process 6337 attached [pid 6337] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6337] chdir("./439") = 0 [pid 6337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6337] setpgid(0, 0) = 0 [pid 6337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6337] write(3, "1000", 4) = 4 [pid 6337] close(3) = 0 [pid 6337] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6337] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6337] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6337] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6338], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6338 [pid 6337] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6337] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6338 attached [pid 6338] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6338] memfd_create("syzkaller", 0) = 3 [pid 6338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6338] munmap(0x7f927cba2000, 2097152) = 0 [pid 6338] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6338] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6338] close(3) = 0 [pid 6338] mkdir("./file0", 0777) = 0 [pid 6338] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6338] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6338] chdir("./file0") = 0 [ 249.229211][ T6338] loop0: detected capacity change from 0 to 4096 [ 249.244294][ T6338] NILFS (loop0): invalid segment: Checksum error in segment payload [ 249.252322][ T6338] NILFS (loop0): trying rollback from an earlier position [ 249.267683][ T6338] NILFS (loop0): recovery complete [pid 6338] ioctl(4, LOOP_CLR_FD) = 0 [pid 6338] close(4) = 0 [pid 6338] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6337] <... futex resumed>) = 0 [pid 6337] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6337] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6338] <... futex resumed>) = 1 [pid 6338] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6338] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6337] <... futex resumed>) = 0 [pid 6337] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6337] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6338] <... futex resumed>) = 1 [pid 6338] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6338] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6337] <... futex resumed>) = 0 [pid 6338] <... futex resumed>) = 1 [pid 6337] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6338] ftruncate(5, 33587195 [pid 6337] <... futex resumed>) = 0 [pid 6338] <... ftruncate resumed>) = 0 [pid 6337] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6338] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6337] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6338] <... futex resumed>) = 0 [pid 6337] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6338] sendfile(4, 5, NULL, 281474978811909 [pid 6337] <... futex resumed>) = 0 [ 249.276398][ T6339] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6337] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6337] exit_group(0) = ? [pid 6338] <... sendfile resumed>) = ? [pid 6338] +++ exited with 0 +++ [pid 6337] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6337, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./439", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./439", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./439/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./439/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./439/binderfs") = 0 umount2("./439/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./439/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./439/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./439/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./439/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./439/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./439") = 0 mkdir("./440", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6340 ./strace-static-x86_64: Process 6340 attached [pid 6340] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6340] chdir("./440") = 0 [pid 6340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6340] setpgid(0, 0) = 0 [pid 6340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6340] write(3, "1000", 4) = 4 [pid 6340] close(3) = 0 [pid 6340] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6340] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6340] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6340] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6341], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6341 [pid 6340] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6340] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6341 attached [pid 6341] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6341] memfd_create("syzkaller", 0) = 3 [pid 6341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6341] munmap(0x7f927cba2000, 2097152) = 0 [pid 6341] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6341] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6341] close(3) = 0 [pid 6341] mkdir("./file0", 0777) = 0 [ 249.603433][ T6341] loop0: detected capacity change from 0 to 4096 [ 249.619962][ T6341] NILFS (loop0): invalid segment: Checksum error in segment payload [ 249.628046][ T6341] NILFS (loop0): trying rollback from an earlier position [ 249.643302][ T6341] NILFS (loop0): recovery complete [pid 6341] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6341] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6341] chdir("./file0") = 0 [pid 6341] ioctl(4, LOOP_CLR_FD) = 0 [pid 6341] close(4) = 0 [pid 6341] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6340] <... futex resumed>) = 0 [pid 6340] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6340] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6341] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6341] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6340] <... futex resumed>) = 0 [pid 6340] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6340] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6341] <... futex resumed>) = 1 [pid 6341] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6341] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6340] <... futex resumed>) = 0 [pid 6340] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6340] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6341] <... futex resumed>) = 1 [pid 6341] ftruncate(5, 33587195) = 0 [pid 6341] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6340] <... futex resumed>) = 0 [pid 6340] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6340] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6341] <... futex resumed>) = 1 [ 249.649365][ T6342] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6341] sendfile(4, 5, NULL, 281474978811909 [pid 6340] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6340] exit_group(0) = ? [pid 6341] <... sendfile resumed>) = ? [pid 6341] +++ exited with 0 +++ [pid 6340] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6340, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- umount2("./440", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./440", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./440/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./440/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./440/binderfs") = 0 umount2("./440/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./440/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./440/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./440/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./440/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./440/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./440") = 0 mkdir("./441", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6343 ./strace-static-x86_64: Process 6343 attached [pid 6343] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6343] chdir("./441") = 0 [pid 6343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6343] setpgid(0, 0) = 0 [pid 6343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6343] write(3, "1000", 4) = 4 [pid 6343] close(3) = 0 [pid 6343] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6343] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6343] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6343] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6344 attached [pid 6344] set_robust_list(0x7f9284fc29e0, 24 [pid 6343] <... clone resumed>, parent_tid=[6344], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6344 [pid 6343] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6343] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6344] <... set_robust_list resumed>) = 0 [pid 6344] memfd_create("syzkaller", 0) = 3 [pid 6344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6344] munmap(0x7f927cba2000, 2097152) = 0 [pid 6344] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6344] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6344] close(3) = 0 [pid 6344] mkdir("./file0", 0777) = 0 [pid 6344] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 249.980643][ T6344] loop0: detected capacity change from 0 to 4096 [ 249.997145][ T6344] NILFS (loop0): invalid segment: Checksum error in segment payload [ 250.005322][ T6344] NILFS (loop0): trying rollback from an earlier position [ 250.021049][ T6344] NILFS (loop0): recovery complete [pid 6344] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6344] chdir("./file0") = 0 [pid 6344] ioctl(4, LOOP_CLR_FD) = 0 [pid 6344] close(4) = 0 [pid 6344] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6344] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6343] <... futex resumed>) = 0 [pid 6343] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6343] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6344] <... futex resumed>) = 0 [pid 6344] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6344] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6343] <... futex resumed>) = 0 [pid 6343] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6343] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6344] <... futex resumed>) = 1 [pid 6344] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6344] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6344] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6343] <... futex resumed>) = 0 [pid 6343] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6343] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6344] <... futex resumed>) = 0 [pid 6344] ftruncate(5, 33587195) = 0 [pid 6344] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6343] <... futex resumed>) = 0 [pid 6343] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6343] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6344] <... futex resumed>) = 1 [ 250.027622][ T6345] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6344] sendfile(4, 5, NULL, 281474978811909 [pid 6343] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6343] exit_group(0 [pid 6344] <... sendfile resumed>) = ? [pid 6343] <... exit_group resumed>) = ? [pid 6344] +++ exited with 0 +++ [pid 6343] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6343, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./441", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./441", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./441/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./441/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./441/binderfs") = 0 umount2("./441/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./441/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./441/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./441/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./441/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./441/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./441") = 0 mkdir("./442", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6346 ./strace-static-x86_64: Process 6346 attached [pid 6346] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6346] chdir("./442") = 0 [pid 6346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6346] setpgid(0, 0) = 0 [pid 6346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6346] write(3, "1000", 4) = 4 [pid 6346] close(3) = 0 [pid 6346] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6346] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6346] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6346] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6347], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6347 [pid 6346] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6346] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6347 attached [pid 6347] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6347] memfd_create("syzkaller", 0) = 3 [pid 6347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6347] munmap(0x7f927cba2000, 2097152) = 0 [pid 6347] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6347] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6347] close(3) = 0 [pid 6347] mkdir("./file0", 0777) = 0 [ 250.359765][ T6347] loop0: detected capacity change from 0 to 4096 [ 250.377034][ T6347] NILFS (loop0): invalid segment: Checksum error in segment payload [ 250.385107][ T6347] NILFS (loop0): trying rollback from an earlier position [ 250.399673][ T6347] NILFS (loop0): recovery complete [pid 6347] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6347] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6347] chdir("./file0") = 0 [pid 6347] ioctl(4, LOOP_CLR_FD) = 0 [pid 6347] close(4) = 0 [pid 6347] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] <... futex resumed>) = 0 [pid 6346] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6346] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6347] <... futex resumed>) = 1 [pid 6347] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6347] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] <... futex resumed>) = 0 [pid 6346] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6346] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6347] <... futex resumed>) = 1 [pid 6347] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6347] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] <... futex resumed>) = 0 [pid 6346] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6346] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6347] <... futex resumed>) = 1 [pid 6347] ftruncate(5, 33587195) = 0 [pid 6347] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] <... futex resumed>) = 0 [pid 6346] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6346] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6347] <... futex resumed>) = 1 [ 250.405618][ T6348] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6347] sendfile(4, 5, NULL, 281474978811909 [pid 6346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6346] exit_group(0) = ? [pid 6347] <... sendfile resumed>) = ? [pid 6347] +++ exited with 0 +++ [pid 6346] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6346, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./442", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./442", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./442/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./442/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./442/binderfs") = 0 umount2("./442/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./442/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./442/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./442/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./442/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./442/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./442") = 0 mkdir("./443", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6349 ./strace-static-x86_64: Process 6349 attached [pid 6349] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6349] chdir("./443") = 0 [pid 6349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6349] setpgid(0, 0) = 0 [pid 6349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6349] write(3, "1000", 4) = 4 [pid 6349] close(3) = 0 [pid 6349] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6349] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6349] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6349] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6350], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6350 ./strace-static-x86_64: Process 6350 attached [pid 6349] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6349] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6350] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6350] memfd_create("syzkaller", 0) = 3 [pid 6350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6350] munmap(0x7f927cba2000, 2097152) = 0 [pid 6350] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6350] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6350] close(3) = 0 [pid 6350] mkdir("./file0", 0777) = 0 [pid 6350] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6350] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6350] chdir("./file0") = 0 [pid 6350] ioctl(4, LOOP_CLR_FD) = 0 [pid 6350] close(4) = 0 [pid 6350] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 250.722464][ T6350] loop0: detected capacity change from 0 to 4096 [ 250.737561][ T6350] NILFS (loop0): invalid segment: Checksum error in segment payload [ 250.745747][ T6350] NILFS (loop0): trying rollback from an earlier position [ 250.760710][ T6350] NILFS (loop0): recovery complete [pid 6350] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6349] <... futex resumed>) = 0 [pid 6349] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6349] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6350] <... futex resumed>) = 0 [pid 6350] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6350] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6349] <... futex resumed>) = 0 [pid 6350] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6349] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6349] <... futex resumed>) = 0 [pid 6350] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6349] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6350] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6349] <... futex resumed>) = 0 [pid 6350] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6349] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6349] <... futex resumed>) = 0 [pid 6350] ftruncate(5, 33587195 [pid 6349] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6350] <... ftruncate resumed>) = 0 [pid 6350] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6349] <... futex resumed>) = 0 [pid 6350] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6349] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6349] <... futex resumed>) = 0 [pid 6350] sendfile(4, 5, NULL, 281474978811909 [ 250.767352][ T6351] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6349] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6349] exit_group(0) = ? [pid 6350] <... sendfile resumed>) = ? [pid 6350] +++ exited with 0 +++ [pid 6349] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6349, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./443", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./443", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./443/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./443/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./443/binderfs") = 0 umount2("./443/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./443/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./443/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./443/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./443/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./443/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./443") = 0 mkdir("./444", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6352 ./strace-static-x86_64: Process 6352 attached [pid 6352] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6352] chdir("./444") = 0 [pid 6352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6352] setpgid(0, 0) = 0 [pid 6352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6352] write(3, "1000", 4) = 4 [pid 6352] close(3) = 0 [pid 6352] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6352] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6352] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6352] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6353 attached , parent_tid=[6353], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6353 [pid 6353] set_robust_list(0x7f9284fc29e0, 24 [pid 6352] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6352] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6353] <... set_robust_list resumed>) = 0 [pid 6353] memfd_create("syzkaller", 0) = 3 [pid 6353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6353] munmap(0x7f927cba2000, 2097152) = 0 [pid 6353] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6353] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6353] close(3) = 0 [pid 6353] mkdir("./file0", 0777) = 0 [pid 6353] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 251.084886][ T6353] loop0: detected capacity change from 0 to 4096 [ 251.102414][ T6353] NILFS (loop0): invalid segment: Checksum error in segment payload [ 251.110468][ T6353] NILFS (loop0): trying rollback from an earlier position [ 251.125511][ T6353] NILFS (loop0): recovery complete [pid 6353] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6353] chdir("./file0") = 0 [pid 6353] ioctl(4, LOOP_CLR_FD) = 0 [pid 6353] close(4) = 0 [pid 6353] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] <... futex resumed>) = 0 [pid 6352] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6352] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6353] <... futex resumed>) = 1 [pid 6353] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6353] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] <... futex resumed>) = 0 [pid 6352] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6352] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6353] <... futex resumed>) = 1 [pid 6353] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6353] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] <... futex resumed>) = 0 [pid 6352] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6352] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6353] <... futex resumed>) = 1 [pid 6353] ftruncate(5, 33587195) = 0 [pid 6353] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] <... futex resumed>) = 0 [pid 6352] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6352] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6353] <... futex resumed>) = 1 [ 251.131517][ T6354] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6353] sendfile(4, 5, NULL, 281474978811909 [pid 6352] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6352] exit_group(0) = ? [pid 6353] <... sendfile resumed>) = ? [pid 6353] +++ exited with 0 +++ [pid 6352] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6352, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./444", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./444", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./444/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./444/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./444/binderfs") = 0 umount2("./444/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./444/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./444/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./444/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./444/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./444/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./444") = 0 mkdir("./445", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6355 ./strace-static-x86_64: Process 6355 attached [pid 6355] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6355] chdir("./445") = 0 [pid 6355] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6355] setpgid(0, 0) = 0 [pid 6355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6355] write(3, "1000", 4) = 4 [pid 6355] close(3) = 0 [pid 6355] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6355] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6355] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6355] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6356], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6356 [pid 6355] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6355] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6356 attached [pid 6356] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6356] memfd_create("syzkaller", 0) = 3 [pid 6356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6356] munmap(0x7f927cba2000, 2097152) = 0 [pid 6356] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6356] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6356] close(3) = 0 [pid 6356] mkdir("./file0", 0777) = 0 [pid 6356] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6356] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6356] chdir("./file0") = 0 [pid 6356] ioctl(4, LOOP_CLR_FD) = 0 [pid 6356] close(4) = 0 [ 251.450956][ T6356] loop0: detected capacity change from 0 to 4096 [ 251.466122][ T6356] NILFS (loop0): invalid segment: Checksum error in segment payload [ 251.474272][ T6356] NILFS (loop0): trying rollback from an earlier position [ 251.488901][ T6356] NILFS (loop0): recovery complete [pid 6356] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6355] <... futex resumed>) = 0 [pid 6355] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6355] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6356] <... futex resumed>) = 1 [pid 6356] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6356] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6355] <... futex resumed>) = 0 [pid 6355] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6355] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6356] <... futex resumed>) = 1 [pid 6356] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6356] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6355] <... futex resumed>) = 0 [pid 6355] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6355] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6356] <... futex resumed>) = 1 [pid 6356] ftruncate(5, 33587195) = 0 [pid 6356] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6355] <... futex resumed>) = 0 [pid 6355] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6355] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6356] <... futex resumed>) = 1 [ 251.494944][ T6357] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6356] sendfile(4, 5, NULL, 281474978811909 [pid 6355] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6355] exit_group(0) = ? [pid 6356] <... sendfile resumed>) = ? [pid 6356] +++ exited with 0 +++ [pid 6355] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6355, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./445", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./445", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./445/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./445/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./445/binderfs") = 0 umount2("./445/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./445/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./445/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./445/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./445/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./445/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./445") = 0 mkdir("./446", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6358 ./strace-static-x86_64: Process 6358 attached [pid 6358] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6358] chdir("./446") = 0 [pid 6358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6358] setpgid(0, 0) = 0 [pid 6358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6358] write(3, "1000", 4) = 4 [pid 6358] close(3) = 0 [pid 6358] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6358] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6358] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6358] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6359 attached , parent_tid=[6359], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6359 [pid 6359] set_robust_list(0x7f9284fc29e0, 24 [pid 6358] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6358] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6359] <... set_robust_list resumed>) = 0 [pid 6359] memfd_create("syzkaller", 0) = 3 [pid 6359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6359] munmap(0x7f927cba2000, 2097152) = 0 [pid 6359] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6359] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6359] close(3) = 0 [pid 6359] mkdir("./file0", 0777) = 0 [pid 6359] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6359] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6359] chdir("./file0") = 0 [ 251.845990][ T6359] loop0: detected capacity change from 0 to 4096 [ 251.862935][ T6359] NILFS (loop0): invalid segment: Checksum error in segment payload [ 251.871051][ T6359] NILFS (loop0): trying rollback from an earlier position [ 251.885809][ T6359] NILFS (loop0): recovery complete [pid 6359] ioctl(4, LOOP_CLR_FD) = 0 [pid 6359] close(4) = 0 [pid 6359] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6358] <... futex resumed>) = 0 [pid 6358] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6358] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6359] <... futex resumed>) = 1 [pid 6359] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6359] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6358] <... futex resumed>) = 0 [pid 6358] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6358] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6359] <... futex resumed>) = 1 [pid 6359] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6359] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6358] <... futex resumed>) = 0 [pid 6358] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6358] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6359] <... futex resumed>) = 1 [pid 6359] ftruncate(5, 33587195) = 0 [pid 6359] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6358] <... futex resumed>) = 0 [pid 6358] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6358] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6359] <... futex resumed>) = 1 [ 251.891619][ T6360] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6359] sendfile(4, 5, NULL, 281474978811909 [pid 6358] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6358] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6358] exit_group(0) = ? [pid 6359] <... sendfile resumed>) = ? [pid 6359] +++ exited with 0 +++ [pid 6358] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6358, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- umount2("./446", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./446", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./446/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./446/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./446/binderfs") = 0 umount2("./446/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./446/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./446/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./446/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./446/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./446/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./446") = 0 mkdir("./447", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6361 ./strace-static-x86_64: Process 6361 attached [pid 6361] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6361] chdir("./447") = 0 [pid 6361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6361] setpgid(0, 0) = 0 [pid 6361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6361] write(3, "1000", 4) = 4 [pid 6361] close(3) = 0 [pid 6361] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6361] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6361] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6361] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6362], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6362 ./strace-static-x86_64: Process 6362 attached [pid 6361] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6361] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6362] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6362] memfd_create("syzkaller", 0) = 3 [pid 6362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6362] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6362] munmap(0x7f927cba2000, 2097152) = 0 [pid 6362] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6362] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6362] close(3) = 0 [pid 6362] mkdir("./file0", 0777) = 0 [pid 6362] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6362] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6362] chdir("./file0") = 0 [pid 6362] ioctl(4, LOOP_CLR_FD) = 0 [pid 6362] close(4) = 0 [ 252.228076][ T6362] loop0: detected capacity change from 0 to 4096 [ 252.244832][ T6362] NILFS (loop0): invalid segment: Checksum error in segment payload [ 252.252900][ T6362] NILFS (loop0): trying rollback from an earlier position [ 252.268712][ T6362] NILFS (loop0): recovery complete [pid 6362] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6362] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6361] <... futex resumed>) = 0 [pid 6361] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6361] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6362] <... futex resumed>) = 0 [pid 6362] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6362] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6361] <... futex resumed>) = 0 [pid 6361] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6361] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6362] <... futex resumed>) = 1 [pid 6362] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6362] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6362] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6361] <... futex resumed>) = 0 [pid 6361] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6361] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6362] <... futex resumed>) = 0 [pid 6362] ftruncate(5, 33587195) = 0 [pid 6362] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6361] <... futex resumed>) = 0 [pid 6362] sendfile(4, 5, NULL, 281474978811909 [pid 6361] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 252.274794][ T6363] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6361] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6361] exit_group(0) = ? [pid 6362] <... sendfile resumed>) = ? [pid 6362] +++ exited with 0 +++ [pid 6361] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6361, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./447", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./447", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./447/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./447/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./447/binderfs") = 0 umount2("./447/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./447/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./447/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./447/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./447/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./447/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./447") = 0 mkdir("./448", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6364 ./strace-static-x86_64: Process 6364 attached [pid 6364] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6364] chdir("./448") = 0 [pid 6364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6364] setpgid(0, 0) = 0 [pid 6364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6364] write(3, "1000", 4) = 4 [pid 6364] close(3) = 0 [pid 6364] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6364] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6364] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6364] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6365], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6365 [pid 6364] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6364] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6365 attached [pid 6365] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6365] memfd_create("syzkaller", 0) = 3 [pid 6365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6365] munmap(0x7f927cba2000, 2097152) = 0 [pid 6365] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6365] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6365] close(3) = 0 [pid 6365] mkdir("./file0", 0777) = 0 [ 252.617314][ T6365] loop0: detected capacity change from 0 to 4096 [ 252.632539][ T6365] NILFS (loop0): invalid segment: Checksum error in segment payload [ 252.640733][ T6365] NILFS (loop0): trying rollback from an earlier position [ 252.657723][ T6365] NILFS (loop0): recovery complete [pid 6365] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6365] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6365] chdir("./file0") = 0 [pid 6365] ioctl(4, LOOP_CLR_FD) = 0 [pid 6365] close(4) = 0 [pid 6365] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6364] <... futex resumed>) = 0 [pid 6364] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6364] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6365] <... futex resumed>) = 1 [pid 6365] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6365] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6364] <... futex resumed>) = 0 [pid 6364] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6364] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6365] <... futex resumed>) = 1 [pid 6365] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6365] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6364] <... futex resumed>) = 0 [pid 6364] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6364] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6365] <... futex resumed>) = 1 [pid 6365] ftruncate(5, 33587195) = 0 [pid 6365] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6364] <... futex resumed>) = 0 [pid 6364] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6364] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6365] <... futex resumed>) = 1 [pid 6365] sendfile(4, 5, NULL, 281474978811909 [pid 6364] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 252.663908][ T6366] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6364] exit_group(0) = ? [pid 6365] <... sendfile resumed>) = ? [pid 6365] +++ exited with 0 +++ [pid 6364] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6364, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./448", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./448", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./448/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./448/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./448/binderfs") = 0 umount2("./448/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./448/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./448/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./448/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./448/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./448/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./448") = 0 mkdir("./449", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6367 attached , child_tidptr=0x555555e2e5d0) = 6367 [pid 6367] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6367] chdir("./449") = 0 [pid 6367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6367] setpgid(0, 0) = 0 [pid 6367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6367] write(3, "1000", 4) = 4 [pid 6367] close(3) = 0 [pid 6367] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6367] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6367] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6367] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6368], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6368 [pid 6367] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6367] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6368 attached [pid 6368] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6368] memfd_create("syzkaller", 0) = 3 [pid 6368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6368] munmap(0x7f927cba2000, 2097152) = 0 [pid 6368] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6368] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6368] close(3) = 0 [pid 6368] mkdir("./file0", 0777) = 0 [pid 6368] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6368] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6368] chdir("./file0") = 0 [ 252.989301][ T6368] loop0: detected capacity change from 0 to 4096 [ 253.004500][ T6368] NILFS (loop0): invalid segment: Checksum error in segment payload [ 253.012591][ T6368] NILFS (loop0): trying rollback from an earlier position [ 253.027959][ T6368] NILFS (loop0): recovery complete [pid 6368] ioctl(4, LOOP_CLR_FD) = 0 [pid 6368] close(4) = 0 [pid 6368] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... futex resumed>) = 0 [pid 6367] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6367] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6368] <... futex resumed>) = 1 [pid 6368] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6368] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... futex resumed>) = 0 [pid 6367] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6367] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6368] <... futex resumed>) = 1 [pid 6368] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6368] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... futex resumed>) = 0 [pid 6367] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6367] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6368] <... futex resumed>) = 1 [pid 6368] ftruncate(5, 33587195) = 0 [pid 6368] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... futex resumed>) = 0 [pid 6367] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6367] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6368] <... futex resumed>) = 1 [ 253.034031][ T6369] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6368] sendfile(4, 5, NULL, 281474978811909 [pid 6367] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6367] exit_group(0) = ? [pid 6368] <... sendfile resumed>) = ? [pid 6368] +++ exited with 0 +++ [pid 6367] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6367, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./449", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./449", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./449/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./449/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./449/binderfs") = 0 umount2("./449/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./449/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./449/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./449/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./449/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./449/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./449") = 0 mkdir("./450", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6370 ./strace-static-x86_64: Process 6370 attached [pid 6370] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6370] chdir("./450") = 0 [pid 6370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6370] setpgid(0, 0) = 0 [pid 6370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6370] write(3, "1000", 4) = 4 [pid 6370] close(3) = 0 [pid 6370] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6370] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6370] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6370] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6371 attached [pid 6371] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6371] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6370] <... clone resumed>, parent_tid=[6371], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6371 [pid 6370] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6371] <... futex resumed>) = 0 [pid 6370] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6371] memfd_create("syzkaller", 0) = 3 [pid 6371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6371] munmap(0x7f927cba2000, 2097152) = 0 [pid 6371] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6371] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6371] close(3) = 0 [pid 6371] mkdir("./file0", 0777) = 0 [ 253.357887][ T6371] loop0: detected capacity change from 0 to 4096 [ 253.373211][ T6371] NILFS (loop0): invalid segment: Checksum error in segment payload [ 253.381756][ T6371] NILFS (loop0): trying rollback from an earlier position [ 253.397367][ T6371] NILFS (loop0): recovery complete [pid 6371] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6371] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6371] chdir("./file0") = 0 [pid 6371] ioctl(4, LOOP_CLR_FD) = 0 [pid 6371] close(4) = 0 [pid 6371] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6370] <... futex resumed>) = 0 [pid 6370] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6370] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6371] <... futex resumed>) = 1 [pid 6371] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6371] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6370] <... futex resumed>) = 0 [pid 6370] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6370] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6371] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6371] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6370] <... futex resumed>) = 0 [pid 6370] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6370] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6371] ftruncate(5, 33587195) = 0 [pid 6371] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6370] <... futex resumed>) = 0 [pid 6370] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6370] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 253.403732][ T6372] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6371] sendfile(4, 5, NULL, 281474978811909 [pid 6370] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6370] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6370] exit_group(0 [pid 6371] <... sendfile resumed>) = ? [pid 6370] <... exit_group resumed>) = ? [pid 6371] +++ exited with 0 +++ [pid 6370] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6370, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- umount2("./450", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./450", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./450/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./450/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./450/binderfs") = 0 umount2("./450/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./450/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./450/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./450/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./450/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./450/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./450") = 0 mkdir("./451", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6373 ./strace-static-x86_64: Process 6373 attached [pid 6373] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6373] chdir("./451") = 0 [pid 6373] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6373] setpgid(0, 0) = 0 [pid 6373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6373] write(3, "1000", 4) = 4 [pid 6373] close(3) = 0 [pid 6373] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6373] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6373] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6373] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6374], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6374 [pid 6373] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6373] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6374 attached [pid 6374] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6374] memfd_create("syzkaller", 0) = 3 [pid 6374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6374] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6374] munmap(0x7f927cba2000, 2097152) = 0 [pid 6374] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6374] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6374] close(3) = 0 [pid 6374] mkdir("./file0", 0777) = 0 [pid 6374] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6374] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6374] chdir("./file0") = 0 [pid 6374] ioctl(4, LOOP_CLR_FD) = 0 [ 253.727727][ T6374] loop0: detected capacity change from 0 to 4096 [ 253.744275][ T6374] NILFS (loop0): invalid segment: Checksum error in segment payload [ 253.752420][ T6374] NILFS (loop0): trying rollback from an earlier position [ 253.767826][ T6374] NILFS (loop0): recovery complete [pid 6374] close(4) = 0 [pid 6374] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6373] <... futex resumed>) = 0 [pid 6373] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6373] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6374] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6374] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6373] <... futex resumed>) = 0 [pid 6373] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6373] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6374] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6374] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6373] <... futex resumed>) = 0 [pid 6373] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6373] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6374] <... futex resumed>) = 1 [pid 6374] ftruncate(5, 33587195) = 0 [pid 6374] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6373] <... futex resumed>) = 0 [pid 6373] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6373] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6374] <... futex resumed>) = 1 [ 253.773693][ T6375] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6374] sendfile(4, 5, NULL, 281474978811909 [pid 6373] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6373] exit_group(0) = ? [pid 6374] <... sendfile resumed>) = ? [pid 6374] +++ exited with 0 +++ [pid 6373] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6373, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./451", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./451", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./451/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./451/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./451/binderfs") = 0 umount2("./451/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./451/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./451/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./451/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./451/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./451/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./451") = 0 mkdir("./452", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6376 ./strace-static-x86_64: Process 6376 attached [pid 6376] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6376] chdir("./452") = 0 [pid 6376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6376] setpgid(0, 0) = 0 [pid 6376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6376] write(3, "1000", 4) = 4 [pid 6376] close(3) = 0 [pid 6376] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6376] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6376] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6376] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6377], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6377 [pid 6376] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6376] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6377 attached [pid 6377] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6377] memfd_create("syzkaller", 0) = 3 [pid 6377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6377] munmap(0x7f927cba2000, 2097152) = 0 [pid 6377] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6377] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6377] close(3) = 0 [pid 6377] mkdir("./file0", 0777) = 0 [pid 6377] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6377] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6377] chdir("./file0") = 0 [ 254.102232][ T6377] loop0: detected capacity change from 0 to 4096 [ 254.118150][ T6377] NILFS (loop0): invalid segment: Checksum error in segment payload [ 254.126263][ T6377] NILFS (loop0): trying rollback from an earlier position [ 254.141301][ T6377] NILFS (loop0): recovery complete [pid 6377] ioctl(4, LOOP_CLR_FD) = 0 [pid 6377] close(4) = 0 [pid 6377] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6376] <... futex resumed>) = 0 [pid 6376] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6377] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6376] <... futex resumed>) = 0 [pid 6376] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6377] <... open resumed>) = 4 [pid 6377] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6376] <... futex resumed>) = 0 [pid 6377] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6376] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6377] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6376] <... futex resumed>) = 0 [pid 6377] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6376] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6377] <... open resumed>) = 5 [pid 6377] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6376] <... futex resumed>) = 0 [pid 6377] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6376] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6377] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6376] <... futex resumed>) = 0 [pid 6377] ftruncate(5, 33587195 [pid 6376] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6377] <... ftruncate resumed>) = 0 [pid 6377] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6376] <... futex resumed>) = 0 [pid 6377] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6376] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6377] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6376] <... futex resumed>) = 0 [pid 6377] sendfile(4, 5, NULL, 281474978811909 [ 254.147721][ T6378] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6376] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6376] exit_group(0 [pid 6377] <... sendfile resumed>) = ? [pid 6376] <... exit_group resumed>) = ? [pid 6377] +++ exited with 0 +++ [pid 6376] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6376, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- umount2("./452", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./452", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./452/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./452/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./452/binderfs") = 0 umount2("./452/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./452/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./452/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./452/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./452/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./452/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./452") = 0 mkdir("./453", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6379 ./strace-static-x86_64: Process 6379 attached [pid 6379] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6379] chdir("./453") = 0 [pid 6379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6379] setpgid(0, 0) = 0 [pid 6379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6379] write(3, "1000", 4) = 4 [pid 6379] close(3) = 0 [pid 6379] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6379] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6379] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6379] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6380 attached [pid 6380] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6379] <... clone resumed>, parent_tid=[6380], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6380 [pid 6380] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6379] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6379] <... futex resumed>) = 0 [pid 6380] memfd_create("syzkaller", 0 [pid 6379] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6380] <... memfd_create resumed>) = 3 [pid 6380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6380] munmap(0x7f927cba2000, 2097152) = 0 [pid 6380] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6380] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6380] close(3) = 0 [pid 6380] mkdir("./file0", 0777) = 0 [ 254.459535][ T6380] loop0: detected capacity change from 0 to 4096 [ 254.476406][ T6380] NILFS (loop0): invalid segment: Checksum error in segment payload [ 254.484792][ T6380] NILFS (loop0): trying rollback from an earlier position [ 254.501872][ T6380] NILFS (loop0): recovery complete [pid 6380] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6380] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6380] chdir("./file0") = 0 [pid 6380] ioctl(4, LOOP_CLR_FD) = 0 [pid 6380] close(4) = 0 [pid 6380] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6380] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6379] <... futex resumed>) = 0 [pid 6379] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6379] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6380] <... futex resumed>) = 0 [pid 6380] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6380] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6379] <... futex resumed>) = 0 [pid 6379] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6379] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6380] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6380] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6379] <... futex resumed>) = 0 [pid 6379] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6379] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6380] ftruncate(5, 33587195) = 0 [pid 6380] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6380] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6379] <... futex resumed>) = 0 [pid 6379] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6379] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6380] <... futex resumed>) = 0 [ 254.507957][ T6381] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6380] sendfile(4, 5, NULL, 281474978811909 [pid 6379] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6379] exit_group(0) = ? [pid 6380] <... sendfile resumed>) = ? [pid 6380] +++ exited with 0 +++ [pid 6379] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6379, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./453", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./453", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./453/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./453/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./453/binderfs") = 0 umount2("./453/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./453/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./453/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./453/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./453/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./453/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./453") = 0 mkdir("./454", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6382 ./strace-static-x86_64: Process 6382 attached [pid 6382] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6382] chdir("./454") = 0 [pid 6382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6382] setpgid(0, 0) = 0 [pid 6382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6382] write(3, "1000", 4) = 4 [pid 6382] close(3) = 0 [pid 6382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6382] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6382] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6382] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6383], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6383 [pid 6382] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6382] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6383 attached [pid 6383] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6383] memfd_create("syzkaller", 0) = 3 [pid 6383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6383] munmap(0x7f927cba2000, 2097152) = 0 [pid 6383] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6383] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6383] close(3) = 0 [pid 6383] mkdir("./file0", 0777) = 0 [ 254.843383][ T6383] loop0: detected capacity change from 0 to 4096 [ 254.859261][ T6383] NILFS (loop0): invalid segment: Checksum error in segment payload [ 254.867432][ T6383] NILFS (loop0): trying rollback from an earlier position [ 254.882771][ T6383] NILFS (loop0): recovery complete [pid 6383] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6383] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6383] chdir("./file0") = 0 [pid 6383] ioctl(4, LOOP_CLR_FD) = 0 [pid 6383] close(4) = 0 [pid 6383] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6382] <... futex resumed>) = 0 [pid 6383] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6382] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6382] <... futex resumed>) = 0 [pid 6383] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6382] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6383] <... open resumed>) = 4 [pid 6383] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6382] <... futex resumed>) = 0 [pid 6383] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6382] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6383] <... futex resumed>) = 0 [pid 6382] <... futex resumed>) = 1 [pid 6383] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6382] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6383] <... open resumed>) = 5 [pid 6383] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6382] <... futex resumed>) = 0 [pid 6383] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6382] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6382] <... futex resumed>) = 0 [pid 6383] ftruncate(5, 33587195 [pid 6382] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6383] <... ftruncate resumed>) = 0 [pid 6383] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6382] <... futex resumed>) = 0 [pid 6383] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6382] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6382] <... futex resumed>) = 0 [pid 6383] sendfile(4, 5, NULL, 281474978811909 [ 254.889005][ T6384] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6382] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6382] exit_group(0) = ? [pid 6383] <... sendfile resumed>) = ? [pid 6383] +++ exited with 0 +++ [pid 6382] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6382, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- umount2("./454", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./454", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./454/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./454/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./454/binderfs") = 0 umount2("./454/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./454/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./454/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./454/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./454/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./454/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./454") = 0 mkdir("./455", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6385 ./strace-static-x86_64: Process 6385 attached [pid 6385] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6385] chdir("./455") = 0 [pid 6385] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6385] setpgid(0, 0) = 0 [pid 6385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6385] write(3, "1000", 4) = 4 [pid 6385] close(3) = 0 [pid 6385] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6385] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6385] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6385] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6386 attached , parent_tid=[6386], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6386 [pid 6385] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6385] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6386] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6386] memfd_create("syzkaller", 0) = 3 [pid 6386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6386] munmap(0x7f927cba2000, 2097152) = 0 [pid 6386] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6386] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6386] close(3) = 0 [pid 6386] mkdir("./file0", 0777) = 0 [ 255.216031][ T6386] loop0: detected capacity change from 0 to 4096 [ 255.232815][ T6386] NILFS (loop0): invalid segment: Checksum error in segment payload [ 255.240989][ T6386] NILFS (loop0): trying rollback from an earlier position [ 255.255801][ T6386] NILFS (loop0): recovery complete [pid 6386] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6386] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6386] chdir("./file0") = 0 [pid 6386] ioctl(4, LOOP_CLR_FD) = 0 [pid 6386] close(4) = 0 [pid 6386] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6385] <... futex resumed>) = 0 [pid 6385] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6385] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6386] <... futex resumed>) = 1 [pid 6386] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6386] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6385] <... futex resumed>) = 0 [pid 6385] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6385] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6386] <... futex resumed>) = 1 [pid 6386] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6386] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6385] <... futex resumed>) = 0 [pid 6385] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6385] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6386] <... futex resumed>) = 1 [pid 6386] ftruncate(5, 33587195) = 0 [pid 6386] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6385] <... futex resumed>) = 0 [pid 6385] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6385] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6386] <... futex resumed>) = 1 [pid 6386] sendfile(4, 5, NULL, 281474978811909 [pid 6385] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 255.261717][ T6387] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6385] exit_group(0) = ? [pid 6386] <... sendfile resumed>) = ? [pid 6386] +++ exited with 0 +++ [pid 6385] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6385, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./455", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./455", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./455/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./455/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./455/binderfs") = 0 umount2("./455/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./455/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./455/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./455/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./455/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./455/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./455") = 0 mkdir("./456", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6388 ./strace-static-x86_64: Process 6388 attached [pid 6388] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6388] chdir("./456") = 0 [pid 6388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6388] setpgid(0, 0) = 0 [pid 6388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6388] write(3, "1000", 4) = 4 [pid 6388] close(3) = 0 [pid 6388] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6388] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6388] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6388] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6389 attached , parent_tid=[6389], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6389 [pid 6388] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6388] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6389] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6389] memfd_create("syzkaller", 0) = 3 [pid 6389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6389] munmap(0x7f927cba2000, 2097152) = 0 [pid 6389] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6389] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6389] close(3) = 0 [pid 6389] mkdir("./file0", 0777) = 0 [ 255.567420][ T6389] loop0: detected capacity change from 0 to 4096 [ 255.584264][ T6389] NILFS (loop0): invalid segment: Checksum error in segment payload [ 255.592381][ T6389] NILFS (loop0): trying rollback from an earlier position [ 255.608289][ T6389] NILFS (loop0): recovery complete [pid 6389] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6389] chdir("./file0") = 0 [pid 6389] ioctl(4, LOOP_CLR_FD) = 0 [pid 6389] close(4) = 0 [pid 6389] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6389] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6388] <... futex resumed>) = 0 [pid 6388] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6389] <... futex resumed>) = 0 [pid 6388] <... futex resumed>) = 1 [pid 6389] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6388] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6389] <... open resumed>) = 4 [pid 6389] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6388] <... futex resumed>) = 0 [pid 6389] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6388] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6389] <... open resumed>) = 5 [pid 6388] <... futex resumed>) = 0 [pid 6389] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6389] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6388] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6388] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6389] <... futex resumed>) = 0 [pid 6388] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6389] ftruncate(5, 33587195) = 0 [pid 6389] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6388] <... futex resumed>) = 0 [pid 6388] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6389] sendfile(4, 5, NULL, 281474978811909 [pid 6388] <... futex resumed>) = 0 [ 255.614946][ T6390] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6388] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6388] exit_group(0) = ? [pid 6389] <... sendfile resumed>) = ? [pid 6389] +++ exited with 0 +++ [pid 6388] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6388, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./456", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./456", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./456/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./456/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./456/binderfs") = 0 umount2("./456/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./456/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./456/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./456/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./456/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./456/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./456") = 0 mkdir("./457", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6391 ./strace-static-x86_64: Process 6391 attached [pid 6391] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6391] chdir("./457") = 0 [pid 6391] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6391] setpgid(0, 0) = 0 [pid 6391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6391] write(3, "1000", 4) = 4 [pid 6391] close(3) = 0 [pid 6391] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6391] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6391] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6391] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6392], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6392 ./strace-static-x86_64: Process 6392 attached [pid 6392] set_robust_list(0x7f9284fc29e0, 24 [pid 6391] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6392] <... set_robust_list resumed>) = 0 [pid 6391] <... futex resumed>) = 0 [pid 6392] memfd_create("syzkaller", 0 [pid 6391] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6392] <... memfd_create resumed>) = 3 [pid 6392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6392] munmap(0x7f927cba2000, 2097152) = 0 [pid 6392] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6392] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6392] close(3) = 0 [pid 6392] mkdir("./file0", 0777) = 0 [ 255.940265][ T6392] loop0: detected capacity change from 0 to 4096 [ 255.956184][ T6392] NILFS (loop0): invalid segment: Checksum error in segment payload [ 255.964290][ T6392] NILFS (loop0): trying rollback from an earlier position [ 255.979735][ T6392] NILFS (loop0): recovery complete [pid 6392] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6392] chdir("./file0") = 0 [pid 6392] ioctl(4, LOOP_CLR_FD) = 0 [pid 6392] close(4) = 0 [pid 6392] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6392] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6391] <... futex resumed>) = 0 [pid 6391] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6391] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6392] <... futex resumed>) = 0 [pid 6392] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6392] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] <... futex resumed>) = 0 [pid 6391] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6391] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6392] <... futex resumed>) = 1 [pid 6392] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6392] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] <... futex resumed>) = 0 [pid 6391] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6392] <... futex resumed>) = 1 [pid 6392] ftruncate(5, 33587195) = 0 [pid 6392] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6392] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6391] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6391] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6391] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6392] <... futex resumed>) = 0 [ 255.985827][ T6393] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6392] sendfile(4, 5, NULL, 281474978811909 [pid 6391] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6391] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6391] exit_group(0 [pid 6392] <... sendfile resumed>) = ? [pid 6391] <... exit_group resumed>) = ? [pid 6392] +++ exited with 0 +++ [pid 6391] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6391, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./457", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./457", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./457/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./457/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./457/binderfs") = 0 umount2("./457/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./457/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./457/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./457/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./457/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./457/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./457") = 0 mkdir("./458", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6394 ./strace-static-x86_64: Process 6394 attached [pid 6394] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6394] chdir("./458") = 0 [pid 6394] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6394] setpgid(0, 0) = 0 [pid 6394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6394] write(3, "1000", 4) = 4 [pid 6394] close(3) = 0 [pid 6394] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6394] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6394] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6394] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6395], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6395 [pid 6394] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6394] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6395 attached [pid 6395] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6395] memfd_create("syzkaller", 0) = 3 [pid 6395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6395] munmap(0x7f927cba2000, 2097152) = 0 [pid 6395] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6395] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6395] close(3) = 0 [pid 6395] mkdir("./file0", 0777) = 0 [pid 6395] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6395] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6395] chdir("./file0") = 0 [ 256.323702][ T6395] loop0: detected capacity change from 0 to 4096 [ 256.339417][ T6395] NILFS (loop0): invalid segment: Checksum error in segment payload [ 256.347495][ T6395] NILFS (loop0): trying rollback from an earlier position [ 256.363200][ T6395] NILFS (loop0): recovery complete [pid 6395] ioctl(4, LOOP_CLR_FD) = 0 [pid 6395] close(4) = 0 [pid 6395] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6395] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6394] <... futex resumed>) = 0 [pid 6394] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] <... futex resumed>) = 0 [pid 6394] <... futex resumed>) = 1 [pid 6395] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6394] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6395] <... open resumed>) = 4 [pid 6395] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6394] <... futex resumed>) = 0 [pid 6395] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6394] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] <... open resumed>) = 5 [pid 6394] <... futex resumed>) = 0 [pid 6395] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6394] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6395] <... futex resumed>) = 0 [pid 6394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6395] ftruncate(5, 33587195 [pid 6394] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] <... ftruncate resumed>) = 0 [pid 6394] <... futex resumed>) = 0 [pid 6395] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6394] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6395] <... futex resumed>) = 0 [pid 6394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6395] sendfile(4, 5, NULL, 281474978811909 [pid 6394] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 256.369176][ T6396] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6394] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6394] exit_group(0) = ? [pid 6395] <... sendfile resumed>) = ? [pid 6395] +++ exited with 0 +++ [pid 6394] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6394, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./458", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./458", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./458/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./458/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./458/binderfs") = 0 umount2("./458/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./458/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./458/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./458/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./458/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./458/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./458") = 0 mkdir("./459", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6397 ./strace-static-x86_64: Process 6397 attached [pid 6397] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6397] chdir("./459") = 0 [pid 6397] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6397] setpgid(0, 0) = 0 [pid 6397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6397] write(3, "1000", 4) = 4 [pid 6397] close(3) = 0 [pid 6397] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6397] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6397] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6397] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6397] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6398 attached [pid 6398] set_robust_list(0x7f9284fc29e0, 24 [pid 6397] <... clone resumed>, parent_tid=[6398], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6398 [pid 6398] <... set_robust_list resumed>) = 0 [pid 6397] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6397] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6398] memfd_create("syzkaller", 0) = 3 [pid 6398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6398] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6398] munmap(0x7f927cba2000, 2097152) = 0 [pid 6398] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6398] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6398] close(3) = 0 [pid 6398] mkdir("./file0", 0777) = 0 [pid 6398] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6398] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6398] chdir("./file0") = 0 [pid 6398] ioctl(4, LOOP_CLR_FD) = 0 [ 256.703022][ T6398] loop0: detected capacity change from 0 to 4096 [ 256.717958][ T6398] NILFS (loop0): invalid segment: Checksum error in segment payload [ 256.726210][ T6398] NILFS (loop0): trying rollback from an earlier position [ 256.743141][ T6398] NILFS (loop0): recovery complete [pid 6398] close(4) = 0 [pid 6398] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6397] <... futex resumed>) = 0 [pid 6398] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6397] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6397] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6398] <... open resumed>) = 4 [pid 6398] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6397] <... futex resumed>) = 0 [pid 6397] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6398] <... futex resumed>) = 1 [pid 6397] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6398] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6398] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6397] <... futex resumed>) = 0 [pid 6397] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6397] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6398] <... futex resumed>) = 1 [pid 6398] ftruncate(5, 33587195) = 0 [pid 6398] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6397] <... futex resumed>) = 0 [pid 6398] sendfile(4, 5, NULL, 281474978811909 [pid 6397] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 256.754002][ T6399] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6397] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6397] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6397] exit_group(0) = ? [pid 6398] <... sendfile resumed>) = ? [pid 6398] +++ exited with 0 +++ [pid 6397] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6397, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./459", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./459", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./459/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./459/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./459/binderfs") = 0 umount2("./459/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./459/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./459/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./459/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./459/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./459/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./459") = 0 mkdir("./460", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6400 ./strace-static-x86_64: Process 6400 attached [pid 6400] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6400] chdir("./460") = 0 [pid 6400] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6400] setpgid(0, 0) = 0 [pid 6400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6400] write(3, "1000", 4) = 4 [pid 6400] close(3) = 0 [pid 6400] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6400] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6400] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6400] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6401], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6401 [pid 6400] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6400] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6401 attached [pid 6401] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6401] memfd_create("syzkaller", 0) = 3 [pid 6401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6401] munmap(0x7f927cba2000, 2097152) = 0 [pid 6401] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6401] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6401] close(3) = 0 [pid 6401] mkdir("./file0", 0777) = 0 [ 257.074853][ T6401] loop0: detected capacity change from 0 to 4096 [ 257.091036][ T6401] NILFS (loop0): invalid segment: Checksum error in segment payload [ 257.099077][ T6401] NILFS (loop0): trying rollback from an earlier position [ 257.115237][ T6401] NILFS (loop0): recovery complete [pid 6401] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6401] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6401] chdir("./file0") = 0 [pid 6401] ioctl(4, LOOP_CLR_FD) = 0 [pid 6401] close(4) = 0 [pid 6401] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6400] <... futex resumed>) = 0 [pid 6400] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6400] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6401] <... futex resumed>) = 1 [pid 6401] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6401] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6400] <... futex resumed>) = 0 [pid 6400] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6400] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6401] <... futex resumed>) = 1 [pid 6401] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6401] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6400] <... futex resumed>) = 0 [pid 6400] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6400] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6401] <... futex resumed>) = 1 [pid 6401] ftruncate(5, 33587195) = 0 [pid 6401] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6400] <... futex resumed>) = 0 [pid 6400] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6400] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6401] <... futex resumed>) = 1 [pid 6401] sendfile(4, 5, NULL, 281474978811909 [pid 6400] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6400] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6400] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 257.121232][ T6402] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6400] exit_group(0 [pid 6401] <... sendfile resumed>) = ? [pid 6400] <... exit_group resumed>) = ? [pid 6401] +++ exited with 0 +++ [pid 6400] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6400, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./460", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./460", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./460/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./460/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./460/binderfs") = 0 umount2("./460/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./460/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./460/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./460/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./460/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./460/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./460") = 0 mkdir("./461", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6403 ./strace-static-x86_64: Process 6403 attached [pid 6403] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6403] chdir("./461") = 0 [pid 6403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6403] setpgid(0, 0) = 0 [pid 6403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6403] write(3, "1000", 4) = 4 [pid 6403] close(3) = 0 [pid 6403] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6403] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6403] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6403] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6404 attached [pid 6404] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6404] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6403] <... clone resumed>, parent_tid=[6404], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6404 [pid 6403] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6404] <... futex resumed>) = 0 [pid 6404] memfd_create("syzkaller", 0 [pid 6403] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6404] <... memfd_create resumed>) = 3 [pid 6404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6404] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6404] munmap(0x7f927cba2000, 2097152) = 0 [pid 6404] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6404] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6404] close(3) = 0 [pid 6404] mkdir("./file0", 0777) = 0 [pid 6404] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6404] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6404] chdir("./file0") = 0 [pid 6404] ioctl(4, LOOP_CLR_FD) = 0 [ 257.432073][ T6404] loop0: detected capacity change from 0 to 4096 [ 257.448064][ T6404] NILFS (loop0): invalid segment: Checksum error in segment payload [ 257.456141][ T6404] NILFS (loop0): trying rollback from an earlier position [ 257.471317][ T6404] NILFS (loop0): recovery complete [pid 6404] close(4) = 0 [pid 6404] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6403] <... futex resumed>) = 0 [pid 6404] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6403] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6403] <... futex resumed>) = 0 [pid 6404] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6403] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6404] <... open resumed>) = 4 [pid 6404] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6403] <... futex resumed>) = 0 [pid 6404] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6403] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6403] <... futex resumed>) = 0 [pid 6404] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6403] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6404] <... open resumed>) = 5 [pid 6404] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6403] <... futex resumed>) = 0 [pid 6404] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6403] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6403] <... futex resumed>) = 0 [pid 6404] ftruncate(5, 33587195 [pid 6403] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6404] <... ftruncate resumed>) = 0 [pid 6404] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6403] <... futex resumed>) = 0 [pid 6404] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6403] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6403] <... futex resumed>) = 0 [pid 6404] sendfile(4, 5, NULL, 281474978811909 [ 257.478111][ T6405] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6403] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6403] exit_group(0) = ? [pid 6404] <... sendfile resumed>) = ? [pid 6404] +++ exited with 0 +++ [pid 6403] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6403, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./461", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./461", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./461/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./461/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./461/binderfs") = 0 umount2("./461/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./461/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./461/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./461/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./461/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./461/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./461") = 0 mkdir("./462", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6406 ./strace-static-x86_64: Process 6406 attached [pid 6406] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6406] chdir("./462") = 0 [pid 6406] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6406] setpgid(0, 0) = 0 [pid 6406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6406] write(3, "1000", 4) = 4 [pid 6406] close(3) = 0 [pid 6406] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6406] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6406] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6406] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6407], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6407 [pid 6406] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6406] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6407 attached [pid 6407] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6407] memfd_create("syzkaller", 0) = 3 [pid 6407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6407] munmap(0x7f927cba2000, 2097152) = 0 [pid 6407] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6407] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6407] close(3) = 0 [pid 6407] mkdir("./file0", 0777) = 0 [ 257.816187][ T6407] loop0: detected capacity change from 0 to 4096 [ 257.832898][ T6407] NILFS (loop0): invalid segment: Checksum error in segment payload [ 257.841018][ T6407] NILFS (loop0): trying rollback from an earlier position [ 257.857055][ T6407] NILFS (loop0): recovery complete [pid 6407] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6407] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6407] chdir("./file0") = 0 [pid 6407] ioctl(4, LOOP_CLR_FD) = 0 [pid 6407] close(4) = 0 [pid 6407] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6406] <... futex resumed>) = 0 [pid 6406] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6406] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6407] <... futex resumed>) = 1 [pid 6407] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6407] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6406] <... futex resumed>) = 0 [pid 6406] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6406] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6407] <... futex resumed>) = 1 [pid 6407] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6407] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6406] <... futex resumed>) = 0 [pid 6406] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6406] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6407] ftruncate(5, 33587195) = 0 [pid 6407] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6406] <... futex resumed>) = 0 [pid 6406] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6406] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 257.863269][ T6408] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6407] sendfile(4, 5, NULL, 281474978811909 [pid 6406] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6406] exit_group(0) = ? [pid 6407] <... sendfile resumed>) = ? [pid 6407] +++ exited with 0 +++ [pid 6406] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6406, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./462", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./462", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./462/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./462/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./462/binderfs") = 0 umount2("./462/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./462/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./462/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./462/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./462/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./462/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./462") = 0 mkdir("./463", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6409 ./strace-static-x86_64: Process 6409 attached [pid 6409] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6409] chdir("./463") = 0 [pid 6409] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6409] setpgid(0, 0) = 0 [pid 6409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6409] write(3, "1000", 4) = 4 [pid 6409] close(3) = 0 [pid 6409] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6409] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6409] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6409] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6409] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6410 attached [pid 6410] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6410] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6409] <... clone resumed>, parent_tid=[6410], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6410 [pid 6409] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6410] <... futex resumed>) = 0 [pid 6410] memfd_create("syzkaller", 0 [pid 6409] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6410] <... memfd_create resumed>) = 3 [pid 6410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6410] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6410] munmap(0x7f927cba2000, 2097152) = 0 [pid 6410] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6410] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6410] close(3) = 0 [pid 6410] mkdir("./file0", 0777) = 0 [ 258.200574][ T6410] loop0: detected capacity change from 0 to 4096 [ 258.215951][ T6410] NILFS (loop0): invalid segment: Checksum error in segment payload [ 258.224016][ T6410] NILFS (loop0): trying rollback from an earlier position [ 258.238973][ T6410] NILFS (loop0): recovery complete [pid 6410] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6410] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6410] chdir("./file0") = 0 [pid 6410] ioctl(4, LOOP_CLR_FD) = 0 [pid 6410] close(4) = 0 [pid 6410] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] <... futex resumed>) = 0 [pid 6409] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6409] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] <... futex resumed>) = 1 [pid 6410] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6410] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] <... futex resumed>) = 0 [pid 6409] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6409] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] <... futex resumed>) = 1 [pid 6410] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6410] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] <... futex resumed>) = 0 [pid 6409] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6409] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] <... futex resumed>) = 1 [pid 6410] ftruncate(5, 33587195) = 0 [pid 6410] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] <... futex resumed>) = 0 [pid 6409] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6409] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] <... futex resumed>) = 1 [ 258.244942][ T6411] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6410] sendfile(4, 5, NULL, 281474978811909 [pid 6409] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6409] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6409] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6409] exit_group(0 [pid 6410] <... sendfile resumed>) = ? [pid 6409] <... exit_group resumed>) = ? [pid 6410] +++ exited with 0 +++ [pid 6409] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6409, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- umount2("./463", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./463", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./463/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./463/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./463/binderfs") = 0 umount2("./463/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./463/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./463/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./463/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./463/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./463/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./463") = 0 mkdir("./464", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6412 ./strace-static-x86_64: Process 6412 attached [pid 6412] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6412] chdir("./464") = 0 [pid 6412] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6412] setpgid(0, 0) = 0 [pid 6412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6412] write(3, "1000", 4) = 4 [pid 6412] close(3) = 0 [pid 6412] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6412] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6412] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6412] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6413 attached , parent_tid=[6413], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6413 [pid 6412] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6413] set_robust_list(0x7f9284fc29e0, 24 [pid 6412] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6413] <... set_robust_list resumed>) = 0 [pid 6413] memfd_create("syzkaller", 0) = 3 [pid 6413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6413] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6413] munmap(0x7f927cba2000, 2097152) = 0 [pid 6413] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6413] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6413] close(3) = 0 [pid 6413] mkdir("./file0", 0777) = 0 [pid 6413] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6413] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6413] chdir("./file0") = 0 [ 258.575207][ T6413] loop0: detected capacity change from 0 to 4096 [ 258.591515][ T6413] NILFS (loop0): invalid segment: Checksum error in segment payload [ 258.599610][ T6413] NILFS (loop0): trying rollback from an earlier position [ 258.614656][ T6413] NILFS (loop0): recovery complete [pid 6413] ioctl(4, LOOP_CLR_FD) = 0 [pid 6413] close(4) = 0 [pid 6413] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6413] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6412] <... futex resumed>) = 0 [pid 6412] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6412] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6413] <... futex resumed>) = 0 [pid 6413] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6413] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6412] <... futex resumed>) = 0 [pid 6413] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6412] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6413] <... open resumed>) = 5 [pid 6412] <... futex resumed>) = 0 [pid 6413] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6413] <... futex resumed>) = 0 [pid 6412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6413] ftruncate(5, 33587195 [pid 6412] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6413] <... ftruncate resumed>) = 0 [pid 6412] <... futex resumed>) = 0 [pid 6413] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6413] <... futex resumed>) = 0 [pid 6412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6413] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6412] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6413] <... futex resumed>) = 0 [pid 6412] <... futex resumed>) = 1 [pid 6413] sendfile(4, 5, NULL, 281474978811909 [ 258.620475][ T6414] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6412] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6412] exit_group(0) = ? [pid 6413] <... sendfile resumed>) = ? [pid 6413] +++ exited with 0 +++ [pid 6412] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6412, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./464", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./464", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./464/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./464/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./464/binderfs") = 0 umount2("./464/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./464/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./464/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./464/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./464/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./464/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./464") = 0 mkdir("./465", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6415 ./strace-static-x86_64: Process 6415 attached [pid 6415] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6415] chdir("./465") = 0 [pid 6415] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6415] setpgid(0, 0) = 0 [pid 6415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6415] write(3, "1000", 4) = 4 [pid 6415] close(3) = 0 [pid 6415] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6415] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6415] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6415] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6416 attached [pid 6416] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6416] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6415] <... clone resumed>, parent_tid=[6416], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6416 [pid 6415] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6416] <... futex resumed>) = 0 [pid 6416] memfd_create("syzkaller", 0) = 3 [pid 6416] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6415] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6416] <... mmap resumed>) = 0x7f927cba2000 [pid 6416] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6416] munmap(0x7f927cba2000, 2097152) = 0 [pid 6416] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6416] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6416] close(3) = 0 [pid 6416] mkdir("./file0", 0777) = 0 [ 258.936922][ T6416] loop0: detected capacity change from 0 to 4096 [ 258.952580][ T6416] NILFS (loop0): invalid segment: Checksum error in segment payload [ 258.961195][ T6416] NILFS (loop0): trying rollback from an earlier position [ 258.978734][ T6416] NILFS (loop0): recovery complete [pid 6416] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6416] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6416] chdir("./file0") = 0 [pid 6416] ioctl(4, LOOP_CLR_FD) = 0 [pid 6416] close(4) = 0 [pid 6416] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6415] <... futex resumed>) = 0 [pid 6415] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6415] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6416] <... futex resumed>) = 1 [pid 6416] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6416] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6415] <... futex resumed>) = 0 [pid 6416] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6415] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6415] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6416] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6416] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6415] <... futex resumed>) = 0 [pid 6416] ftruncate(5, 33587195 [pid 6415] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6416] <... ftruncate resumed>) = 0 [pid 6415] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6416] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6416] <... futex resumed>) = 0 [pid 6415] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6416] sendfile(4, 5, NULL, 281474978811909 [pid 6415] <... futex resumed>) = 0 [ 258.984727][ T6417] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6415] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6415] exit_group(0) = ? [pid 6416] <... sendfile resumed>) = ? [pid 6416] +++ exited with 0 +++ [pid 6415] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6415, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./465", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./465", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./465/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./465/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./465/binderfs") = 0 umount2("./465/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./465/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./465/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./465/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./465/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./465/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./465") = 0 mkdir("./466", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6418 ./strace-static-x86_64: Process 6418 attached [pid 6418] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6418] chdir("./466") = 0 [pid 6418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6418] setpgid(0, 0) = 0 [pid 6418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6418] write(3, "1000", 4) = 4 [pid 6418] close(3) = 0 [pid 6418] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6418] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6418] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6418] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6419 attached [pid 6419] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6419] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6418] <... clone resumed>, parent_tid=[6419], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6419 [pid 6418] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6419] <... futex resumed>) = 0 [pid 6419] memfd_create("syzkaller", 0) = 3 [pid 6419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6418] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6419] munmap(0x7f927cba2000, 2097152) = 0 [pid 6419] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6419] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6419] close(3) = 0 [pid 6419] mkdir("./file0", 0777) = 0 [pid 6419] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6419] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6419] chdir("./file0") = 0 [ 259.320843][ T6419] loop0: detected capacity change from 0 to 4096 [ 259.338185][ T6419] NILFS (loop0): invalid segment: Checksum error in segment payload [ 259.346372][ T6419] NILFS (loop0): trying rollback from an earlier position [ 259.361621][ T6419] NILFS (loop0): recovery complete [pid 6419] ioctl(4, LOOP_CLR_FD) = 0 [pid 6419] close(4) = 0 [pid 6419] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6418] <... futex resumed>) = 0 [pid 6418] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6418] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6419] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6419] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6418] <... futex resumed>) = 0 [pid 6418] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6418] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6419] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6419] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6418] <... futex resumed>) = 0 [pid 6418] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6418] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6419] ftruncate(5, 33587195) = 0 [pid 6419] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6418] <... futex resumed>) = 0 [pid 6418] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6418] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6419] <... futex resumed>) = 1 [ 259.367838][ T6420] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6419] sendfile(4, 5, NULL, 281474978811909 [pid 6418] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6418] exit_group(0 [pid 6419] <... sendfile resumed>) = ? [pid 6418] <... exit_group resumed>) = ? [pid 6419] +++ exited with 0 +++ [pid 6418] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6418, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./466", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./466", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./466/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./466/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./466/binderfs") = 0 umount2("./466/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./466/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./466/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./466/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./466/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./466/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./466") = 0 mkdir("./467", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6421 ./strace-static-x86_64: Process 6421 attached [pid 6421] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6421] chdir("./467") = 0 [pid 6421] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6421] setpgid(0, 0) = 0 [pid 6421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6421] write(3, "1000", 4) = 4 [pid 6421] close(3) = 0 [pid 6421] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6421] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6421] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6421] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6422], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6422 [pid 6421] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6421] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6422 attached [pid 6422] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6422] memfd_create("syzkaller", 0) = 3 [pid 6422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6422] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6422] munmap(0x7f927cba2000, 2097152) = 0 [pid 6422] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6422] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6422] close(3) = 0 [pid 6422] mkdir("./file0", 0777) = 0 [ 259.705630][ T6422] loop0: detected capacity change from 0 to 4096 [ 259.721453][ T6422] NILFS (loop0): invalid segment: Checksum error in segment payload [ 259.729556][ T6422] NILFS (loop0): trying rollback from an earlier position [ 259.745392][ T6422] NILFS (loop0): recovery complete [pid 6422] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6422] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6422] chdir("./file0") = 0 [pid 6422] ioctl(4, LOOP_CLR_FD) = 0 [pid 6422] close(4) = 0 [pid 6422] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6421] <... futex resumed>) = 0 [pid 6422] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6421] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6421] <... futex resumed>) = 0 [pid 6422] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6421] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6422] <... open resumed>) = 4 [pid 6422] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6421] <... futex resumed>) = 0 [pid 6422] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6421] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6421] <... futex resumed>) = 0 [pid 6422] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6421] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6422] <... open resumed>) = 5 [pid 6422] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6421] <... futex resumed>) = 0 [pid 6422] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6421] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6421] <... futex resumed>) = 0 [pid 6422] ftruncate(5, 33587195 [pid 6421] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6422] <... ftruncate resumed>) = 0 [pid 6422] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6422] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6421] <... futex resumed>) = 0 [pid 6421] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6422] <... futex resumed>) = 0 [pid 6421] <... futex resumed>) = 1 [pid 6422] sendfile(4, 5, NULL, 281474978811909 [ 259.751689][ T6423] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6421] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6421] exit_group(0) = ? [pid 6422] <... sendfile resumed>) = ? [pid 6422] +++ exited with 0 +++ [pid 6421] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6421, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./467", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./467", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./467/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./467/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./467/binderfs") = 0 umount2("./467/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./467/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./467/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./467/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./467/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./467/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./467") = 0 mkdir("./468", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6424 ./strace-static-x86_64: Process 6424 attached [pid 6424] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6424] chdir("./468") = 0 [pid 6424] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6424] setpgid(0, 0) = 0 [pid 6424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6424] write(3, "1000", 4) = 4 [pid 6424] close(3) = 0 [pid 6424] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6424] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6424] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6424] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6425 attached , parent_tid=[6425], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6425 [pid 6424] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6424] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6425] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6425] memfd_create("syzkaller", 0) = 3 [pid 6425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6425] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6425] munmap(0x7f927cba2000, 2097152) = 0 [pid 6425] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6425] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6425] close(3) = 0 [pid 6425] mkdir("./file0", 0777) = 0 [ 260.059685][ T6425] loop0: detected capacity change from 0 to 4096 [ 260.076416][ T6425] NILFS (loop0): invalid segment: Checksum error in segment payload [ 260.084487][ T6425] NILFS (loop0): trying rollback from an earlier position [ 260.099671][ T6425] NILFS (loop0): recovery complete [pid 6425] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6425] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6425] chdir("./file0") = 0 [pid 6425] ioctl(4, LOOP_CLR_FD) = 0 [pid 6425] close(4) = 0 [pid 6425] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6424] <... futex resumed>) = 0 [pid 6425] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6424] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6424] <... futex resumed>) = 0 [pid 6425] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6424] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6425] <... open resumed>) = 4 [pid 6425] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6424] <... futex resumed>) = 0 [pid 6425] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6424] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6424] <... futex resumed>) = 0 [pid 6425] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6424] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6425] <... open resumed>) = 5 [pid 6425] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6424] <... futex resumed>) = 0 [pid 6425] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6424] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6424] <... futex resumed>) = 0 [pid 6425] ftruncate(5, 33587195 [pid 6424] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6425] <... ftruncate resumed>) = 0 [pid 6425] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6424] <... futex resumed>) = 0 [pid 6425] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6424] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6424] <... futex resumed>) = 0 [pid 6425] sendfile(4, 5, NULL, 281474978811909 [ 260.106891][ T6426] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6424] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6424] exit_group(0) = ? [pid 6425] <... sendfile resumed>) = ? [pid 6425] +++ exited with 0 +++ [pid 6424] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6424, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- umount2("./468", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./468", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./468/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./468/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./468/binderfs") = 0 umount2("./468/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./468/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./468/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./468/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./468/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./468/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./468") = 0 mkdir("./469", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6427 ./strace-static-x86_64: Process 6427 attached [pid 6427] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6427] chdir("./469") = 0 [pid 6427] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6427] setpgid(0, 0) = 0 [pid 6427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6427] write(3, "1000", 4) = 4 [pid 6427] close(3) = 0 [pid 6427] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6427] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6427] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6427] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6428 attached , parent_tid=[6428], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6428 [pid 6428] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6428] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6427] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6428] <... futex resumed>) = 0 [pid 6428] memfd_create("syzkaller", 0 [pid 6427] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6428] <... memfd_create resumed>) = 3 [pid 6428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6428] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6428] munmap(0x7f927cba2000, 2097152) = 0 [pid 6428] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6428] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6428] close(3) = 0 [pid 6428] mkdir("./file0", 0777) = 0 [pid 6428] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6428] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 260.449659][ T6428] loop0: detected capacity change from 0 to 4096 [ 260.466536][ T6428] NILFS (loop0): invalid segment: Checksum error in segment payload [ 260.474770][ T6428] NILFS (loop0): trying rollback from an earlier position [ 260.490091][ T6428] NILFS (loop0): recovery complete [pid 6428] chdir("./file0") = 0 [pid 6428] ioctl(4, LOOP_CLR_FD) = 0 [pid 6428] close(4) = 0 [pid 6428] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6427] <... futex resumed>) = 0 [pid 6427] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6427] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6428] <... futex resumed>) = 1 [pid 6428] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6428] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6427] <... futex resumed>) = 0 [pid 6427] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6427] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6428] <... futex resumed>) = 1 [pid 6428] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6428] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6427] <... futex resumed>) = 0 [pid 6428] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6427] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6427] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6428] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6428] ftruncate(5, 33587195) = 0 [pid 6428] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6427] <... futex resumed>) = 0 [pid 6427] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6427] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6428] <... futex resumed>) = 1 [ 260.496076][ T6429] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6428] sendfile(4, 5, NULL, 281474978811909 [pid 6427] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6427] exit_group(0 [pid 6428] <... sendfile resumed>) = ? [pid 6427] <... exit_group resumed>) = ? [pid 6428] +++ exited with 0 +++ [pid 6427] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6427, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- umount2("./469", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./469", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./469/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./469/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./469/binderfs") = 0 umount2("./469/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./469/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./469/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./469/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./469/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./469/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./469") = 0 mkdir("./470", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6430 ./strace-static-x86_64: Process 6430 attached [pid 6430] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6430] chdir("./470") = 0 [pid 6430] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6430] setpgid(0, 0) = 0 [pid 6430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6430] write(3, "1000", 4) = 4 [pid 6430] close(3) = 0 [pid 6430] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6430] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6430] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6430] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6431], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6431 [pid 6430] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6430] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6431 attached [pid 6431] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6431] memfd_create("syzkaller", 0) = 3 [pid 6431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6431] munmap(0x7f927cba2000, 2097152) = 0 [pid 6431] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6431] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6431] close(3) = 0 [pid 6431] mkdir("./file0", 0777) = 0 [ 260.831424][ T6431] loop0: detected capacity change from 0 to 4096 [ 260.849864][ T6431] NILFS (loop0): invalid segment: Checksum error in segment payload [ 260.858197][ T6431] NILFS (loop0): trying rollback from an earlier position [ 260.873930][ T6431] NILFS (loop0): recovery complete [pid 6431] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6431] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6431] chdir("./file0") = 0 [pid 6431] ioctl(4, LOOP_CLR_FD) = 0 [pid 6431] close(4) = 0 [pid 6431] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6430] <... futex resumed>) = 0 [pid 6431] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6430] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6430] <... futex resumed>) = 0 [pid 6431] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6430] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6431] <... open resumed>) = 4 [pid 6431] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6430] <... futex resumed>) = 0 [pid 6431] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6430] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6430] <... futex resumed>) = 0 [pid 6431] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6430] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6431] <... open resumed>) = 5 [pid 6431] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6430] <... futex resumed>) = 0 [pid 6431] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6430] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6430] <... futex resumed>) = 0 [pid 6431] ftruncate(5, 33587195 [pid 6430] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6431] <... ftruncate resumed>) = 0 [pid 6431] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6430] <... futex resumed>) = 0 [pid 6431] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6430] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6430] <... futex resumed>) = 0 [pid 6431] sendfile(4, 5, NULL, 281474978811909 [ 260.880140][ T6432] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6430] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6430] exit_group(0 [pid 6431] <... sendfile resumed>) = ? [pid 6430] <... exit_group resumed>) = ? [pid 6431] +++ exited with 0 +++ [pid 6430] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6430, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- umount2("./470", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./470", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./470/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./470/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./470/binderfs") = 0 umount2("./470/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./470/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./470/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./470/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./470/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./470/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./470") = 0 mkdir("./471", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6433 ./strace-static-x86_64: Process 6433 attached [pid 6433] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6433] chdir("./471") = 0 [pid 6433] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6433] setpgid(0, 0) = 0 [pid 6433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6433] write(3, "1000", 4) = 4 [pid 6433] close(3) = 0 [pid 6433] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6433] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6433] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6433] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6433] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6434], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6434 [pid 6433] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6433] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6434 attached [pid 6434] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6434] memfd_create("syzkaller", 0) = 3 [pid 6434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6434] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6434] munmap(0x7f927cba2000, 2097152) = 0 [pid 6434] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6434] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6434] close(3) = 0 [pid 6434] mkdir("./file0", 0777) = 0 [ 261.212142][ T6434] loop0: detected capacity change from 0 to 4096 [ 261.228637][ T6434] NILFS (loop0): invalid segment: Checksum error in segment payload [ 261.236806][ T6434] NILFS (loop0): trying rollback from an earlier position [ 261.253087][ T6434] NILFS (loop0): recovery complete [pid 6434] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6434] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6434] chdir("./file0") = 0 [pid 6434] ioctl(4, LOOP_CLR_FD) = 0 [pid 6434] close(4) = 0 [pid 6434] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6433] <... futex resumed>) = 0 [pid 6433] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6433] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6434] <... futex resumed>) = 1 [pid 6434] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6434] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6433] <... futex resumed>) = 0 [pid 6433] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6433] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6434] <... futex resumed>) = 1 [pid 6434] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6434] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6433] <... futex resumed>) = 0 [pid 6433] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6433] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6434] <... futex resumed>) = 1 [pid 6434] ftruncate(5, 33587195) = 0 [pid 6434] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6433] <... futex resumed>) = 0 [pid 6433] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6433] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6434] <... futex resumed>) = 1 [ 261.259100][ T6435] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6434] sendfile(4, 5, NULL, 281474978811909 [pid 6433] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6433] exit_group(0) = ? [pid 6434] <... sendfile resumed>) = ? [pid 6434] +++ exited with 0 +++ [pid 6433] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6433, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./471", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./471", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./471/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./471/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./471/binderfs") = 0 umount2("./471/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./471/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./471/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./471/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./471/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./471/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./471") = 0 mkdir("./472", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6436 ./strace-static-x86_64: Process 6436 attached [pid 6436] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6436] chdir("./472") = 0 [pid 6436] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6436] setpgid(0, 0) = 0 [pid 6436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6436] write(3, "1000", 4) = 4 [pid 6436] close(3) = 0 [pid 6436] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6436] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6436] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6436] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6437 attached , parent_tid=[6437], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6437 [pid 6436] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6437] set_robust_list(0x7f9284fc29e0, 24 [pid 6436] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6437] <... set_robust_list resumed>) = 0 [pid 6437] memfd_create("syzkaller", 0) = 3 [pid 6437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6437] munmap(0x7f927cba2000, 2097152) = 0 [pid 6437] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6437] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6437] close(3) = 0 [pid 6437] mkdir("./file0", 0777) = 0 [pid 6437] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6437] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6437] chdir("./file0") = 0 [pid 6437] ioctl(4, LOOP_CLR_FD) = 0 [pid 6437] close(4) = 0 [pid 6437] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 261.618806][ T6437] loop0: detected capacity change from 0 to 4096 [ 261.634724][ T6437] NILFS (loop0): invalid segment: Checksum error in segment payload [ 261.642769][ T6437] NILFS (loop0): trying rollback from an earlier position [ 261.658044][ T6437] NILFS (loop0): recovery complete [pid 6437] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6436] <... futex resumed>) = 0 [pid 6436] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6436] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6437] <... futex resumed>) = 0 [pid 6437] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6437] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6436] <... futex resumed>) = 0 [pid 6436] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6436] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6437] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6437] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6437] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6436] <... futex resumed>) = 0 [pid 6436] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6436] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6437] <... futex resumed>) = 0 [pid 6437] ftruncate(5, 33587195) = 0 [pid 6437] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6436] <... futex resumed>) = 0 [pid 6436] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6436] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 261.664082][ T6438] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6437] sendfile(4, 5, NULL, 281474978811909 [pid 6436] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6436] exit_group(0) = ? [pid 6437] <... sendfile resumed>) = ? [pid 6437] +++ exited with 0 +++ [pid 6436] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6436, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./472", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./472", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./472/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./472/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./472/binderfs") = 0 umount2("./472/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./472/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./472/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./472/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./472/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./472/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./472") = 0 mkdir("./473", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6439 ./strace-static-x86_64: Process 6439 attached [pid 6439] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6439] chdir("./473") = 0 [pid 6439] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6439] setpgid(0, 0) = 0 [pid 6439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6439] write(3, "1000", 4) = 4 [pid 6439] close(3) = 0 [pid 6439] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6439] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6439] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6439] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6440], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6440 [pid 6439] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6439] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6440 attached [pid 6440] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6440] memfd_create("syzkaller", 0) = 3 [pid 6440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6440] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6440] munmap(0x7f927cba2000, 2097152) = 0 [pid 6440] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6440] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6440] close(3) = 0 [pid 6440] mkdir("./file0", 0777) = 0 [pid 6440] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 261.974592][ T6440] loop0: detected capacity change from 0 to 4096 [ 261.992554][ T6440] NILFS (loop0): invalid segment: Checksum error in segment payload [ 262.000703][ T6440] NILFS (loop0): trying rollback from an earlier position [ 262.015937][ T6440] NILFS (loop0): recovery complete [pid 6440] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6440] chdir("./file0") = 0 [pid 6440] ioctl(4, LOOP_CLR_FD) = 0 [pid 6440] close(4) = 0 [pid 6440] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6439] <... futex resumed>) = 0 [pid 6440] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6439] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6439] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6440] <... open resumed>) = 4 [pid 6440] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6439] <... futex resumed>) = 0 [pid 6440] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6439] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6440] <... open resumed>) = 5 [pid 6439] <... futex resumed>) = 0 [pid 6440] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6439] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6440] <... futex resumed>) = 0 [pid 6439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6440] ftruncate(5, 33587195 [pid 6439] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6440] <... ftruncate resumed>) = 0 [pid 6439] <... futex resumed>) = 0 [pid 6440] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6439] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6440] <... futex resumed>) = 0 [pid 6439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6440] sendfile(4, 5, NULL, 281474978811909 [pid 6439] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 262.024247][ T6441] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6439] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6439] exit_group(0) = ? [pid 6440] <... sendfile resumed>) = ? [pid 6440] +++ exited with 0 +++ [pid 6439] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6439, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./473", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./473", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./473/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./473/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./473/binderfs") = 0 umount2("./473/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./473/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./473/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./473/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./473/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./473/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./473") = 0 mkdir("./474", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6442 ./strace-static-x86_64: Process 6442 attached [pid 6442] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6442] chdir("./474") = 0 [pid 6442] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6442] setpgid(0, 0) = 0 [pid 6442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6442] write(3, "1000", 4) = 4 [pid 6442] close(3) = 0 [pid 6442] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6442] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6442] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6442] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6443], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6443 ./strace-static-x86_64: Process 6443 attached [pid 6442] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6442] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6443] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6443] memfd_create("syzkaller", 0) = 3 [pid 6443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6443] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6443] munmap(0x7f927cba2000, 2097152) = 0 [pid 6443] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6443] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6443] close(3) = 0 [pid 6443] mkdir("./file0", 0777) = 0 [ 262.356550][ T6443] loop0: detected capacity change from 0 to 4096 [ 262.374288][ T6443] NILFS (loop0): invalid segment: Checksum error in segment payload [ 262.382404][ T6443] NILFS (loop0): trying rollback from an earlier position [ 262.399592][ T6443] NILFS (loop0): recovery complete [pid 6443] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6443] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6443] chdir("./file0") = 0 [pid 6443] ioctl(4, LOOP_CLR_FD) = 0 [pid 6443] close(4) = 0 [pid 6443] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6443] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6442] <... futex resumed>) = 0 [pid 6442] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6442] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6443] <... futex resumed>) = 0 [pid 6443] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6443] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6442] <... futex resumed>) = 0 [pid 6443] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6442] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6443] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6443] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6443] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6442] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6442] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] <... futex resumed>) = 0 [pid 6442] <... futex resumed>) = 1 [pid 6443] ftruncate(5, 33587195 [pid 6442] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6443] <... ftruncate resumed>) = 0 [pid 6443] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6442] <... futex resumed>) = 0 [pid 6443] sendfile(4, 5, NULL, 281474978811909 [pid 6442] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 262.405583][ T6444] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6442] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6442] exit_group(0) = ? [pid 6443] <... sendfile resumed>) = ? [pid 6443] +++ exited with 0 +++ [pid 6442] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6442, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./474", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./474", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./474/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./474/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./474/binderfs") = 0 umount2("./474/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./474/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./474/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./474/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./474/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./474/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./474") = 0 mkdir("./475", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6445 ./strace-static-x86_64: Process 6445 attached [pid 6445] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6445] chdir("./475") = 0 [pid 6445] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6445] setpgid(0, 0) = 0 [pid 6445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6445] write(3, "1000", 4) = 4 [pid 6445] close(3) = 0 [pid 6445] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6445] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6445] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6445] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6446 attached [pid 6446] set_robust_list(0x7f9284fc29e0, 24 [pid 6445] <... clone resumed>, parent_tid=[6446], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6446 [pid 6446] <... set_robust_list resumed>) = 0 [pid 6446] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6445] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6446] <... futex resumed>) = 0 [pid 6445] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6446] memfd_create("syzkaller", 0) = 3 [pid 6446] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6446] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6446] munmap(0x7f927cba2000, 2097152) = 0 [pid 6446] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6446] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6446] close(3) = 0 [pid 6446] mkdir("./file0", 0777) = 0 [pid 6446] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6446] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6446] chdir("./file0") = 0 [pid 6446] ioctl(4, LOOP_CLR_FD) = 0 [ 262.745291][ T6446] loop0: detected capacity change from 0 to 4096 [ 262.760021][ T6446] NILFS (loop0): invalid segment: Checksum error in segment payload [ 262.768089][ T6446] NILFS (loop0): trying rollback from an earlier position [ 262.783782][ T6446] NILFS (loop0): recovery complete [pid 6446] close(4) = 0 [pid 6446] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6445] <... futex resumed>) = 0 [pid 6445] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6445] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6446] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6446] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6445] <... futex resumed>) = 0 [pid 6445] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6445] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6446] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6446] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] <... futex resumed>) = 0 [pid 6445] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6445] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6446] <... futex resumed>) = 1 [pid 6446] ftruncate(5, 33587195) = 0 [pid 6446] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] <... futex resumed>) = 0 [pid 6445] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6445] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6446] <... futex resumed>) = 1 [ 262.790118][ T6447] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6446] sendfile(4, 5, NULL, 281474978811909 [pid 6445] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6445] exit_group(0) = ? [pid 6446] <... sendfile resumed>) = ? [pid 6446] +++ exited with 0 +++ [pid 6445] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6445, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./475", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./475", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./475/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./475/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./475/binderfs") = 0 umount2("./475/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./475/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./475/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./475/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./475/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./475/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./475") = 0 mkdir("./476", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6448 ./strace-static-x86_64: Process 6448 attached [pid 6448] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6448] chdir("./476") = 0 [pid 6448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6448] setpgid(0, 0) = 0 [pid 6448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6448] write(3, "1000", 4) = 4 [pid 6448] close(3) = 0 [pid 6448] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6448] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6448] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6448] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6449 attached , parent_tid=[6449], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6449 [pid 6449] set_robust_list(0x7f9284fc29e0, 24 [pid 6448] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6448] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6449] <... set_robust_list resumed>) = 0 [pid 6449] memfd_create("syzkaller", 0) = 3 [pid 6449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6449] munmap(0x7f927cba2000, 2097152) = 0 [pid 6449] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6449] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6449] close(3) = 0 [pid 6449] mkdir("./file0", 0777) = 0 [ 263.107294][ T6449] loop0: detected capacity change from 0 to 4096 [ 263.123748][ T6449] NILFS (loop0): invalid segment: Checksum error in segment payload [ 263.131846][ T6449] NILFS (loop0): trying rollback from an earlier position [ 263.147015][ T6449] NILFS (loop0): recovery complete [pid 6449] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6449] chdir("./file0") = 0 [pid 6449] ioctl(4, LOOP_CLR_FD) = 0 [pid 6449] close(4) = 0 [pid 6449] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6449] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6448] <... futex resumed>) = 0 [pid 6448] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6449] <... futex resumed>) = 0 [pid 6448] <... futex resumed>) = 1 [pid 6449] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6448] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6449] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6449] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6448] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6449] <... futex resumed>) = 0 [pid 6448] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6449] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6449] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6448] <... futex resumed>) = 0 [pid 6449] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6448] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6448] <... futex resumed>) = 0 [pid 6449] ftruncate(5, 33587195 [pid 6448] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6449] <... ftruncate resumed>) = 0 [pid 6449] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6448] <... futex resumed>) = 0 [pid 6449] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6448] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6448] <... futex resumed>) = 0 [pid 6449] sendfile(4, 5, NULL, 281474978811909 [ 263.153231][ T6450] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6448] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6448] exit_group(0) = ? [pid 6449] <... sendfile resumed>) = ? [pid 6449] +++ exited with 0 +++ [pid 6448] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6448, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./476", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./476", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./476/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./476/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./476/binderfs") = 0 umount2("./476/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./476/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./476/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./476/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./476/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./476/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./476") = 0 mkdir("./477", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6451 ./strace-static-x86_64: Process 6451 attached [pid 6451] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6451] chdir("./477") = 0 [pid 6451] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6451] setpgid(0, 0) = 0 [pid 6451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6451] write(3, "1000", 4) = 4 [pid 6451] close(3) = 0 [pid 6451] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6451] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6451] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6451] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6451] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6452], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6452 [pid 6451] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6452 attached ) = 0 [pid 6451] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6452] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6452] memfd_create("syzkaller", 0) = 3 [pid 6452] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6452] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6452] munmap(0x7f927cba2000, 2097152) = 0 [pid 6452] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6452] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6452] close(3) = 0 [pid 6452] mkdir("./file0", 0777) = 0 [pid 6452] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6452] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 263.472971][ T6452] loop0: detected capacity change from 0 to 4096 [ 263.489035][ T6452] NILFS (loop0): invalid segment: Checksum error in segment payload [ 263.497129][ T6452] NILFS (loop0): trying rollback from an earlier position [ 263.513158][ T6452] NILFS (loop0): recovery complete [pid 6452] chdir("./file0") = 0 [pid 6452] ioctl(4, LOOP_CLR_FD) = 0 [pid 6452] close(4) = 0 [pid 6452] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6451] <... futex resumed>) = 0 [pid 6452] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6451] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6451] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6452] <... open resumed>) = 4 [pid 6452] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6451] <... futex resumed>) = 0 [pid 6452] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6451] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6452] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6451] <... futex resumed>) = 0 [pid 6452] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6451] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6452] <... open resumed>) = 5 [pid 6452] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6451] <... futex resumed>) = 0 [pid 6452] ftruncate(5, 33587195 [pid 6451] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6452] <... ftruncate resumed>) = 0 [pid 6451] <... futex resumed>) = 0 [pid 6452] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6451] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6452] <... futex resumed>) = 0 [pid 6451] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6452] sendfile(4, 5, NULL, 281474978811909 [pid 6451] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 263.519116][ T6453] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6451] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6451] exit_group(0) = ? [pid 6452] <... sendfile resumed>) = ? [pid 6452] +++ exited with 0 +++ [pid 6451] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6451, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./477", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./477", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./477/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./477/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./477/binderfs") = 0 umount2("./477/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./477/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./477/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./477/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./477/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./477/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./477") = 0 mkdir("./478", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6454 ./strace-static-x86_64: Process 6454 attached [pid 6454] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6454] chdir("./478") = 0 [pid 6454] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6454] setpgid(0, 0) = 0 [pid 6454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6454] write(3, "1000", 4) = 4 [pid 6454] close(3) = 0 [pid 6454] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6454] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6454] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6454] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6454] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6455], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6455 [pid 6454] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6454] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6455 attached [pid 6455] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6455] memfd_create("syzkaller", 0) = 3 [pid 6455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6455] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6455] munmap(0x7f927cba2000, 2097152) = 0 [pid 6455] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6455] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6455] close(3) = 0 [pid 6455] mkdir("./file0", 0777) = 0 [ 263.852775][ T6455] loop0: detected capacity change from 0 to 4096 [ 263.870970][ T6455] NILFS (loop0): invalid segment: Checksum error in segment payload [ 263.879437][ T6455] NILFS (loop0): trying rollback from an earlier position [ 263.894454][ T6455] NILFS (loop0): recovery complete [pid 6455] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6455] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6455] chdir("./file0") = 0 [pid 6455] ioctl(4, LOOP_CLR_FD) = 0 [pid 6455] close(4) = 0 [pid 6455] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6455] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6454] <... futex resumed>) = 0 [pid 6454] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6455] <... futex resumed>) = 0 [pid 6454] <... futex resumed>) = 1 [pid 6455] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6454] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6455] <... open resumed>) = 4 [pid 6455] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6454] <... futex resumed>) = 0 [pid 6455] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6454] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6455] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6454] <... futex resumed>) = 0 [pid 6455] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6454] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6455] <... open resumed>) = 5 [pid 6455] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6454] <... futex resumed>) = 0 [pid 6455] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6454] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6455] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6454] <... futex resumed>) = 0 [pid 6455] ftruncate(5, 33587195 [pid 6454] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6455] <... ftruncate resumed>) = 0 [pid 6455] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6454] <... futex resumed>) = 0 [pid 6455] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6454] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6455] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6454] <... futex resumed>) = 0 [pid 6455] sendfile(4, 5, NULL, 281474978811909 [ 263.900769][ T6456] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6454] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6454] exit_group(0) = ? [pid 6455] <... sendfile resumed>) = ? [pid 6455] +++ exited with 0 +++ [pid 6454] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6454, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./478", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./478", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./478/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./478/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./478/binderfs") = 0 umount2("./478/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./478/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./478/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./478/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./478/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./478/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./478") = 0 mkdir("./479", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6457 ./strace-static-x86_64: Process 6457 attached [pid 6457] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6457] chdir("./479") = 0 [pid 6457] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6457] setpgid(0, 0) = 0 [pid 6457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6457] write(3, "1000", 4) = 4 [pid 6457] close(3) = 0 [pid 6457] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6457] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6457] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6457] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6458], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6458 [pid 6457] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6457] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6458 attached [pid 6458] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6458] memfd_create("syzkaller", 0) = 3 [pid 6458] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6458] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6458] munmap(0x7f927cba2000, 2097152) = 0 [pid 6458] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6458] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6458] close(3) = 0 [pid 6458] mkdir("./file0", 0777) = 0 [pid 6458] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6458] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6458] chdir("./file0") = 0 [pid 6458] ioctl(4, LOOP_CLR_FD) = 0 [pid 6458] close(4) = 0 [pid 6458] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 264.219834][ T6458] loop0: detected capacity change from 0 to 4096 [ 264.236117][ T6458] NILFS (loop0): invalid segment: Checksum error in segment payload [ 264.244206][ T6458] NILFS (loop0): trying rollback from an earlier position [ 264.259752][ T6458] NILFS (loop0): recovery complete [pid 6458] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6457] <... futex resumed>) = 0 [pid 6457] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6457] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6458] <... futex resumed>) = 0 [pid 6458] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6458] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6457] <... futex resumed>) = 0 [pid 6457] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6457] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6458] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6458] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6457] <... futex resumed>) = 0 [pid 6457] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6457] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6458] ftruncate(5, 33587195) = 0 [pid 6458] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6457] <... futex resumed>) = 0 [pid 6457] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6457] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 264.265872][ T6459] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6458] sendfile(4, 5, NULL, 281474978811909 [pid 6457] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6457] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6457] exit_group(0) = ? [pid 6458] <... sendfile resumed>) = ? [pid 6458] +++ exited with 0 +++ [pid 6457] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6457, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./479", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./479", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./479/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./479/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./479/binderfs") = 0 umount2("./479/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./479/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./479/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./479/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./479/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./479/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./479") = 0 mkdir("./480", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6460 ./strace-static-x86_64: Process 6460 attached [pid 6460] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6460] chdir("./480") = 0 [pid 6460] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6460] setpgid(0, 0) = 0 [pid 6460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6460] write(3, "1000", 4) = 4 [pid 6460] close(3) = 0 [pid 6460] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6460] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6460] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6460] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6461 attached , parent_tid=[6461], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6461 [pid 6461] set_robust_list(0x7f9284fc29e0, 24 [pid 6460] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6461] <... set_robust_list resumed>) = 0 [pid 6460] <... futex resumed>) = 0 [pid 6460] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6461] memfd_create("syzkaller", 0) = 3 [pid 6461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6461] munmap(0x7f927cba2000, 2097152) = 0 [pid 6461] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6461] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6461] close(3) = 0 [pid 6461] mkdir("./file0", 0777) = 0 [pid 6461] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6461] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 264.585765][ T6461] loop0: detected capacity change from 0 to 4096 [ 264.602258][ T6461] NILFS (loop0): invalid segment: Checksum error in segment payload [ 264.610348][ T6461] NILFS (loop0): trying rollback from an earlier position [ 264.625933][ T6461] NILFS (loop0): recovery complete [pid 6461] chdir("./file0") = 0 [pid 6461] ioctl(4, LOOP_CLR_FD) = 0 [pid 6461] close(4) = 0 [pid 6461] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6460] <... futex resumed>) = 0 [pid 6460] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6460] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6461] <... futex resumed>) = 1 [pid 6461] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6461] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6460] <... futex resumed>) = 0 [pid 6460] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6460] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6461] <... futex resumed>) = 1 [pid 6461] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6461] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6460] <... futex resumed>) = 0 [pid 6460] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6460] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6461] <... futex resumed>) = 1 [pid 6461] ftruncate(5, 33587195) = 0 [pid 6461] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6460] <... futex resumed>) = 0 [pid 6460] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6460] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6461] <... futex resumed>) = 1 [ 264.632099][ T6462] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6461] sendfile(4, 5, NULL, 281474978811909 [pid 6460] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6460] exit_group(0) = ? [pid 6461] <... sendfile resumed>) = ? [pid 6461] +++ exited with 0 +++ [pid 6460] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6460, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./480", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./480", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./480/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./480/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./480/binderfs") = 0 umount2("./480/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./480/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./480/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./480/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./480/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./480/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./480") = 0 mkdir("./481", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6463 ./strace-static-x86_64: Process 6463 attached [pid 6463] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6463] chdir("./481") = 0 [pid 6463] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6463] setpgid(0, 0) = 0 [pid 6463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6463] write(3, "1000", 4) = 4 [pid 6463] close(3) = 0 [pid 6463] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6463] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6463] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6463] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6464 attached , parent_tid=[6464], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6464 [pid 6464] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6464] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6463] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6464] <... futex resumed>) = 0 [pid 6463] <... futex resumed>) = 1 [pid 6463] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6464] memfd_create("syzkaller", 0) = 3 [pid 6464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6464] munmap(0x7f927cba2000, 2097152) = 0 [pid 6464] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6464] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6464] close(3) = 0 [pid 6464] mkdir("./file0", 0777) = 0 [pid 6464] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 264.976289][ T6464] loop0: detected capacity change from 0 to 4096 [ 264.992905][ T6464] NILFS (loop0): invalid segment: Checksum error in segment payload [ 265.001022][ T6464] NILFS (loop0): trying rollback from an earlier position [ 265.018702][ T6464] NILFS (loop0): recovery complete [pid 6464] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6464] chdir("./file0") = 0 [pid 6464] ioctl(4, LOOP_CLR_FD) = 0 [pid 6464] close(4) = 0 [pid 6464] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6463] <... futex resumed>) = 0 [pid 6463] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6463] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6464] <... futex resumed>) = 1 [pid 6464] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6464] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6463] <... futex resumed>) = 0 [pid 6463] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6463] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6464] <... futex resumed>) = 1 [pid 6464] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6464] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6463] <... futex resumed>) = 0 [pid 6463] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6463] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6464] <... futex resumed>) = 1 [pid 6464] ftruncate(5, 33587195) = 0 [pid 6464] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6463] <... futex resumed>) = 0 [pid 6463] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6463] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6464] <... futex resumed>) = 1 [ 265.024812][ T6465] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6464] sendfile(4, 5, NULL, 281474978811909 [pid 6463] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6463] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6463] exit_group(0) = ? [pid 6464] <... sendfile resumed>) = ? [pid 6464] +++ exited with 0 +++ [pid 6463] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6463, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./481", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./481", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./481/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./481/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./481/binderfs") = 0 umount2("./481/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./481/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./481/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./481/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./481/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./481/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./481") = 0 mkdir("./482", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6466 ./strace-static-x86_64: Process 6466 attached [pid 6466] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6466] chdir("./482") = 0 [pid 6466] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6466] setpgid(0, 0) = 0 [pid 6466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6466] write(3, "1000", 4) = 4 [pid 6466] close(3) = 0 [pid 6466] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6466] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6466] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6466] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6467 attached , parent_tid=[6467], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6467 [pid 6467] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6467] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6466] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6467] <... futex resumed>) = 0 [pid 6467] memfd_create("syzkaller", 0 [pid 6466] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6467] <... memfd_create resumed>) = 3 [pid 6467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6467] munmap(0x7f927cba2000, 2097152) = 0 [pid 6467] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6467] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6467] close(3) = 0 [pid 6467] mkdir("./file0", 0777) = 0 [ 265.368279][ T6467] loop0: detected capacity change from 0 to 4096 [ 265.386116][ T6467] NILFS (loop0): invalid segment: Checksum error in segment payload [ 265.394205][ T6467] NILFS (loop0): trying rollback from an earlier position [ 265.409365][ T6467] NILFS (loop0): recovery complete [pid 6467] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6467] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6467] chdir("./file0") = 0 [pid 6467] ioctl(4, LOOP_CLR_FD) = 0 [pid 6467] close(4) = 0 [pid 6467] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6466] <... futex resumed>) = 0 [pid 6466] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6466] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6467] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6467] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6466] <... futex resumed>) = 0 [pid 6466] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6466] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6467] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6467] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6466] <... futex resumed>) = 0 [pid 6466] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6466] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6467] ftruncate(5, 33587195) = 0 [pid 6467] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6467] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6466] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6466] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6467] <... futex resumed>) = 0 [ 265.415195][ T6468] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6467] sendfile(4, 5, NULL, 281474978811909 [pid 6466] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6466] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6466] exit_group(0) = ? [pid 6467] <... sendfile resumed>) = ? [pid 6467] +++ exited with 0 +++ [pid 6466] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6466, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./482", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./482", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./482/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./482/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./482/binderfs") = 0 umount2("./482/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./482/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./482/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./482/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./482/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./482/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./482") = 0 mkdir("./483", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6469 ./strace-static-x86_64: Process 6469 attached [pid 6469] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6469] chdir("./483") = 0 [pid 6469] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6469] setpgid(0, 0) = 0 [pid 6469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6469] write(3, "1000", 4) = 4 [pid 6469] close(3) = 0 [pid 6469] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6469] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6469] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6469] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6470 attached , parent_tid=[6470], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6470 [pid 6469] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6469] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6470] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6470] memfd_create("syzkaller", 0) = 3 [pid 6470] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6470] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6470] munmap(0x7f927cba2000, 2097152) = 0 [pid 6470] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6470] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6470] close(3) = 0 [pid 6470] mkdir("./file0", 0777) = 0 [pid 6470] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6470] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6470] chdir("./file0") = 0 [ 265.772534][ T6470] loop0: detected capacity change from 0 to 4096 [ 265.789351][ T6470] NILFS (loop0): invalid segment: Checksum error in segment payload [ 265.797425][ T6470] NILFS (loop0): trying rollback from an earlier position [ 265.812393][ T6470] NILFS (loop0): recovery complete [pid 6470] ioctl(4, LOOP_CLR_FD) = 0 [pid 6470] close(4) = 0 [pid 6470] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6470] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6469] <... futex resumed>) = 0 [pid 6469] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6469] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6470] <... futex resumed>) = 0 [pid 6470] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6470] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6469] <... futex resumed>) = 0 [pid 6470] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6469] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6470] <... open resumed>) = 5 [pid 6469] <... futex resumed>) = 0 [pid 6470] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6469] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6470] <... futex resumed>) = 0 [pid 6469] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6470] ftruncate(5, 33587195 [pid 6469] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6470] <... ftruncate resumed>) = 0 [pid 6469] <... futex resumed>) = 0 [pid 6470] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6469] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6470] <... futex resumed>) = 0 [pid 6469] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6470] sendfile(4, 5, NULL, 281474978811909 [pid 6469] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 265.818735][ T6471] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6469] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6469] exit_group(0) = ? [pid 6470] <... sendfile resumed>) = ? [pid 6470] +++ exited with 0 +++ [pid 6469] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6469, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./483", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./483", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./483/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./483/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./483/binderfs") = 0 umount2("./483/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./483/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./483/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./483/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./483/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./483/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./483") = 0 mkdir("./484", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6472 ./strace-static-x86_64: Process 6472 attached [pid 6472] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6472] chdir("./484") = 0 [pid 6472] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6472] setpgid(0, 0) = 0 [pid 6472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6472] write(3, "1000", 4) = 4 [pid 6472] close(3) = 0 [pid 6472] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6472] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6472] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6472] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6473 attached , parent_tid=[6473], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6473 [pid 6473] set_robust_list(0x7f9284fc29e0, 24 [pid 6472] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6473] <... set_robust_list resumed>) = 0 [pid 6472] <... futex resumed>) = 0 [pid 6472] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6473] memfd_create("syzkaller", 0) = 3 [pid 6473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6473] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6473] munmap(0x7f927cba2000, 2097152) = 0 [pid 6473] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6473] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6473] close(3) = 0 [pid 6473] mkdir("./file0", 0777) = 0 [pid 6473] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6473] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6473] chdir("./file0") = 0 [pid 6473] ioctl(4, LOOP_CLR_FD) = 0 [pid 6473] close(4) = 0 [pid 6473] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 266.147104][ T6473] loop0: detected capacity change from 0 to 4096 [ 266.162156][ T6473] NILFS (loop0): invalid segment: Checksum error in segment payload [ 266.170295][ T6473] NILFS (loop0): trying rollback from an earlier position [ 266.185609][ T6473] NILFS (loop0): recovery complete [pid 6473] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6472] <... futex resumed>) = 0 [pid 6472] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6472] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6473] <... futex resumed>) = 0 [pid 6473] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6473] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6472] <... futex resumed>) = 0 [pid 6473] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6472] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6473] <... open resumed>) = 5 [pid 6472] <... futex resumed>) = 0 [pid 6473] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6473] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6472] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6472] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6473] <... futex resumed>) = 0 [pid 6472] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6473] ftruncate(5, 33587195) = 0 [pid 6473] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6472] <... futex resumed>) = 0 [pid 6472] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6473] sendfile(4, 5, NULL, 281474978811909 [pid 6472] <... futex resumed>) = 0 [ 266.191429][ T6474] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6472] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6472] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6472] exit_group(0) = ? [pid 6473] <... sendfile resumed>) = ? [pid 6473] +++ exited with 0 +++ [pid 6472] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6472, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./484", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./484", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./484/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./484/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./484/binderfs") = 0 umount2("./484/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./484/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./484/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./484/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./484/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./484/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./484") = 0 mkdir("./485", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6475 ./strace-static-x86_64: Process 6475 attached [pid 6475] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6475] chdir("./485") = 0 [pid 6475] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6475] setpgid(0, 0) = 0 [pid 6475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6475] write(3, "1000", 4) = 4 [pid 6475] close(3) = 0 [pid 6475] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6475] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6475] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6475] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6476 attached , parent_tid=[6476], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6476 [pid 6476] set_robust_list(0x7f9284fc29e0, 24 [pid 6475] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6475] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6476] <... set_robust_list resumed>) = 0 [pid 6476] memfd_create("syzkaller", 0) = 3 [pid 6476] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6476] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6476] munmap(0x7f927cba2000, 2097152) = 0 [pid 6476] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6476] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6476] close(3) = 0 [pid 6476] mkdir("./file0", 0777) = 0 [ 266.518340][ T6476] loop0: detected capacity change from 0 to 4096 [ 266.533955][ T6476] NILFS (loop0): invalid segment: Checksum error in segment payload [ 266.541975][ T6476] NILFS (loop0): trying rollback from an earlier position [ 266.557202][ T6476] NILFS (loop0): recovery complete [pid 6476] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6476] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6476] chdir("./file0") = 0 [pid 6476] ioctl(4, LOOP_CLR_FD) = 0 [pid 6476] close(4) = 0 [pid 6476] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6475] <... futex resumed>) = 0 [pid 6475] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6475] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6476] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6476] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] <... futex resumed>) = 0 [pid 6475] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6475] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6476] <... futex resumed>) = 1 [pid 6476] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6476] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] <... futex resumed>) = 0 [pid 6475] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6475] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6476] <... futex resumed>) = 1 [pid 6476] ftruncate(5, 33587195) = 0 [pid 6476] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] <... futex resumed>) = 0 [pid 6475] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6475] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6476] <... futex resumed>) = 1 [pid 6476] sendfile(4, 5, NULL, 281474978811909 [pid 6475] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6475] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 266.564136][ T6477] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6475] exit_group(0) = ? [pid 6476] <... sendfile resumed>) = ? [pid 6476] +++ exited with 0 +++ [pid 6475] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6475, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./485", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./485", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./485/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./485/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./485/binderfs") = 0 umount2("./485/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./485/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./485/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./485/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./485/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./485/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./485") = 0 mkdir("./486", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6478 ./strace-static-x86_64: Process 6478 attached [pid 6478] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6478] chdir("./486") = 0 [pid 6478] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6478] setpgid(0, 0) = 0 [pid 6478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6478] write(3, "1000", 4) = 4 [pid 6478] close(3) = 0 [pid 6478] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6478] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6478] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6478] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6479], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6479 [pid 6478] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6478] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6479 attached [pid 6479] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6479] memfd_create("syzkaller", 0) = 3 [pid 6479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6479] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6479] munmap(0x7f927cba2000, 2097152) = 0 [pid 6479] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6479] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6479] close(3) = 0 [pid 6479] mkdir("./file0", 0777) = 0 [ 266.879091][ T6479] loop0: detected capacity change from 0 to 4096 [ 266.896285][ T6479] NILFS (loop0): invalid segment: Checksum error in segment payload [ 266.904438][ T6479] NILFS (loop0): trying rollback from an earlier position [ 266.919672][ T6479] NILFS (loop0): recovery complete [pid 6479] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6479] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6479] chdir("./file0") = 0 [pid 6479] ioctl(4, LOOP_CLR_FD) = 0 [pid 6479] close(4) = 0 [pid 6479] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] <... futex resumed>) = 0 [pid 6478] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6478] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6479] <... futex resumed>) = 1 [pid 6479] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6479] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] <... futex resumed>) = 0 [pid 6478] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6478] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6479] <... futex resumed>) = 1 [pid 6479] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6479] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] <... futex resumed>) = 0 [pid 6478] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6478] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6479] <... futex resumed>) = 1 [pid 6479] ftruncate(5, 33587195) = 0 [pid 6479] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] <... futex resumed>) = 0 [pid 6478] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6478] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6479] <... futex resumed>) = 1 [ 266.926054][ T6480] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6479] sendfile(4, 5, NULL, 281474978811909 [pid 6478] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6478] exit_group(0) = ? [pid 6479] <... sendfile resumed>) = ? [pid 6479] +++ exited with 0 +++ [pid 6478] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6478, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./486", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./486", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./486/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./486/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./486/binderfs") = 0 umount2("./486/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./486/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./486/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./486/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./486/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./486/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./486") = 0 mkdir("./487", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6481 ./strace-static-x86_64: Process 6481 attached [pid 6481] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6481] chdir("./487") = 0 [pid 6481] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6481] setpgid(0, 0) = 0 [pid 6481] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6481] write(3, "1000", 4) = 4 [pid 6481] close(3) = 0 [pid 6481] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6481] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6481] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6481] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6481] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6482 attached , parent_tid=[6482], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6482 [pid 6481] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6481] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6482] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6482] memfd_create("syzkaller", 0) = 3 [pid 6482] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6482] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6482] munmap(0x7f927cba2000, 2097152) = 0 [pid 6482] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6482] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6482] close(3) = 0 [pid 6482] mkdir("./file0", 0777) = 0 [pid 6482] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6482] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6482] chdir("./file0") = 0 [pid 6482] ioctl(4, LOOP_CLR_FD) = 0 [pid 6482] close(4) = 0 [pid 6482] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 267.240139][ T6482] loop0: detected capacity change from 0 to 4096 [ 267.255450][ T6482] NILFS (loop0): invalid segment: Checksum error in segment payload [ 267.263560][ T6482] NILFS (loop0): trying rollback from an earlier position [ 267.278097][ T6482] NILFS (loop0): recovery complete [pid 6482] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6481] <... futex resumed>) = 0 [pid 6481] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6482] <... futex resumed>) = 0 [pid 6481] <... futex resumed>) = 1 [pid 6482] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6481] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6482] <... open resumed>) = 4 [pid 6482] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6481] <... futex resumed>) = 0 [pid 6482] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6481] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6482] <... open resumed>) = 5 [pid 6482] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6482] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6481] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6481] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6482] <... futex resumed>) = 0 [pid 6481] <... futex resumed>) = 1 [pid 6482] ftruncate(5, 33587195 [pid 6481] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6482] <... ftruncate resumed>) = 0 [pid 6482] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6481] <... futex resumed>) = 0 [pid 6482] <... futex resumed>) = 1 [pid 6481] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6482] sendfile(4, 5, NULL, 281474978811909 [pid 6481] <... futex resumed>) = 0 [ 267.284740][ T6483] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6481] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6481] exit_group(0) = ? [pid 6482] <... sendfile resumed>) = ? [pid 6482] +++ exited with 0 +++ [pid 6481] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6481, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./487", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./487", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./487/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./487/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./487/binderfs") = 0 umount2("./487/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./487/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./487/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./487/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./487/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./487/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./487") = 0 mkdir("./488", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6484 ./strace-static-x86_64: Process 6484 attached [pid 6484] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6484] chdir("./488") = 0 [pid 6484] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6484] setpgid(0, 0) = 0 [pid 6484] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6484] write(3, "1000", 4) = 4 [pid 6484] close(3) = 0 [pid 6484] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6484] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6484] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6484] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6484] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6485 attached , parent_tid=[6485], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6485 [pid 6485] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6485] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6484] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6484] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6485] <... futex resumed>) = 0 [pid 6485] memfd_create("syzkaller", 0) = 3 [pid 6485] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6485] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6485] munmap(0x7f927cba2000, 2097152) = 0 [pid 6485] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6485] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6485] close(3) = 0 [pid 6485] mkdir("./file0", 0777) = 0 [ 267.634940][ T6485] loop0: detected capacity change from 0 to 4096 [ 267.650582][ T6485] NILFS (loop0): invalid segment: Checksum error in segment payload [ 267.658830][ T6485] NILFS (loop0): trying rollback from an earlier position [ 267.673996][ T6485] NILFS (loop0): recovery complete [pid 6485] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6485] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6485] chdir("./file0") = 0 [pid 6485] ioctl(4, LOOP_CLR_FD) = 0 [pid 6485] close(4) = 0 [pid 6485] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6484] <... futex resumed>) = 0 [pid 6484] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6484] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6485] <... futex resumed>) = 1 [pid 6485] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6485] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6484] <... futex resumed>) = 0 [pid 6484] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6484] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6485] <... futex resumed>) = 1 [pid 6485] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6485] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6484] <... futex resumed>) = 0 [pid 6484] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6484] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6485] ftruncate(5, 33587195) = 0 [pid 6485] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6484] <... futex resumed>) = 0 [pid 6484] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6484] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 267.679772][ T6486] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6485] sendfile(4, 5, NULL, 281474978811909 [pid 6484] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6484] exit_group(0) = ? [pid 6485] <... sendfile resumed>) = ? [pid 6485] +++ exited with 0 +++ [pid 6484] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6484, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./488", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./488", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./488/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./488/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./488/binderfs") = 0 umount2("./488/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./488/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./488/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./488/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./488/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./488/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./488") = 0 mkdir("./489", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6487 ./strace-static-x86_64: Process 6487 attached [pid 6487] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6487] chdir("./489") = 0 [pid 6487] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6487] setpgid(0, 0) = 0 [pid 6487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6487] write(3, "1000", 4) = 4 [pid 6487] close(3) = 0 [pid 6487] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6487] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6487] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6487] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6487] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6488], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6488 ./strace-static-x86_64: Process 6488 attached [pid 6487] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6487] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6488] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6488] memfd_create("syzkaller", 0) = 3 [pid 6488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6488] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6488] munmap(0x7f927cba2000, 2097152) = 0 [pid 6488] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6488] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6488] close(3) = 0 [pid 6488] mkdir("./file0", 0777) = 0 [pid 6488] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6488] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6488] chdir("./file0") = 0 [pid 6488] ioctl(4, LOOP_CLR_FD) = 0 [ 267.997199][ T6488] loop0: detected capacity change from 0 to 4096 [ 268.011968][ T6488] NILFS (loop0): invalid segment: Checksum error in segment payload [ 268.020096][ T6488] NILFS (loop0): trying rollback from an earlier position [ 268.035226][ T6488] NILFS (loop0): recovery complete [pid 6488] close(4) = 0 [pid 6488] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6487] <... futex resumed>) = 0 [pid 6488] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6487] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6487] <... futex resumed>) = 0 [pid 6488] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6487] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6488] <... open resumed>) = 4 [pid 6488] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6487] <... futex resumed>) = 0 [pid 6488] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6487] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6487] <... futex resumed>) = 0 [pid 6488] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6487] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6488] <... open resumed>) = 5 [pid 6488] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6487] <... futex resumed>) = 0 [pid 6488] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6487] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6487] <... futex resumed>) = 0 [pid 6488] ftruncate(5, 33587195 [pid 6487] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6488] <... ftruncate resumed>) = 0 [pid 6488] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6487] <... futex resumed>) = 0 [pid 6488] sendfile(4, 5, NULL, 281474978811909 [pid 6487] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 268.041708][ T6489] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6487] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6487] exit_group(0) = ? [pid 6488] <... sendfile resumed>) = ? [pid 6488] +++ exited with 0 +++ [pid 6487] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6487, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./489", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./489", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./489/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./489/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./489/binderfs") = 0 umount2("./489/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./489/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./489/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./489/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./489/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./489/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./489") = 0 mkdir("./490", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6490 ./strace-static-x86_64: Process 6490 attached [pid 6490] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6490] chdir("./490") = 0 [pid 6490] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6490] setpgid(0, 0) = 0 [pid 6490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6490] write(3, "1000", 4) = 4 [pid 6490] close(3) = 0 [pid 6490] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6490] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6490] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6490] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6491], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6491 [pid 6490] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6490] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6491 attached [pid 6491] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6491] memfd_create("syzkaller", 0) = 3 [pid 6491] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6491] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6491] munmap(0x7f927cba2000, 2097152) = 0 [pid 6491] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6491] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6491] close(3) = 0 [pid 6491] mkdir("./file0", 0777) = 0 [ 268.370355][ T6491] loop0: detected capacity change from 0 to 4096 [ 268.388087][ T6491] NILFS (loop0): invalid segment: Checksum error in segment payload [ 268.396210][ T6491] NILFS (loop0): trying rollback from an earlier position [ 268.410746][ T6491] NILFS (loop0): recovery complete [pid 6491] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6491] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6491] chdir("./file0") = 0 [pid 6491] ioctl(4, LOOP_CLR_FD) = 0 [pid 6491] close(4) = 0 [pid 6491] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6490] <... futex resumed>) = 0 [pid 6491] <... futex resumed>) = 1 [pid 6490] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6490] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6491] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6491] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6490] <... futex resumed>) = 0 [pid 6490] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6490] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6491] <... futex resumed>) = 1 [pid 6491] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6491] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6490] <... futex resumed>) = 0 [pid 6490] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6490] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6491] <... futex resumed>) = 1 [pid 6491] ftruncate(5, 33587195) = 0 [pid 6491] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6490] <... futex resumed>) = 0 [pid 6491] sendfile(4, 5, NULL, 281474978811909 [pid 6490] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 268.416813][ T6492] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6490] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6490] exit_group(0) = ? [pid 6491] <... sendfile resumed>) = ? [pid 6491] +++ exited with 0 +++ [pid 6490] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6490, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./490", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./490", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./490/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./490/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./490/binderfs") = 0 umount2("./490/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./490/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./490/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./490/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./490/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./490/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./490") = 0 mkdir("./491", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6493 ./strace-static-x86_64: Process 6493 attached [pid 6493] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6493] chdir("./491") = 0 [pid 6493] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6493] setpgid(0, 0) = 0 [pid 6493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6493] write(3, "1000", 4) = 4 [pid 6493] close(3) = 0 [pid 6493] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6493] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6493] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6493] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6494 attached , parent_tid=[6494], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6494 [pid 6494] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6494] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6493] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6494] memfd_create("syzkaller", 0 [pid 6493] <... futex resumed>) = 0 [pid 6493] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6494] <... memfd_create resumed>) = 3 [pid 6494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6494] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6494] munmap(0x7f927cba2000, 2097152) = 0 [pid 6494] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6494] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6494] close(3) = 0 [pid 6494] mkdir("./file0", 0777) = 0 [ 268.752719][ T6494] loop0: detected capacity change from 0 to 4096 [ 268.767563][ T6494] NILFS (loop0): invalid segment: Checksum error in segment payload [ 268.775620][ T6494] NILFS (loop0): trying rollback from an earlier position [ 268.790175][ T6494] NILFS (loop0): recovery complete [pid 6494] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6494] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6494] chdir("./file0") = 0 [pid 6494] ioctl(4, LOOP_CLR_FD) = 0 [pid 6494] close(4) = 0 [pid 6494] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] <... futex resumed>) = 0 [pid 6493] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6493] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6494] <... futex resumed>) = 1 [pid 6494] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6494] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] <... futex resumed>) = 0 [pid 6493] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6493] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6494] <... futex resumed>) = 1 [pid 6494] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6494] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] <... futex resumed>) = 0 [pid 6493] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6493] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6494] <... futex resumed>) = 1 [pid 6494] ftruncate(5, 33587195) = 0 [pid 6494] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] <... futex resumed>) = 0 [pid 6493] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6493] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6494] <... futex resumed>) = 1 [ 268.796025][ T6495] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6494] sendfile(4, 5, NULL, 281474978811909 [pid 6493] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6493] exit_group(0) = ? [pid 6494] <... sendfile resumed>) = ? [pid 6494] +++ exited with 0 +++ [pid 6493] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6493, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./491", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./491", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./491/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./491/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./491/binderfs") = 0 umount2("./491/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./491/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./491/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./491/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./491/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./491/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./491") = 0 mkdir("./492", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6496 ./strace-static-x86_64: Process 6496 attached [pid 6496] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6496] chdir("./492") = 0 [pid 6496] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6496] setpgid(0, 0) = 0 [pid 6496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6496] write(3, "1000", 4) = 4 [pid 6496] close(3) = 0 [pid 6496] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6496] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6496] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6496] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6497 attached , parent_tid=[6497], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6497 [pid 6496] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6496] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6497] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6497] memfd_create("syzkaller", 0) = 3 [pid 6497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6497] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6497] munmap(0x7f927cba2000, 2097152) = 0 [pid 6497] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6497] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6497] close(3) = 0 [pid 6497] mkdir("./file0", 0777) = 0 [pid 6497] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6497] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6497] chdir("./file0") = 0 [pid 6497] ioctl(4, LOOP_CLR_FD) = 0 [pid 6497] close(4) = 0 [ 269.116274][ T6497] loop0: detected capacity change from 0 to 4096 [ 269.132518][ T6497] NILFS (loop0): invalid segment: Checksum error in segment payload [ 269.140589][ T6497] NILFS (loop0): trying rollback from an earlier position [ 269.156229][ T6497] NILFS (loop0): recovery complete [pid 6497] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] <... futex resumed>) = 0 [pid 6496] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6496] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6497] <... futex resumed>) = 1 [pid 6497] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6497] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] <... futex resumed>) = 0 [pid 6496] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6496] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6497] <... futex resumed>) = 1 [pid 6497] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6497] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] <... futex resumed>) = 0 [pid 6496] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6496] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6497] <... futex resumed>) = 1 [pid 6497] ftruncate(5, 33587195) = 0 [pid 6497] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] <... futex resumed>) = 0 [pid 6496] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6496] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6497] <... futex resumed>) = 1 [ 269.162252][ T6498] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6497] sendfile(4, 5, NULL, 281474978811909 [pid 6496] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6496] exit_group(0 [pid 6497] <... sendfile resumed>) = ? [pid 6496] <... exit_group resumed>) = ? [pid 6497] +++ exited with 0 +++ [pid 6496] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6496, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./492", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./492", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./492/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./492/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./492/binderfs") = 0 umount2("./492/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./492/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./492/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./492/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./492/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./492/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./492") = 0 mkdir("./493", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6499 ./strace-static-x86_64: Process 6499 attached [pid 6499] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6499] chdir("./493") = 0 [pid 6499] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6499] setpgid(0, 0) = 0 [pid 6499] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6499] write(3, "1000", 4) = 4 [pid 6499] close(3) = 0 [pid 6499] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6499] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6499] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6499] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6499] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6500], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6500 [pid 6499] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6499] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6500 attached [pid 6500] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6500] memfd_create("syzkaller", 0) = 3 [pid 6500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6500] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6500] munmap(0x7f927cba2000, 2097152) = 0 [pid 6500] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6500] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6500] close(3) = 0 [pid 6500] mkdir("./file0", 0777) = 0 [ 269.492911][ T6500] loop0: detected capacity change from 0 to 4096 [ 269.508726][ T6500] NILFS (loop0): invalid segment: Checksum error in segment payload [ 269.516876][ T6500] NILFS (loop0): trying rollback from an earlier position [ 269.530990][ T6500] NILFS (loop0): recovery complete [pid 6500] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6500] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6500] chdir("./file0") = 0 [pid 6500] ioctl(4, LOOP_CLR_FD) = 0 [pid 6500] close(4) = 0 [pid 6500] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6500] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6499] <... futex resumed>) = 0 [pid 6499] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6499] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6500] <... futex resumed>) = 0 [pid 6500] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6500] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6499] <... futex resumed>) = 0 [pid 6499] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6499] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6500] <... futex resumed>) = 1 [pid 6500] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6500] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6500] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6499] <... futex resumed>) = 0 [pid 6499] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6499] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6500] <... futex resumed>) = 0 [pid 6500] ftruncate(5, 33587195) = 0 [pid 6500] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6499] <... futex resumed>) = 0 [pid 6500] sendfile(4, 5, NULL, 281474978811909 [pid 6499] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 269.537175][ T6501] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6499] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6499] exit_group(0) = ? [pid 6500] <... sendfile resumed>) = ? [pid 6500] +++ exited with 0 +++ [pid 6499] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6499, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./493", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./493", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./493/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./493/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./493/binderfs") = 0 umount2("./493/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./493/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./493/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./493/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./493/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./493/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./493") = 0 mkdir("./494", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6502 ./strace-static-x86_64: Process 6502 attached [pid 6502] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6502] chdir("./494") = 0 [pid 6502] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6502] setpgid(0, 0) = 0 [pid 6502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6502] write(3, "1000", 4) = 4 [pid 6502] close(3) = 0 [pid 6502] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6502] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6502] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6502] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6503 attached , parent_tid=[6503], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6503 [pid 6502] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6502] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6503] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6503] memfd_create("syzkaller", 0) = 3 [pid 6503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6503] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6503] munmap(0x7f927cba2000, 2097152) = 0 [pid 6503] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6503] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6503] close(3) = 0 [pid 6503] mkdir("./file0", 0777) = 0 [pid 6503] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6503] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 269.876022][ T6503] loop0: detected capacity change from 0 to 4096 [ 269.892739][ T6503] NILFS (loop0): invalid segment: Checksum error in segment payload [ 269.900806][ T6503] NILFS (loop0): trying rollback from an earlier position [ 269.916465][ T6503] NILFS (loop0): recovery complete [pid 6503] chdir("./file0") = 0 [pid 6503] ioctl(4, LOOP_CLR_FD) = 0 [pid 6503] close(4) = 0 [pid 6503] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6502] <... futex resumed>) = 0 [pid 6503] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6502] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6503] <... open resumed>) = 4 [pid 6502] <... futex resumed>) = 0 [pid 6502] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6503] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6502] <... futex resumed>) = 0 [pid 6503] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6502] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6503] <... open resumed>) = 5 [pid 6502] <... futex resumed>) = 0 [pid 6503] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6502] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6503] <... futex resumed>) = 0 [pid 6502] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6503] ftruncate(5, 33587195 [pid 6502] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6503] <... ftruncate resumed>) = 0 [pid 6502] <... futex resumed>) = 0 [pid 6503] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6502] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6503] <... futex resumed>) = 0 [pid 6502] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6503] sendfile(4, 5, NULL, 281474978811909 [pid 6502] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 269.923847][ T6504] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6502] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6502] exit_group(0) = ? [pid 6503] <... sendfile resumed>) = ? [pid 6503] +++ exited with 0 +++ [pid 6502] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6502, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./494", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./494", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./494/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./494/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./494/binderfs") = 0 umount2("./494/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./494/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./494/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./494/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./494/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./494/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./494") = 0 mkdir("./495", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6505 ./strace-static-x86_64: Process 6505 attached [pid 6505] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6505] chdir("./495") = 0 [pid 6505] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6505] setpgid(0, 0) = 0 [pid 6505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6505] write(3, "1000", 4) = 4 [pid 6505] close(3) = 0 [pid 6505] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6505] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6505] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6505] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6506], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6506 [pid 6505] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6505] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6506 attached [pid 6506] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6506] memfd_create("syzkaller", 0) = 3 [pid 6506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6506] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6506] munmap(0x7f927cba2000, 2097152) = 0 [pid 6506] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6506] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6506] close(3) = 0 [pid 6506] mkdir("./file0", 0777) = 0 [pid 6506] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6506] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 270.250678][ T6506] loop0: detected capacity change from 0 to 4096 [ 270.267214][ T6506] NILFS (loop0): invalid segment: Checksum error in segment payload [ 270.275342][ T6506] NILFS (loop0): trying rollback from an earlier position [ 270.290682][ T6506] NILFS (loop0): recovery complete [pid 6506] chdir("./file0") = 0 [pid 6506] ioctl(4, LOOP_CLR_FD) = 0 [pid 6506] close(4) = 0 [pid 6506] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6505] <... futex resumed>) = 0 [pid 6505] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] <... futex resumed>) = 1 [pid 6505] <... futex resumed>) = 0 [pid 6506] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6505] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6506] <... open resumed>) = 4 [pid 6506] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6505] <... futex resumed>) = 0 [pid 6505] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6505] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6506] <... futex resumed>) = 1 [pid 6506] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6506] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6505] <... futex resumed>) = 0 [pid 6505] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] <... futex resumed>) = 1 [pid 6505] <... futex resumed>) = 0 [pid 6506] ftruncate(5, 33587195 [pid 6505] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6506] <... ftruncate resumed>) = 0 [pid 6506] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6505] <... futex resumed>) = 0 [pid 6506] sendfile(4, 5, NULL, 281474978811909 [pid 6505] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 270.296916][ T6507] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6505] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6505] exit_group(0) = ? [pid 6506] <... sendfile resumed>) = ? [pid 6506] +++ exited with 0 +++ [pid 6505] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6505, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- umount2("./495", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./495", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./495/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./495/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./495/binderfs") = 0 umount2("./495/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./495/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./495/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./495/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./495/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./495/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./495") = 0 mkdir("./496", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6508 ./strace-static-x86_64: Process 6508 attached [pid 6508] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6508] chdir("./496") = 0 [pid 6508] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6508] setpgid(0, 0) = 0 [pid 6508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6508] write(3, "1000", 4) = 4 [pid 6508] close(3) = 0 [pid 6508] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6508] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6508] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6508] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6509], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6509 [pid 6508] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6509 attached [pid 6509] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6509] memfd_create("syzkaller", 0) = 3 [pid 6509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6509] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6509] munmap(0x7f927cba2000, 2097152) = 0 [pid 6509] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6509] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6509] close(3) = 0 [pid 6509] mkdir("./file0", 0777) = 0 [ 270.624164][ T6509] loop0: detected capacity change from 0 to 4096 [ 270.639260][ T6509] NILFS (loop0): invalid segment: Checksum error in segment payload [ 270.647410][ T6509] NILFS (loop0): trying rollback from an earlier position [ 270.661639][ T6509] NILFS (loop0): recovery complete [pid 6509] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6509] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6509] chdir("./file0") = 0 [pid 6509] ioctl(4, LOOP_CLR_FD) = 0 [pid 6509] close(4) = 0 [pid 6509] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6508] <... futex resumed>) = 0 [pid 6508] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6509] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6509] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6508] <... futex resumed>) = 0 [pid 6508] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6509] <... futex resumed>) = 1 [pid 6509] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6509] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6508] <... futex resumed>) = 0 [pid 6508] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6509] <... futex resumed>) = 1 [pid 6509] ftruncate(5, 33587195) = 0 [pid 6509] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6508] <... futex resumed>) = 0 [pid 6508] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6509] <... futex resumed>) = 1 [ 270.667792][ T6510] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6509] sendfile(4, 5, NULL, 281474978811909 [pid 6508] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6508] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6508] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6508] exit_group(0 [pid 6509] <... sendfile resumed>) = ? [pid 6508] <... exit_group resumed>) = ? [pid 6509] +++ exited with 0 +++ [pid 6508] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6508, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./496", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./496", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./496/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./496/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./496/binderfs") = 0 umount2("./496/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./496/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./496/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./496/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./496/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./496/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./496") = 0 mkdir("./497", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6511 ./strace-static-x86_64: Process 6511 attached [pid 6511] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6511] chdir("./497") = 0 [pid 6511] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6511] setpgid(0, 0) = 0 [pid 6511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6511] write(3, "1000", 4) = 4 [pid 6511] close(3) = 0 [pid 6511] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6511] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6511] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6511] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6511] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6512 attached [pid 6512] set_robust_list(0x7f9284fc29e0, 24 [pid 6511] <... clone resumed>, parent_tid=[6512], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6512 [pid 6511] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6512] <... set_robust_list resumed>) = 0 [pid 6511] <... futex resumed>) = 0 [pid 6511] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6512] memfd_create("syzkaller", 0) = 3 [pid 6512] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6512] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6512] munmap(0x7f927cba2000, 2097152) = 0 [pid 6512] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6512] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6512] close(3) = 0 [pid 6512] mkdir("./file0", 0777) = 0 [ 270.979961][ T6512] loop0: detected capacity change from 0 to 4096 [ 271.005921][ T6512] NILFS (loop0): invalid segment: Checksum error in segment payload [ 271.014486][ T6512] NILFS (loop0): trying rollback from an earlier position [pid 6512] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6512] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6512] chdir("./file0") = 0 [pid 6512] ioctl(4, LOOP_CLR_FD) = 0 [pid 6512] close(4) = 0 [ 271.039769][ T6512] NILFS (loop0): recovery complete [pid 6512] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6511] <... futex resumed>) = 0 [pid 6512] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6511] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6512] <... futex resumed>) = 0 [pid 6511] <... futex resumed>) = 1 [pid 6512] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6511] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6512] <... open resumed>) = 4 [pid 6512] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6511] <... futex resumed>) = 0 [pid 6512] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6511] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6512] <... futex resumed>) = 0 [pid 6511] <... futex resumed>) = 1 [pid 6512] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6511] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6512] <... open resumed>) = 5 [pid 6512] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6511] <... futex resumed>) = 0 [pid 6512] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6511] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6512] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6511] <... futex resumed>) = 0 [pid 6512] ftruncate(5, 33587195 [pid 6511] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6512] <... ftruncate resumed>) = 0 [pid 6512] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6511] <... futex resumed>) = 0 [pid 6512] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6511] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6512] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6511] <... futex resumed>) = 0 [pid 6512] sendfile(4, 5, NULL, 281474978811909 [ 271.063650][ T6513] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6511] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6511] exit_group(0) = ? [pid 6512] <... sendfile resumed>) = ? [pid 6512] +++ exited with 0 +++ [pid 6511] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6511, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- umount2("./497", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./497", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./497/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./497/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./497/binderfs") = 0 umount2("./497/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./497/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./497/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./497/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./497/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./497/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./497") = 0 mkdir("./498", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6514 attached [pid 6514] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6514] chdir("./498") = 0 [pid 6514] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6514] setpgid(0, 0) = 0 [pid 6514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6514] write(3, "1000", 4) = 4 [pid 6514] close(3) = 0 [pid 6514] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6514] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6514] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6514] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] <... clone resumed>, child_tidptr=0x555555e2e5d0) = 6514 [pid 6514] <... clone resumed>, parent_tid=[6515], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6515 [pid 6514] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6514] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6515 attached [pid 6515] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6515] memfd_create("syzkaller", 0) = 3 [pid 6515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6515] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6515] munmap(0x7f927cba2000, 2097152) = 0 [pid 6515] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6515] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6515] close(3) = 0 [pid 6515] mkdir("./file0", 0777) = 0 [ 271.468036][ T6515] loop0: detected capacity change from 0 to 4096 [ 271.495609][ T6515] NILFS (loop0): invalid segment: Checksum error in segment payload [ 271.504174][ T6515] NILFS (loop0): trying rollback from an earlier position [pid 6515] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6515] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6515] chdir("./file0") = 0 [pid 6515] ioctl(4, LOOP_CLR_FD) = 0 [pid 6515] close(4) = 0 [pid 6515] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6514] <... futex resumed>) = 0 [pid 6514] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6514] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6515] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6515] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6514] <... futex resumed>) = 0 [pid 6514] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6514] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6515] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6515] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6514] <... futex resumed>) = 0 [pid 6515] ftruncate(5, 33587195 [pid 6514] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6515] <... ftruncate resumed>) = 0 [pid 6514] <... futex resumed>) = 0 [pid 6515] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6514] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6515] <... futex resumed>) = 0 [pid 6514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6515] sendfile(4, 5, NULL, 281474978811909 [pid 6514] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 271.530063][ T6515] NILFS (loop0): recovery complete [ 271.543826][ T6516] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6514] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6514] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6514] exit_group(0 [pid 6515] <... sendfile resumed>) = ? [pid 6514] <... exit_group resumed>) = ? [pid 6515] +++ exited with 0 +++ [pid 6514] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6514, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./498", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./498", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./498/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./498/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./498/binderfs") = 0 umount2("./498/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./498/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./498/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./498/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./498/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./498/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./498") = 0 mkdir("./499", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6517 ./strace-static-x86_64: Process 6517 attached [pid 6517] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6517] chdir("./499") = 0 [pid 6517] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6517] setpgid(0, 0) = 0 [pid 6517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6517] write(3, "1000", 4) = 4 [pid 6517] close(3) = 0 [pid 6517] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6517] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6517] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6517] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6518], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6518 ./strace-static-x86_64: Process 6518 attached [pid 6517] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6517] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6518] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6518] memfd_create("syzkaller", 0) = 3 [pid 6518] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6518] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6518] munmap(0x7f927cba2000, 2097152) = 0 [pid 6518] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6518] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6518] close(3) = 0 [pid 6518] mkdir("./file0", 0777) = 0 [pid 6518] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6518] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 271.869889][ T6518] loop0: detected capacity change from 0 to 4096 [ 271.887605][ T6518] NILFS (loop0): invalid segment: Checksum error in segment payload [ 271.895998][ T6518] NILFS (loop0): trying rollback from an earlier position [ 271.914979][ T6518] NILFS (loop0): recovery complete [pid 6518] chdir("./file0") = 0 [pid 6518] ioctl(4, LOOP_CLR_FD) = 0 [pid 6518] close(4) = 0 [pid 6518] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6518] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6517] <... futex resumed>) = 0 [pid 6517] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6518] <... futex resumed>) = 0 [pid 6517] <... futex resumed>) = 1 [pid 6518] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6517] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6518] <... open resumed>) = 4 [pid 6518] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6517] <... futex resumed>) = 0 [pid 6518] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6517] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6518] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6518] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6518] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6517] <... futex resumed>) = 0 [pid 6518] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6517] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6517] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6518] <... futex resumed>) = 0 [pid 6517] <... futex resumed>) = 1 [pid 6517] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6518] ftruncate(5, 33587195) = 0 [pid 6518] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6517] <... futex resumed>) = 0 [pid 6517] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6518] sendfile(4, 5, NULL, 281474978811909 [pid 6517] <... futex resumed>) = 0 [ 271.923915][ T6519] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6517] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6517] exit_group(0) = ? [pid 6518] <... sendfile resumed>) = ? [pid 6518] +++ exited with 0 +++ [pid 6517] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6517, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./499", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./499", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./499/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./499/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./499/binderfs") = 0 umount2("./499/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./499/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./499/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./499/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./499/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./499/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./499") = 0 mkdir("./500", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6520 ./strace-static-x86_64: Process 6520 attached [pid 6520] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6520] chdir("./500") = 0 [pid 6520] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6520] setpgid(0, 0) = 0 [pid 6520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6520] write(3, "1000", 4) = 4 [pid 6520] close(3) = 0 [pid 6520] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6520] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6520] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6520] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6521], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6521 [pid 6520] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6520] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6521 attached [pid 6521] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6521] memfd_create("syzkaller", 0) = 3 [pid 6521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6521] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6521] munmap(0x7f927cba2000, 2097152) = 0 [pid 6521] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6521] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6521] close(3) = 0 [pid 6521] mkdir("./file0", 0777) = 0 [pid 6521] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6521] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6521] chdir("./file0") = 0 [ 272.268540][ T6521] loop0: detected capacity change from 0 to 4096 [ 272.285958][ T6521] NILFS (loop0): invalid segment: Checksum error in segment payload [ 272.294079][ T6521] NILFS (loop0): trying rollback from an earlier position [ 272.309259][ T6521] NILFS (loop0): recovery complete [pid 6521] ioctl(4, LOOP_CLR_FD) = 0 [pid 6521] close(4) = 0 [pid 6521] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6520] <... futex resumed>) = 0 [pid 6520] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6520] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6521] <... futex resumed>) = 1 [pid 6521] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6521] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6520] <... futex resumed>) = 0 [pid 6520] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6520] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6521] <... futex resumed>) = 1 [pid 6521] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6521] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6520] <... futex resumed>) = 0 [pid 6520] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6520] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6521] <... futex resumed>) = 1 [pid 6521] ftruncate(5, 33587195) = 0 [pid 6521] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6520] <... futex resumed>) = 0 [pid 6520] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6520] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6521] <... futex resumed>) = 1 [ 272.315566][ T6522] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6521] sendfile(4, 5, NULL, 281474978811909 [pid 6520] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6520] exit_group(0) = ? [pid 6521] <... sendfile resumed>) = ? [pid 6521] +++ exited with 0 +++ [pid 6520] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6520, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./500", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./500", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./500/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./500/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./500/binderfs") = 0 umount2("./500/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./500/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./500/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./500/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./500/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./500/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./500") = 0 mkdir("./501", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6523 ./strace-static-x86_64: Process 6523 attached [pid 6523] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6523] chdir("./501") = 0 [pid 6523] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6523] setpgid(0, 0) = 0 [pid 6523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6523] write(3, "1000", 4) = 4 [pid 6523] close(3) = 0 [pid 6523] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6523] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6523] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6523] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6523] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6524], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6524 [pid 6523] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6523] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6524 attached [pid 6524] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6524] memfd_create("syzkaller", 0) = 3 [pid 6524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6524] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6524] munmap(0x7f927cba2000, 2097152) = 0 [pid 6524] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6524] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6524] close(3) = 0 [pid 6524] mkdir("./file0", 0777) = 0 [pid 6524] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6524] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6524] chdir("./file0") = 0 [ 272.634675][ T6524] loop0: detected capacity change from 0 to 4096 [ 272.651249][ T6524] NILFS (loop0): invalid segment: Checksum error in segment payload [ 272.659318][ T6524] NILFS (loop0): trying rollback from an earlier position [ 272.674915][ T6524] NILFS (loop0): recovery complete [pid 6524] ioctl(4, LOOP_CLR_FD) = 0 [pid 6524] close(4) = 0 [pid 6524] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6523] <... futex resumed>) = 0 [pid 6524] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6523] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6523] <... futex resumed>) = 0 [pid 6524] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6523] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6524] <... open resumed>) = 4 [pid 6524] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6524] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6523] <... futex resumed>) = 0 [pid 6523] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6524] <... futex resumed>) = 0 [pid 6524] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6523] <... futex resumed>) = 1 [pid 6524] <... open resumed>) = 5 [pid 6524] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6523] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6524] <... futex resumed>) = 0 [pid 6523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6523] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6523] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6524] ftruncate(5, 33587195) = 0 [pid 6524] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6523] <... futex resumed>) = 0 [pid 6524] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6523] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6523] <... futex resumed>) = 0 [pid 6524] sendfile(4, 5, NULL, 281474978811909 [ 272.681396][ T6525] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6523] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6523] exit_group(0) = ? [pid 6524] <... sendfile resumed>) = ? [pid 6524] +++ exited with 0 +++ [pid 6523] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6523, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./501", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./501", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./501/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./501/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./501/binderfs") = 0 umount2("./501/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./501/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./501/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./501/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./501/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./501/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./501") = 0 mkdir("./502", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6526 ./strace-static-x86_64: Process 6526 attached [pid 6526] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6526] chdir("./502") = 0 [pid 6526] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6526] setpgid(0, 0) = 0 [pid 6526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6526] write(3, "1000", 4) = 4 [pid 6526] close(3) = 0 [pid 6526] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6526] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6526] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6526] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6527 attached , parent_tid=[6527], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6527 [pid 6526] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6526] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6527] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6527] memfd_create("syzkaller", 0) = 3 [pid 6527] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6527] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6527] munmap(0x7f927cba2000, 2097152) = 0 [pid 6527] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6527] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6527] close(3) = 0 [pid 6527] mkdir("./file0", 0777) = 0 [ 273.024941][ T6527] loop0: detected capacity change from 0 to 4096 [ 273.040959][ T6527] NILFS (loop0): invalid segment: Checksum error in segment payload [ 273.049077][ T6527] NILFS (loop0): trying rollback from an earlier position [ 273.064405][ T6527] NILFS (loop0): recovery complete [pid 6527] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6527] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6527] chdir("./file0") = 0 [pid 6527] ioctl(4, LOOP_CLR_FD) = 0 [pid 6527] close(4) = 0 [pid 6527] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6527] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6526] <... futex resumed>) = 0 [pid 6526] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6527] <... futex resumed>) = 0 [pid 6527] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6526] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6527] <... open resumed>) = 4 [pid 6527] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6526] <... futex resumed>) = 0 [pid 6526] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6526] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6527] <... futex resumed>) = 1 [pid 6527] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6527] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6526] <... futex resumed>) = 0 [pid 6526] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6526] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6527] <... futex resumed>) = 1 [pid 6527] ftruncate(5, 33587195) = 0 [pid 6527] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6526] <... futex resumed>) = 0 [pid 6526] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6526] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6527] <... futex resumed>) = 1 [ 273.070730][ T6528] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6527] sendfile(4, 5, NULL, 281474978811909 [pid 6526] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6526] exit_group(0) = ? [pid 6527] <... sendfile resumed>) = ? [pid 6527] +++ exited with 0 +++ [pid 6526] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6526, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./502", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./502", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./502/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./502/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./502/binderfs") = 0 umount2("./502/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./502/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./502/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./502/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./502/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./502/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./502") = 0 mkdir("./503", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6529 ./strace-static-x86_64: Process 6529 attached [pid 6529] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6529] chdir("./503") = 0 [pid 6529] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6529] setpgid(0, 0) = 0 [pid 6529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6529] write(3, "1000", 4) = 4 [pid 6529] close(3) = 0 [pid 6529] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6529] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6529] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6529] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6529] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6530], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6530 [pid 6529] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6529] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6530 attached [pid 6530] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6530] memfd_create("syzkaller", 0) = 3 [pid 6530] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6530] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6530] munmap(0x7f927cba2000, 2097152) = 0 [pid 6530] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6530] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6530] close(3) = 0 [pid 6530] mkdir("./file0", 0777) = 0 [pid 6530] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6530] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 273.403072][ T6530] loop0: detected capacity change from 0 to 4096 [ 273.420486][ T6530] NILFS (loop0): invalid segment: Checksum error in segment payload [ 273.428559][ T6530] NILFS (loop0): trying rollback from an earlier position [ 273.443688][ T6530] NILFS (loop0): recovery complete [pid 6530] chdir("./file0") = 0 [pid 6530] ioctl(4, LOOP_CLR_FD) = 0 [pid 6530] close(4) = 0 [pid 6530] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6529] <... futex resumed>) = 0 [pid 6530] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6529] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6530] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6529] <... futex resumed>) = 0 [pid 6529] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6530] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6530] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6529] <... futex resumed>) = 0 [pid 6529] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6529] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6530] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6530] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6529] <... futex resumed>) = 0 [pid 6529] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6529] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6530] <... futex resumed>) = 1 [pid 6530] ftruncate(5, 33587195) = 0 [pid 6530] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6529] <... futex resumed>) = 0 [pid 6529] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6529] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6530] <... futex resumed>) = 1 [ 273.449480][ T6531] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6530] sendfile(4, 5, NULL, 281474978811909 [pid 6529] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6529] exit_group(0) = ? [pid 6530] <... sendfile resumed>) = ? [pid 6530] +++ exited with 0 +++ [pid 6529] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6529, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./503", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./503", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./503/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./503/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./503/binderfs") = 0 umount2("./503/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./503/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./503/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./503/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./503/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./503/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./503") = 0 mkdir("./504", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6532 ./strace-static-x86_64: Process 6532 attached [pid 6532] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6532] chdir("./504") = 0 [pid 6532] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6532] setpgid(0, 0) = 0 [pid 6532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6532] write(3, "1000", 4) = 4 [pid 6532] close(3) = 0 [pid 6532] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6532] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6532] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6532] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6533 attached , parent_tid=[6533], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6533 [pid 6532] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6532] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6533] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6533] memfd_create("syzkaller", 0) = 3 [pid 6533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6533] munmap(0x7f927cba2000, 2097152) = 0 [pid 6533] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6533] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6533] close(3) = 0 [pid 6533] mkdir("./file0", 0777) = 0 [ 273.771631][ T6533] loop0: detected capacity change from 0 to 4096 [ 273.787403][ T6533] NILFS (loop0): invalid segment: Checksum error in segment payload [ 273.795505][ T6533] NILFS (loop0): trying rollback from an earlier position [ 273.812449][ T6533] NILFS (loop0): recovery complete [pid 6533] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6533] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6533] chdir("./file0") = 0 [pid 6533] ioctl(4, LOOP_CLR_FD) = 0 [pid 6533] close(4) = 0 [pid 6533] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6532] <... futex resumed>) = 0 [pid 6532] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6532] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6533] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6533] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6532] <... futex resumed>) = 0 [pid 6532] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6532] <... futex resumed>) = 0 [pid 6533] <... open resumed>) = 5 [pid 6532] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6533] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6532] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6532] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6533] <... futex resumed>) = 1 [pid 6532] <... futex resumed>) = 0 [pid 6533] ftruncate(5, 33587195 [pid 6532] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=49000000} [pid 6533] <... ftruncate resumed>) = 0 [pid 6533] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6532] <... futex resumed>) = 0 [pid 6533] sendfile(4, 5, NULL, 281474978811909 [pid 6532] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 273.818423][ T6534] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6532] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6532] exit_group(0) = ? [pid 6533] <... sendfile resumed>) = ? [pid 6533] +++ exited with 0 +++ [pid 6532] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6532, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./504", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./504", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./504/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./504/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./504/binderfs") = 0 umount2("./504/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./504/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./504/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./504/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./504/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./504/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./504") = 0 mkdir("./505", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6535 ./strace-static-x86_64: Process 6535 attached [pid 6535] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6535] chdir("./505") = 0 [pid 6535] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6535] setpgid(0, 0) = 0 [pid 6535] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6535] write(3, "1000", 4) = 4 [pid 6535] close(3) = 0 [pid 6535] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6535] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6535] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6535] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6535] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6536], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6536 [pid 6535] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6535] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6536 attached [pid 6536] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6536] memfd_create("syzkaller", 0) = 3 [pid 6536] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6536] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6536] munmap(0x7f927cba2000, 2097152) = 0 [pid 6536] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6536] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6536] close(3) = 0 [pid 6536] mkdir("./file0", 0777) = 0 [pid 6536] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6536] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6536] chdir("./file0") = 0 [pid 6536] ioctl(4, LOOP_CLR_FD) = 0 [pid 6536] close(4) = 0 [pid 6536] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 274.151191][ T6536] loop0: detected capacity change from 0 to 4096 [ 274.166409][ T6536] NILFS (loop0): invalid segment: Checksum error in segment payload [ 274.174648][ T6536] NILFS (loop0): trying rollback from an earlier position [ 274.189408][ T6536] NILFS (loop0): recovery complete [pid 6536] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6535] <... futex resumed>) = 0 [pid 6535] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6535] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6536] <... futex resumed>) = 0 [pid 6536] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6536] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6535] <... futex resumed>) = 0 [pid 6536] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6535] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6535] <... futex resumed>) = 0 [pid 6536] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6535] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6536] <... open resumed>) = 5 [pid 6536] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6535] <... futex resumed>) = 0 [pid 6536] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6535] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6535] <... futex resumed>) = 0 [pid 6536] ftruncate(5, 33587195 [pid 6535] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6536] <... ftruncate resumed>) = 0 [pid 6536] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6535] <... futex resumed>) = 0 [pid 6536] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6535] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6535] <... futex resumed>) = 0 [pid 6536] sendfile(4, 5, NULL, 281474978811909 [ 274.195833][ T6537] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6535] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6535] exit_group(0 [pid 6536] <... sendfile resumed>) = ? [pid 6535] <... exit_group resumed>) = ? [pid 6536] +++ exited with 0 +++ [pid 6535] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6535, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./505", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./505", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./505/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./505/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./505/binderfs") = 0 umount2("./505/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./505/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./505/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./505/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./505/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./505/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./505") = 0 mkdir("./506", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6538 ./strace-static-x86_64: Process 6538 attached [pid 6538] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6538] chdir("./506") = 0 [pid 6538] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6538] setpgid(0, 0) = 0 [pid 6538] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6538] write(3, "1000", 4) = 4 [pid 6538] close(3) = 0 [pid 6538] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6538] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6538] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6538] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6538] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6539 attached [pid 6539] set_robust_list(0x7f9284fc29e0, 24 [pid 6538] <... clone resumed>, parent_tid=[6539], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6539 [pid 6538] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6539] <... set_robust_list resumed>) = 0 [pid 6538] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6539] memfd_create("syzkaller", 0) = 3 [pid 6539] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6539] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6539] munmap(0x7f927cba2000, 2097152) = 0 [pid 6539] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6539] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6539] close(3) = 0 [pid 6539] mkdir("./file0", 0777) = 0 [ 274.530148][ T6539] loop0: detected capacity change from 0 to 4096 [ 274.546479][ T6539] NILFS (loop0): invalid segment: Checksum error in segment payload [ 274.554554][ T6539] NILFS (loop0): trying rollback from an earlier position [ 274.569337][ T6539] NILFS (loop0): recovery complete [pid 6539] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6539] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6539] chdir("./file0") = 0 [pid 6539] ioctl(4, LOOP_CLR_FD) = 0 [pid 6539] close(4) = 0 [pid 6539] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6538] <... futex resumed>) = 0 [pid 6538] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6538] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6539] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6539] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6538] <... futex resumed>) = 0 [pid 6538] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6538] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6539] <... futex resumed>) = 1 [pid 6539] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6539] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6539] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6538] <... futex resumed>) = 0 [pid 6538] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6538] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6539] <... futex resumed>) = 0 [pid 6539] ftruncate(5, 33587195) = 0 [pid 6539] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6538] <... futex resumed>) = 0 [pid 6538] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6538] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6539] <... futex resumed>) = 1 [ 274.575700][ T6540] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6539] sendfile(4, 5, NULL, 281474978811909 [pid 6538] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6538] exit_group(0) = ? [pid 6539] <... sendfile resumed>) = ? [pid 6539] +++ exited with 0 +++ [pid 6538] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6538, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./506", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./506", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./506/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./506/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./506/binderfs") = 0 umount2("./506/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./506/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./506/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./506/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./506/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./506/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./506") = 0 mkdir("./507", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6541 ./strace-static-x86_64: Process 6541 attached [pid 6541] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6541] chdir("./507") = 0 [pid 6541] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6541] setpgid(0, 0) = 0 [pid 6541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6541] write(3, "1000", 4) = 4 [pid 6541] close(3) = 0 [pid 6541] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6541] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6541] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6541] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6541] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6542], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6542 ./strace-static-x86_64: Process 6542 attached [pid 6542] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6542] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6541] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6542] <... futex resumed>) = 0 [pid 6541] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6542] memfd_create("syzkaller", 0) = 3 [pid 6542] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6542] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6542] munmap(0x7f927cba2000, 2097152) = 0 [pid 6542] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6542] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6542] close(3) = 0 [pid 6542] mkdir("./file0", 0777) = 0 [pid 6542] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6542] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6542] chdir("./file0") = 0 [pid 6542] ioctl(4, LOOP_CLR_FD) = 0 [pid 6542] close(4) = 0 [pid 6542] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6541] <... futex resumed>) = 0 [pid 6542] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6541] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6541] <... futex resumed>) = 0 [ 274.940899][ T6542] loop0: detected capacity change from 0 to 4096 [ 274.955317][ T6542] NILFS (loop0): invalid segment: Checksum error in segment payload [ 274.963329][ T6542] NILFS (loop0): trying rollback from an earlier position [ 274.978698][ T6542] NILFS (loop0): recovery complete [pid 6542] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6541] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6542] <... open resumed>) = 4 [pid 6542] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6541] <... futex resumed>) = 0 [pid 6542] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6541] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6541] <... futex resumed>) = 0 [pid 6542] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6541] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6542] <... open resumed>) = 5 [pid 6542] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6541] <... futex resumed>) = 0 [pid 6542] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6541] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6541] <... futex resumed>) = 0 [pid 6542] ftruncate(5, 33587195 [pid 6541] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6542] <... ftruncate resumed>) = 0 [pid 6542] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6541] <... futex resumed>) = 0 [pid 6542] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6541] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6541] <... futex resumed>) = 0 [pid 6542] sendfile(4, 5, NULL, 281474978811909 [ 274.984988][ T6543] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6541] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6541] exit_group(0 [pid 6542] <... sendfile resumed>) = ? [pid 6541] <... exit_group resumed>) = ? [pid 6542] +++ exited with 0 +++ [pid 6541] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6541, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./507", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./507", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./507/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./507/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./507/binderfs") = 0 umount2("./507/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./507/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./507/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./507/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./507/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./507/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./507") = 0 mkdir("./508", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6544 ./strace-static-x86_64: Process 6544 attached [pid 6544] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6544] chdir("./508") = 0 [pid 6544] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6544] setpgid(0, 0) = 0 [pid 6544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6544] write(3, "1000", 4) = 4 [pid 6544] close(3) = 0 [pid 6544] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6544] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6544] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6544] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6545 attached , parent_tid=[6545], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6545 [pid 6544] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6544] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6545] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6545] memfd_create("syzkaller", 0) = 3 [pid 6545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6545] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6545] munmap(0x7f927cba2000, 2097152) = 0 [pid 6545] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6545] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6545] close(3) = 0 [pid 6545] mkdir("./file0", 0777) = 0 [ 275.315105][ T6545] loop0: detected capacity change from 0 to 4096 [ 275.334432][ T6545] NILFS (loop0): invalid segment: Checksum error in segment payload [ 275.342798][ T6545] NILFS (loop0): trying rollback from an earlier position [ 275.360292][ T6545] NILFS (loop0): recovery complete [pid 6545] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6545] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6545] chdir("./file0") = 0 [pid 6545] ioctl(4, LOOP_CLR_FD) = 0 [pid 6545] close(4) = 0 [pid 6545] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6544] <... futex resumed>) = 0 [pid 6545] <... futex resumed>) = 1 [pid 6544] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6545] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6544] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6545] <... open resumed>) = 4 [pid 6545] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6545] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6544] <... futex resumed>) = 0 [pid 6544] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6544] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6545] <... futex resumed>) = 0 [pid 6545] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6545] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6544] <... futex resumed>) = 0 [pid 6544] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6545] ftruncate(5, 33587195 [pid 6544] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6545] <... ftruncate resumed>) = 0 [pid 6545] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6544] <... futex resumed>) = 0 [pid 6545] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6544] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6545] sendfile(4, 5, NULL, 281474978811909 [pid 6544] <... futex resumed>) = 0 [ 275.366255][ T6546] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6544] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6544] exit_group(0) = ? [pid 6545] <... sendfile resumed>) = ? [pid 6545] +++ exited with 0 +++ [pid 6544] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6544, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- umount2("./508", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./508", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./508/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./508/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./508/binderfs") = 0 umount2("./508/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./508/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./508/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./508/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./508/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./508/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./508") = 0 mkdir("./509", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6547 ./strace-static-x86_64: Process 6547 attached [pid 6547] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6547] chdir("./509") = 0 [pid 6547] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6547] setpgid(0, 0) = 0 [pid 6547] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6547] write(3, "1000", 4) = 4 [pid 6547] close(3) = 0 [pid 6547] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6547] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6547] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6547] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6548], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6548 [pid 6547] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6547] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6548 attached [pid 6548] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6548] memfd_create("syzkaller", 0) = 3 [pid 6548] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6548] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6548] munmap(0x7f927cba2000, 2097152) = 0 [pid 6548] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6548] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6548] close(3) = 0 [pid 6548] mkdir("./file0", 0777) = 0 [pid 6548] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 275.684895][ T6548] loop0: detected capacity change from 0 to 4096 [ 275.701056][ T6548] NILFS (loop0): invalid segment: Checksum error in segment payload [ 275.709270][ T6548] NILFS (loop0): trying rollback from an earlier position [ 275.724632][ T6548] NILFS (loop0): recovery complete [pid 6548] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6548] chdir("./file0") = 0 [pid 6548] ioctl(4, LOOP_CLR_FD) = 0 [pid 6548] close(4) = 0 [pid 6548] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] <... futex resumed>) = 0 [pid 6547] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6547] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6548] <... futex resumed>) = 1 [pid 6548] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6548] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] <... futex resumed>) = 0 [pid 6547] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6547] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6548] <... futex resumed>) = 1 [pid 6548] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6548] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] <... futex resumed>) = 0 [pid 6547] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6547] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6548] <... futex resumed>) = 1 [pid 6548] ftruncate(5, 33587195) = 0 [pid 6548] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] <... futex resumed>) = 0 [pid 6547] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6547] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6548] <... futex resumed>) = 1 [ 275.730462][ T6549] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6548] sendfile(4, 5, NULL, 281474978811909 [pid 6547] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6547] exit_group(0) = ? [pid 6548] <... sendfile resumed>) = ? [pid 6548] +++ exited with 0 +++ [pid 6547] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6547, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./509", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./509", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./509/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./509/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./509/binderfs") = 0 umount2("./509/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./509/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./509/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./509/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./509/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./509/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./509") = 0 mkdir("./510", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6550 ./strace-static-x86_64: Process 6550 attached [pid 6550] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6550] chdir("./510") = 0 [pid 6550] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6550] setpgid(0, 0) = 0 [pid 6550] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6550] write(3, "1000", 4) = 4 [pid 6550] close(3) = 0 [pid 6550] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6550] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6550] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6550] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6550] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6551 attached , parent_tid=[6551], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6551 [pid 6551] set_robust_list(0x7f9284fc29e0, 24 [pid 6550] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6551] <... set_robust_list resumed>) = 0 [pid 6550] <... futex resumed>) = 0 [pid 6550] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6551] memfd_create("syzkaller", 0) = 3 [pid 6551] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6551] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6551] munmap(0x7f927cba2000, 2097152) = 0 [pid 6551] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6551] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6551] close(3) = 0 [pid 6551] mkdir("./file0", 0777) = 0 [ 276.061588][ T6551] loop0: detected capacity change from 0 to 4096 [ 276.077831][ T6551] NILFS (loop0): invalid segment: Checksum error in segment payload [ 276.085936][ T6551] NILFS (loop0): trying rollback from an earlier position [ 276.101130][ T6551] NILFS (loop0): recovery complete [pid 6551] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6551] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6551] chdir("./file0") = 0 [pid 6551] ioctl(4, LOOP_CLR_FD) = 0 [pid 6551] close(4) = 0 [pid 6551] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6550] <... futex resumed>) = 0 [pid 6550] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6550] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6551] <... futex resumed>) = 1 [pid 6551] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6551] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6550] <... futex resumed>) = 0 [pid 6550] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6550] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6551] <... futex resumed>) = 1 [pid 6551] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6551] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6550] <... futex resumed>) = 0 [pid 6550] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6550] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6551] <... futex resumed>) = 1 [pid 6551] ftruncate(5, 33587195) = 0 [pid 6551] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6550] <... futex resumed>) = 0 [pid 6550] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6550] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6551] <... futex resumed>) = 1 [pid 6551] sendfile(4, 5, NULL, 281474978811909 [pid 6550] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6550] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6550] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 276.107466][ T6552] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6550] exit_group(0) = ? [pid 6551] <... sendfile resumed>) = ? [pid 6551] +++ exited with 0 +++ [pid 6550] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6550, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./510", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./510", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./510/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./510/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./510/binderfs") = 0 umount2("./510/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./510/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./510/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./510/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./510/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./510/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./510") = 0 mkdir("./511", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6553 ./strace-static-x86_64: Process 6553 attached [pid 6553] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6553] chdir("./511") = 0 [pid 6553] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6553] setpgid(0, 0) = 0 [pid 6553] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6553] write(3, "1000", 4) = 4 [pid 6553] close(3) = 0 [pid 6553] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6553] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6553] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6553] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6554], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6554 [pid 6553] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6553] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6554 attached [pid 6554] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6554] memfd_create("syzkaller", 0) = 3 [pid 6554] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6554] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6554] munmap(0x7f927cba2000, 2097152) = 0 [pid 6554] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6554] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6554] close(3) = 0 [pid 6554] mkdir("./file0", 0777) = 0 [pid 6554] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6554] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6554] chdir("./file0") = 0 [pid 6554] ioctl(4, LOOP_CLR_FD) = 0 [pid 6554] close(4) = 0 [pid 6554] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 276.407744][ T6554] loop0: detected capacity change from 0 to 4096 [ 276.423006][ T6554] NILFS (loop0): invalid segment: Checksum error in segment payload [ 276.431125][ T6554] NILFS (loop0): trying rollback from an earlier position [ 276.446301][ T6554] NILFS (loop0): recovery complete [pid 6554] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6553] <... futex resumed>) = 0 [pid 6553] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6553] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6554] <... futex resumed>) = 0 [pid 6554] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6554] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6553] <... futex resumed>) = 0 [pid 6554] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6553] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6553] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6554] <... open resumed>) = 5 [pid 6554] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6553] <... futex resumed>) = 0 [pid 6553] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6553] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6554] <... futex resumed>) = 1 [pid 6554] ftruncate(5, 33587195) = 0 [pid 6554] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6553] <... futex resumed>) = 0 [pid 6553] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6553] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6554] <... futex resumed>) = 1 [ 276.452228][ T6555] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6554] sendfile(4, 5, NULL, 281474978811909 [pid 6553] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6553] exit_group(0) = ? [pid 6554] <... sendfile resumed>) = ? [pid 6554] +++ exited with 0 +++ [pid 6553] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6553, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./511", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./511", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./511/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./511/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./511/binderfs") = 0 umount2("./511/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./511/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./511/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./511/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./511/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./511/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./511") = 0 mkdir("./512", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6556 ./strace-static-x86_64: Process 6556 attached [pid 6556] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6556] chdir("./512") = 0 [pid 6556] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6556] setpgid(0, 0) = 0 [pid 6556] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6556] write(3, "1000", 4) = 4 [pid 6556] close(3) = 0 [pid 6556] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6556] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6556] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6556] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6556] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6557], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6557 [pid 6556] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6556] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6557 attached [pid 6557] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6557] memfd_create("syzkaller", 0) = 3 [pid 6557] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6557] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6557] munmap(0x7f927cba2000, 2097152) = 0 [pid 6557] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6557] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6557] close(3) = 0 [pid 6557] mkdir("./file0", 0777) = 0 [ 276.798253][ T6557] loop0: detected capacity change from 0 to 4096 [ 276.813888][ T6557] NILFS (loop0): invalid segment: Checksum error in segment payload [ 276.821960][ T6557] NILFS (loop0): trying rollback from an earlier position [ 276.837556][ T6557] NILFS (loop0): recovery complete [pid 6557] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6557] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6557] chdir("./file0") = 0 [pid 6557] ioctl(4, LOOP_CLR_FD) = 0 [pid 6557] close(4) = 0 [pid 6557] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6556] <... futex resumed>) = 0 [pid 6556] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6556] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6557] <... futex resumed>) = 1 [pid 6557] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6557] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6556] <... futex resumed>) = 0 [pid 6556] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6556] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6557] <... futex resumed>) = 1 [pid 6557] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6557] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6556] <... futex resumed>) = 0 [pid 6556] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6556] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6557] <... futex resumed>) = 1 [pid 6557] ftruncate(5, 33587195) = 0 [pid 6557] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6556] <... futex resumed>) = 0 [pid 6556] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6556] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6557] <... futex resumed>) = 1 [ 276.843838][ T6558] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6557] sendfile(4, 5, NULL, 281474978811909 [pid 6556] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6556] exit_group(0) = ? [pid 6557] <... sendfile resumed>) = ? [pid 6557] +++ exited with 0 +++ [pid 6556] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6556, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./512", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./512", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./512/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./512/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./512/binderfs") = 0 umount2("./512/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./512/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./512/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./512/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./512/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./512/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./512") = 0 mkdir("./513", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6559 ./strace-static-x86_64: Process 6559 attached [pid 6559] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6559] chdir("./513") = 0 [pid 6559] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6559] setpgid(0, 0) = 0 [pid 6559] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6559] write(3, "1000", 4) = 4 [pid 6559] close(3) = 0 [pid 6559] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6559] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6559] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6559] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6559] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6560 attached , parent_tid=[6560], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6560 [pid 6559] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6559] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6560] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6560] memfd_create("syzkaller", 0) = 3 [pid 6560] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6560] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6560] munmap(0x7f927cba2000, 2097152) = 0 [pid 6560] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6560] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6560] close(3) = 0 [pid 6560] mkdir("./file0", 0777) = 0 [ 277.180760][ T6560] loop0: detected capacity change from 0 to 4096 [ 277.196244][ T6560] NILFS (loop0): invalid segment: Checksum error in segment payload [ 277.204355][ T6560] NILFS (loop0): trying rollback from an earlier position [ 277.220001][ T6560] NILFS (loop0): recovery complete [pid 6560] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6560] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6560] chdir("./file0") = 0 [pid 6560] ioctl(4, LOOP_CLR_FD) = 0 [pid 6560] close(4) = 0 [pid 6560] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6559] <... futex resumed>) = 0 [pid 6560] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6559] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6559] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6560] <... open resumed>) = 4 [pid 6560] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6559] <... futex resumed>) = 0 [pid 6559] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6560] <... futex resumed>) = 1 [pid 6559] <... futex resumed>) = 0 [pid 6560] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6559] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6560] <... open resumed>) = 5 [pid 6560] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6559] <... futex resumed>) = 0 [pid 6560] ftruncate(5, 33587195 [pid 6559] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6560] <... ftruncate resumed>) = 0 [pid 6559] <... futex resumed>) = 0 [pid 6560] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6559] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6560] <... futex resumed>) = 0 [pid 6559] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6560] sendfile(4, 5, NULL, 281474978811909 [pid 6559] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6559] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6559] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 277.226159][ T6561] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6559] exit_group(0 [pid 6560] <... sendfile resumed>) = ? [pid 6559] <... exit_group resumed>) = ? [pid 6560] +++ exited with 0 +++ [pid 6559] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6559, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./513", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./513", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./513/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./513/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./513/binderfs") = 0 umount2("./513/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./513/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./513/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./513/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./513/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./513/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./513") = 0 mkdir("./514", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6562 ./strace-static-x86_64: Process 6562 attached [pid 6562] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6562] chdir("./514") = 0 [pid 6562] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6562] setpgid(0, 0) = 0 [pid 6562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6562] write(3, "1000", 4) = 4 [pid 6562] close(3) = 0 [pid 6562] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6562] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6562] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6562] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6563], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6563 [pid 6562] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6562] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6563 attached [pid 6563] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6563] memfd_create("syzkaller", 0) = 3 [pid 6563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6563] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6563] munmap(0x7f927cba2000, 2097152) = 0 [pid 6563] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6563] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6563] close(3) = 0 [pid 6563] mkdir("./file0", 0777) = 0 [ 277.548874][ T6563] loop0: detected capacity change from 0 to 4096 [ 277.565787][ T6563] NILFS (loop0): invalid segment: Checksum error in segment payload [ 277.573969][ T6563] NILFS (loop0): trying rollback from an earlier position [ 277.588072][ T6563] NILFS (loop0): recovery complete [pid 6563] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6563] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6563] chdir("./file0") = 0 [pid 6563] ioctl(4, LOOP_CLR_FD) = 0 [pid 6563] close(4) = 0 [pid 6563] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6563] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6562] <... futex resumed>) = 0 [pid 6562] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6563] <... futex resumed>) = 0 [pid 6562] <... futex resumed>) = 1 [pid 6563] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6562] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6563] <... open resumed>) = 4 [pid 6563] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6563] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6562] <... futex resumed>) = 0 [pid 6562] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6563] <... futex resumed>) = 0 [pid 6563] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6562] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6563] <... open resumed>) = 5 [pid 6563] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6562] <... futex resumed>) = 0 [pid 6562] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6563] ftruncate(5, 33587195 [pid 6562] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6563] <... ftruncate resumed>) = 0 [pid 6563] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6562] <... futex resumed>) = 0 [pid 6563] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6562] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6562] <... futex resumed>) = 0 [pid 6563] sendfile(4, 5, NULL, 281474978811909 [ 277.594145][ T6564] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6562] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6562] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6562] exit_group(0) = ? [pid 6563] <... sendfile resumed>) = ? [pid 6563] +++ exited with 0 +++ [pid 6562] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6562, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./514", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./514", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./514/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./514/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./514/binderfs") = 0 umount2("./514/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./514/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./514/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./514/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./514/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./514/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./514") = 0 mkdir("./515", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6565 ./strace-static-x86_64: Process 6565 attached [pid 6565] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6565] chdir("./515") = 0 [pid 6565] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6565] setpgid(0, 0) = 0 [pid 6565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6565] write(3, "1000", 4) = 4 [pid 6565] close(3) = 0 [pid 6565] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6565] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6565] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6565] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6566 attached [pid 6566] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6565] <... clone resumed>, parent_tid=[6566], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6566 [pid 6566] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6565] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6566] <... futex resumed>) = 0 [pid 6565] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6566] memfd_create("syzkaller", 0) = 3 [pid 6566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6566] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6566] munmap(0x7f927cba2000, 2097152) = 0 [pid 6566] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6566] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6566] close(3) = 0 [pid 6566] mkdir("./file0", 0777) = 0 [ 277.920586][ T6566] loop0: detected capacity change from 0 to 4096 [ 277.937130][ T6566] NILFS (loop0): invalid segment: Checksum error in segment payload [ 277.945259][ T6566] NILFS (loop0): trying rollback from an earlier position [ 277.961606][ T6566] NILFS (loop0): recovery complete [pid 6566] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6566] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6566] chdir("./file0") = 0 [pid 6566] ioctl(4, LOOP_CLR_FD) = 0 [pid 6566] close(4) = 0 [pid 6566] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6565] <... futex resumed>) = 0 [pid 6565] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6565] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6566] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6566] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6565] <... futex resumed>) = 0 [pid 6565] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6565] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6566] <... futex resumed>) = 1 [pid 6566] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6566] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6565] <... futex resumed>) = 0 [pid 6565] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6565] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6566] <... futex resumed>) = 1 [pid 6566] ftruncate(5, 33587195) = 0 [pid 6566] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6565] <... futex resumed>) = 0 [pid 6565] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6565] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6566] <... futex resumed>) = 1 [ 277.967866][ T6567] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6566] sendfile(4, 5, NULL, 281474978811909 [pid 6565] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6565] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6565] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6565] exit_group(0) = ? [pid 6566] <... sendfile resumed>) = ? [pid 6566] +++ exited with 0 +++ [pid 6565] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6565, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./515", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./515", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./515/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./515/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./515/binderfs") = 0 umount2("./515/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./515/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./515/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./515/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./515/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./515/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./515") = 0 mkdir("./516", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6568 ./strace-static-x86_64: Process 6568 attached [pid 6568] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6568] chdir("./516") = 0 [pid 6568] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6568] setpgid(0, 0) = 0 [pid 6568] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6568] write(3, "1000", 4) = 4 [pid 6568] close(3) = 0 [pid 6568] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6568] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6568] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6568] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6568] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6569], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6569 [pid 6568] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6568] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6569 attached [pid 6569] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6569] memfd_create("syzkaller", 0) = 3 [pid 6569] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6569] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6569] munmap(0x7f927cba2000, 2097152) = 0 [pid 6569] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6569] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6569] close(3) = 0 [pid 6569] mkdir("./file0", 0777) = 0 [ 278.279990][ T6569] loop0: detected capacity change from 0 to 4096 [ 278.295198][ T6569] NILFS (loop0): invalid segment: Checksum error in segment payload [ 278.303232][ T6569] NILFS (loop0): trying rollback from an earlier position [ 278.319231][ T6569] NILFS (loop0): recovery complete [pid 6569] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6569] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6569] chdir("./file0") = 0 [pid 6569] ioctl(4, LOOP_CLR_FD) = 0 [pid 6569] close(4) = 0 [pid 6569] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6569] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6568] <... futex resumed>) = 0 [pid 6568] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6568] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6569] <... futex resumed>) = 0 [pid 6569] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6569] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6568] <... futex resumed>) = 0 [pid 6568] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6568] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6569] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6569] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6568] <... futex resumed>) = 0 [pid 6568] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6568] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6569] <... futex resumed>) = 1 [pid 6569] ftruncate(5, 33587195) = 0 [pid 6569] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6568] <... futex resumed>) = 0 [pid 6568] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6568] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6569] <... futex resumed>) = 1 [ 278.325443][ T6570] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6569] sendfile(4, 5, NULL, 281474978811909 [pid 6568] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6568] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6568] exit_group(0) = ? [pid 6569] <... sendfile resumed>) = ? [pid 6569] +++ exited with 0 +++ [pid 6568] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6568, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./516", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./516", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./516/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./516/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./516/binderfs") = 0 umount2("./516/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./516/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./516/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./516/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./516/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./516/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./516") = 0 mkdir("./517", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6571 ./strace-static-x86_64: Process 6571 attached [pid 6571] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6571] chdir("./517") = 0 [pid 6571] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6571] setpgid(0, 0) = 0 [pid 6571] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6571] write(3, "1000", 4) = 4 [pid 6571] close(3) = 0 [pid 6571] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6571] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6571] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6571] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6571] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6572 attached , parent_tid=[6572], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6572 [pid 6572] set_robust_list(0x7f9284fc29e0, 24 [pid 6571] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6571] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6572] <... set_robust_list resumed>) = 0 [pid 6572] memfd_create("syzkaller", 0) = 3 [pid 6572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6572] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6572] munmap(0x7f927cba2000, 2097152) = 0 [pid 6572] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6572] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6572] close(3) = 0 [pid 6572] mkdir("./file0", 0777) = 0 [pid 6572] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6572] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6572] chdir("./file0") = 0 [pid 6572] ioctl(4, LOOP_CLR_FD) = 0 [pid 6572] close(4) = 0 [pid 6572] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 278.658207][ T6572] loop0: detected capacity change from 0 to 4096 [ 278.673265][ T6572] NILFS (loop0): invalid segment: Checksum error in segment payload [ 278.681313][ T6572] NILFS (loop0): trying rollback from an earlier position [ 278.696502][ T6572] NILFS (loop0): recovery complete [pid 6572] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6571] <... futex resumed>) = 0 [pid 6571] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6571] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6572] <... futex resumed>) = 0 [pid 6572] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6572] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6572] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6571] <... futex resumed>) = 0 [pid 6571] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6571] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6572] <... futex resumed>) = 0 [pid 6572] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6572] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6571] <... futex resumed>) = 0 [pid 6571] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6571] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6572] <... futex resumed>) = 1 [pid 6572] ftruncate(5, 33587195) = 0 [pid 6572] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6571] <... futex resumed>) = 0 [pid 6571] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6571] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6572] <... futex resumed>) = 1 [ 278.702346][ T6573] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6572] sendfile(4, 5, NULL, 281474978811909 [pid 6571] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6571] exit_group(0) = ? [pid 6572] <... sendfile resumed>) = ? [pid 6572] +++ exited with 0 +++ [pid 6571] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6571, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./517", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./517", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./517/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./517/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./517/binderfs") = 0 umount2("./517/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./517/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./517/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./517/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./517/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./517/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./517") = 0 mkdir("./518", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6574 ./strace-static-x86_64: Process 6574 attached [pid 6574] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6574] chdir("./518") = 0 [pid 6574] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6574] setpgid(0, 0) = 0 [pid 6574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6574] write(3, "1000", 4) = 4 [pid 6574] close(3) = 0 [pid 6574] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6574] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6574] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6574] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6575], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6575 [pid 6574] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6575 attached [pid 6575] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6575] memfd_create("syzkaller", 0) = 3 [pid 6575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6574] <... futex resumed>) = 0 [pid 6574] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6575] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6575] munmap(0x7f927cba2000, 2097152) = 0 [pid 6575] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6575] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6575] close(3) = 0 [pid 6575] mkdir("./file0", 0777) = 0 [pid 6575] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 279.043846][ T6575] loop0: detected capacity change from 0 to 4096 [ 279.059087][ T6575] NILFS (loop0): invalid segment: Checksum error in segment payload [ 279.067275][ T6575] NILFS (loop0): trying rollback from an earlier position [ 279.085556][ T6575] NILFS (loop0): recovery complete [pid 6575] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6575] chdir("./file0") = 0 [pid 6575] ioctl(4, LOOP_CLR_FD) = 0 [pid 6575] close(4) = 0 [pid 6575] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6574] <... futex resumed>) = 0 [pid 6574] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6574] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6575] <... futex resumed>) = 1 [pid 6575] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6575] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6574] <... futex resumed>) = 0 [pid 6574] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6574] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6575] <... futex resumed>) = 1 [pid 6575] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6575] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6574] <... futex resumed>) = 0 [pid 6574] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6575] <... futex resumed>) = 1 [pid 6574] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6575] ftruncate(5, 33587195) = 0 [pid 6575] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6575] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6574] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6574] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6575] <... futex resumed>) = 0 [ 279.091691][ T6576] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6575] sendfile(4, 5, NULL, 281474978811909 [pid 6574] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6574] exit_group(0) = ? [pid 6575] <... sendfile resumed>) = ? [pid 6575] +++ exited with 0 +++ [pid 6574] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6574, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./518", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./518", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./518/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./518/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./518/binderfs") = 0 umount2("./518/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./518/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./518/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./518/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./518/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./518/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./518") = 0 mkdir("./519", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6577 ./strace-static-x86_64: Process 6577 attached [pid 6577] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6577] chdir("./519") = 0 [pid 6577] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6577] setpgid(0, 0) = 0 [pid 6577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6577] write(3, "1000", 4) = 4 [pid 6577] close(3) = 0 [pid 6577] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6577] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6577] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6577] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6578 attached [pid 6578] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6578] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6577] <... clone resumed>, parent_tid=[6578], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6578 [pid 6577] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6578] <... futex resumed>) = 0 [pid 6577] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6578] memfd_create("syzkaller", 0) = 3 [pid 6578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6578] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6578] munmap(0x7f927cba2000, 2097152) = 0 [pid 6578] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6578] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6578] close(3) = 0 [pid 6578] mkdir("./file0", 0777) = 0 [ 279.436590][ T6578] loop0: detected capacity change from 0 to 4096 [ 279.452013][ T6578] NILFS (loop0): invalid segment: Checksum error in segment payload [ 279.460175][ T6578] NILFS (loop0): trying rollback from an earlier position [ 279.474469][ T6578] NILFS (loop0): recovery complete [pid 6578] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6578] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6578] chdir("./file0") = 0 [pid 6578] ioctl(4, LOOP_CLR_FD) = 0 [pid 6578] close(4) = 0 [pid 6578] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6577] <... futex resumed>) = 0 [pid 6577] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6577] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6578] <... futex resumed>) = 1 [pid 6578] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6578] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6577] <... futex resumed>) = 0 [pid 6577] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6577] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6578] <... futex resumed>) = 1 [pid 6578] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6578] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6577] <... futex resumed>) = 0 [pid 6577] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6577] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6578] <... futex resumed>) = 1 [pid 6578] ftruncate(5, 33587195) = 0 [pid 6578] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6577] <... futex resumed>) = 0 [pid 6577] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6577] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6578] <... futex resumed>) = 1 [ 279.480729][ T6579] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6578] sendfile(4, 5, NULL, 281474978811909 [pid 6577] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6577] exit_group(0) = ? [pid 6578] <... sendfile resumed>) = ? [pid 6578] +++ exited with 0 +++ [pid 6577] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6577, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./519", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./519", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./519/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./519/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./519/binderfs") = 0 umount2("./519/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./519/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./519/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./519/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./519/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./519/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./519") = 0 mkdir("./520", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6580 ./strace-static-x86_64: Process 6580 attached [pid 6580] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6580] chdir("./520") = 0 [pid 6580] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6580] setpgid(0, 0) = 0 [pid 6580] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6580] write(3, "1000", 4) = 4 [pid 6580] close(3) = 0 [pid 6580] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6580] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6580] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6580] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6580] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6581], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6581 [pid 6580] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6580] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6581 attached [pid 6581] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6581] memfd_create("syzkaller", 0) = 3 [pid 6581] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6581] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6581] munmap(0x7f927cba2000, 2097152) = 0 [pid 6581] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6581] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6581] close(3) = 0 [pid 6581] mkdir("./file0", 0777) = 0 [ 279.822359][ T6581] loop0: detected capacity change from 0 to 4096 [ 279.839687][ T6581] NILFS (loop0): invalid segment: Checksum error in segment payload [ 279.847783][ T6581] NILFS (loop0): trying rollback from an earlier position [ 279.862885][ T6581] NILFS (loop0): recovery complete [pid 6581] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6581] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6581] chdir("./file0") = 0 [pid 6581] ioctl(4, LOOP_CLR_FD) = 0 [pid 6581] close(4) = 0 [pid 6581] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6580] <... futex resumed>) = 0 [pid 6580] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6580] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6581] <... futex resumed>) = 1 [pid 6581] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6581] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6580] <... futex resumed>) = 0 [pid 6580] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6580] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6581] <... futex resumed>) = 1 [pid 6581] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6581] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6580] <... futex resumed>) = 0 [pid 6580] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6580] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6581] <... futex resumed>) = 1 [pid 6581] ftruncate(5, 33587195) = 0 [pid 6581] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6580] <... futex resumed>) = 0 [pid 6580] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6580] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6581] <... futex resumed>) = 1 [pid 6581] sendfile(4, 5, NULL, 281474978811909 [pid 6580] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 279.868903][ T6582] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6580] exit_group(0 [pid 6581] <... sendfile resumed>) = ? [pid 6580] <... exit_group resumed>) = ? [pid 6581] +++ exited with 0 +++ [pid 6580] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6580, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- umount2("./520", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./520", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./520/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./520/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./520/binderfs") = 0 umount2("./520/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./520/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./520/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./520/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./520/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./520/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./520") = 0 mkdir("./521", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6583 ./strace-static-x86_64: Process 6583 attached [pid 6583] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6583] chdir("./521") = 0 [pid 6583] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6583] setpgid(0, 0) = 0 [pid 6583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6583] write(3, "1000", 4) = 4 [pid 6583] close(3) = 0 [pid 6583] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6583] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6583] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6583] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6584], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6584 [pid 6583] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6583] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6584 attached [pid 6584] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6584] memfd_create("syzkaller", 0) = 3 [pid 6584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6584] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6584] munmap(0x7f927cba2000, 2097152) = 0 [pid 6584] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6584] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6584] close(3) = 0 [pid 6584] mkdir("./file0", 0777) = 0 [pid 6584] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6584] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 280.188343][ T6584] loop0: detected capacity change from 0 to 4096 [ 280.204964][ T6584] NILFS (loop0): invalid segment: Checksum error in segment payload [ 280.213042][ T6584] NILFS (loop0): trying rollback from an earlier position [ 280.228351][ T6584] NILFS (loop0): recovery complete [pid 6584] chdir("./file0") = 0 [pid 6584] ioctl(4, LOOP_CLR_FD) = 0 [pid 6584] close(4) = 0 [pid 6584] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6584] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6583] <... futex resumed>) = 0 [pid 6583] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6583] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6584] <... futex resumed>) = 0 [pid 6584] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6584] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6583] <... futex resumed>) = 0 [pid 6583] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6583] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6584] <... futex resumed>) = 1 [pid 6584] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6584] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6583] <... futex resumed>) = 0 [pid 6584] <... futex resumed>) = 1 [pid 6583] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6583] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6584] ftruncate(5, 33587195) = 0 [pid 6584] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6583] <... futex resumed>) = 0 [pid 6583] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] sendfile(4, 5, NULL, 281474978811909 [pid 6583] <... futex resumed>) = 0 [ 280.234766][ T6585] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6583] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6583] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6583] exit_group(0) = ? [pid 6584] <... sendfile resumed>) = ? [pid 6584] +++ exited with 0 +++ [pid 6583] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6583, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./521", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./521", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./521/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./521/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./521/binderfs") = 0 umount2("./521/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./521/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./521/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./521/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./521/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./521/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./521") = 0 mkdir("./522", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6586 ./strace-static-x86_64: Process 6586 attached [pid 6586] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6586] chdir("./522") = 0 [pid 6586] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6586] setpgid(0, 0) = 0 [pid 6586] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6586] write(3, "1000", 4) = 4 [pid 6586] close(3) = 0 [pid 6586] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6586] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6586] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6586] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6586] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6587], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6587 [pid 6586] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6586] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6587 attached [pid 6587] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6587] memfd_create("syzkaller", 0) = 3 [pid 6587] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6587] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6587] munmap(0x7f927cba2000, 2097152) = 0 [pid 6587] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6587] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6587] close(3) = 0 [pid 6587] mkdir("./file0", 0777) = 0 [pid 6587] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 280.573355][ T6587] loop0: detected capacity change from 0 to 4096 [ 280.589078][ T6587] NILFS (loop0): invalid segment: Checksum error in segment payload [ 280.597286][ T6587] NILFS (loop0): trying rollback from an earlier position [ 280.615814][ T6587] NILFS (loop0): recovery complete [pid 6587] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6587] chdir("./file0") = 0 [pid 6587] ioctl(4, LOOP_CLR_FD) = 0 [pid 6587] close(4) = 0 [pid 6587] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6586] <... futex resumed>) = 0 [pid 6586] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6586] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6587] <... futex resumed>) = 1 [pid 6587] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6587] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6586] <... futex resumed>) = 0 [pid 6586] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6586] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6587] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6587] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6586] <... futex resumed>) = 0 [pid 6586] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6586] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6587] <... futex resumed>) = 1 [pid 6587] ftruncate(5, 33587195) = 0 [pid 6587] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6586] <... futex resumed>) = 0 [pid 6586] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6586] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6587] <... futex resumed>) = 1 [ 280.621678][ T6588] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6587] sendfile(4, 5, NULL, 281474978811909 [pid 6586] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6586] exit_group(0) = ? [pid 6587] <... sendfile resumed>) = ? [pid 6587] +++ exited with 0 +++ [pid 6586] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6586, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./522", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./522", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./522/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./522/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./522/binderfs") = 0 umount2("./522/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./522/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./522/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./522/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./522/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./522/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./522") = 0 mkdir("./523", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6589 ./strace-static-x86_64: Process 6589 attached [pid 6589] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6589] chdir("./523") = 0 [pid 6589] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6589] setpgid(0, 0) = 0 [pid 6589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6589] write(3, "1000", 4) = 4 [pid 6589] close(3) = 0 [pid 6589] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6589] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6589] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6589] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6589] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6590], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6590 [pid 6589] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6589] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6590 attached [pid 6590] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6590] memfd_create("syzkaller", 0) = 3 [pid 6590] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6590] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6590] munmap(0x7f927cba2000, 2097152) = 0 [pid 6590] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6590] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6590] close(3) = 0 [pid 6590] mkdir("./file0", 0777) = 0 [ 280.980547][ T6590] loop0: detected capacity change from 0 to 4096 [ 280.997365][ T6590] NILFS (loop0): invalid segment: Checksum error in segment payload [ 281.005461][ T6590] NILFS (loop0): trying rollback from an earlier position [ 281.020999][ T6590] NILFS (loop0): recovery complete [pid 6590] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6590] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6590] chdir("./file0") = 0 [pid 6590] ioctl(4, LOOP_CLR_FD) = 0 [pid 6590] close(4) = 0 [pid 6590] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6589] <... futex resumed>) = 0 [pid 6590] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6589] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6589] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6590] <... open resumed>) = 4 [pid 6590] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6589] <... futex resumed>) = 0 [pid 6589] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6590] <... futex resumed>) = 1 [pid 6589] <... futex resumed>) = 0 [pid 6590] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6589] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6590] <... open resumed>) = 5 [pid 6590] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6589] <... futex resumed>) = 0 [pid 6590] ftruncate(5, 33587195 [pid 6589] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6590] <... ftruncate resumed>) = 0 [pid 6589] <... futex resumed>) = 0 [pid 6590] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6589] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6590] <... futex resumed>) = 0 [pid 6589] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6590] sendfile(4, 5, NULL, 281474978811909 [pid 6589] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 281.027115][ T6591] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6589] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6589] exit_group(0) = ? [pid 6590] <... sendfile resumed>) = ? [pid 6590] +++ exited with 0 +++ [pid 6589] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6589, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./523", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./523", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./523/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./523/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./523/binderfs") = 0 umount2("./523/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./523/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./523/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./523/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./523/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./523/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./523") = 0 mkdir("./524", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6592 ./strace-static-x86_64: Process 6592 attached [pid 6592] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6592] chdir("./524") = 0 [pid 6592] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6592] setpgid(0, 0) = 0 [pid 6592] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6592] write(3, "1000", 4) = 4 [pid 6592] close(3) = 0 [pid 6592] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6592] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6592] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6592] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6592] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6593], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6593 [pid 6592] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6592] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6593 attached [pid 6593] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6593] memfd_create("syzkaller", 0) = 3 [pid 6593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6593] munmap(0x7f927cba2000, 2097152) = 0 [pid 6593] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6593] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6593] close(3) = 0 [pid 6593] mkdir("./file0", 0777) = 0 [pid 6593] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6593] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 281.359258][ T6593] loop0: detected capacity change from 0 to 4096 [ 281.375859][ T6593] NILFS (loop0): invalid segment: Checksum error in segment payload [ 281.384010][ T6593] NILFS (loop0): trying rollback from an earlier position [ 281.399147][ T6593] NILFS (loop0): recovery complete [pid 6593] chdir("./file0") = 0 [pid 6593] ioctl(4, LOOP_CLR_FD) = 0 [pid 6593] close(4) = 0 [pid 6593] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6593] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6592] <... futex resumed>) = 0 [pid 6592] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6592] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6593] <... futex resumed>) = 0 [pid 6593] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6593] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6592] <... futex resumed>) = 0 [pid 6592] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6592] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6593] <... futex resumed>) = 1 [pid 6593] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6593] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6592] <... futex resumed>) = 0 [pid 6593] <... futex resumed>) = 1 [pid 6592] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6593] ftruncate(5, 33587195 [pid 6592] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6593] <... ftruncate resumed>) = 0 [pid 6593] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6592] <... futex resumed>) = 0 [pid 6593] <... futex resumed>) = 1 [pid 6592] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6593] sendfile(4, 5, NULL, 281474978811909 [pid 6592] <... futex resumed>) = 0 [ 281.405313][ T6594] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6592] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6592] exit_group(0 [pid 6593] <... sendfile resumed>) = ? [pid 6592] <... exit_group resumed>) = ? [pid 6593] +++ exited with 0 +++ [pid 6592] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6592, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- umount2("./524", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./524", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./524/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./524/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./524/binderfs") = 0 umount2("./524/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./524/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./524/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./524/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./524/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./524/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./524") = 0 mkdir("./525", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6595 ./strace-static-x86_64: Process 6595 attached [pid 6595] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6595] chdir("./525") = 0 [pid 6595] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6595] setpgid(0, 0) = 0 [pid 6595] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6595] write(3, "1000", 4) = 4 [pid 6595] close(3) = 0 [pid 6595] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6595] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6595] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6595] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6595] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6596 attached [pid 6596] set_robust_list(0x7f9284fc29e0, 24 [pid 6595] <... clone resumed>, parent_tid=[6596], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6596 [pid 6595] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6595] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6596] <... set_robust_list resumed>) = 0 [pid 6596] memfd_create("syzkaller", 0) = 3 [pid 6596] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6596] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6596] munmap(0x7f927cba2000, 2097152) = 0 [pid 6596] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6596] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6596] close(3) = 0 [pid 6596] mkdir("./file0", 0777) = 0 [pid 6596] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6596] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 281.731808][ T6596] loop0: detected capacity change from 0 to 4096 [ 281.749403][ T6596] NILFS (loop0): invalid segment: Checksum error in segment payload [ 281.757479][ T6596] NILFS (loop0): trying rollback from an earlier position [ 281.773238][ T6596] NILFS (loop0): recovery complete [pid 6596] chdir("./file0") = 0 [pid 6596] ioctl(4, LOOP_CLR_FD) = 0 [pid 6596] close(4) = 0 [pid 6596] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6595] <... futex resumed>) = 0 [pid 6596] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6595] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6595] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6596] <... open resumed>) = 4 [pid 6596] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6595] <... futex resumed>) = 0 [pid 6595] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6595] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6596] <... futex resumed>) = 1 [pid 6596] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6596] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6596] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6595] <... futex resumed>) = 0 [pid 6595] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6595] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6596] <... futex resumed>) = 0 [pid 6596] ftruncate(5, 33587195) = 0 [pid 6596] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6595] <... futex resumed>) = 0 [pid 6595] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6595] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6596] <... futex resumed>) = 1 [ 281.779282][ T6597] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6596] sendfile(4, 5, NULL, 281474978811909 [pid 6595] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6595] exit_group(0) = ? [pid 6596] <... sendfile resumed>) = ? [pid 6596] +++ exited with 0 +++ [pid 6595] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6595, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./525", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./525", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./525/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./525/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./525/binderfs") = 0 umount2("./525/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./525/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./525/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./525/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./525/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./525/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./525") = 0 mkdir("./526", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6598 ./strace-static-x86_64: Process 6598 attached [pid 6598] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6598] chdir("./526") = 0 [pid 6598] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6598] setpgid(0, 0) = 0 [pid 6598] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6598] write(3, "1000", 4) = 4 [pid 6598] close(3) = 0 [pid 6598] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6598] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6598] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6598] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6598] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6599], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6599 ./strace-static-x86_64: Process 6599 attached [pid 6598] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6599] set_robust_list(0x7f9284fc29e0, 24 [pid 6598] <... futex resumed>) = 0 [pid 6599] <... set_robust_list resumed>) = 0 [pid 6598] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6599] memfd_create("syzkaller", 0) = 3 [pid 6599] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6599] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6599] munmap(0x7f927cba2000, 2097152) = 0 [pid 6599] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6599] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6599] close(3) = 0 [pid 6599] mkdir("./file0", 0777) = 0 [pid 6599] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6599] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6599] chdir("./file0") = 0 [ 282.122914][ T6599] loop0: detected capacity change from 0 to 4096 [ 282.139493][ T6599] NILFS (loop0): invalid segment: Checksum error in segment payload [ 282.147637][ T6599] NILFS (loop0): trying rollback from an earlier position [ 282.163434][ T6599] NILFS (loop0): recovery complete [pid 6599] ioctl(4, LOOP_CLR_FD) = 0 [pid 6599] close(4) = 0 [pid 6599] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6598] <... futex resumed>) = 0 [pid 6598] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6598] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6599] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6599] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6598] <... futex resumed>) = 0 [pid 6599] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6598] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6599] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6598] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6599] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6599] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6598] <... futex resumed>) = 0 [pid 6599] ftruncate(5, 33587195 [pid 6598] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6599] <... ftruncate resumed>) = 0 [pid 6598] <... futex resumed>) = 0 [pid 6599] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6598] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6599] <... futex resumed>) = 0 [pid 6598] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6599] sendfile(4, 5, NULL, 281474978811909 [pid 6598] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 282.169945][ T6600] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6598] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6598] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6598] exit_group(0 [pid 6599] <... sendfile resumed>) = ? [pid 6598] <... exit_group resumed>) = ? [pid 6599] +++ exited with 0 +++ [pid 6598] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6598, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./526", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./526", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./526/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./526/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./526/binderfs") = 0 umount2("./526/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./526/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./526/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./526/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./526/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./526/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./526") = 0 mkdir("./527", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6601 ./strace-static-x86_64: Process 6601 attached [pid 6601] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6601] chdir("./527") = 0 [pid 6601] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6601] setpgid(0, 0) = 0 [pid 6601] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6601] write(3, "1000", 4) = 4 [pid 6601] close(3) = 0 [pid 6601] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6601] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6601] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6601] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6601] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6602], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6602 [pid 6601] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6601] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6602 attached [pid 6602] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6602] memfd_create("syzkaller", 0) = 3 [pid 6602] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6602] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6602] munmap(0x7f927cba2000, 2097152) = 0 [pid 6602] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6602] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6602] close(3) = 0 [pid 6602] mkdir("./file0", 0777) = 0 [ 282.504266][ T6602] loop0: detected capacity change from 0 to 4096 [ 282.519939][ T6602] NILFS (loop0): invalid segment: Checksum error in segment payload [ 282.528082][ T6602] NILFS (loop0): trying rollback from an earlier position [ 282.542469][ T6602] NILFS (loop0): recovery complete [pid 6602] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6602] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6602] chdir("./file0") = 0 [pid 6602] ioctl(4, LOOP_CLR_FD) = 0 [pid 6602] close(4) = 0 [pid 6602] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6601] <... futex resumed>) = 0 [pid 6602] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6601] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6601] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6602] <... futex resumed>) = 0 [pid 6602] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6602] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6601] <... futex resumed>) = 0 [pid 6601] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6601] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6602] <... futex resumed>) = 1 [pid 6602] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6602] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6601] <... futex resumed>) = 0 [pid 6601] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6601] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6602] <... futex resumed>) = 1 [pid 6602] ftruncate(5, 33587195) = 0 [pid 6602] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6601] <... futex resumed>) = 0 [pid 6601] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6601] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6602] <... futex resumed>) = 1 [ 282.548681][ T6603] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6602] sendfile(4, 5, NULL, 281474978811909 [pid 6601] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6601] exit_group(0) = ? [pid 6602] <... sendfile resumed>) = ? [pid 6602] +++ exited with 0 +++ [pid 6601] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6601, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./527", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./527", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./527/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./527/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./527/binderfs") = 0 umount2("./527/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./527/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./527/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./527/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./527/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./527/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./527") = 0 mkdir("./528", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6604 ./strace-static-x86_64: Process 6604 attached [pid 6604] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6604] chdir("./528") = 0 [pid 6604] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6604] setpgid(0, 0) = 0 [pid 6604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6604] write(3, "1000", 4) = 4 [pid 6604] close(3) = 0 [pid 6604] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6604] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6604] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6604] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6605], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6605 [pid 6604] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6604] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6605 attached [pid 6605] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6605] memfd_create("syzkaller", 0) = 3 [pid 6605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6605] munmap(0x7f927cba2000, 2097152) = 0 [pid 6605] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6605] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6605] close(3) = 0 [pid 6605] mkdir("./file0", 0777) = 0 [ 282.919095][ T6605] loop0: detected capacity change from 0 to 4096 [ 282.934088][ T6605] NILFS (loop0): invalid segment: Checksum error in segment payload [ 282.942133][ T6605] NILFS (loop0): trying rollback from an earlier position [ 282.957280][ T6605] NILFS (loop0): recovery complete [pid 6605] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6605] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6605] chdir("./file0") = 0 [pid 6605] ioctl(4, LOOP_CLR_FD) = 0 [pid 6605] close(4) = 0 [pid 6605] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6604] <... futex resumed>) = 0 [pid 6604] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6604] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6605] <... futex resumed>) = 1 [pid 6605] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6605] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6604] <... futex resumed>) = 0 [pid 6604] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6604] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6605] <... futex resumed>) = 1 [pid 6605] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6605] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6604] <... futex resumed>) = 0 [pid 6604] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6604] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6605] <... futex resumed>) = 1 [pid 6605] ftruncate(5, 33587195) = 0 [pid 6605] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6604] <... futex resumed>) = 0 [pid 6604] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6604] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6605] <... futex resumed>) = 1 [ 282.963814][ T6606] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6605] sendfile(4, 5, NULL, 281474978811909 [pid 6604] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6604] exit_group(0) = ? [pid 6605] <... sendfile resumed>) = ? [pid 6605] +++ exited with 0 +++ [pid 6604] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6604, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./528", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./528", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./528/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./528/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./528/binderfs") = 0 umount2("./528/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./528/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./528/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./528/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./528/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./528/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./528") = 0 mkdir("./529", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6607 ./strace-static-x86_64: Process 6607 attached [pid 6607] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6607] chdir("./529") = 0 [pid 6607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6607] setpgid(0, 0) = 0 [pid 6607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6607] write(3, "1000", 4) = 4 [pid 6607] close(3) = 0 [pid 6607] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6607] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6607] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6607] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6608], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6608 [pid 6607] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6607] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6608 attached [pid 6608] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6608] memfd_create("syzkaller", 0) = 3 [pid 6608] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6608] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6608] munmap(0x7f927cba2000, 2097152) = 0 [pid 6608] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6608] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6608] close(3) = 0 [pid 6608] mkdir("./file0", 0777) = 0 [ 283.272184][ T6608] loop0: detected capacity change from 0 to 4096 [ 283.289020][ T6608] NILFS (loop0): invalid segment: Checksum error in segment payload [ 283.297101][ T6608] NILFS (loop0): trying rollback from an earlier position [ 283.312162][ T6608] NILFS (loop0): recovery complete [pid 6608] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6608] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6608] chdir("./file0") = 0 [pid 6608] ioctl(4, LOOP_CLR_FD) = 0 [pid 6608] close(4) = 0 [pid 6608] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6608] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6607] <... futex resumed>) = 0 [pid 6607] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6607] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6608] <... futex resumed>) = 0 [pid 6608] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6608] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6607] <... futex resumed>) = 0 [pid 6607] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6607] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6608] <... futex resumed>) = 1 [pid 6608] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6608] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6608] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6607] <... futex resumed>) = 0 [pid 6607] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6607] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6608] <... futex resumed>) = 0 [pid 6608] ftruncate(5, 33587195) = 0 [pid 6608] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6607] <... futex resumed>) = 0 [pid 6607] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6607] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6608] <... futex resumed>) = 1 [ 283.318440][ T6609] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6608] sendfile(4, 5, NULL, 281474978811909 [pid 6607] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6607] exit_group(0) = ? [pid 6608] <... sendfile resumed>) = ? [pid 6608] +++ exited with 0 +++ [pid 6607] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6607, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./529", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./529", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./529/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./529/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./529/binderfs") = 0 umount2("./529/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./529/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./529/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./529/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./529/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./529/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./529") = 0 mkdir("./530", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6610 ./strace-static-x86_64: Process 6610 attached [pid 6610] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6610] chdir("./530") = 0 [pid 6610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6610] setpgid(0, 0) = 0 [pid 6610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6610] write(3, "1000", 4) = 4 [pid 6610] close(3) = 0 [pid 6610] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6610] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6610] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6610] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6611], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6611 [pid 6610] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6610] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6611 attached [pid 6611] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6611] memfd_create("syzkaller", 0) = 3 [pid 6611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6611] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6611] munmap(0x7f927cba2000, 2097152) = 0 [pid 6611] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6611] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6611] close(3) = 0 [pid 6611] mkdir("./file0", 0777) = 0 [pid 6611] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 283.650382][ T6611] loop0: detected capacity change from 0 to 4096 [ 283.667320][ T6611] NILFS (loop0): invalid segment: Checksum error in segment payload [ 283.675546][ T6611] NILFS (loop0): trying rollback from an earlier position [ 283.692734][ T6611] NILFS (loop0): recovery complete [pid 6611] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6611] chdir("./file0") = 0 [pid 6611] ioctl(4, LOOP_CLR_FD) = 0 [pid 6611] close(4) = 0 [pid 6611] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6611] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6610] <... futex resumed>) = 0 [pid 6610] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6610] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6611] <... futex resumed>) = 0 [pid 6611] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6611] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6610] <... futex resumed>) = 0 [pid 6610] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6610] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6611] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6611] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6610] <... futex resumed>) = 0 [pid 6610] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6611] ftruncate(5, 33587195) = 0 [pid 6611] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6611] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6610] <... futex resumed>) = 1 [pid 6610] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6610] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6610] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6611] <... futex resumed>) = 0 [ 283.698867][ T6612] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6611] sendfile(4, 5, NULL, 281474978811909 [pid 6610] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6610] exit_group(0 [pid 6611] <... sendfile resumed>) = ? [pid 6610] <... exit_group resumed>) = ? [pid 6611] +++ exited with 0 +++ [pid 6610] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6610, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./530", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./530", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./530/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./530/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./530/binderfs") = 0 umount2("./530/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./530/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./530/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./530/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./530/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./530/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./530") = 0 mkdir("./531", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6613 ./strace-static-x86_64: Process 6613 attached [pid 6613] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6613] chdir("./531") = 0 [pid 6613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6613] setpgid(0, 0) = 0 [pid 6613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6613] write(3, "1000", 4) = 4 [pid 6613] close(3) = 0 [pid 6613] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6613] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6613] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6613] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6614], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6614 ./strace-static-x86_64: Process 6614 attached [pid 6613] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6613] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6614] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6614] memfd_create("syzkaller", 0) = 3 [pid 6614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6614] munmap(0x7f927cba2000, 2097152) = 0 [pid 6614] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6614] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6614] close(3) = 0 [pid 6614] mkdir("./file0", 0777) = 0 [pid 6614] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6614] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6614] chdir("./file0") = 0 [pid 6614] ioctl(4, LOOP_CLR_FD) = 0 [pid 6614] close(4) = 0 [ 284.030233][ T6614] loop0: detected capacity change from 0 to 4096 [ 284.045235][ T6614] NILFS (loop0): invalid segment: Checksum error in segment payload [ 284.053357][ T6614] NILFS (loop0): trying rollback from an earlier position [ 284.068976][ T6614] NILFS (loop0): recovery complete [pid 6614] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6613] <... futex resumed>) = 0 [pid 6614] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6613] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6613] <... futex resumed>) = 0 [pid 6614] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6613] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6614] <... open resumed>) = 4 [pid 6614] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6613] <... futex resumed>) = 0 [pid 6614] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6613] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6613] <... futex resumed>) = 0 [pid 6614] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6613] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6614] <... open resumed>) = 5 [pid 6614] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6613] <... futex resumed>) = 0 [pid 6614] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6613] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6613] <... futex resumed>) = 0 [pid 6614] ftruncate(5, 33587195 [pid 6613] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6614] <... ftruncate resumed>) = 0 [pid 6614] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6613] <... futex resumed>) = 0 [pid 6614] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6613] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6613] <... futex resumed>) = 0 [pid 6614] sendfile(4, 5, NULL, 281474978811909 [ 284.076225][ T6615] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6613] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6613] exit_group(0 [pid 6614] <... sendfile resumed>) = ? [pid 6613] <... exit_group resumed>) = ? [pid 6614] +++ exited with 0 +++ [pid 6613] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6613, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./531", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./531", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./531/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./531/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./531/binderfs") = 0 umount2("./531/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./531/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./531/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./531/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./531/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./531/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./531") = 0 mkdir("./532", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6616 ./strace-static-x86_64: Process 6616 attached [pid 6616] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6616] chdir("./532") = 0 [pid 6616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6616] setpgid(0, 0) = 0 [pid 6616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6616] write(3, "1000", 4) = 4 [pid 6616] close(3) = 0 [pid 6616] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6616] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6616] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6616] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6617 attached , parent_tid=[6617], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6617 [pid 6616] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6616] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6617] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6617] memfd_create("syzkaller", 0) = 3 [pid 6617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6617] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6617] munmap(0x7f927cba2000, 2097152) = 0 [pid 6617] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6617] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6617] close(3) = 0 [pid 6617] mkdir("./file0", 0777) = 0 [ 284.410621][ T6617] loop0: detected capacity change from 0 to 4096 [ 284.427501][ T6617] NILFS (loop0): invalid segment: Checksum error in segment payload [ 284.435549][ T6617] NILFS (loop0): trying rollback from an earlier position [ 284.451176][ T6617] NILFS (loop0): recovery complete [pid 6617] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6617] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6617] chdir("./file0") = 0 [pid 6617] ioctl(4, LOOP_CLR_FD) = 0 [pid 6617] close(4) = 0 [pid 6617] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] <... futex resumed>) = 0 [pid 6617] <... futex resumed>) = 1 [pid 6616] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6617] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6616] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6617] <... open resumed>) = 4 [pid 6617] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] <... futex resumed>) = 0 [pid 6617] <... futex resumed>) = 1 [pid 6617] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6616] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6616] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6617] <... open resumed>) = 5 [pid 6617] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6616] <... futex resumed>) = 0 [pid 6616] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6616] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6617] ftruncate(5, 33587195) = 0 [pid 6617] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] <... futex resumed>) = 0 [pid 6617] <... futex resumed>) = 1 [pid 6616] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6617] sendfile(4, 5, NULL, 281474978811909 [ 284.457379][ T6618] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6616] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6616] exit_group(0) = ? [pid 6617] <... sendfile resumed>) = ? [pid 6617] +++ exited with 0 +++ [pid 6616] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6616, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./532", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./532", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./532/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./532/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./532/binderfs") = 0 umount2("./532/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./532/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./532/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./532/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./532/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./532/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./532") = 0 mkdir("./533", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6619 ./strace-static-x86_64: Process 6619 attached [pid 6619] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6619] chdir("./533") = 0 [pid 6619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6619] setpgid(0, 0) = 0 [pid 6619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6619] write(3, "1000", 4) = 4 [pid 6619] close(3) = 0 [pid 6619] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6619] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6619] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6619] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6620], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6620 [pid 6619] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6619] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6620 attached [pid 6620] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6620] memfd_create("syzkaller", 0) = 3 [pid 6620] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6620] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6620] munmap(0x7f927cba2000, 2097152) = 0 [pid 6620] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6620] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6620] close(3) = 0 [pid 6620] mkdir("./file0", 0777) = 0 [ 284.829076][ T6620] loop0: detected capacity change from 0 to 4096 [ 284.845015][ T6620] NILFS (loop0): invalid segment: Checksum error in segment payload [ 284.853114][ T6620] NILFS (loop0): trying rollback from an earlier position [ 284.868393][ T6620] NILFS (loop0): recovery complete [pid 6620] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6620] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6620] chdir("./file0") = 0 [pid 6620] ioctl(4, LOOP_CLR_FD) = 0 [pid 6620] close(4) = 0 [pid 6620] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] <... futex resumed>) = 0 [pid 6619] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6619] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6620] <... futex resumed>) = 1 [pid 6620] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6620] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] <... futex resumed>) = 0 [pid 6619] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6619] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6620] <... futex resumed>) = 1 [pid 6620] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6620] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] <... futex resumed>) = 0 [pid 6619] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6619] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6620] <... futex resumed>) = 1 [pid 6620] ftruncate(5, 33587195) = 0 [pid 6620] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] <... futex resumed>) = 0 [pid 6619] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6619] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6620] <... futex resumed>) = 1 [ 284.874757][ T6621] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6620] sendfile(4, 5, NULL, 281474978811909 [pid 6619] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6619] exit_group(0) = ? [pid 6620] <... sendfile resumed>) = ? [pid 6620] +++ exited with 0 +++ [pid 6619] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6619, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./533", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./533", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./533/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./533/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./533/binderfs") = 0 umount2("./533/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./533/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./533/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./533/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./533/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./533/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./533") = 0 mkdir("./534", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6622 ./strace-static-x86_64: Process 6622 attached [pid 6622] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6622] chdir("./534") = 0 [pid 6622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6622] setpgid(0, 0) = 0 [pid 6622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6622] write(3, "1000", 4) = 4 [pid 6622] close(3) = 0 [pid 6622] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6622] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6622] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6622] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6623 attached , parent_tid=[6623], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6623 [pid 6623] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6623] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6622] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6623] <... futex resumed>) = 0 [pid 6623] memfd_create("syzkaller", 0 [pid 6622] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6623] <... memfd_create resumed>) = 3 [pid 6623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6623] munmap(0x7f927cba2000, 2097152) = 0 [pid 6623] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6623] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6623] close(3) = 0 [pid 6623] mkdir("./file0", 0777) = 0 [pid 6623] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6623] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6623] chdir("./file0") = 0 [pid 6623] ioctl(4, LOOP_CLR_FD) = 0 [pid 6623] close(4) = 0 [ 285.217688][ T6623] loop0: detected capacity change from 0 to 4096 [ 285.233417][ T6623] NILFS (loop0): invalid segment: Checksum error in segment payload [ 285.241464][ T6623] NILFS (loop0): trying rollback from an earlier position [ 285.255387][ T6623] NILFS (loop0): recovery complete [pid 6623] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6622] <... futex resumed>) = 0 [pid 6622] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6622] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6623] <... futex resumed>) = 1 [pid 6623] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6623] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6622] <... futex resumed>) = 0 [pid 6622] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6622] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6623] <... futex resumed>) = 1 [pid 6623] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6623] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6622] <... futex resumed>) = 0 [pid 6622] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6622] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6623] <... futex resumed>) = 1 [pid 6623] ftruncate(5, 33587195) = 0 [pid 6623] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6622] <... futex resumed>) = 0 [pid 6622] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6622] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 285.261465][ T6624] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6623] sendfile(4, 5, NULL, 281474978811909 [pid 6622] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6622] exit_group(0) = ? [pid 6623] <... sendfile resumed>) = ? [pid 6623] +++ exited with 0 +++ [pid 6622] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6622, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./534", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./534", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./534/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./534/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./534/binderfs") = 0 umount2("./534/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./534/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./534/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./534/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./534/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./534/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./534") = 0 mkdir("./535", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6625 ./strace-static-x86_64: Process 6625 attached [pid 6625] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6625] chdir("./535") = 0 [pid 6625] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6625] setpgid(0, 0) = 0 [pid 6625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6625] write(3, "1000", 4) = 4 [pid 6625] close(3) = 0 [pid 6625] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6625] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6625] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6625] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6626 attached [pid 6626] set_robust_list(0x7f9284fc29e0, 24 [pid 6625] <... clone resumed>, parent_tid=[6626], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6626 [pid 6626] <... set_robust_list resumed>) = 0 [pid 6625] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6625] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6626] memfd_create("syzkaller", 0) = 3 [pid 6626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6626] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6626] munmap(0x7f927cba2000, 2097152) = 0 [pid 6626] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6626] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6626] close(3) = 0 [pid 6626] mkdir("./file0", 0777) = 0 [pid 6626] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 285.619621][ T6626] loop0: detected capacity change from 0 to 4096 [ 285.635343][ T6626] NILFS (loop0): invalid segment: Checksum error in segment payload [ 285.643384][ T6626] NILFS (loop0): trying rollback from an earlier position [ 285.659065][ T6626] NILFS (loop0): recovery complete [pid 6626] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6626] chdir("./file0") = 0 [pid 6626] ioctl(4, LOOP_CLR_FD) = 0 [pid 6626] close(4) = 0 [pid 6626] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6625] <... futex resumed>) = 0 [pid 6625] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6625] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6626] <... futex resumed>) = 1 [pid 6626] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6626] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6625] <... futex resumed>) = 0 [pid 6625] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6625] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6626] <... futex resumed>) = 1 [pid 6626] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6626] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6625] <... futex resumed>) = 0 [pid 6625] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6625] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6626] <... futex resumed>) = 1 [pid 6626] ftruncate(5, 33587195) = 0 [pid 6626] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6625] <... futex resumed>) = 0 [pid 6625] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6625] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6626] <... futex resumed>) = 1 [ 285.665271][ T6627] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6626] sendfile(4, 5, NULL, 281474978811909 [pid 6625] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6625] exit_group(0) = ? [pid 6626] <... sendfile resumed>) = ? [pid 6626] +++ exited with 0 +++ [pid 6625] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6625, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./535", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./535", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./535/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./535/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./535/binderfs") = 0 umount2("./535/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./535/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./535/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./535/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./535/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./535/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./535") = 0 mkdir("./536", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6628 ./strace-static-x86_64: Process 6628 attached [pid 6628] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6628] chdir("./536") = 0 [pid 6628] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6628] setpgid(0, 0) = 0 [pid 6628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6628] write(3, "1000", 4) = 4 [pid 6628] close(3) = 0 [pid 6628] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6628] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6628] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6628] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6628] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6629 attached , parent_tid=[6629], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6629 [pid 6628] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6629] set_robust_list(0x7f9284fc29e0, 24 [pid 6628] <... futex resumed>) = 0 [pid 6628] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6629] <... set_robust_list resumed>) = 0 [pid 6629] memfd_create("syzkaller", 0) = 3 [pid 6629] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6629] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6629] munmap(0x7f927cba2000, 2097152) = 0 [pid 6629] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6629] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6629] close(3) = 0 [pid 6629] mkdir("./file0", 0777) = 0 [ 285.983941][ T6629] loop0: detected capacity change from 0 to 4096 [ 285.999618][ T6629] NILFS (loop0): invalid segment: Checksum error in segment payload [ 286.007711][ T6629] NILFS (loop0): trying rollback from an earlier position [ 286.023330][ T6629] NILFS (loop0): recovery complete [pid 6629] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6629] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6629] chdir("./file0") = 0 [pid 6629] ioctl(4, LOOP_CLR_FD) = 0 [pid 6629] close(4) = 0 [pid 6629] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6628] <... futex resumed>) = 0 [pid 6629] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6628] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6629] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6628] <... futex resumed>) = 0 [pid 6629] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6628] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6629] <... open resumed>) = 4 [pid 6629] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6629] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6628] <... futex resumed>) = 0 [pid 6628] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6629] <... futex resumed>) = 0 [pid 6628] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6629] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6629] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6628] <... futex resumed>) = 0 [pid 6629] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6628] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6629] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6628] <... futex resumed>) = 0 [pid 6629] ftruncate(5, 33587195 [pid 6628] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6629] <... ftruncate resumed>) = 0 [pid 6629] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6628] <... futex resumed>) = 0 [pid 6629] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6628] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6629] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6628] <... futex resumed>) = 0 [pid 6629] sendfile(4, 5, NULL, 281474978811909 [ 286.029830][ T6630] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6628] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6628] exit_group(0) = ? [pid 6629] <... sendfile resumed>) = ? [pid 6629] +++ exited with 0 +++ [pid 6628] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6628, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./536", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./536", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./536/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./536/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./536/binderfs") = 0 umount2("./536/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./536/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./536/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./536/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./536/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./536/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./536") = 0 mkdir("./537", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6631 ./strace-static-x86_64: Process 6631 attached [pid 6631] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6631] chdir("./537") = 0 [pid 6631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6631] setpgid(0, 0) = 0 [pid 6631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6631] write(3, "1000", 4) = 4 [pid 6631] close(3) = 0 [pid 6631] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6631] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6631] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6631] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6632 attached , parent_tid=[6632], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6632 [pid 6632] set_robust_list(0x7f9284fc29e0, 24 [pid 6631] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6631] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6632] <... set_robust_list resumed>) = 0 [pid 6632] memfd_create("syzkaller", 0) = 3 [pid 6632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6632] munmap(0x7f927cba2000, 2097152) = 0 [pid 6632] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6632] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6632] close(3) = 0 [pid 6632] mkdir("./file0", 0777) = 0 [pid 6632] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6632] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6632] chdir("./file0") = 0 [ 286.377383][ T6632] loop0: detected capacity change from 0 to 4096 [ 286.393649][ T6632] NILFS (loop0): invalid segment: Checksum error in segment payload [ 286.401723][ T6632] NILFS (loop0): trying rollback from an earlier position [ 286.417501][ T6632] NILFS (loop0): recovery complete [pid 6632] ioctl(4, LOOP_CLR_FD) = 0 [pid 6632] close(4) = 0 [pid 6632] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6632] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6631] <... futex resumed>) = 0 [pid 6631] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6631] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6632] <... futex resumed>) = 0 [pid 6632] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6632] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6631] <... futex resumed>) = 0 [pid 6631] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6631] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6632] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6632] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6631] <... futex resumed>) = 0 [pid 6631] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6631] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6632] ftruncate(5, 33587195) = 0 [pid 6632] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6632] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6631] <... futex resumed>) = 0 [pid 6631] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6631] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6632] <... futex resumed>) = 0 [ 286.423533][ T6633] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6632] sendfile(4, 5, NULL, 281474978811909 [pid 6631] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6631] exit_group(0) = ? [pid 6632] <... sendfile resumed>) = ? [pid 6632] +++ exited with 0 +++ [pid 6631] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6631, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./537", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./537", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./537/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./537/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./537/binderfs") = 0 umount2("./537/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./537/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./537/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./537/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./537/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./537/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./537") = 0 mkdir("./538", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6634 ./strace-static-x86_64: Process 6634 attached [pid 6634] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6634] chdir("./538") = 0 [pid 6634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6634] setpgid(0, 0) = 0 [pid 6634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6634] write(3, "1000", 4) = 4 [pid 6634] close(3) = 0 [pid 6634] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6634] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6634] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6634] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6635 attached , parent_tid=[6635], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6635 [pid 6634] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6634] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6635] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6635] memfd_create("syzkaller", 0) = 3 [pid 6635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6635] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6635] munmap(0x7f927cba2000, 2097152) = 0 [pid 6635] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6635] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6635] close(3) = 0 [pid 6635] mkdir("./file0", 0777) = 0 [ 286.760457][ T6635] loop0: detected capacity change from 0 to 4096 [ 286.775076][ T6635] NILFS (loop0): invalid segment: Checksum error in segment payload [ 286.783106][ T6635] NILFS (loop0): trying rollback from an earlier position [ 286.798449][ T6635] NILFS (loop0): recovery complete [pid 6635] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6635] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6635] chdir("./file0") = 0 [pid 6635] ioctl(4, LOOP_CLR_FD) = 0 [pid 6635] close(4) = 0 [pid 6635] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6635] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6634] <... futex resumed>) = 0 [pid 6634] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6634] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6635] <... futex resumed>) = 0 [pid 6635] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6635] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6634] <... futex resumed>) = 0 [pid 6634] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6635] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6634] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6635] <... open resumed>) = 5 [pid 6635] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6634] <... futex resumed>) = 0 [pid 6635] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6634] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6634] <... futex resumed>) = 0 [pid 6634] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6635] ftruncate(5, 33587195) = 0 [pid 6635] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6634] <... futex resumed>) = 0 [pid 6635] sendfile(4, 5, NULL, 281474978811909 [pid 6634] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 286.804431][ T6636] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6634] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6634] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6634] exit_group(0) = ? [pid 6635] <... sendfile resumed>) = ? [pid 6635] +++ exited with 0 +++ [pid 6634] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6634, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./538", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./538", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./538/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./538/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./538/binderfs") = 0 umount2("./538/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./538/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./538/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./538/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./538/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./538/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./538") = 0 mkdir("./539", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6637 ./strace-static-x86_64: Process 6637 attached [pid 6637] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6637] chdir("./539") = 0 [pid 6637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6637] setpgid(0, 0) = 0 [pid 6637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6637] write(3, "1000", 4) = 4 [pid 6637] close(3) = 0 [pid 6637] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6637] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6637] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6637] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6638 attached , parent_tid=[6638], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6638 [pid 6637] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6637] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6638] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6638] memfd_create("syzkaller", 0) = 3 [pid 6638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6638] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6638] munmap(0x7f927cba2000, 2097152) = 0 [pid 6638] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6638] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6638] close(3) = 0 [pid 6638] mkdir("./file0", 0777) = 0 [pid 6638] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6638] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6638] chdir("./file0") = 0 [pid 6638] ioctl(4, LOOP_CLR_FD) = 0 [pid 6638] close(4) = 0 [ 287.140194][ T6638] loop0: detected capacity change from 0 to 4096 [ 287.155562][ T6638] NILFS (loop0): invalid segment: Checksum error in segment payload [ 287.163648][ T6638] NILFS (loop0): trying rollback from an earlier position [ 287.178891][ T6638] NILFS (loop0): recovery complete [pid 6638] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6637] <... futex resumed>) = 0 [pid 6638] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6637] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6637] <... futex resumed>) = 0 [pid 6638] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6637] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6638] <... open resumed>) = 4 [pid 6638] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6637] <... futex resumed>) = 0 [pid 6638] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6637] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6637] <... futex resumed>) = 0 [pid 6638] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6637] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6638] <... open resumed>) = 5 [pid 6638] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6637] <... futex resumed>) = 0 [pid 6638] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6637] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6637] <... futex resumed>) = 0 [pid 6638] ftruncate(5, 33587195 [pid 6637] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6638] <... ftruncate resumed>) = 0 [pid 6638] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6637] <... futex resumed>) = 0 [pid 6638] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6637] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6637] <... futex resumed>) = 0 [pid 6638] sendfile(4, 5, NULL, 281474978811909 [ 287.185341][ T6639] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6637] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6637] exit_group(0 [pid 6638] <... sendfile resumed>) = ? [pid 6637] <... exit_group resumed>) = ? [pid 6638] +++ exited with 0 +++ [pid 6637] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6637, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- umount2("./539", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./539", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./539/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./539/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./539/binderfs") = 0 umount2("./539/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./539/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./539/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./539/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./539/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./539/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./539") = 0 mkdir("./540", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6640 ./strace-static-x86_64: Process 6640 attached [pid 6640] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6640] chdir("./540") = 0 [pid 6640] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6640] setpgid(0, 0) = 0 [pid 6640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6640] write(3, "1000", 4) = 4 [pid 6640] close(3) = 0 [pid 6640] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6640] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6640] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6640] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6641 attached , parent_tid=[6641], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6641 [pid 6640] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6640] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6641] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6641] memfd_create("syzkaller", 0) = 3 [pid 6641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6641] munmap(0x7f927cba2000, 2097152) = 0 [pid 6641] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6641] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6641] close(3) = 0 [pid 6641] mkdir("./file0", 0777) = 0 [ 287.518321][ T6641] loop0: detected capacity change from 0 to 4096 [ 287.534915][ T6641] NILFS (loop0): invalid segment: Checksum error in segment payload [ 287.542990][ T6641] NILFS (loop0): trying rollback from an earlier position [ 287.558279][ T6641] NILFS (loop0): recovery complete [pid 6641] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6641] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6641] chdir("./file0") = 0 [pid 6641] ioctl(4, LOOP_CLR_FD) = 0 [pid 6641] close(4) = 0 [pid 6641] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] <... futex resumed>) = 0 [pid 6640] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6640] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6641] <... futex resumed>) = 1 [pid 6641] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6641] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] <... futex resumed>) = 0 [pid 6640] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6640] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6641] <... futex resumed>) = 1 [pid 6641] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6641] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] <... futex resumed>) = 0 [pid 6640] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6640] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6641] <... futex resumed>) = 1 [pid 6641] ftruncate(5, 33587195) = 0 [pid 6641] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] <... futex resumed>) = 0 [pid 6640] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6640] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6641] <... futex resumed>) = 1 [pid 6641] sendfile(4, 5, NULL, 281474978811909 [pid 6640] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6640] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 287.564881][ T6642] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6640] exit_group(0) = ? [pid 6641] <... sendfile resumed>) = ? [pid 6641] +++ exited with 0 +++ [pid 6640] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6640, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./540", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./540", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./540/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./540/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./540/binderfs") = 0 umount2("./540/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./540/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./540/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./540/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./540/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./540/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./540") = 0 mkdir("./541", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6643 ./strace-static-x86_64: Process 6643 attached [pid 6643] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6643] chdir("./541") = 0 [pid 6643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6643] setpgid(0, 0) = 0 [pid 6643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6643] write(3, "1000", 4) = 4 [pid 6643] close(3) = 0 [pid 6643] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6643] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6643] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6643] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6643] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6644 attached , parent_tid=[6644], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6644 [pid 6643] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6644] set_robust_list(0x7f9284fc29e0, 24 [pid 6643] <... futex resumed>) = 0 [pid 6643] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6644] <... set_robust_list resumed>) = 0 [pid 6644] memfd_create("syzkaller", 0) = 3 [pid 6644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6644] munmap(0x7f927cba2000, 2097152) = 0 [pid 6644] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6644] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6644] close(3) = 0 [pid 6644] mkdir("./file0", 0777) = 0 [ 287.911364][ T6644] loop0: detected capacity change from 0 to 4096 [ 287.929512][ T6644] NILFS (loop0): invalid segment: Checksum error in segment payload [ 287.937649][ T6644] NILFS (loop0): trying rollback from an earlier position [ 287.952919][ T6644] NILFS (loop0): recovery complete [pid 6644] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6644] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6644] chdir("./file0") = 0 [pid 6644] ioctl(4, LOOP_CLR_FD) = 0 [pid 6644] close(4) = 0 [pid 6644] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6643] <... futex resumed>) = 0 [pid 6643] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6643] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6644] <... futex resumed>) = 1 [pid 6644] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6644] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6643] <... futex resumed>) = 0 [pid 6643] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6643] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6644] <... futex resumed>) = 1 [pid 6644] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6644] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6643] <... futex resumed>) = 0 [pid 6643] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6643] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6644] <... futex resumed>) = 1 [pid 6644] ftruncate(5, 33587195) = 0 [pid 6644] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6643] <... futex resumed>) = 0 [pid 6643] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6643] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6644] <... futex resumed>) = 1 [ 287.959326][ T6645] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6644] sendfile(4, 5, NULL, 281474978811909 [pid 6643] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6643] exit_group(0) = ? [pid 6644] <... sendfile resumed>) = ? [pid 6644] +++ exited with 0 +++ [pid 6643] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6643, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./541", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./541", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./541/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./541/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./541/binderfs") = 0 umount2("./541/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./541/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./541/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./541/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./541/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./541/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./541") = 0 mkdir("./542", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6646 ./strace-static-x86_64: Process 6646 attached [pid 6646] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6646] chdir("./542") = 0 [pid 6646] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6646] setpgid(0, 0) = 0 [pid 6646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6646] write(3, "1000", 4) = 4 [pid 6646] close(3) = 0 [pid 6646] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6646] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6646] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6646] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6646] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6647], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6647 [pid 6646] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6646] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6647 attached [pid 6647] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6647] memfd_create("syzkaller", 0) = 3 [pid 6647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6647] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6647] munmap(0x7f927cba2000, 2097152) = 0 [pid 6647] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6647] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6647] close(3) = 0 [pid 6647] mkdir("./file0", 0777) = 0 [ 288.306028][ T6647] loop0: detected capacity change from 0 to 4096 [ 288.322315][ T6647] NILFS (loop0): invalid segment: Checksum error in segment payload [ 288.330429][ T6647] NILFS (loop0): trying rollback from an earlier position [ 288.347613][ T6647] NILFS (loop0): recovery complete [pid 6647] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6647] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6647] chdir("./file0") = 0 [pid 6647] ioctl(4, LOOP_CLR_FD) = 0 [pid 6647] close(4) = 0 [pid 6647] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6646] <... futex resumed>) = 0 [pid 6646] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6646] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6647] <... futex resumed>) = 1 [pid 6647] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6647] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6646] <... futex resumed>) = 0 [pid 6646] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6646] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6647] <... futex resumed>) = 1 [pid 6647] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6647] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6646] <... futex resumed>) = 0 [pid 6646] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6646] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6647] <... futex resumed>) = 1 [pid 6647] ftruncate(5, 33587195) = 0 [pid 6647] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6646] <... futex resumed>) = 0 [pid 6646] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6646] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6647] <... futex resumed>) = 1 [ 288.353992][ T6648] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6647] sendfile(4, 5, NULL, 281474978811909 [pid 6646] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6646] exit_group(0) = ? [pid 6647] <... sendfile resumed>) = ? [pid 6647] +++ exited with 0 +++ [pid 6646] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6646, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./542", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./542", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./542/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./542/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./542/binderfs") = 0 umount2("./542/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./542/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./542/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./542/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./542/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./542/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./542") = 0 mkdir("./543", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6649 ./strace-static-x86_64: Process 6649 attached [pid 6649] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6649] chdir("./543") = 0 [pid 6649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6649] setpgid(0, 0) = 0 [pid 6649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6649] write(3, "1000", 4) = 4 [pid 6649] close(3) = 0 [pid 6649] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6649] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6649] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6649] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6650], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6650 [pid 6649] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6649] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6650 attached [pid 6650] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6650] memfd_create("syzkaller", 0) = 3 [pid 6650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6650] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6650] munmap(0x7f927cba2000, 2097152) = 0 [pid 6650] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6650] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6650] close(3) = 0 [pid 6650] mkdir("./file0", 0777) = 0 [ 288.705478][ T6650] loop0: detected capacity change from 0 to 4096 [ 288.721698][ T6650] NILFS (loop0): invalid segment: Checksum error in segment payload [ 288.729844][ T6650] NILFS (loop0): trying rollback from an earlier position [ 288.745124][ T6650] NILFS (loop0): recovery complete [pid 6650] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6650] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6650] chdir("./file0") = 0 [pid 6650] ioctl(4, LOOP_CLR_FD) = 0 [pid 6650] close(4) = 0 [pid 6650] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6649] <... futex resumed>) = 0 [pid 6649] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6649] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6650] <... futex resumed>) = 1 [pid 6650] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6650] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6649] <... futex resumed>) = 0 [pid 6649] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6649] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6650] <... futex resumed>) = 1 [pid 6650] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6650] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6649] <... futex resumed>) = 0 [pid 6649] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6649] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6650] <... futex resumed>) = 1 [pid 6650] ftruncate(5, 33587195) = 0 [pid 6650] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6649] <... futex resumed>) = 0 [pid 6649] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6649] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6650] <... futex resumed>) = 1 [ 288.751232][ T6651] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6650] sendfile(4, 5, NULL, 281474978811909 [pid 6649] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6649] exit_group(0) = ? [pid 6650] <... sendfile resumed>) = ? [pid 6650] +++ exited with 0 +++ [pid 6649] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6649, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- umount2("./543", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./543", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./543/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./543/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./543/binderfs") = 0 umount2("./543/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./543/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./543/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./543/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./543/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./543/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./543") = 0 mkdir("./544", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6652 ./strace-static-x86_64: Process 6652 attached [pid 6652] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6652] chdir("./544") = 0 [pid 6652] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6652] setpgid(0, 0) = 0 [pid 6652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6652] write(3, "1000", 4) = 4 [pid 6652] close(3) = 0 [pid 6652] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6652] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6652] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6652] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6653 attached [pid 6653] set_robust_list(0x7f9284fc29e0, 24 [pid 6652] <... clone resumed>, parent_tid=[6653], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6653 [pid 6653] <... set_robust_list resumed>) = 0 [pid 6653] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6652] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6653] <... futex resumed>) = 0 [pid 6652] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6653] memfd_create("syzkaller", 0) = 3 [pid 6653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6653] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6653] munmap(0x7f927cba2000, 2097152) = 0 [pid 6653] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6653] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6653] close(3) = 0 [pid 6653] mkdir("./file0", 0777) = 0 [pid 6653] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6653] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 289.091005][ T6653] loop0: detected capacity change from 0 to 4096 [ 289.106358][ T6653] NILFS (loop0): invalid segment: Checksum error in segment payload [ 289.114437][ T6653] NILFS (loop0): trying rollback from an earlier position [ 289.129226][ T6653] NILFS (loop0): recovery complete [pid 6653] chdir("./file0") = 0 [pid 6653] ioctl(4, LOOP_CLR_FD) = 0 [pid 6653] close(4) = 0 [pid 6653] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] <... futex resumed>) = 0 [pid 6653] <... futex resumed>) = 1 [pid 6652] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6653] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6652] <... futex resumed>) = 0 [pid 6652] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6653] <... open resumed>) = 4 [pid 6653] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] <... futex resumed>) = 0 [pid 6653] <... futex resumed>) = 1 [pid 6652] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6653] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6652] <... futex resumed>) = 0 [pid 6653] <... open resumed>) = 5 [pid 6652] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6653] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6652] <... futex resumed>) = 0 [pid 6653] ftruncate(5, 33587195 [pid 6652] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6653] <... ftruncate resumed>) = 0 [pid 6652] <... futex resumed>) = 0 [pid 6653] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6653] <... futex resumed>) = 0 [pid 6652] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6653] sendfile(4, 5, NULL, 281474978811909 [pid 6652] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 289.135233][ T6654] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6652] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6652] exit_group(0) = ? [pid 6653] <... sendfile resumed>) = ? [pid 6653] +++ exited with 0 +++ [pid 6652] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6652, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- umount2("./544", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./544", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./544/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./544/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./544/binderfs") = 0 umount2("./544/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./544/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./544/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./544/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./544/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./544/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./544") = 0 mkdir("./545", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6655 ./strace-static-x86_64: Process 6655 attached [pid 6655] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6655] chdir("./545") = 0 [pid 6655] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6655] setpgid(0, 0) = 0 [pid 6655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6655] write(3, "1000", 4) = 4 [pid 6655] close(3) = 0 [pid 6655] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6655] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6655] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6655] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6655] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6656], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6656 [pid 6655] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6655] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6656 attached [pid 6656] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6656] memfd_create("syzkaller", 0) = 3 [pid 6656] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6656] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6656] munmap(0x7f927cba2000, 2097152) = 0 [pid 6656] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6656] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6656] close(3) = 0 [pid 6656] mkdir("./file0", 0777) = 0 [ 289.463408][ T6656] loop0: detected capacity change from 0 to 4096 [ 289.480015][ T6656] NILFS (loop0): invalid segment: Checksum error in segment payload [ 289.488075][ T6656] NILFS (loop0): trying rollback from an earlier position [ 289.503951][ T6656] NILFS (loop0): recovery complete [pid 6656] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6656] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6656] chdir("./file0") = 0 [pid 6656] ioctl(4, LOOP_CLR_FD) = 0 [pid 6656] close(4) = 0 [pid 6656] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6655] <... futex resumed>) = 0 [pid 6656] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6655] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6655] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6656] <... open resumed>) = 4 [pid 6656] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6655] <... futex resumed>) = 0 [pid 6655] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6656] <... futex resumed>) = 1 [pid 6655] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6656] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6656] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6655] <... futex resumed>) = 0 [pid 6656] ftruncate(5, 33587195 [pid 6655] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6656] <... ftruncate resumed>) = 0 [pid 6655] <... futex resumed>) = 0 [pid 6656] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6655] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6656] <... futex resumed>) = 0 [pid 6655] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6656] sendfile(4, 5, NULL, 281474978811909 [pid 6655] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6655] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 289.509837][ T6657] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6655] exit_group(0) = ? [pid 6656] <... sendfile resumed>) = ? [pid 6656] +++ exited with 0 +++ [pid 6655] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6655, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./545", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./545", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./545/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./545/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./545/binderfs") = 0 umount2("./545/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./545/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./545/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./545/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./545/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./545/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./545") = 0 mkdir("./546", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6658 attached , child_tidptr=0x555555e2e5d0) = 6658 [pid 6658] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6658] chdir("./546") = 0 [pid 6658] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6658] setpgid(0, 0) = 0 [pid 6658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6658] write(3, "1000", 4) = 4 [pid 6658] close(3) = 0 [pid 6658] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6658] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6658] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6658] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6659], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6659 [pid 6658] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6658] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6659 attached [pid 6659] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6659] memfd_create("syzkaller", 0) = 3 [pid 6659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6659] munmap(0x7f927cba2000, 2097152) = 0 [pid 6659] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6659] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6659] close(3) = 0 [pid 6659] mkdir("./file0", 0777) = 0 [ 289.819461][ T6659] loop0: detected capacity change from 0 to 4096 [ 289.837487][ T6659] NILFS (loop0): invalid segment: Checksum error in segment payload [ 289.845613][ T6659] NILFS (loop0): trying rollback from an earlier position [ 289.863015][ T6659] NILFS (loop0): recovery complete [pid 6659] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6659] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6659] chdir("./file0") = 0 [pid 6659] ioctl(4, LOOP_CLR_FD) = 0 [pid 6659] close(4) = 0 [pid 6659] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6658] <... futex resumed>) = 0 [pid 6658] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6658] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6659] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6659] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6658] <... futex resumed>) = 0 [pid 6659] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6658] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6659] <... open resumed>) = 5 [pid 6659] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6658] <... futex resumed>) = 0 [pid 6658] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6658] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6658] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6659] ftruncate(5, 33587195) = 0 [pid 6659] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6658] <... futex resumed>) = 0 [pid 6658] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6658] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 289.869262][ T6660] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6659] sendfile(4, 5, NULL, 281474978811909 [pid 6658] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6658] exit_group(0) = ? [pid 6659] <... sendfile resumed>) = ? [pid 6659] +++ exited with 0 +++ [pid 6658] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6658, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./546", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./546", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./546/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./546/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./546/binderfs") = 0 umount2("./546/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./546/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./546/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./546/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./546/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./546/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./546") = 0 mkdir("./547", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6661 ./strace-static-x86_64: Process 6661 attached [pid 6661] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6661] chdir("./547") = 0 [pid 6661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6661] setpgid(0, 0) = 0 [pid 6661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6661] write(3, "1000", 4) = 4 [pid 6661] close(3) = 0 [pid 6661] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6661] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6661] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6661] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6661] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6662], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6662 [pid 6661] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6661] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6662 attached [pid 6662] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6662] memfd_create("syzkaller", 0) = 3 [pid 6662] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6662] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6662] munmap(0x7f927cba2000, 2097152) = 0 [pid 6662] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6662] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6662] close(3) = 0 [pid 6662] mkdir("./file0", 0777) = 0 [ 290.205046][ T6662] loop0: detected capacity change from 0 to 4096 [ 290.221650][ T6662] NILFS (loop0): invalid segment: Checksum error in segment payload [ 290.229755][ T6662] NILFS (loop0): trying rollback from an earlier position [ 290.244067][ T6662] NILFS (loop0): recovery complete [pid 6662] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6662] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6662] chdir("./file0") = 0 [pid 6662] ioctl(4, LOOP_CLR_FD) = 0 [pid 6662] close(4) = 0 [pid 6662] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6661] <... futex resumed>) = 0 [pid 6662] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6661] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6662] <... open resumed>) = 4 [pid 6661] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6662] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6661] <... futex resumed>) = 0 [pid 6661] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6662] <... futex resumed>) = 1 [pid 6661] <... futex resumed>) = 0 [pid 6662] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6661] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6662] <... open resumed>) = 5 [pid 6662] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6661] <... futex resumed>) = 0 [pid 6662] ftruncate(5, 33587195 [pid 6661] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6662] <... ftruncate resumed>) = 0 [pid 6661] <... futex resumed>) = 0 [pid 6662] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6661] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6662] <... futex resumed>) = 0 [pid 6661] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6662] sendfile(4, 5, NULL, 281474978811909 [pid 6661] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 290.249999][ T6663] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6661] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6661] exit_group(0) = ? [pid 6662] <... sendfile resumed>) = ? [pid 6662] +++ exited with 0 +++ [pid 6661] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6661, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./547", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./547", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./547/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./547/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./547/binderfs") = 0 umount2("./547/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./547/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./547/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./547/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./547/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./547/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./547") = 0 mkdir("./548", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6664 ./strace-static-x86_64: Process 6664 attached [pid 6664] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6664] chdir("./548") = 0 [pid 6664] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6664] setpgid(0, 0) = 0 [pid 6664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6664] write(3, "1000", 4) = 4 [pid 6664] close(3) = 0 [pid 6664] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6664] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6664] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6664] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6664] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6665], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6665 [pid 6664] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6664] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6665 attached [pid 6665] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6665] memfd_create("syzkaller", 0) = 3 [pid 6665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6665] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6665] munmap(0x7f927cba2000, 2097152) = 0 [pid 6665] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6665] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6665] close(3) = 0 [pid 6665] mkdir("./file0", 0777) = 0 [pid 6665] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 290.555589][ T6665] loop0: detected capacity change from 0 to 4096 [ 290.570873][ T6665] NILFS (loop0): invalid segment: Checksum error in segment payload [ 290.579087][ T6665] NILFS (loop0): trying rollback from an earlier position [ 290.595564][ T6665] NILFS (loop0): recovery complete [pid 6665] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6665] chdir("./file0") = 0 [pid 6665] ioctl(4, LOOP_CLR_FD) = 0 [pid 6665] close(4) = 0 [pid 6665] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6664] <... futex resumed>) = 0 [pid 6664] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6664] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6665] <... futex resumed>) = 1 [pid 6665] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6665] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6664] <... futex resumed>) = 0 [pid 6664] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6665] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6664] <... futex resumed>) = 0 [pid 6665] <... open resumed>) = 5 [pid 6664] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6665] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6664] <... futex resumed>) = 0 [pid 6665] ftruncate(5, 33587195 [pid 6664] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6665] <... ftruncate resumed>) = 0 [pid 6664] <... futex resumed>) = 0 [pid 6664] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6665] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6664] <... futex resumed>) = 0 [pid 6665] sendfile(4, 5, NULL, 281474978811909 [pid 6664] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 290.601557][ T6666] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6664] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6664] exit_group(0) = ? [pid 6665] <... sendfile resumed>) = ? [pid 6665] +++ exited with 0 +++ [pid 6664] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6664, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./548", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./548", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./548/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./548/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./548/binderfs") = 0 umount2("./548/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./548/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./548/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./548/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./548/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./548/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./548") = 0 mkdir("./549", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6667 ./strace-static-x86_64: Process 6667 attached [pid 6667] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6667] chdir("./549") = 0 [pid 6667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6667] setpgid(0, 0) = 0 [pid 6667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6667] write(3, "1000", 4) = 4 [pid 6667] close(3) = 0 [pid 6667] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6667] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6667] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6667] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6667] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6668], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6668 [pid 6667] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6667] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6668 attached [pid 6668] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6668] memfd_create("syzkaller", 0) = 3 [pid 6668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6668] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6668] munmap(0x7f927cba2000, 2097152) = 0 [pid 6668] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6668] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6668] close(3) = 0 [pid 6668] mkdir("./file0", 0777) = 0 [pid 6668] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6668] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6668] chdir("./file0") = 0 [ 290.919083][ T6668] loop0: detected capacity change from 0 to 4096 [ 290.934837][ T6668] NILFS (loop0): invalid segment: Checksum error in segment payload [ 290.942869][ T6668] NILFS (loop0): trying rollback from an earlier position [ 290.957942][ T6668] NILFS (loop0): recovery complete [pid 6668] ioctl(4, LOOP_CLR_FD) = 0 [pid 6668] close(4) = 0 [pid 6668] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6668] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6667] <... futex resumed>) = 0 [pid 6667] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6667] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6668] <... futex resumed>) = 0 [pid 6668] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6668] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6667] <... futex resumed>) = 0 [pid 6667] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6667] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6668] <... futex resumed>) = 1 [pid 6668] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6668] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6667] <... futex resumed>) = 0 [pid 6668] <... futex resumed>) = 1 [pid 6667] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6668] ftruncate(5, 33587195 [pid 6667] <... futex resumed>) = 0 [pid 6668] <... ftruncate resumed>) = 0 [pid 6667] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6668] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6667] <... futex resumed>) = 0 [pid 6668] sendfile(4, 5, NULL, 281474978811909 [pid 6667] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 290.964034][ T6669] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6667] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6667] exit_group(0) = ? [pid 6668] <... sendfile resumed>) = ? [pid 6668] +++ exited with 0 +++ [pid 6667] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6667, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./549", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./549", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./549/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./549/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./549/binderfs") = 0 umount2("./549/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./549/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./549/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./549/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./549/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./549/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./549") = 0 mkdir("./550", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6670 ./strace-static-x86_64: Process 6670 attached [pid 6670] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6670] chdir("./550") = 0 [pid 6670] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6670] setpgid(0, 0) = 0 [pid 6670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6670] write(3, "1000", 4) = 4 [pid 6670] close(3) = 0 [pid 6670] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6670] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6670] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6670] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6670] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6671], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6671 [pid 6670] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6670] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6671 attached [pid 6671] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6671] memfd_create("syzkaller", 0) = 3 [pid 6671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6671] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6671] munmap(0x7f927cba2000, 2097152) = 0 [pid 6671] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6671] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6671] close(3) = 0 [pid 6671] mkdir("./file0", 0777) = 0 [ 291.282410][ T6671] loop0: detected capacity change from 0 to 4096 [ 291.298031][ T6671] NILFS (loop0): invalid segment: Checksum error in segment payload [ 291.306209][ T6671] NILFS (loop0): trying rollback from an earlier position [ 291.321783][ T6671] NILFS (loop0): recovery complete [pid 6671] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6671] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6671] chdir("./file0") = 0 [pid 6671] ioctl(4, LOOP_CLR_FD) = 0 [pid 6671] close(4) = 0 [pid 6671] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6670] <... futex resumed>) = 0 [pid 6671] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6670] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6670] <... futex resumed>) = 0 [pid 6671] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6670] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6671] <... open resumed>) = 4 [pid 6671] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6670] <... futex resumed>) = 0 [pid 6671] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6670] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6671] <... open resumed>) = 5 [pid 6670] <... futex resumed>) = 0 [pid 6671] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6670] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6671] <... futex resumed>) = 0 [pid 6670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6671] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6670] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6670] <... futex resumed>) = 0 [pid 6671] ftruncate(5, 33587195 [pid 6670] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6671] <... ftruncate resumed>) = 0 [pid 6671] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6670] <... futex resumed>) = 0 [pid 6671] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6670] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6670] <... futex resumed>) = 0 [pid 6671] sendfile(4, 5, NULL, 281474978811909 [ 291.328047][ T6672] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6670] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6670] exit_group(0) = ? [pid 6671] <... sendfile resumed>) = ? [pid 6671] +++ exited with 0 +++ [pid 6670] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6670, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./550", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./550", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./550/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./550/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./550/binderfs") = 0 umount2("./550/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./550/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./550/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./550/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./550/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./550/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./550") = 0 mkdir("./551", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6673 attached , child_tidptr=0x555555e2e5d0) = 6673 [pid 6673] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6673] chdir("./551") = 0 [pid 6673] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6673] setpgid(0, 0) = 0 [pid 6673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6673] write(3, "1000", 4) = 4 [pid 6673] close(3) = 0 [pid 6673] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6673] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6673] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6673] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6673] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6674], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6674 [pid 6673] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6673] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6674 attached [pid 6674] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6674] memfd_create("syzkaller", 0) = 3 [pid 6674] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6674] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6674] munmap(0x7f927cba2000, 2097152) = 0 [pid 6674] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6674] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6674] close(3) = 0 [pid 6674] mkdir("./file0", 0777) = 0 [ 291.659016][ T6674] loop0: detected capacity change from 0 to 4096 [ 291.674536][ T6674] NILFS (loop0): invalid segment: Checksum error in segment payload [ 291.682842][ T6674] NILFS (loop0): trying rollback from an earlier position [ 291.699184][ T6674] NILFS (loop0): recovery complete [pid 6674] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6674] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6674] chdir("./file0") = 0 [pid 6674] ioctl(4, LOOP_CLR_FD) = 0 [pid 6674] close(4) = 0 [pid 6674] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6673] <... futex resumed>) = 0 [pid 6674] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6673] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6674] <... futex resumed>) = 0 [pid 6673] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6674] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6674] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6673] <... futex resumed>) = 0 [pid 6673] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6673] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6674] <... futex resumed>) = 1 [pid 6674] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6674] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6673] <... futex resumed>) = 0 [pid 6674] ftruncate(5, 33587195 [pid 6673] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6674] <... ftruncate resumed>) = 0 [pid 6673] <... futex resumed>) = 0 [pid 6674] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6673] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6674] <... futex resumed>) = 0 [pid 6673] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6674] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6673] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6673] <... futex resumed>) = 0 [pid 6673] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 291.705658][ T6675] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6674] sendfile(4, 5, NULL, 281474978811909 [pid 6673] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6673] exit_group(0) = ? [pid 6674] <... sendfile resumed>) = ? [pid 6674] +++ exited with 0 +++ [pid 6673] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6673, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./551", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./551", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./551/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./551/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./551/binderfs") = 0 umount2("./551/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./551/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./551/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./551/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./551/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./551/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./551") = 0 mkdir("./552", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6676 ./strace-static-x86_64: Process 6676 attached [pid 6676] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6676] chdir("./552") = 0 [pid 6676] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6676] setpgid(0, 0) = 0 [pid 6676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6676] write(3, "1000", 4) = 4 [pid 6676] close(3) = 0 [pid 6676] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6676] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6676] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6676] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6676] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6677 attached , parent_tid=[6677], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6677 [pid 6677] set_robust_list(0x7f9284fc29e0, 24 [pid 6676] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6677] <... set_robust_list resumed>) = 0 [pid 6676] <... futex resumed>) = 0 [pid 6676] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6677] memfd_create("syzkaller", 0) = 3 [pid 6677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6677] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6677] munmap(0x7f927cba2000, 2097152) = 0 [pid 6677] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6677] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6677] close(3) = 0 [pid 6677] mkdir("./file0", 0777) = 0 [pid 6677] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6677] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6677] chdir("./file0") = 0 [pid 6677] ioctl(4, LOOP_CLR_FD) = 0 [pid 6677] close(4) = 0 [pid 6677] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6676] <... futex resumed>) = 0 [ 292.042950][ T6677] loop0: detected capacity change from 0 to 4096 [ 292.058835][ T6677] NILFS (loop0): invalid segment: Checksum error in segment payload [ 292.066983][ T6677] NILFS (loop0): trying rollback from an earlier position [ 292.082026][ T6677] NILFS (loop0): recovery complete [pid 6677] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6676] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6677] <... open resumed>) = 4 [pid 6676] <... futex resumed>) = 0 [pid 6676] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6677] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6676] <... futex resumed>) = 0 [pid 6677] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6676] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6677] <... open resumed>) = 5 [pid 6676] <... futex resumed>) = 0 [pid 6676] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6677] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6676] <... futex resumed>) = 0 [pid 6677] ftruncate(5, 33587195 [pid 6676] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6677] <... ftruncate resumed>) = 0 [pid 6676] <... futex resumed>) = 0 [pid 6677] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6676] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6677] <... futex resumed>) = 0 [pid 6676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6677] sendfile(4, 5, NULL, 281474978811909 [pid 6676] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 292.088226][ T6678] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6676] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6676] exit_group(0) = ? [pid 6677] <... sendfile resumed>) = ? [pid 6677] +++ exited with 0 +++ [pid 6676] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6676, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- umount2("./552", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./552", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./552/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./552/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./552/binderfs") = 0 umount2("./552/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./552/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./552/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./552/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./552/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./552/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./552") = 0 mkdir("./553", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6679 ./strace-static-x86_64: Process 6679 attached [pid 6679] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6679] chdir("./553") = 0 [pid 6679] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6679] setpgid(0, 0) = 0 [pid 6679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6679] write(3, "1000", 4) = 4 [pid 6679] close(3) = 0 [pid 6679] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6679] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6679] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6679] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6679] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6680 attached , parent_tid=[6680], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6680 [pid 6680] set_robust_list(0x7f9284fc29e0, 24 [pid 6679] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6680] <... set_robust_list resumed>) = 0 [pid 6679] <... futex resumed>) = 0 [pid 6680] memfd_create("syzkaller", 0 [pid 6679] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6680] <... memfd_create resumed>) = 3 [pid 6680] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6680] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6680] munmap(0x7f927cba2000, 2097152) = 0 [pid 6680] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6680] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6680] close(3) = 0 [pid 6680] mkdir("./file0", 0777) = 0 [pid 6680] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 292.395313][ T6680] loop0: detected capacity change from 0 to 4096 [ 292.413428][ T6680] NILFS (loop0): invalid segment: Checksum error in segment payload [ 292.421826][ T6680] NILFS (loop0): trying rollback from an earlier position [ 292.437573][ T6680] NILFS (loop0): recovery complete [pid 6680] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6680] chdir("./file0") = 0 [pid 6680] ioctl(4, LOOP_CLR_FD) = 0 [pid 6680] close(4) = 0 [pid 6680] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6679] <... futex resumed>) = 0 [pid 6679] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6679] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6680] <... futex resumed>) = 1 [pid 6680] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6680] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6679] <... futex resumed>) = 0 [pid 6679] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6680] <... futex resumed>) = 1 [pid 6679] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6680] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6680] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6680] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6679] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6679] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6680] <... futex resumed>) = 0 [pid 6680] ftruncate(5, 33587195) = 0 [pid 6680] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6679] <... futex resumed>) = 0 [pid 6679] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6679] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6680] <... futex resumed>) = 1 [ 292.443643][ T6681] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6680] sendfile(4, 5, NULL, 281474978811909 [pid 6679] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6679] exit_group(0) = ? [pid 6680] <... sendfile resumed>) = ? [pid 6680] +++ exited with 0 +++ [pid 6679] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6679, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./553", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./553", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./553/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./553/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./553/binderfs") = 0 umount2("./553/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./553/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./553/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./553/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./553/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./553/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./553") = 0 mkdir("./554", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6682 ./strace-static-x86_64: Process 6682 attached [pid 6682] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6682] chdir("./554") = 0 [pid 6682] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6682] setpgid(0, 0) = 0 [pid 6682] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6682] write(3, "1000", 4) = 4 [pid 6682] close(3) = 0 [pid 6682] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6682] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6682] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6682] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6682] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6683 attached [pid 6683] set_robust_list(0x7f9284fc29e0, 24 [pid 6682] <... clone resumed>, parent_tid=[6683], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6683 [pid 6682] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6682] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6683] <... set_robust_list resumed>) = 0 [pid 6683] memfd_create("syzkaller", 0) = 3 [pid 6683] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6683] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6683] munmap(0x7f927cba2000, 2097152) = 0 [pid 6683] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6683] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6683] close(3) = 0 [pid 6683] mkdir("./file0", 0777) = 0 [ 292.789585][ T6683] loop0: detected capacity change from 0 to 4096 [ 292.805586][ T6683] NILFS (loop0): invalid segment: Checksum error in segment payload [ 292.813737][ T6683] NILFS (loop0): trying rollback from an earlier position [ 292.828511][ T6683] NILFS (loop0): recovery complete [pid 6683] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6683] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6683] chdir("./file0") = 0 [pid 6683] ioctl(4, LOOP_CLR_FD) = 0 [pid 6683] close(4) = 0 [pid 6683] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6682] <... futex resumed>) = 0 [pid 6682] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6682] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6683] <... futex resumed>) = 1 [pid 6683] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6683] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6682] <... futex resumed>) = 0 [pid 6682] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6682] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6683] <... futex resumed>) = 1 [pid 6683] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6683] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6682] <... futex resumed>) = 0 [pid 6682] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6682] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6683] <... futex resumed>) = 1 [pid 6683] ftruncate(5, 33587195) = 0 [pid 6683] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6682] <... futex resumed>) = 0 [pid 6682] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6682] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6683] <... futex resumed>) = 1 [pid 6683] sendfile(4, 5, NULL, 281474978811909 [pid 6682] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 292.834701][ T6684] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6682] exit_group(0) = ? [pid 6683] <... sendfile resumed>) = ? [pid 6683] +++ exited with 0 +++ [pid 6682] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6682, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./554", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./554", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./554/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./554/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./554/binderfs") = 0 umount2("./554/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./554/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./554/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./554/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./554/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./554/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./554") = 0 mkdir("./555", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6685 ./strace-static-x86_64: Process 6685 attached [pid 6685] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6685] chdir("./555") = 0 [pid 6685] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6685] setpgid(0, 0) = 0 [pid 6685] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6685] write(3, "1000", 4) = 4 [pid 6685] close(3) = 0 [pid 6685] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6685] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6685] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6685] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6685] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6686 attached , parent_tid=[6686], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6686 [pid 6685] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6686] set_robust_list(0x7f9284fc29e0, 24 [pid 6685] <... futex resumed>) = 0 [pid 6685] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6686] <... set_robust_list resumed>) = 0 [pid 6686] memfd_create("syzkaller", 0) = 3 [pid 6686] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6686] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6686] munmap(0x7f927cba2000, 2097152) = 0 [pid 6686] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6686] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6686] close(3) = 0 [pid 6686] mkdir("./file0", 0777) = 0 [pid 6686] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6686] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6686] chdir("./file0") = 0 [pid 6686] ioctl(4, LOOP_CLR_FD) = 0 [pid 6686] close(4) = 0 [pid 6686] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 293.152238][ T6686] loop0: detected capacity change from 0 to 4096 [ 293.167827][ T6686] NILFS (loop0): invalid segment: Checksum error in segment payload [ 293.175933][ T6686] NILFS (loop0): trying rollback from an earlier position [ 293.189752][ T6686] NILFS (loop0): recovery complete [pid 6686] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6685] <... futex resumed>) = 0 [pid 6685] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6685] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6686] <... futex resumed>) = 0 [pid 6686] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6686] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6685] <... futex resumed>) = 0 [pid 6685] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6685] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6686] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6686] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6685] <... futex resumed>) = 0 [pid 6685] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6685] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6686] <... futex resumed>) = 1 [pid 6686] ftruncate(5, 33587195) = 0 [pid 6686] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6685] <... futex resumed>) = 0 [pid 6685] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6685] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6686] <... futex resumed>) = 1 [ 293.195643][ T6687] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6686] sendfile(4, 5, NULL, 281474978811909 [pid 6685] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6685] exit_group(0) = ? [pid 6686] <... sendfile resumed>) = ? [pid 6686] +++ exited with 0 +++ [pid 6685] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6685, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./555", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./555", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./555/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./555/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./555/binderfs") = 0 umount2("./555/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./555/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./555/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./555/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./555/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./555/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./555") = 0 mkdir("./556", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6688 ./strace-static-x86_64: Process 6688 attached [pid 6688] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6688] chdir("./556") = 0 [pid 6688] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6688] setpgid(0, 0) = 0 [pid 6688] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6688] write(3, "1000", 4) = 4 [pid 6688] close(3) = 0 [pid 6688] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6688] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6688] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6688] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6689 attached , parent_tid=[6689], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6689 [pid 6689] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6689] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6688] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6689] <... futex resumed>) = 0 [pid 6688] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6689] memfd_create("syzkaller", 0) = 3 [pid 6689] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6689] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6689] munmap(0x7f927cba2000, 2097152) = 0 [pid 6689] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6689] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6689] close(3) = 0 [pid 6689] mkdir("./file0", 0777) = 0 [pid 6689] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6689] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6689] chdir("./file0") = 0 [pid 6689] ioctl(4, LOOP_CLR_FD) = 0 [pid 6689] close(4) = 0 [pid 6689] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 293.548501][ T6689] loop0: detected capacity change from 0 to 4096 [ 293.563865][ T6689] NILFS (loop0): invalid segment: Checksum error in segment payload [ 293.571892][ T6689] NILFS (loop0): trying rollback from an earlier position [ 293.587456][ T6689] NILFS (loop0): recovery complete [pid 6689] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6688] <... futex resumed>) = 0 [pid 6688] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6689] <... futex resumed>) = 0 [pid 6688] <... futex resumed>) = 1 [pid 6689] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6688] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6689] <... open resumed>) = 4 [pid 6689] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6688] <... futex resumed>) = 0 [pid 6688] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6688] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6689] <... futex resumed>) = 1 [pid 6689] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6689] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6688] <... futex resumed>) = 0 [pid 6689] ftruncate(5, 33587195 [pid 6688] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6689] <... ftruncate resumed>) = 0 [pid 6688] <... futex resumed>) = 0 [pid 6689] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6688] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6689] <... futex resumed>) = 0 [pid 6688] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6689] sendfile(4, 5, NULL, 281474978811909 [pid 6688] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 293.593320][ T6690] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6688] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6688] exit_group(0 [pid 6689] <... sendfile resumed>) = ? [pid 6688] <... exit_group resumed>) = ? [pid 6689] +++ exited with 0 +++ [pid 6688] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6688, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- umount2("./556", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./556", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./556/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./556/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./556/binderfs") = 0 umount2("./556/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./556/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./556/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./556/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./556/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./556/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./556") = 0 mkdir("./557", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6691 ./strace-static-x86_64: Process 6691 attached [pid 6691] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6691] chdir("./557") = 0 [pid 6691] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6691] setpgid(0, 0) = 0 [pid 6691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6691] write(3, "1000", 4) = 4 [pid 6691] close(3) = 0 [pid 6691] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6691] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6691] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6691] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6692 attached [pid 6692] set_robust_list(0x7f9284fc29e0, 24 [pid 6691] <... clone resumed>, parent_tid=[6692], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6692 [pid 6692] <... set_robust_list resumed>) = 0 [pid 6691] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6691] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6692] memfd_create("syzkaller", 0) = 3 [pid 6692] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6692] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6692] munmap(0x7f927cba2000, 2097152) = 0 [pid 6692] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6692] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6692] close(3) = 0 [pid 6692] mkdir("./file0", 0777) = 0 [ 293.931913][ T6692] loop0: detected capacity change from 0 to 4096 [ 293.947770][ T6692] NILFS (loop0): invalid segment: Checksum error in segment payload [ 293.955842][ T6692] NILFS (loop0): trying rollback from an earlier position [ 293.971052][ T6692] NILFS (loop0): recovery complete [pid 6692] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6692] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6692] chdir("./file0") = 0 [pid 6692] ioctl(4, LOOP_CLR_FD) = 0 [pid 6692] close(4) = 0 [pid 6692] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6691] <... futex resumed>) = 0 [pid 6691] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6691] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6692] <... futex resumed>) = 1 [pid 6692] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6692] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6691] <... futex resumed>) = 0 [pid 6691] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6691] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6692] <... futex resumed>) = 1 [pid 6692] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6692] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6691] <... futex resumed>) = 0 [pid 6691] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6691] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6692] <... futex resumed>) = 1 [pid 6692] ftruncate(5, 33587195) = 0 [pid 6692] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6691] <... futex resumed>) = 0 [pid 6691] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6691] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6692] <... futex resumed>) = 1 [pid 6692] sendfile(4, 5, NULL, 281474978811909 [pid 6691] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 293.977165][ T6693] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6691] exit_group(0) = ? [pid 6692] <... sendfile resumed>) = ? [pid 6692] +++ exited with 0 +++ [pid 6691] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6691, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./557", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./557", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./557/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./557/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./557/binderfs") = 0 umount2("./557/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./557/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./557/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./557/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./557/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./557/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./557") = 0 mkdir("./558", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6694 ./strace-static-x86_64: Process 6694 attached [pid 6694] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6694] chdir("./558") = 0 [pid 6694] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6694] setpgid(0, 0) = 0 [pid 6694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6694] write(3, "1000", 4) = 4 [pid 6694] close(3) = 0 [pid 6694] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6694] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6694] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6694] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6695 attached , parent_tid=[6695], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6695 [pid 6694] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6695] set_robust_list(0x7f9284fc29e0, 24 [pid 6694] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6695] <... set_robust_list resumed>) = 0 [pid 6695] memfd_create("syzkaller", 0) = 3 [pid 6695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6695] munmap(0x7f927cba2000, 2097152) = 0 [pid 6695] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6695] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6695] close(3) = 0 [pid 6695] mkdir("./file0", 0777) = 0 [ 294.261940][ T6695] loop0: detected capacity change from 0 to 4096 [ 294.278267][ T6695] NILFS (loop0): invalid segment: Checksum error in segment payload [ 294.286397][ T6695] NILFS (loop0): trying rollback from an earlier position [ 294.300847][ T6695] NILFS (loop0): recovery complete [pid 6695] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6695] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6695] chdir("./file0") = 0 [pid 6695] ioctl(4, LOOP_CLR_FD) = 0 [pid 6695] close(4) = 0 [pid 6695] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6694] <... futex resumed>) = 0 [pid 6694] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6694] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6695] <... futex resumed>) = 1 [pid 6695] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6695] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6694] <... futex resumed>) = 0 [pid 6694] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6694] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6695] <... futex resumed>) = 1 [pid 6695] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6695] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6694] <... futex resumed>) = 0 [pid 6694] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6694] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6695] <... futex resumed>) = 1 [pid 6695] ftruncate(5, 33587195) = 0 [pid 6695] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6694] <... futex resumed>) = 0 [pid 6694] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6694] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6695] <... futex resumed>) = 1 [pid 6695] sendfile(4, 5, NULL, 281474978811909 [pid 6694] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 294.307196][ T6696] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6694] exit_group(0) = ? [pid 6695] <... sendfile resumed>) = ? [pid 6695] +++ exited with 0 +++ [pid 6694] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6694, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./558", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./558", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./558/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./558/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./558/binderfs") = 0 umount2("./558/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./558/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./558/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./558/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./558/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./558/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./558") = 0 mkdir("./559", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6697 ./strace-static-x86_64: Process 6697 attached [pid 6697] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6697] chdir("./559") = 0 [pid 6697] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6697] setpgid(0, 0) = 0 [pid 6697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6697] write(3, "1000", 4) = 4 [pid 6697] close(3) = 0 [pid 6697] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6697] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6697] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6697] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6698 attached , parent_tid=[6698], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6698 [pid 6698] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6698] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6697] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6698] <... futex resumed>) = 0 [pid 6697] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6698] memfd_create("syzkaller", 0) = 3 [pid 6698] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6698] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6698] munmap(0x7f927cba2000, 2097152) = 0 [pid 6698] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6698] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6698] close(3) = 0 [pid 6698] mkdir("./file0", 0777) = 0 [pid 6698] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6698] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6698] chdir("./file0") = 0 [pid 6698] ioctl(4, LOOP_CLR_FD) = 0 [ 294.632548][ T6698] loop0: detected capacity change from 0 to 4096 [ 294.647854][ T6698] NILFS (loop0): invalid segment: Checksum error in segment payload [ 294.655987][ T6698] NILFS (loop0): trying rollback from an earlier position [ 294.671127][ T6698] NILFS (loop0): recovery complete [pid 6698] close(4) = 0 [pid 6698] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6697] <... futex resumed>) = 0 [pid 6698] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6697] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6697] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6698] <... open resumed>) = 4 [pid 6698] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6697] <... futex resumed>) = 0 [pid 6698] <... futex resumed>) = 1 [pid 6697] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6698] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6697] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6698] <... open resumed>) = 5 [pid 6698] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6697] <... futex resumed>) = 0 [pid 6697] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6697] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6698] <... futex resumed>) = 1 [pid 6698] ftruncate(5, 33587195) = 0 [pid 6698] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6697] <... futex resumed>) = 0 [pid 6697] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6697] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6698] <... futex resumed>) = 1 [ 294.677327][ T6699] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6698] sendfile(4, 5, NULL, 281474978811909 [pid 6697] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6697] exit_group(0) = ? [pid 6698] <... sendfile resumed>) = ? [pid 6698] +++ exited with 0 +++ [pid 6697] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6697, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./559", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./559", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./559/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./559/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./559/binderfs") = 0 umount2("./559/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./559/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./559/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./559/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./559/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./559/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./559") = 0 mkdir("./560", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6700 ./strace-static-x86_64: Process 6700 attached [pid 6700] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6700] chdir("./560") = 0 [pid 6700] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6700] setpgid(0, 0) = 0 [pid 6700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6700] write(3, "1000", 4) = 4 [pid 6700] close(3) = 0 [pid 6700] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6700] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6700] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6700] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6701 attached , parent_tid=[6701], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6701 [pid 6701] set_robust_list(0x7f9284fc29e0, 24 [pid 6700] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6701] <... set_robust_list resumed>) = 0 [pid 6700] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6701] memfd_create("syzkaller", 0) = 3 [pid 6701] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6701] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6701] munmap(0x7f927cba2000, 2097152) = 0 [pid 6701] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6701] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6701] close(3) = 0 [pid 6701] mkdir("./file0", 0777) = 0 [ 295.035565][ T6701] loop0: detected capacity change from 0 to 4096 [ 295.051369][ T6701] NILFS (loop0): invalid segment: Checksum error in segment payload [ 295.059506][ T6701] NILFS (loop0): trying rollback from an earlier position [ 295.075251][ T6701] NILFS (loop0): recovery complete [pid 6701] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6701] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6701] chdir("./file0") = 0 [pid 6701] ioctl(4, LOOP_CLR_FD) = 0 [pid 6701] close(4) = 0 [pid 6701] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6701] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6700] <... futex resumed>) = 0 [pid 6700] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6700] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6701] <... futex resumed>) = 0 [pid 6701] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6701] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6700] <... futex resumed>) = 0 [pid 6700] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6700] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6701] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6701] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6700] <... futex resumed>) = 0 [pid 6700] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6700] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6701] ftruncate(5, 33587195) = 0 [pid 6701] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6700] <... futex resumed>) = 0 [pid 6700] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6701] sendfile(4, 5, NULL, 281474978811909 [pid 6700] <... futex resumed>) = 0 [ 295.081556][ T6702] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6700] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6700] exit_group(0) = ? [pid 6701] <... sendfile resumed>) = ? [pid 6701] +++ exited with 0 +++ [pid 6700] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6700, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- umount2("./560", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./560", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./560/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./560/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./560/binderfs") = 0 umount2("./560/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./560/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./560/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./560/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./560/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./560/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./560") = 0 mkdir("./561", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6703 ./strace-static-x86_64: Process 6703 attached [pid 6703] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6703] chdir("./561") = 0 [pid 6703] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6703] setpgid(0, 0) = 0 [pid 6703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6703] write(3, "1000", 4) = 4 [pid 6703] close(3) = 0 [pid 6703] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6703] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6703] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6703] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6703] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6704], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6704 ./strace-static-x86_64: Process 6704 attached [pid 6704] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6704] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6703] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6704] <... futex resumed>) = 0 [pid 6703] <... futex resumed>) = 1 [pid 6704] memfd_create("syzkaller", 0 [pid 6703] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6704] <... memfd_create resumed>) = 3 [pid 6704] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6704] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6704] munmap(0x7f927cba2000, 2097152) = 0 [pid 6704] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6704] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6704] close(3) = 0 [pid 6704] mkdir("./file0", 0777) = 0 [ 295.429647][ T6704] loop0: detected capacity change from 0 to 4096 [ 295.446154][ T6704] NILFS (loop0): invalid segment: Checksum error in segment payload [ 295.454244][ T6704] NILFS (loop0): trying rollback from an earlier position [ 295.468533][ T6704] NILFS (loop0): recovery complete [pid 6704] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6704] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6704] chdir("./file0") = 0 [pid 6704] ioctl(4, LOOP_CLR_FD) = 0 [pid 6704] close(4) = 0 [pid 6704] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6703] <... futex resumed>) = 0 [pid 6703] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6703] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6704] <... futex resumed>) = 1 [pid 6704] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6704] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6703] <... futex resumed>) = 0 [pid 6703] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6703] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6704] <... futex resumed>) = 1 [pid 6704] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6704] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6703] <... futex resumed>) = 0 [pid 6703] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6703] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6704] <... futex resumed>) = 1 [pid 6704] ftruncate(5, 33587195) = 0 [pid 6704] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6703] <... futex resumed>) = 0 [pid 6703] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6703] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6704] <... futex resumed>) = 1 [ 295.474364][ T6705] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6704] sendfile(4, 5, NULL, 281474978811909 [pid 6703] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6703] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6703] exit_group(0 [pid 6704] <... sendfile resumed>) = ? [pid 6703] <... exit_group resumed>) = ? [pid 6704] +++ exited with 0 +++ [pid 6703] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6703, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./561", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./561", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./561/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./561/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./561/binderfs") = 0 umount2("./561/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./561/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./561/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./561/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./561/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./561/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./561") = 0 mkdir("./562", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6706 ./strace-static-x86_64: Process 6706 attached [pid 6706] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6706] chdir("./562") = 0 [pid 6706] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6706] setpgid(0, 0) = 0 [pid 6706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6706] write(3, "1000", 4) = 4 [pid 6706] close(3) = 0 [pid 6706] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6706] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6706] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6706] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6706] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6707], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6707 [pid 6706] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6706] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6707 attached [pid 6707] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6707] memfd_create("syzkaller", 0) = 3 [pid 6707] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6707] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6707] munmap(0x7f927cba2000, 2097152) = 0 [pid 6707] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6707] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6707] close(3) = 0 [pid 6707] mkdir("./file0", 0777) = 0 [pid 6707] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6707] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 295.770217][ T6707] loop0: detected capacity change from 0 to 4096 [ 295.786636][ T6707] NILFS (loop0): invalid segment: Checksum error in segment payload [ 295.794672][ T6707] NILFS (loop0): trying rollback from an earlier position [ 295.811098][ T6707] NILFS (loop0): recovery complete [pid 6707] chdir("./file0") = 0 [pid 6707] ioctl(4, LOOP_CLR_FD) = 0 [pid 6707] close(4) = 0 [pid 6707] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6706] <... futex resumed>) = 0 [pid 6706] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6706] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6707] <... futex resumed>) = 1 [pid 6707] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6707] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6706] <... futex resumed>) = 0 [pid 6706] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6706] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6707] <... futex resumed>) = 1 [pid 6707] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6707] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6706] <... futex resumed>) = 0 [pid 6706] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6706] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6707] <... futex resumed>) = 1 [pid 6707] ftruncate(5, 33587195) = 0 [pid 6707] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6706] <... futex resumed>) = 0 [pid 6706] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6706] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6707] <... futex resumed>) = 1 [ 295.817087][ T6708] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6707] sendfile(4, 5, NULL, 281474978811909 [pid 6706] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6706] exit_group(0) = ? [pid 6707] <... sendfile resumed>) = ? [pid 6707] +++ exited with 0 +++ [pid 6706] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6706, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./562", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./562", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./562/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./562/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./562/binderfs") = 0 umount2("./562/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./562/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./562/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./562/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./562/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./562/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./562") = 0 mkdir("./563", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6709 ./strace-static-x86_64: Process 6709 attached [pid 6709] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6709] chdir("./563") = 0 [pid 6709] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6709] setpgid(0, 0) = 0 [pid 6709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6709] write(3, "1000", 4) = 4 [pid 6709] close(3) = 0 [pid 6709] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6709] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6709] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6709] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6709] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6710 attached [pid 6710] set_robust_list(0x7f9284fc29e0, 24 [pid 6709] <... clone resumed>, parent_tid=[6710], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6710 [pid 6710] <... set_robust_list resumed>) = 0 [pid 6709] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6709] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6710] memfd_create("syzkaller", 0) = 3 [pid 6710] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6710] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6710] munmap(0x7f927cba2000, 2097152) = 0 [pid 6710] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6710] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6710] close(3) = 0 [pid 6710] mkdir("./file0", 0777) = 0 [pid 6710] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 296.175034][ T6710] loop0: detected capacity change from 0 to 4096 [ 296.191301][ T6710] NILFS (loop0): invalid segment: Checksum error in segment payload [ 296.199612][ T6710] NILFS (loop0): trying rollback from an earlier position [ 296.215749][ T6710] NILFS (loop0): recovery complete [pid 6710] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6710] chdir("./file0") = 0 [pid 6710] ioctl(4, LOOP_CLR_FD) = 0 [pid 6710] close(4) = 0 [pid 6710] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6710] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6709] <... futex resumed>) = 0 [pid 6710] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6709] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6710] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6709] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6710] <... open resumed>) = 4 [pid 6710] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6709] <... futex resumed>) = 0 [pid 6710] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6709] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6709] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6710] <... open resumed>) = 5 [pid 6710] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6710] <... futex resumed>) = 0 [pid 6709] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6710] ftruncate(5, 33587195) = 0 [pid 6709] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6710] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6709] <... futex resumed>) = 0 [pid 6709] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6710] sendfile(4, 5, NULL, 281474978811909 [pid 6709] <... futex resumed>) = 0 [ 296.221608][ T6711] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6709] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6709] exit_group(0) = ? [pid 6710] <... sendfile resumed>) = ? [pid 6710] +++ exited with 0 +++ [pid 6709] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6709, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./563", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./563", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./563/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./563/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./563/binderfs") = 0 umount2("./563/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./563/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./563/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./563/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./563/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./563/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./563") = 0 mkdir("./564", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6712 ./strace-static-x86_64: Process 6712 attached [pid 6712] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6712] chdir("./564") = 0 [pid 6712] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6712] setpgid(0, 0) = 0 [pid 6712] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6712] write(3, "1000", 4) = 4 [pid 6712] close(3) = 0 [pid 6712] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6712] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6712] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6712] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6712] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6713 attached , parent_tid=[6713], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6713 [pid 6712] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6713] set_robust_list(0x7f9284fc29e0, 24 [pid 6712] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6713] <... set_robust_list resumed>) = 0 [pid 6713] memfd_create("syzkaller", 0) = 3 [pid 6713] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6713] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6713] munmap(0x7f927cba2000, 2097152) = 0 [pid 6713] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6713] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6713] close(3) = 0 [pid 6713] mkdir("./file0", 0777) = 0 [ 296.558674][ T6713] loop0: detected capacity change from 0 to 4096 [ 296.575462][ T6713] NILFS (loop0): invalid segment: Checksum error in segment payload [ 296.583732][ T6713] NILFS (loop0): trying rollback from an earlier position [ 296.598822][ T6713] NILFS (loop0): recovery complete [pid 6713] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6713] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6713] chdir("./file0") = 0 [pid 6713] ioctl(4, LOOP_CLR_FD) = 0 [pid 6713] close(4) = 0 [pid 6713] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6712] <... futex resumed>) = 0 [pid 6712] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6712] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6713] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6713] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6712] <... futex resumed>) = 0 [pid 6712] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6712] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6713] <... futex resumed>) = 1 [pid 6713] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6713] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6712] <... futex resumed>) = 0 [pid 6712] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6712] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6713] <... futex resumed>) = 1 [pid 6713] ftruncate(5, 33587195) = 0 [pid 6713] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6712] <... futex resumed>) = 0 [pid 6712] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6712] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6713] <... futex resumed>) = 1 [ 296.605201][ T6714] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6713] sendfile(4, 5, NULL, 281474978811909 [pid 6712] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6712] exit_group(0) = ? [pid 6713] <... sendfile resumed>) = ? [pid 6713] +++ exited with 0 +++ [pid 6712] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6712, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./564", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./564", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./564/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./564/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./564/binderfs") = 0 umount2("./564/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./564/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./564/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./564/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./564/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./564/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./564") = 0 mkdir("./565", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6715 ./strace-static-x86_64: Process 6715 attached [pid 6715] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6715] chdir("./565") = 0 [pid 6715] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6715] setpgid(0, 0) = 0 [pid 6715] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6715] write(3, "1000", 4) = 4 [pid 6715] close(3) = 0 [pid 6715] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6715] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6715] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6715] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6715] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6716], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6716 [pid 6715] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6715] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6716 attached [pid 6716] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6716] memfd_create("syzkaller", 0) = 3 [pid 6716] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6716] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6716] munmap(0x7f927cba2000, 2097152) = 0 [pid 6716] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6716] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6716] close(3) = 0 [pid 6716] mkdir("./file0", 0777) = 0 [ 296.961174][ T6716] loop0: detected capacity change from 0 to 4096 [ 296.978151][ T6716] NILFS (loop0): invalid segment: Checksum error in segment payload [ 296.986213][ T6716] NILFS (loop0): trying rollback from an earlier position [ 297.001431][ T6716] NILFS (loop0): recovery complete [pid 6716] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6716] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6716] chdir("./file0") = 0 [pid 6716] ioctl(4, LOOP_CLR_FD) = 0 [pid 6716] close(4) = 0 [pid 6716] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6716] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6715] <... futex resumed>) = 0 [pid 6715] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6716] <... futex resumed>) = 0 [pid 6715] <... futex resumed>) = 1 [pid 6716] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6715] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6716] <... open resumed>) = 4 [pid 6716] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6716] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6715] <... futex resumed>) = 0 [pid 6715] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6716] <... futex resumed>) = 0 [pid 6715] <... futex resumed>) = 1 [pid 6716] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6715] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6716] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6716] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6715] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6715] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6716] <... futex resumed>) = 0 [pid 6715] <... futex resumed>) = 1 [pid 6716] ftruncate(5, 33587195 [pid 6715] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6716] <... ftruncate resumed>) = 0 [pid 6716] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6715] <... futex resumed>) = 0 [pid 6715] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6716] sendfile(4, 5, NULL, 281474978811909 [ 297.007364][ T6717] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6715] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6715] exit_group(0) = ? [pid 6716] <... sendfile resumed>) = ? [pid 6716] +++ exited with 0 +++ [pid 6715] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6715, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./565", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./565", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./565/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./565/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./565/binderfs") = 0 umount2("./565/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./565/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./565/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./565/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./565/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./565/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./565") = 0 mkdir("./566", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6718 ./strace-static-x86_64: Process 6718 attached [pid 6718] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6718] chdir("./566") = 0 [pid 6718] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6718] setpgid(0, 0) = 0 [pid 6718] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6718] write(3, "1000", 4) = 4 [pid 6718] close(3) = 0 [pid 6718] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6718] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6718] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6718] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6719 attached [pid 6719] set_robust_list(0x7f9284fc29e0, 24 [pid 6718] <... clone resumed>, parent_tid=[6719], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6719 [pid 6719] <... set_robust_list resumed>) = 0 [pid 6718] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6718] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6719] memfd_create("syzkaller", 0) = 3 [pid 6719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6719] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6719] munmap(0x7f927cba2000, 2097152) = 0 [pid 6719] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6719] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6719] close(3) = 0 [pid 6719] mkdir("./file0", 0777) = 0 [ 297.327149][ T6719] loop0: detected capacity change from 0 to 4096 [ 297.341838][ T6719] NILFS (loop0): invalid segment: Checksum error in segment payload [ 297.349977][ T6719] NILFS (loop0): trying rollback from an earlier position [ 297.367072][ T6719] NILFS (loop0): recovery complete [pid 6719] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6719] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6719] chdir("./file0") = 0 [pid 6719] ioctl(4, LOOP_CLR_FD) = 0 [pid 6719] close(4) = 0 [pid 6719] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6718] <... futex resumed>) = 0 [pid 6718] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6718] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6719] <... futex resumed>) = 1 [pid 6719] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6719] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6718] <... futex resumed>) = 0 [pid 6718] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6718] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6719] <... futex resumed>) = 1 [pid 6719] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6719] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6718] <... futex resumed>) = 0 [pid 6718] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6718] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6719] <... futex resumed>) = 1 [pid 6719] ftruncate(5, 33587195) = 0 [pid 6719] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6718] <... futex resumed>) = 0 [pid 6718] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6718] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6719] <... futex resumed>) = 1 [pid 6719] sendfile(4, 5, NULL, 281474978811909 [pid 6718] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 297.373327][ T6720] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6718] exit_group(0) = ? [pid 6719] <... sendfile resumed>) = ? [pid 6719] +++ exited with 0 +++ [pid 6718] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6718, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./566", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./566", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./566/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./566/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./566/binderfs") = 0 umount2("./566/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./566/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./566/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./566/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./566/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./566/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./566") = 0 mkdir("./567", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6721 ./strace-static-x86_64: Process 6721 attached [pid 6721] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6721] chdir("./567") = 0 [pid 6721] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6721] setpgid(0, 0) = 0 [pid 6721] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6721] write(3, "1000", 4) = 4 [pid 6721] close(3) = 0 [pid 6721] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6721] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6721] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6721] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6721] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6722], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6722 [pid 6721] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6721] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6722 attached [pid 6722] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6722] memfd_create("syzkaller", 0) = 3 [pid 6722] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6722] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6722] munmap(0x7f927cba2000, 2097152) = 0 [pid 6722] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6722] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6722] close(3) = 0 [pid 6722] mkdir("./file0", 0777) = 0 [pid 6722] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6722] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6722] chdir("./file0") = 0 [ 297.680671][ T6722] loop0: detected capacity change from 0 to 4096 [ 297.697603][ T6722] NILFS (loop0): invalid segment: Checksum error in segment payload [ 297.705701][ T6722] NILFS (loop0): trying rollback from an earlier position [ 297.721033][ T6722] NILFS (loop0): recovery complete [pid 6722] ioctl(4, LOOP_CLR_FD) = 0 [pid 6722] close(4) = 0 [pid 6722] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6721] <... futex resumed>) = 0 [pid 6721] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6721] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6722] <... futex resumed>) = 1 [pid 6722] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6722] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6721] <... futex resumed>) = 0 [pid 6721] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6721] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6722] <... futex resumed>) = 1 [pid 6722] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6722] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6721] <... futex resumed>) = 0 [pid 6721] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6721] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6722] <... futex resumed>) = 1 [pid 6722] ftruncate(5, 33587195) = 0 [pid 6722] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6721] <... futex resumed>) = 0 [pid 6721] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6721] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6722] <... futex resumed>) = 1 [ 297.727049][ T6723] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6722] sendfile(4, 5, NULL, 281474978811909 [pid 6721] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6721] exit_group(0) = ? [pid 6722] <... sendfile resumed>) = ? [pid 6722] +++ exited with 0 +++ [pid 6721] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6721, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./567", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./567", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./567/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./567/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./567/binderfs") = 0 umount2("./567/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./567/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./567/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./567/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./567/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./567/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./567") = 0 mkdir("./568", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6724 ./strace-static-x86_64: Process 6724 attached [pid 6724] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6724] chdir("./568") = 0 [pid 6724] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6724] setpgid(0, 0) = 0 [pid 6724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6724] write(3, "1000", 4) = 4 [pid 6724] close(3) = 0 [pid 6724] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6724] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6724] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6724] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6725], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6725 [pid 6724] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6724] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6725 attached [pid 6725] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6725] memfd_create("syzkaller", 0) = 3 [pid 6725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6725] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6725] munmap(0x7f927cba2000, 2097152) = 0 [pid 6725] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6725] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6725] close(3) = 0 [pid 6725] mkdir("./file0", 0777) = 0 [pid 6725] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6725] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6725] chdir("./file0") = 0 [ 298.040415][ T6725] loop0: detected capacity change from 0 to 4096 [ 298.056545][ T6725] NILFS (loop0): invalid segment: Checksum error in segment payload [ 298.065216][ T6725] NILFS (loop0): trying rollback from an earlier position [ 298.081114][ T6725] NILFS (loop0): recovery complete [pid 6725] ioctl(4, LOOP_CLR_FD) = 0 [pid 6725] close(4) = 0 [pid 6725] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6724] <... futex resumed>) = 0 [pid 6724] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6724] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6725] <... futex resumed>) = 1 [pid 6725] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6725] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6724] <... futex resumed>) = 0 [pid 6724] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6724] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6725] <... futex resumed>) = 1 [pid 6725] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6725] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6724] <... futex resumed>) = 0 [pid 6724] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6724] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6725] <... futex resumed>) = 1 [pid 6725] ftruncate(5, 33587195) = 0 [pid 6725] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6724] <... futex resumed>) = 0 [pid 6724] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6724] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6725] <... futex resumed>) = 1 [ 298.087148][ T6726] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6725] sendfile(4, 5, NULL, 281474978811909 [pid 6724] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6724] exit_group(0) = ? [pid 6725] <... sendfile resumed>) = ? [pid 6725] +++ exited with 0 +++ [pid 6724] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6724, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./568", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./568", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./568/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./568/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./568/binderfs") = 0 umount2("./568/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./568/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./568/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./568/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./568/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./568/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./568") = 0 mkdir("./569", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6727 ./strace-static-x86_64: Process 6727 attached [pid 6727] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6727] chdir("./569") = 0 [pid 6727] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6727] setpgid(0, 0) = 0 [pid 6727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6727] write(3, "1000", 4) = 4 [pid 6727] close(3) = 0 [pid 6727] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6727] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6727] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6727] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6727] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6728], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6728 [pid 6727] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6727] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6728 attached [pid 6728] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6728] memfd_create("syzkaller", 0) = 3 [pid 6728] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6728] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6728] munmap(0x7f927cba2000, 2097152) = 0 [pid 6728] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6728] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6728] close(3) = 0 [pid 6728] mkdir("./file0", 0777) = 0 [ 298.394778][ T6728] loop0: detected capacity change from 0 to 4096 [ 298.410133][ T6728] NILFS (loop0): invalid segment: Checksum error in segment payload [ 298.418209][ T6728] NILFS (loop0): trying rollback from an earlier position [ 298.433736][ T6728] NILFS (loop0): recovery complete [pid 6728] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6728] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6728] chdir("./file0") = 0 [pid 6728] ioctl(4, LOOP_CLR_FD) = 0 [pid 6728] close(4) = 0 [pid 6728] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6727] <... futex resumed>) = 0 [pid 6727] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6727] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6728] <... futex resumed>) = 1 [pid 6728] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6728] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6727] <... futex resumed>) = 0 [pid 6727] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6727] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6728] <... futex resumed>) = 1 [pid 6728] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6728] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6727] <... futex resumed>) = 0 [pid 6727] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6728] <... futex resumed>) = 1 [pid 6727] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6728] ftruncate(5, 33587195) = 0 [pid 6728] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6727] <... futex resumed>) = 0 [pid 6728] sendfile(4, 5, NULL, 281474978811909 [pid 6727] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 298.439550][ T6729] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6727] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6727] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6727] exit_group(0) = ? [pid 6728] <... sendfile resumed>) = ? [pid 6728] +++ exited with 0 +++ [pid 6727] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6727, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- umount2("./569", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./569", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./569/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./569/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./569/binderfs") = 0 umount2("./569/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./569/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./569/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./569/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./569/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./569/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./569") = 0 mkdir("./570", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6730 ./strace-static-x86_64: Process 6730 attached [pid 6730] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6730] chdir("./570") = 0 [pid 6730] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6730] setpgid(0, 0) = 0 [pid 6730] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6730] write(3, "1000", 4) = 4 [pid 6730] close(3) = 0 [pid 6730] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6730] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6730] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6730] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6730] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6731 attached , parent_tid=[6731], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6731 [pid 6731] set_robust_list(0x7f9284fc29e0, 24 [pid 6730] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6731] <... set_robust_list resumed>) = 0 [pid 6730] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6731] memfd_create("syzkaller", 0) = 3 [pid 6731] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6731] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6731] munmap(0x7f927cba2000, 2097152) = 0 [pid 6731] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6731] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6731] close(3) = 0 [pid 6731] mkdir("./file0", 0777) = 0 [pid 6731] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 298.764829][ T6731] loop0: detected capacity change from 0 to 4096 [ 298.781833][ T6731] NILFS (loop0): invalid segment: Checksum error in segment payload [ 298.789964][ T6731] NILFS (loop0): trying rollback from an earlier position [ 298.805091][ T6731] NILFS (loop0): recovery complete [pid 6731] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6731] chdir("./file0") = 0 [pid 6731] ioctl(4, LOOP_CLR_FD) = 0 [pid 6731] close(4) = 0 [pid 6731] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6730] <... futex resumed>) = 0 [pid 6730] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6730] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6731] <... futex resumed>) = 1 [pid 6731] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6731] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6730] <... futex resumed>) = 0 [pid 6730] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6730] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6731] <... futex resumed>) = 1 [pid 6731] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6731] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6730] <... futex resumed>) = 0 [pid 6730] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6730] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6731] <... futex resumed>) = 1 [pid 6731] ftruncate(5, 33587195) = 0 [pid 6731] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6730] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6730] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6730] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6731] <... futex resumed>) = 1 [pid 6730] <... futex resumed>) = 0 [pid 6730] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=48000000} [ 298.810931][ T6732] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6731] sendfile(4, 5, NULL, 281474978811909 [pid 6730] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6730] exit_group(0) = ? [pid 6731] <... sendfile resumed>) = ? [pid 6731] +++ exited with 0 +++ [pid 6730] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6730, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./570", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./570", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./570/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./570/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./570/binderfs") = 0 umount2("./570/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./570/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./570/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./570/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./570/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./570/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./570") = 0 mkdir("./571", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6733 attached , child_tidptr=0x555555e2e5d0) = 6733 [pid 6733] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6733] chdir("./571") = 0 [pid 6733] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6733] setpgid(0, 0) = 0 [pid 6733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6733] write(3, "1000", 4) = 4 [pid 6733] close(3) = 0 [pid 6733] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6733] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6733] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6733] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6733] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6734 attached , parent_tid=[6734], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6734 [pid 6733] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6733] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6734] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6734] memfd_create("syzkaller", 0) = 3 [pid 6734] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6734] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6734] munmap(0x7f927cba2000, 2097152) = 0 [pid 6734] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6734] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6734] close(3) = 0 [pid 6734] mkdir("./file0", 0777) = 0 [pid 6734] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6734] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6734] chdir("./file0") = 0 [pid 6734] ioctl(4, LOOP_CLR_FD) = 0 [pid 6734] close(4) = 0 [pid 6734] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 299.155237][ T6734] loop0: detected capacity change from 0 to 4096 [ 299.170599][ T6734] NILFS (loop0): invalid segment: Checksum error in segment payload [ 299.178720][ T6734] NILFS (loop0): trying rollback from an earlier position [ 299.194268][ T6734] NILFS (loop0): recovery complete [pid 6734] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6733] <... futex resumed>) = 0 [pid 6733] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6733] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6734] <... futex resumed>) = 0 [pid 6734] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6734] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6734] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6733] <... futex resumed>) = 0 [pid 6733] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6733] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6734] <... futex resumed>) = 0 [pid 6734] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6734] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6733] <... futex resumed>) = 0 [pid 6734] ftruncate(5, 33587195 [pid 6733] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6734] <... ftruncate resumed>) = 0 [pid 6733] <... futex resumed>) = 0 [pid 6734] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6733] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6733] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6734] <... futex resumed>) = 0 [pid 6733] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 299.200191][ T6735] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6734] sendfile(4, 5, NULL, 281474978811909 [pid 6733] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6733] exit_group(0) = ? [pid 6734] <... sendfile resumed>) = ? [pid 6734] +++ exited with 0 +++ [pid 6733] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6733, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./571", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./571", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./571/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./571/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./571/binderfs") = 0 umount2("./571/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./571/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./571/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./571/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./571/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./571/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./571") = 0 mkdir("./572", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6736 ./strace-static-x86_64: Process 6736 attached [pid 6736] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6736] chdir("./572") = 0 [pid 6736] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6736] setpgid(0, 0) = 0 [pid 6736] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6736] write(3, "1000", 4) = 4 [pid 6736] close(3) = 0 [pid 6736] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6736] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6736] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6736] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6736] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6737], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6737 [pid 6736] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6736] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6737 attached [pid 6737] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6737] memfd_create("syzkaller", 0) = 3 [pid 6737] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6737] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6737] munmap(0x7f927cba2000, 2097152) = 0 [pid 6737] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6737] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6737] close(3) = 0 [pid 6737] mkdir("./file0", 0777) = 0 [ 299.526610][ T6737] loop0: detected capacity change from 0 to 4096 [ 299.543691][ T6737] NILFS (loop0): invalid segment: Checksum error in segment payload [ 299.551771][ T6737] NILFS (loop0): trying rollback from an earlier position [ 299.567524][ T6737] NILFS (loop0): recovery complete [pid 6737] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6737] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6737] chdir("./file0") = 0 [pid 6737] ioctl(4, LOOP_CLR_FD) = 0 [pid 6737] close(4) = 0 [pid 6737] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6737] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6736] <... futex resumed>) = 0 [pid 6736] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6736] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6737] <... futex resumed>) = 0 [pid 6737] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6737] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6736] <... futex resumed>) = 0 [pid 6736] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6736] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6737] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6737] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6736] <... futex resumed>) = 0 [pid 6737] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6736] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6737] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6736] <... futex resumed>) = 0 [pid 6737] ftruncate(5, 33587195 [pid 6736] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6737] <... ftruncate resumed>) = 0 [pid 6737] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6736] <... futex resumed>) = 0 [pid 6737] sendfile(4, 5, NULL, 281474978811909 [pid 6736] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 299.573801][ T6738] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6736] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6736] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6736] exit_group(0) = ? [pid 6737] <... sendfile resumed>) = ? [pid 6737] +++ exited with 0 +++ [pid 6736] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6736, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./572", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./572", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./572/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./572/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./572/binderfs") = 0 umount2("./572/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./572/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./572/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./572/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./572/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./572/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./572") = 0 mkdir("./573", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6739 ./strace-static-x86_64: Process 6739 attached [pid 6739] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6739] chdir("./573") = 0 [pid 6739] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6739] setpgid(0, 0) = 0 [pid 6739] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6739] write(3, "1000", 4) = 4 [pid 6739] close(3) = 0 [pid 6739] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6739] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6739] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6739] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6739] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6740 attached , parent_tid=[6740], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6740 [pid 6739] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6740] set_robust_list(0x7f9284fc29e0, 24 [pid 6739] <... futex resumed>) = 0 [pid 6740] <... set_robust_list resumed>) = 0 [pid 6740] memfd_create("syzkaller", 0 [pid 6739] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6740] <... memfd_create resumed>) = 3 [pid 6740] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6740] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6740] munmap(0x7f927cba2000, 2097152) = 0 [pid 6740] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6740] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6740] close(3) = 0 [pid 6740] mkdir("./file0", 0777) = 0 [ 299.912663][ T6740] loop0: detected capacity change from 0 to 4096 [ 299.929485][ T6740] NILFS (loop0): invalid segment: Checksum error in segment payload [ 299.937601][ T6740] NILFS (loop0): trying rollback from an earlier position [ 299.953136][ T6740] NILFS (loop0): recovery complete [pid 6740] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6740] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6740] chdir("./file0") = 0 [pid 6740] ioctl(4, LOOP_CLR_FD) = 0 [pid 6740] close(4) = 0 [pid 6740] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6740] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6739] <... futex resumed>) = 0 [pid 6739] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6739] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6740] <... futex resumed>) = 0 [pid 6740] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6740] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6739] <... futex resumed>) = 0 [pid 6739] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6739] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6740] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6740] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6740] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6739] <... futex resumed>) = 0 [pid 6739] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6739] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6740] <... futex resumed>) = 0 [pid 6740] ftruncate(5, 33587195) = 0 [pid 6740] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6739] <... futex resumed>) = 0 [pid 6740] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6739] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6739] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6740] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 299.959249][ T6741] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6740] sendfile(4, 5, NULL, 281474978811909 [pid 6739] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6739] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6739] exit_group(0) = ? [pid 6740] <... sendfile resumed>) = ? [pid 6740] +++ exited with 0 +++ [pid 6739] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6739, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./573", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./573", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./573/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./573/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./573/binderfs") = 0 umount2("./573/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./573/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./573/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./573/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./573/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./573/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./573") = 0 mkdir("./574", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6742 ./strace-static-x86_64: Process 6742 attached [pid 6742] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6742] chdir("./574") = 0 [pid 6742] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6742] setpgid(0, 0) = 0 [pid 6742] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6742] write(3, "1000", 4) = 4 [pid 6742] close(3) = 0 [pid 6742] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6742] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6742] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6742] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6742] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6743 attached , parent_tid=[6743], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6743 [pid 6742] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6742] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6743] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6743] memfd_create("syzkaller", 0) = 3 [pid 6743] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6743] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6743] munmap(0x7f927cba2000, 2097152) = 0 [pid 6743] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6743] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6743] close(3) = 0 [pid 6743] mkdir("./file0", 0777) = 0 [ 300.280640][ T6743] loop0: detected capacity change from 0 to 4096 [ 300.297661][ T6743] NILFS (loop0): invalid segment: Checksum error in segment payload [ 300.305764][ T6743] NILFS (loop0): trying rollback from an earlier position [ 300.320098][ T6743] NILFS (loop0): recovery complete [pid 6743] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6743] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6743] chdir("./file0") = 0 [pid 6743] ioctl(4, LOOP_CLR_FD) = 0 [pid 6743] close(4) = 0 [pid 6743] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6743] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6742] <... futex resumed>) = 0 [pid 6742] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6742] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6743] <... futex resumed>) = 0 [pid 6743] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6743] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6742] <... futex resumed>) = 0 [pid 6742] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6742] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6743] <... futex resumed>) = 1 [pid 6743] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6743] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6743] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6742] <... futex resumed>) = 0 [pid 6742] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6742] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6743] <... futex resumed>) = 0 [pid 6743] ftruncate(5, 33587195) = 0 [pid 6743] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6742] <... futex resumed>) = 0 [pid 6742] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6742] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6743] <... futex resumed>) = 1 [ 300.326246][ T6744] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6743] sendfile(4, 5, NULL, 281474978811909 [pid 6742] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6742] exit_group(0) = ? [pid 6743] <... sendfile resumed>) = ? [pid 6743] +++ exited with 0 +++ [pid 6742] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6742, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./574", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./574", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./574/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./574/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./574/binderfs") = 0 umount2("./574/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./574/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./574/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./574/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./574/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./574/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./574") = 0 mkdir("./575", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6745 ./strace-static-x86_64: Process 6745 attached [pid 6745] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6745] chdir("./575") = 0 [pid 6745] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6745] setpgid(0, 0) = 0 [pid 6745] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6745] write(3, "1000", 4) = 4 [pid 6745] close(3) = 0 [pid 6745] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6745] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6745] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6745] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6746], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6746 [pid 6745] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6746 attached [pid 6746] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6746] memfd_create("syzkaller", 0) = 3 [pid 6746] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6746] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6746] munmap(0x7f927cba2000, 2097152) = 0 [pid 6746] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6746] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6746] close(3) = 0 [pid 6746] mkdir("./file0", 0777) = 0 [ 300.651879][ T6746] loop0: detected capacity change from 0 to 4096 [ 300.670047][ T6746] NILFS (loop0): invalid segment: Checksum error in segment payload [ 300.678497][ T6746] NILFS (loop0): trying rollback from an earlier position [ 300.696293][ T6746] NILFS (loop0): recovery complete [pid 6746] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6746] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6746] chdir("./file0") = 0 [pid 6746] ioctl(4, LOOP_CLR_FD) = 0 [pid 6746] close(4) = 0 [pid 6746] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6745] <... futex resumed>) = 0 [pid 6745] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6746] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6746] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6745] <... futex resumed>) = 0 [pid 6745] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6746] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6745] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6746] <... open resumed>) = 5 [pid 6746] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6745] <... futex resumed>) = 0 [pid 6745] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6746] <... futex resumed>) = 1 [pid 6746] ftruncate(5, 33587195) = 0 [pid 6746] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6745] <... futex resumed>) = 0 [pid 6745] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6746] <... futex resumed>) = 1 [ 300.702550][ T6747] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6746] sendfile(4, 5, NULL, 281474978811909 [pid 6745] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6745] exit_group(0) = ? [pid 6746] <... sendfile resumed>) = ? [pid 6746] +++ exited with 0 +++ [pid 6745] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6745, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./575", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./575", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./575/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./575/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./575/binderfs") = 0 umount2("./575/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./575/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./575/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./575/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./575/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./575/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./575") = 0 mkdir("./576", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6748 ./strace-static-x86_64: Process 6748 attached [pid 6748] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6748] chdir("./576") = 0 [pid 6748] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6748] setpgid(0, 0) = 0 [pid 6748] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6748] write(3, "1000", 4) = 4 [pid 6748] close(3) = 0 [pid 6748] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6748] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6748] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6748] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6748] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6749], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6749 [pid 6748] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6748] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6749 attached [pid 6749] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6749] memfd_create("syzkaller", 0) = 3 [pid 6749] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6749] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6749] munmap(0x7f927cba2000, 2097152) = 0 [pid 6749] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6749] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6749] close(3) = 0 [pid 6749] mkdir("./file0", 0777) = 0 [pid 6749] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6749] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6749] chdir("./file0") = 0 [ 301.037602][ T6749] loop0: detected capacity change from 0 to 4096 [ 301.053282][ T6749] NILFS (loop0): invalid segment: Checksum error in segment payload [ 301.061467][ T6749] NILFS (loop0): trying rollback from an earlier position [ 301.076977][ T6749] NILFS (loop0): recovery complete [pid 6749] ioctl(4, LOOP_CLR_FD) = 0 [pid 6749] close(4) = 0 [pid 6749] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6748] <... futex resumed>) = 0 [pid 6749] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6748] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6749] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6748] <... futex resumed>) = 0 [pid 6749] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6748] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6749] <... open resumed>) = 4 [pid 6749] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6748] <... futex resumed>) = 0 [pid 6749] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6748] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6749] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6748] <... futex resumed>) = 0 [pid 6749] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6748] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6749] <... open resumed>) = 5 [pid 6749] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6748] <... futex resumed>) = 0 [pid 6749] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6748] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6749] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6748] <... futex resumed>) = 0 [pid 6749] ftruncate(5, 33587195 [pid 6748] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6749] <... ftruncate resumed>) = 0 [pid 6749] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6748] <... futex resumed>) = 0 [pid 6749] sendfile(4, 5, NULL, 281474978811909 [pid 6748] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 301.082808][ T6750] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6748] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6748] exit_group(0) = ? [pid 6749] <... sendfile resumed>) = ? [pid 6749] +++ exited with 0 +++ [pid 6748] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6748, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./576", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./576", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./576/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./576/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./576/binderfs") = 0 umount2("./576/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./576/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./576/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./576/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./576/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./576/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./576") = 0 mkdir("./577", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6751 ./strace-static-x86_64: Process 6751 attached [pid 6751] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6751] chdir("./577") = 0 [pid 6751] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6751] setpgid(0, 0) = 0 [pid 6751] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6751] write(3, "1000", 4) = 4 [pid 6751] close(3) = 0 [pid 6751] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6751] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6751] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6751] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6751] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6752], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6752 [pid 6751] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6751] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6752 attached [pid 6752] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6752] memfd_create("syzkaller", 0) = 3 [pid 6752] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6752] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6752] munmap(0x7f927cba2000, 2097152) = 0 [pid 6752] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6752] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6752] close(3) = 0 [pid 6752] mkdir("./file0", 0777) = 0 [pid 6752] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6752] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 301.430236][ T6752] loop0: detected capacity change from 0 to 4096 [ 301.447107][ T6752] NILFS (loop0): invalid segment: Checksum error in segment payload [ 301.455190][ T6752] NILFS (loop0): trying rollback from an earlier position [ 301.471961][ T6752] NILFS (loop0): recovery complete [pid 6752] chdir("./file0") = 0 [pid 6752] ioctl(4, LOOP_CLR_FD) = 0 [pid 6752] close(4) = 0 [pid 6752] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6751] <... futex resumed>) = 0 [pid 6752] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6751] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6751] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6752] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6752] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6752] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6751] <... futex resumed>) = 0 [pid 6751] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6751] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6752] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6752] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6751] <... futex resumed>) = 0 [pid 6751] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6751] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6752] <... futex resumed>) = 1 [pid 6752] ftruncate(5, 33587195) = 0 [pid 6752] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6751] <... futex resumed>) = 0 [pid 6751] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6751] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6752] <... futex resumed>) = 1 [ 301.477964][ T6753] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6752] sendfile(4, 5, NULL, 281474978811909 [pid 6751] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6751] exit_group(0) = ? [pid 6752] <... sendfile resumed>) = ? [pid 6752] +++ exited with 0 +++ [pid 6751] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6751, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./577", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./577", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./577/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./577/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./577/binderfs") = 0 umount2("./577/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./577/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./577/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./577/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./577/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./577/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./577") = 0 mkdir("./578", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6754 ./strace-static-x86_64: Process 6754 attached [pid 6754] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6754] chdir("./578") = 0 [pid 6754] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6754] setpgid(0, 0) = 0 [pid 6754] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6754] write(3, "1000", 4) = 4 [pid 6754] close(3) = 0 [pid 6754] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6754] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6754] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6754] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6755], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6755 [pid 6754] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6754] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6755 attached [pid 6755] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6755] memfd_create("syzkaller", 0) = 3 [pid 6755] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6755] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6755] munmap(0x7f927cba2000, 2097152) = 0 [pid 6755] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6755] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6755] close(3) = 0 [pid 6755] mkdir("./file0", 0777) = 0 [pid 6755] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6755] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 301.810001][ T6755] loop0: detected capacity change from 0 to 4096 [ 301.826332][ T6755] NILFS (loop0): invalid segment: Checksum error in segment payload [ 301.834400][ T6755] NILFS (loop0): trying rollback from an earlier position [ 301.850097][ T6755] NILFS (loop0): recovery complete [pid 6755] chdir("./file0") = 0 [pid 6755] ioctl(4, LOOP_CLR_FD) = 0 [pid 6755] close(4) = 0 [pid 6755] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6754] <... futex resumed>) = 0 [pid 6755] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6754] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6755] <... open resumed>) = 4 [pid 6754] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6755] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6755] <... futex resumed>) = 0 [pid 6754] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6755] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6754] <... futex resumed>) = 0 [pid 6755] <... open resumed>) = 5 [pid 6754] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6755] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6755] <... futex resumed>) = 0 [pid 6754] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6755] ftruncate(5, 33587195 [pid 6754] <... futex resumed>) = 0 [pid 6754] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6755] <... ftruncate resumed>) = 0 [pid 6755] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6754] <... futex resumed>) = 0 [pid 6755] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6754] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6755] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6754] <... futex resumed>) = 0 [pid 6755] sendfile(4, 5, NULL, 281474978811909 [ 301.856178][ T6756] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6754] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6754] exit_group(0) = ? [pid 6755] <... sendfile resumed>) = ? [pid 6755] +++ exited with 0 +++ [pid 6754] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6754, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./578", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./578", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./578/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./578/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./578/binderfs") = 0 umount2("./578/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./578/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./578/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./578/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./578/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./578/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./578") = 0 mkdir("./579", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6757 ./strace-static-x86_64: Process 6757 attached [pid 6757] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6757] chdir("./579") = 0 [pid 6757] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6757] setpgid(0, 0) = 0 [pid 6757] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6757] write(3, "1000", 4) = 4 [pid 6757] close(3) = 0 [pid 6757] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6757] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6757] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6757] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6757] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6758], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6758 [pid 6757] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6757] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6758 attached [pid 6758] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6758] memfd_create("syzkaller", 0) = 3 [pid 6758] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6758] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6758] munmap(0x7f927cba2000, 2097152) = 0 [pid 6758] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6758] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6758] close(3) = 0 [pid 6758] mkdir("./file0", 0777) = 0 [pid 6758] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6758] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 302.206267][ T6758] loop0: detected capacity change from 0 to 4096 [ 302.222961][ T6758] NILFS (loop0): invalid segment: Checksum error in segment payload [ 302.231040][ T6758] NILFS (loop0): trying rollback from an earlier position [ 302.246468][ T6758] NILFS (loop0): recovery complete [pid 6758] chdir("./file0") = 0 [pid 6758] ioctl(4, LOOP_CLR_FD) = 0 [pid 6758] close(4) = 0 [pid 6758] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6757] <... futex resumed>) = 0 [pid 6757] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6757] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6758] <... futex resumed>) = 1 [pid 6758] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6758] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6757] <... futex resumed>) = 0 [pid 6757] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6757] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6758] <... futex resumed>) = 1 [pid 6758] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6758] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6757] <... futex resumed>) = 0 [pid 6757] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6757] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6758] <... futex resumed>) = 1 [pid 6758] ftruncate(5, 33587195) = 0 [pid 6758] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6757] <... futex resumed>) = 0 [pid 6758] sendfile(4, 5, NULL, 281474978811909 [pid 6757] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 302.252452][ T6759] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6757] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6757] exit_group(0) = ? [pid 6758] <... sendfile resumed>) = ? [pid 6758] +++ exited with 0 +++ [pid 6757] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6757, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./579", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./579", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./579/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./579/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./579/binderfs") = 0 umount2("./579/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./579/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./579/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./579/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./579/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./579/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./579") = 0 mkdir("./580", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6760 ./strace-static-x86_64: Process 6760 attached [pid 6760] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6760] chdir("./580") = 0 [pid 6760] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6760] setpgid(0, 0) = 0 [pid 6760] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6760] write(3, "1000", 4) = 4 [pid 6760] close(3) = 0 [pid 6760] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6760] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6760] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6760] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6760] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6761], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6761 ./strace-static-x86_64: Process 6761 attached [pid 6761] set_robust_list(0x7f9284fc29e0, 24 [pid 6760] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6761] <... set_robust_list resumed>) = 0 [pid 6760] <... futex resumed>) = 0 [pid 6760] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6761] memfd_create("syzkaller", 0) = 3 [pid 6761] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6761] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6761] munmap(0x7f927cba2000, 2097152) = 0 [pid 6761] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6761] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6761] close(3) = 0 [pid 6761] mkdir("./file0", 0777) = 0 [ 302.596004][ T6761] loop0: detected capacity change from 0 to 4096 [ 302.611485][ T6761] NILFS (loop0): invalid segment: Checksum error in segment payload [ 302.619567][ T6761] NILFS (loop0): trying rollback from an earlier position [ 302.634394][ T6761] NILFS (loop0): recovery complete [pid 6761] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6761] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6761] chdir("./file0") = 0 [pid 6761] ioctl(4, LOOP_CLR_FD) = 0 [pid 6761] close(4) = 0 [pid 6761] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6760] <... futex resumed>) = 0 [pid 6760] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6760] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6761] <... futex resumed>) = 1 [pid 6761] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6761] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6760] <... futex resumed>) = 0 [pid 6760] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6760] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6761] <... futex resumed>) = 1 [pid 6761] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6761] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6760] <... futex resumed>) = 0 [pid 6760] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6760] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6761] <... futex resumed>) = 1 [pid 6761] ftruncate(5, 33587195) = 0 [pid 6761] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6760] <... futex resumed>) = 0 [pid 6760] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6760] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6761] <... futex resumed>) = 1 [ 302.640455][ T6762] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6761] sendfile(4, 5, NULL, 281474978811909 [pid 6760] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6760] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6760] exit_group(0) = ? [pid 6761] <... sendfile resumed>) = ? [pid 6761] +++ exited with 0 +++ [pid 6760] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6760, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./580", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./580", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./580/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./580/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./580/binderfs") = 0 umount2("./580/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./580/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./580/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./580/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./580/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./580/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./580") = 0 mkdir("./581", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6763 ./strace-static-x86_64: Process 6763 attached [pid 6763] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6763] chdir("./581") = 0 [pid 6763] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6763] setpgid(0, 0) = 0 [pid 6763] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6763] write(3, "1000", 4) = 4 [pid 6763] close(3) = 0 [pid 6763] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6763] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6763] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6763] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6763] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6764], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6764 [pid 6763] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6763] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6764 attached [pid 6764] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6764] memfd_create("syzkaller", 0) = 3 [pid 6764] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6764] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6764] munmap(0x7f927cba2000, 2097152) = 0 [pid 6764] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6764] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6764] close(3) = 0 [pid 6764] mkdir("./file0", 0777) = 0 [ 302.962727][ T6764] loop0: detected capacity change from 0 to 4096 [ 302.978393][ T6764] NILFS (loop0): invalid segment: Checksum error in segment payload [ 302.986512][ T6764] NILFS (loop0): trying rollback from an earlier position [ 303.001043][ T6764] NILFS (loop0): recovery complete [pid 6764] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6764] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6764] chdir("./file0") = 0 [pid 6764] ioctl(4, LOOP_CLR_FD) = 0 [pid 6764] close(4) = 0 [pid 6764] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6763] <... futex resumed>) = 0 [pid 6763] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6763] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6764] <... futex resumed>) = 1 [pid 6764] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6764] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6763] <... futex resumed>) = 0 [pid 6763] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6763] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6764] <... futex resumed>) = 1 [pid 6764] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6764] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6763] <... futex resumed>) = 0 [pid 6763] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6763] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6764] <... futex resumed>) = 1 [pid 6764] ftruncate(5, 33587195) = 0 [pid 6764] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6763] <... futex resumed>) = 0 [pid 6763] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6763] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6764] <... futex resumed>) = 1 [ 303.007056][ T6765] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6764] sendfile(4, 5, NULL, 281474978811909 [pid 6763] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6763] exit_group(0) = ? [pid 6764] <... sendfile resumed>) = ? [pid 6764] +++ exited with 0 +++ [pid 6763] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6763, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./581", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./581", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./581/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./581/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./581/binderfs") = 0 umount2("./581/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./581/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./581/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./581/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./581/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./581/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./581") = 0 mkdir("./582", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6766 ./strace-static-x86_64: Process 6766 attached [pid 6766] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6766] chdir("./582") = 0 [pid 6766] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6766] setpgid(0, 0) = 0 [pid 6766] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6766] write(3, "1000", 4) = 4 [pid 6766] close(3) = 0 [pid 6766] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6766] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6766] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6766] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6766] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6767], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6767 ./strace-static-x86_64: Process 6767 attached [pid 6766] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6767] set_robust_list(0x7f9284fc29e0, 24 [pid 6766] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6767] <... set_robust_list resumed>) = 0 [pid 6767] memfd_create("syzkaller", 0) = 3 [pid 6767] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6767] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6767] munmap(0x7f927cba2000, 2097152) = 0 [pid 6767] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6767] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6767] close(3) = 0 [pid 6767] mkdir("./file0", 0777) = 0 [pid 6767] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6767] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6767] chdir("./file0") = 0 [pid 6767] ioctl(4, LOOP_CLR_FD) = 0 [ 303.330902][ T6767] loop0: detected capacity change from 0 to 4096 [ 303.346284][ T6767] NILFS (loop0): invalid segment: Checksum error in segment payload [ 303.354365][ T6767] NILFS (loop0): trying rollback from an earlier position [ 303.369066][ T6767] NILFS (loop0): recovery complete [pid 6767] close(4) = 0 [pid 6767] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6766] <... futex resumed>) = 0 [pid 6767] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6766] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6766] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6767] <... open resumed>) = 4 [pid 6767] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6766] <... futex resumed>) = 0 [pid 6767] <... futex resumed>) = 1 [pid 6766] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6767] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6766] <... futex resumed>) = 0 [pid 6767] <... open resumed>) = 5 [pid 6766] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6767] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6766] <... futex resumed>) = 0 [pid 6767] ftruncate(5, 33587195 [pid 6766] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6767] <... ftruncate resumed>) = 0 [pid 6766] <... futex resumed>) = 0 [pid 6767] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6766] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6767] <... futex resumed>) = 0 [pid 6766] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6767] sendfile(4, 5, NULL, 281474978811909 [pid 6766] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 303.375225][ T6768] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6766] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6766] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6766] exit_group(0) = ? [pid 6767] <... sendfile resumed>) = ? [pid 6767] +++ exited with 0 +++ [pid 6766] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6766, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./582", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./582", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./582/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./582/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./582/binderfs") = 0 umount2("./582/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./582/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./582/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./582/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./582/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./582/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./582") = 0 mkdir("./583", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6769 ./strace-static-x86_64: Process 6769 attached [pid 6769] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6769] chdir("./583") = 0 [pid 6769] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6769] setpgid(0, 0) = 0 [pid 6769] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6769] write(3, "1000", 4) = 4 [pid 6769] close(3) = 0 [pid 6769] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6769] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6769] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6769] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6769] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6770], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6770 [pid 6769] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6769] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6770 attached [pid 6770] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6770] memfd_create("syzkaller", 0) = 3 [pid 6770] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6770] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6770] munmap(0x7f927cba2000, 2097152) = 0 [pid 6770] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6770] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6770] close(3) = 0 [pid 6770] mkdir("./file0", 0777) = 0 [ 303.696785][ T6770] loop0: detected capacity change from 0 to 4096 [ 303.713929][ T6770] NILFS (loop0): invalid segment: Checksum error in segment payload [ 303.721960][ T6770] NILFS (loop0): trying rollback from an earlier position [ 303.737928][ T6770] NILFS (loop0): recovery complete [pid 6770] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6770] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6770] chdir("./file0") = 0 [pid 6770] ioctl(4, LOOP_CLR_FD) = 0 [pid 6770] close(4) = 0 [pid 6770] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6769] <... futex resumed>) = 0 [pid 6769] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6769] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6770] <... futex resumed>) = 1 [pid 6770] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6770] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6769] <... futex resumed>) = 0 [pid 6769] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6769] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6770] <... futex resumed>) = 1 [pid 6770] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6770] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6769] <... futex resumed>) = 0 [pid 6769] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6769] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6770] ftruncate(5, 33587195) = 0 [pid 6770] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6769] <... futex resumed>) = 0 [pid 6770] sendfile(4, 5, NULL, 281474978811909 [pid 6769] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 303.744319][ T6771] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6769] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6769] exit_group(0 [pid 6770] <... sendfile resumed>) = ? [pid 6769] <... exit_group resumed>) = ? [pid 6770] +++ exited with 0 +++ [pid 6769] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6769, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./583", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./583", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./583/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./583/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./583/binderfs") = 0 umount2("./583/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./583/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./583/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./583/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./583/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./583/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./583") = 0 mkdir("./584", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6772 ./strace-static-x86_64: Process 6772 attached [pid 6772] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6772] chdir("./584") = 0 [pid 6772] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6772] setpgid(0, 0) = 0 [pid 6772] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6772] write(3, "1000", 4) = 4 [pid 6772] close(3) = 0 [pid 6772] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6772] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6772] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6772] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6772] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6773 attached , parent_tid=[6773], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6773 [pid 6772] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6772] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6773] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6773] memfd_create("syzkaller", 0) = 3 [pid 6773] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6773] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6773] munmap(0x7f927cba2000, 2097152) = 0 [pid 6773] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6773] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6773] close(3) = 0 [pid 6773] mkdir("./file0", 0777) = 0 [ 304.121263][ T6773] loop0: detected capacity change from 0 to 4096 [ 304.137440][ T6773] NILFS (loop0): invalid segment: Checksum error in segment payload [ 304.145547][ T6773] NILFS (loop0): trying rollback from an earlier position [ 304.160668][ T6773] NILFS (loop0): recovery complete [pid 6773] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6773] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6773] chdir("./file0") = 0 [pid 6773] ioctl(4, LOOP_CLR_FD) = 0 [pid 6773] close(4) = 0 [pid 6773] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6772] <... futex resumed>) = 0 [pid 6772] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6773] <... futex resumed>) = 1 [pid 6772] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6773] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6773] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6772] <... futex resumed>) = 0 [pid 6772] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6772] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6773] <... futex resumed>) = 1 [pid 6773] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6773] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6772] <... futex resumed>) = 0 [pid 6772] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6772] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6773] <... futex resumed>) = 1 [pid 6773] ftruncate(5, 33587195) = 0 [pid 6773] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6772] <... futex resumed>) = 0 [pid 6772] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6772] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6773] <... futex resumed>) = 1 [pid 6773] sendfile(4, 5, NULL, 281474978811909 [pid 6772] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 304.167095][ T6774] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6772] exit_group(0) = ? [pid 6773] <... sendfile resumed>) = ? [pid 6773] +++ exited with 0 +++ [pid 6772] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6772, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./584", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./584", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./584/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./584/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./584/binderfs") = 0 umount2("./584/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./584/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./584/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./584/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./584/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./584/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./584") = 0 mkdir("./585", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6775 ./strace-static-x86_64: Process 6775 attached [pid 6775] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6775] chdir("./585") = 0 [pid 6775] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6775] setpgid(0, 0) = 0 [pid 6775] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6775] write(3, "1000", 4) = 4 [pid 6775] close(3) = 0 [pid 6775] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6775] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6775] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6775] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6775] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6776 attached , parent_tid=[6776], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6776 [pid 6775] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6776] set_robust_list(0x7f9284fc29e0, 24 [pid 6775] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6776] <... set_robust_list resumed>) = 0 [pid 6776] memfd_create("syzkaller", 0) = 3 [pid 6776] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6776] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6776] munmap(0x7f927cba2000, 2097152) = 0 [pid 6776] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6776] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6776] close(3) = 0 [pid 6776] mkdir("./file0", 0777) = 0 [ 304.504551][ T6776] loop0: detected capacity change from 0 to 4096 [ 304.520306][ T6776] NILFS (loop0): invalid segment: Checksum error in segment payload [ 304.528492][ T6776] NILFS (loop0): trying rollback from an earlier position [ 304.544179][ T6776] NILFS (loop0): recovery complete [pid 6776] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6776] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6776] chdir("./file0") = 0 [pid 6776] ioctl(4, LOOP_CLR_FD) = 0 [pid 6776] close(4) = 0 [pid 6776] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6776] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6775] <... futex resumed>) = 0 [pid 6775] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6775] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6776] <... futex resumed>) = 0 [pid 6776] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6776] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6775] <... futex resumed>) = 0 [pid 6776] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6775] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6776] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6775] <... futex resumed>) = 0 [pid 6776] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6775] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6776] <... open resumed>) = 5 [pid 6776] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6776] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6775] <... futex resumed>) = 0 [pid 6775] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6776] <... futex resumed>) = 0 [pid 6775] <... futex resumed>) = 1 [pid 6776] ftruncate(5, 33587195 [pid 6775] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6776] <... ftruncate resumed>) = 0 [pid 6776] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6775] <... futex resumed>) = 0 [pid 6776] sendfile(4, 5, NULL, 281474978811909 [pid 6775] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 304.550477][ T6777] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6775] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6775] exit_group(0 [pid 6776] <... sendfile resumed>) = ? [pid 6775] <... exit_group resumed>) = ? [pid 6776] +++ exited with 0 +++ [pid 6775] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6775, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- umount2("./585", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./585", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./585/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./585/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./585/binderfs") = 0 umount2("./585/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./585/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./585/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./585/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./585/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./585/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./585") = 0 mkdir("./586", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6778 ./strace-static-x86_64: Process 6778 attached [pid 6778] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6778] chdir("./586") = 0 [pid 6778] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6778] setpgid(0, 0) = 0 [pid 6778] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6778] write(3, "1000", 4) = 4 [pid 6778] close(3) = 0 [pid 6778] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6778] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6778] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6778] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6778] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6779 attached , parent_tid=[6779], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6779 [pid 6778] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6778] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6779] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6779] memfd_create("syzkaller", 0) = 3 [pid 6779] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6779] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6779] munmap(0x7f927cba2000, 2097152) = 0 [pid 6779] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6779] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6779] close(3) = 0 [pid 6779] mkdir("./file0", 0777) = 0 [ 304.888374][ T6779] loop0: detected capacity change from 0 to 4096 [ 304.905580][ T6779] NILFS (loop0): invalid segment: Checksum error in segment payload [ 304.913838][ T6779] NILFS (loop0): trying rollback from an earlier position [ 304.929673][ T6779] NILFS (loop0): recovery complete [pid 6779] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6779] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6779] chdir("./file0") = 0 [pid 6779] ioctl(4, LOOP_CLR_FD) = 0 [pid 6779] close(4) = 0 [pid 6779] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6779] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6778] <... futex resumed>) = 0 [pid 6778] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6779] <... futex resumed>) = 0 [pid 6778] <... futex resumed>) = 1 [pid 6779] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6778] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6779] <... open resumed>) = 4 [pid 6779] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6779] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6778] <... futex resumed>) = 0 [pid 6778] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6778] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6779] <... futex resumed>) = 0 [pid 6779] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6779] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6778] <... futex resumed>) = 0 [pid 6778] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6778] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6779] <... futex resumed>) = 1 [pid 6779] ftruncate(5, 33587195) = 0 [pid 6779] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6778] <... futex resumed>) = 0 [pid 6778] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6778] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6779] <... futex resumed>) = 1 [ 304.935711][ T6780] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6779] sendfile(4, 5, NULL, 281474978811909 [pid 6778] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6778] exit_group(0) = ? [pid 6779] <... sendfile resumed>) = ? [pid 6779] +++ exited with 0 +++ [pid 6778] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6778, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./586", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./586", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./586/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./586/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./586/binderfs") = 0 umount2("./586/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./586/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./586/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./586/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./586/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./586/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./586") = 0 mkdir("./587", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6781 ./strace-static-x86_64: Process 6781 attached [pid 6781] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6781] chdir("./587") = 0 [pid 6781] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6781] setpgid(0, 0) = 0 [pid 6781] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6781] write(3, "1000", 4) = 4 [pid 6781] close(3) = 0 [pid 6781] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6781] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6781] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6781] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6781] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6782], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6782 [pid 6781] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6781] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6782 attached [pid 6782] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6782] memfd_create("syzkaller", 0) = 3 [pid 6782] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6782] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6782] munmap(0x7f927cba2000, 2097152) = 0 [pid 6782] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6782] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6782] close(3) = 0 [pid 6782] mkdir("./file0", 0777) = 0 [ 305.268864][ T6782] loop0: detected capacity change from 0 to 4096 [ 305.286006][ T6782] NILFS (loop0): invalid segment: Checksum error in segment payload [ 305.294079][ T6782] NILFS (loop0): trying rollback from an earlier position [ 305.308851][ T6782] NILFS (loop0): recovery complete [pid 6782] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6782] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6782] chdir("./file0") = 0 [pid 6782] ioctl(4, LOOP_CLR_FD) = 0 [pid 6782] close(4) = 0 [pid 6782] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6781] <... futex resumed>) = 0 [pid 6782] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6781] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6782] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6782] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6781] <... futex resumed>) = 0 [pid 6781] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6782] <... open resumed>) = 4 [pid 6782] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6782] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6781] <... futex resumed>) = 0 [pid 6781] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6782] <... futex resumed>) = 0 [pid 6782] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6782] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6782] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6781] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6781] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6782] <... futex resumed>) = 0 [pid 6781] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6782] ftruncate(5, 33587195) = 0 [pid 6782] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6781] <... futex resumed>) = 0 [pid 6781] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6782] sendfile(4, 5, NULL, 281474978811909 [ 305.314714][ T6783] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6781] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6781] exit_group(0) = ? [pid 6782] <... sendfile resumed>) = ? [pid 6782] +++ exited with 0 +++ [pid 6781] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6781, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./587", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./587", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./587/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./587/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./587/binderfs") = 0 umount2("./587/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./587/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./587/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./587/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./587/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./587/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./587") = 0 mkdir("./588", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6784 ./strace-static-x86_64: Process 6784 attached [pid 6784] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6784] chdir("./588") = 0 [pid 6784] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6784] setpgid(0, 0) = 0 [pid 6784] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6784] write(3, "1000", 4) = 4 [pid 6784] close(3) = 0 [pid 6784] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6784] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6784] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6784] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6784] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6785], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6785 [pid 6784] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6784] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6785 attached [pid 6785] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6785] memfd_create("syzkaller", 0) = 3 [pid 6785] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6785] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6785] munmap(0x7f927cba2000, 2097152) = 0 [pid 6785] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6785] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6785] close(3) = 0 [pid 6785] mkdir("./file0", 0777) = 0 [ 305.649468][ T6785] loop0: detected capacity change from 0 to 4096 [ 305.666590][ T6785] NILFS (loop0): invalid segment: Checksum error in segment payload [ 305.674705][ T6785] NILFS (loop0): trying rollback from an earlier position [ 305.691618][ T6785] NILFS (loop0): recovery complete [pid 6785] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6785] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6785] chdir("./file0") = 0 [pid 6785] ioctl(4, LOOP_CLR_FD) = 0 [pid 6785] close(4) = 0 [pid 6785] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6785] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6784] <... futex resumed>) = 0 [pid 6784] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6785] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6784] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6785] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6785] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6785] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6784] <... futex resumed>) = 0 [pid 6784] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6785] <... futex resumed>) = 0 [pid 6784] <... futex resumed>) = 1 [pid 6785] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6784] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6785] <... open resumed>) = 5 [pid 6785] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6784] <... futex resumed>) = 0 [pid 6785] ftruncate(5, 33587195 [pid 6784] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6785] <... ftruncate resumed>) = 0 [pid 6784] <... futex resumed>) = 0 [pid 6785] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6784] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6785] <... futex resumed>) = 0 [pid 6784] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6785] sendfile(4, 5, NULL, 281474978811909 [pid 6784] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 305.697695][ T6786] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6784] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6784] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6784] exit_group(0) = ? [pid 6785] <... sendfile resumed>) = ? [pid 6785] +++ exited with 0 +++ [pid 6784] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6784, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./588", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./588", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./588/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./588/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./588/binderfs") = 0 umount2("./588/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./588/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./588/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./588/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./588/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./588/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./588") = 0 mkdir("./589", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6787 ./strace-static-x86_64: Process 6787 attached [pid 6787] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6787] chdir("./589") = 0 [pid 6787] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6787] setpgid(0, 0) = 0 [pid 6787] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6787] write(3, "1000", 4) = 4 [pid 6787] close(3) = 0 [pid 6787] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6787] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6787] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6787] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6787] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6788 attached , parent_tid=[6788], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6788 [pid 6787] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6787] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6788] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6788] memfd_create("syzkaller", 0) = 3 [pid 6788] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6788] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6788] munmap(0x7f927cba2000, 2097152) = 0 [pid 6788] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6788] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6788] close(3) = 0 [pid 6788] mkdir("./file0", 0777) = 0 [ 306.045614][ T6788] loop0: detected capacity change from 0 to 4096 [ 306.061865][ T6788] NILFS (loop0): invalid segment: Checksum error in segment payload [ 306.070002][ T6788] NILFS (loop0): trying rollback from an earlier position [ 306.087675][ T6788] NILFS (loop0): recovery complete [pid 6788] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6788] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6788] chdir("./file0") = 0 [pid 6788] ioctl(4, LOOP_CLR_FD) = 0 [pid 6788] close(4) = 0 [pid 6788] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6787] <... futex resumed>) = 0 [pid 6787] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6787] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6788] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6788] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6787] <... futex resumed>) = 0 [pid 6787] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6787] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6788] <... futex resumed>) = 1 [pid 6788] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6788] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6787] <... futex resumed>) = 0 [pid 6787] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6787] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6788] <... futex resumed>) = 1 [pid 6788] ftruncate(5, 33587195) = 0 [pid 6788] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6787] <... futex resumed>) = 0 [pid 6787] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6787] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6788] <... futex resumed>) = 1 [ 306.094033][ T6789] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6788] sendfile(4, 5, NULL, 281474978811909 [pid 6787] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6787] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6787] exit_group(0) = ? [pid 6788] <... sendfile resumed>) = ? [pid 6788] +++ exited with 0 +++ [pid 6787] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6787, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./589", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./589", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./589/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./589/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./589/binderfs") = 0 umount2("./589/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./589/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./589/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./589/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./589/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./589/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./589") = 0 mkdir("./590", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6790 ./strace-static-x86_64: Process 6790 attached [pid 6790] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6790] chdir("./590") = 0 [pid 6790] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6790] setpgid(0, 0) = 0 [pid 6790] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6790] write(3, "1000", 4) = 4 [pid 6790] close(3) = 0 [pid 6790] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6790] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6790] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6790] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6790] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6791], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6791 [pid 6790] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6790] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6791 attached [pid 6791] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6791] memfd_create("syzkaller", 0) = 3 [pid 6791] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6791] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6791] munmap(0x7f927cba2000, 2097152) = 0 [pid 6791] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6791] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6791] close(3) = 0 [pid 6791] mkdir("./file0", 0777) = 0 [ 306.411735][ T6791] loop0: detected capacity change from 0 to 4096 [ 306.427156][ T6791] NILFS (loop0): invalid segment: Checksum error in segment payload [ 306.435226][ T6791] NILFS (loop0): trying rollback from an earlier position [ 306.450139][ T6791] NILFS (loop0): recovery complete [pid 6791] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6791] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6791] chdir("./file0") = 0 [pid 6791] ioctl(4, LOOP_CLR_FD) = 0 [pid 6791] close(4) = 0 [pid 6791] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6791] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6790] <... futex resumed>) = 0 [pid 6790] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6790] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6791] <... futex resumed>) = 0 [pid 6791] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6791] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6790] <... futex resumed>) = 0 [pid 6790] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6790] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6791] <... futex resumed>) = 1 [pid 6791] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6791] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6790] <... futex resumed>) = 0 [pid 6790] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6790] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6791] ftruncate(5, 33587195) = 0 [pid 6791] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6790] <... futex resumed>) = 0 [pid 6790] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6790] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 306.456126][ T6792] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6791] sendfile(4, 5, NULL, 281474978811909 [pid 6790] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6790] exit_group(0) = ? [pid 6791] <... sendfile resumed>) = ? [pid 6791] +++ exited with 0 +++ [pid 6790] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6790, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./590", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./590", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./590/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./590/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./590/binderfs") = 0 umount2("./590/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./590/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./590/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./590/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./590/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./590/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./590") = 0 mkdir("./591", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6793 ./strace-static-x86_64: Process 6793 attached [pid 6793] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6793] chdir("./591") = 0 [pid 6793] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6793] setpgid(0, 0) = 0 [pid 6793] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6793] write(3, "1000", 4) = 4 [pid 6793] close(3) = 0 [pid 6793] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6793] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6793] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6793] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6793] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6794], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6794 [pid 6793] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6793] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6794 attached [pid 6794] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6794] memfd_create("syzkaller", 0) = 3 [pid 6794] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6794] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6794] munmap(0x7f927cba2000, 2097152) = 0 [pid 6794] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6794] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6794] close(3) = 0 [pid 6794] mkdir("./file0", 0777) = 0 [pid 6794] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6794] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6794] chdir("./file0") = 0 [pid 6794] ioctl(4, LOOP_CLR_FD) = 0 [pid 6794] close(4) = 0 [pid 6794] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6793] <... futex resumed>) = 0 [pid 6794] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6793] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6793] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6794] <... open resumed>) = 4 [pid 6794] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6793] <... futex resumed>) = 0 [pid 6794] <... futex resumed>) = 1 [pid 6793] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6794] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6793] <... futex resumed>) = 0 [pid 6794] <... open resumed>) = 5 [pid 6793] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6794] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6793] <... futex resumed>) = 0 [pid 6794] ftruncate(5, 33587195 [pid 6793] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6794] <... ftruncate resumed>) = 0 [pid 6793] <... futex resumed>) = 0 [pid 6794] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6793] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6794] <... futex resumed>) = 0 [pid 6793] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6794] sendfile(4, 5, NULL, 281474978811909 [pid 6793] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 306.786079][ T6794] loop0: detected capacity change from 0 to 4096 [ 306.804732][ T6794] NILFS (loop0): invalid segment: Checksum error in segment payload [ 306.812815][ T6794] NILFS (loop0): trying rollback from an earlier position [ 306.829164][ T6794] NILFS (loop0): recovery complete [pid 6793] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 306.854478][ T6795] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6793] exit_group(0) = ? [pid 6794] <... sendfile resumed>) = ? [pid 6794] +++ exited with 0 +++ [pid 6793] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6793, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- umount2("./591", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./591", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./591/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./591/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./591/binderfs") = 0 umount2("./591/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./591/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./591/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./591/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./591/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./591/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./591") = 0 mkdir("./592", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6796 ./strace-static-x86_64: Process 6796 attached [pid 6796] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6796] chdir("./592") = 0 [pid 6796] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6796] setpgid(0, 0) = 0 [pid 6796] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6796] write(3, "1000", 4) = 4 [pid 6796] close(3) = 0 [pid 6796] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6796] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6796] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6796] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6796] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6797 attached , parent_tid=[6797], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6797 [pid 6797] set_robust_list(0x7f9284fc29e0, 24 [pid 6796] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6796] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6797] <... set_robust_list resumed>) = 0 [pid 6797] memfd_create("syzkaller", 0) = 3 [pid 6797] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6797] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6797] munmap(0x7f927cba2000, 2097152) = 0 [pid 6797] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6797] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6797] close(3) = 0 [pid 6797] mkdir("./file0", 0777) = 0 [ 307.157996][ T6797] loop0: detected capacity change from 0 to 4096 [ 307.174604][ T6797] NILFS (loop0): invalid segment: Checksum error in segment payload [ 307.182678][ T6797] NILFS (loop0): trying rollback from an earlier position [ 307.198584][ T6797] NILFS (loop0): recovery complete [pid 6797] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6797] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6797] chdir("./file0") = 0 [pid 6797] ioctl(4, LOOP_CLR_FD) = 0 [pid 6797] close(4) = 0 [pid 6797] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6796] <... futex resumed>) = 0 [pid 6797] <... futex resumed>) = 1 [pid 6796] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6797] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6796] <... futex resumed>) = 0 [pid 6796] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6797] <... open resumed>) = 4 [pid 6797] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6797] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6796] <... futex resumed>) = 0 [pid 6796] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6797] <... futex resumed>) = 0 [pid 6797] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6796] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6797] <... open resumed>) = 5 [pid 6797] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6797] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6796] <... futex resumed>) = 0 [pid 6796] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6797] <... futex resumed>) = 0 [pid 6796] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6797] ftruncate(5, 33587195) = 0 [pid 6797] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6796] <... futex resumed>) = 0 [pid 6796] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6796] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6797] <... futex resumed>) = 1 [ 307.204800][ T6798] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6797] sendfile(4, 5, NULL, 281474978811909 [pid 6796] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6796] exit_group(0) = ? [pid 6797] <... sendfile resumed>) = ? [pid 6797] +++ exited with 0 +++ [pid 6796] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6796, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./592", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./592", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./592/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./592/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./592/binderfs") = 0 umount2("./592/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./592/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./592/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./592/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./592/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./592/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./592") = 0 mkdir("./593", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6799 ./strace-static-x86_64: Process 6799 attached [pid 6799] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6799] chdir("./593") = 0 [pid 6799] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6799] setpgid(0, 0) = 0 [pid 6799] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6799] write(3, "1000", 4) = 4 [pid 6799] close(3) = 0 [pid 6799] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6799] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6799] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6799] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6799] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6800 attached , parent_tid=[6800], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6800 [pid 6799] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6799] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6800] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6800] memfd_create("syzkaller", 0) = 3 [pid 6800] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6800] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6800] munmap(0x7f927cba2000, 2097152) = 0 [pid 6800] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6800] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6800] close(3) = 0 [pid 6800] mkdir("./file0", 0777) = 0 [pid 6800] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6800] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6800] chdir("./file0") = 0 [ 307.530332][ T6800] loop0: detected capacity change from 0 to 4096 [ 307.546672][ T6800] NILFS (loop0): invalid segment: Checksum error in segment payload [ 307.554730][ T6800] NILFS (loop0): trying rollback from an earlier position [ 307.570816][ T6800] NILFS (loop0): recovery complete [pid 6800] ioctl(4, LOOP_CLR_FD) = 0 [pid 6800] close(4) = 0 [pid 6800] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6799] <... futex resumed>) = 0 [pid 6800] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6799] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6800] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6799] <... futex resumed>) = 0 [pid 6800] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6799] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6800] <... open resumed>) = 4 [pid 6800] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6799] <... futex resumed>) = 0 [pid 6800] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6799] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6800] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6799] <... futex resumed>) = 0 [pid 6800] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6799] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6800] <... open resumed>) = 5 [pid 6800] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6799] <... futex resumed>) = 0 [pid 6800] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6799] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6800] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6799] <... futex resumed>) = 0 [pid 6800] ftruncate(5, 33587195 [pid 6799] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6800] <... ftruncate resumed>) = 0 [pid 6800] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6799] <... futex resumed>) = 0 [pid 6800] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6799] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6800] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6799] <... futex resumed>) = 0 [pid 6800] sendfile(4, 5, NULL, 281474978811909 [ 307.577621][ T6801] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6799] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6799] exit_group(0) = ? [pid 6800] <... sendfile resumed>) = ? [pid 6800] +++ exited with 0 +++ [pid 6799] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6799, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./593", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./593", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./593/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./593/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./593/binderfs") = 0 umount2("./593/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./593/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./593/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./593/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./593/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./593/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./593") = 0 mkdir("./594", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6802 ./strace-static-x86_64: Process 6802 attached [pid 6802] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6802] chdir("./594") = 0 [pid 6802] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6802] setpgid(0, 0) = 0 [pid 6802] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6802] write(3, "1000", 4) = 4 [pid 6802] close(3) = 0 [pid 6802] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6802] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6802] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6802] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6802] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6803], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6803 [pid 6802] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6802] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6803 attached [pid 6803] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6803] memfd_create("syzkaller", 0) = 3 [pid 6803] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6803] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6803] munmap(0x7f927cba2000, 2097152) = 0 [pid 6803] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6803] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6803] close(3) = 0 [pid 6803] mkdir("./file0", 0777) = 0 [ 307.898056][ T6803] loop0: detected capacity change from 0 to 4096 [ 307.914541][ T6803] NILFS (loop0): invalid segment: Checksum error in segment payload [ 307.922651][ T6803] NILFS (loop0): trying rollback from an earlier position [ 307.938266][ T6803] NILFS (loop0): recovery complete [pid 6803] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6803] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6803] chdir("./file0") = 0 [pid 6803] ioctl(4, LOOP_CLR_FD) = 0 [pid 6803] close(4) = 0 [pid 6803] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6803] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6802] <... futex resumed>) = 0 [pid 6802] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6803] <... futex resumed>) = 0 [pid 6803] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6802] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6803] <... open resumed>) = 4 [pid 6803] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6802] <... futex resumed>) = 0 [pid 6802] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6802] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6803] <... futex resumed>) = 1 [pid 6803] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6803] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6802] <... futex resumed>) = 0 [pid 6802] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6802] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6803] <... futex resumed>) = 1 [pid 6803] ftruncate(5, 33587195) = 0 [pid 6803] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6802] <... futex resumed>) = 0 [pid 6803] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6802] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6802] <... futex resumed>) = 0 [pid 6802] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 307.944299][ T6804] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6803] sendfile(4, 5, NULL, 281474978811909 [pid 6802] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6802] exit_group(0 [pid 6803] <... sendfile resumed>) = ? [pid 6802] <... exit_group resumed>) = ? [pid 6803] +++ exited with 0 +++ [pid 6802] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6802, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- umount2("./594", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./594", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./594/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./594/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./594/binderfs") = 0 umount2("./594/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./594/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./594/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./594/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./594/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./594/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./594") = 0 mkdir("./595", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6805 ./strace-static-x86_64: Process 6805 attached [pid 6805] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6805] chdir("./595") = 0 [pid 6805] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6805] setpgid(0, 0) = 0 [pid 6805] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6805] write(3, "1000", 4) = 4 [pid 6805] close(3) = 0 [pid 6805] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6805] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6805] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6805] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6806 attached [pid 6806] set_robust_list(0x7f9284fc29e0, 24 [pid 6805] <... clone resumed>, parent_tid=[6806], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6806 [pid 6805] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6806] <... set_robust_list resumed>) = 0 [pid 6805] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6806] memfd_create("syzkaller", 0) = 3 [pid 6806] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6806] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6806] munmap(0x7f927cba2000, 2097152) = 0 [pid 6806] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6806] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6806] close(3) = 0 [pid 6806] mkdir("./file0", 0777) = 0 [pid 6806] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6806] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6806] chdir("./file0") = 0 [pid 6806] ioctl(4, LOOP_CLR_FD) = 0 [pid 6806] close(4) = 0 [ 308.280963][ T6806] loop0: detected capacity change from 0 to 4096 [ 308.296867][ T6806] NILFS (loop0): invalid segment: Checksum error in segment payload [ 308.305025][ T6806] NILFS (loop0): trying rollback from an earlier position [ 308.321156][ T6806] NILFS (loop0): recovery complete [pid 6806] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6806] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6805] <... futex resumed>) = 0 [pid 6805] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6805] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6806] <... futex resumed>) = 0 [pid 6806] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6806] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6805] <... futex resumed>) = 0 [pid 6805] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6805] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6806] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6806] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6805] <... futex resumed>) = 0 [pid 6805] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6805] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6806] <... futex resumed>) = 1 [pid 6806] ftruncate(5, 33587195) = 0 [pid 6806] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6805] <... futex resumed>) = 0 [pid 6805] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6805] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6806] <... futex resumed>) = 1 [ 308.327108][ T6807] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6806] sendfile(4, 5, NULL, 281474978811909 [pid 6805] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6805] exit_group(0) = ? [pid 6806] <... sendfile resumed>) = ? [pid 6806] +++ exited with 0 +++ [pid 6805] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6805, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./595", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./595", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./595/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./595/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./595/binderfs") = 0 umount2("./595/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./595/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./595/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./595/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./595/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./595/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./595") = 0 mkdir("./596", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6808 ./strace-static-x86_64: Process 6808 attached [pid 6808] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6808] chdir("./596") = 0 [pid 6808] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6808] setpgid(0, 0) = 0 [pid 6808] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6808] write(3, "1000", 4) = 4 [pid 6808] close(3) = 0 [pid 6808] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6808] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6808] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6808] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6808] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6809], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6809 [pid 6808] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6808] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6809 attached [pid 6809] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6809] memfd_create("syzkaller", 0) = 3 [pid 6809] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6809] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6809] munmap(0x7f927cba2000, 2097152) = 0 [pid 6809] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6809] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6809] close(3) = 0 [pid 6809] mkdir("./file0", 0777) = 0 [pid 6809] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6809] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6809] chdir("./file0") = 0 [pid 6809] ioctl(4, LOOP_CLR_FD) = 0 [pid 6809] close(4) = 0 [pid 6809] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 308.668122][ T6809] loop0: detected capacity change from 0 to 4096 [ 308.684159][ T6809] NILFS (loop0): invalid segment: Checksum error in segment payload [ 308.692209][ T6809] NILFS (loop0): trying rollback from an earlier position [ 308.709067][ T6809] NILFS (loop0): recovery complete [pid 6809] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6808] <... futex resumed>) = 0 [pid 6808] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6808] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6809] <... futex resumed>) = 0 [pid 6809] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6809] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6808] <... futex resumed>) = 0 [pid 6808] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6808] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6809] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6809] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6808] <... futex resumed>) = 0 [pid 6808] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6808] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6809] ftruncate(5, 33587195) = 0 [pid 6809] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6808] <... futex resumed>) = 0 [pid 6808] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6808] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6809] <... futex resumed>) = 1 [ 308.715343][ T6810] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6809] sendfile(4, 5, NULL, 281474978811909 [pid 6808] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6808] exit_group(0) = ? [pid 6809] <... sendfile resumed>) = ? [pid 6809] +++ exited with 0 +++ [pid 6808] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6808, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- umount2("./596", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./596", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./596/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./596/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./596/binderfs") = 0 umount2("./596/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./596/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./596/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./596/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./596/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./596/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./596") = 0 mkdir("./597", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6811 ./strace-static-x86_64: Process 6811 attached [pid 6811] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6811] chdir("./597") = 0 [pid 6811] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6811] setpgid(0, 0) = 0 [pid 6811] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6811] write(3, "1000", 4) = 4 [pid 6811] close(3) = 0 [pid 6811] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6811] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6811] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6811] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6811] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6812 attached , parent_tid=[6812], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6812 [pid 6812] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6812] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6811] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6812] <... futex resumed>) = 0 [pid 6811] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6812] memfd_create("syzkaller", 0) = 3 [pid 6812] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6812] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6812] munmap(0x7f927cba2000, 2097152) = 0 [pid 6812] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6812] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6812] close(3) = 0 [pid 6812] mkdir("./file0", 0777) = 0 [pid 6812] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 309.065616][ T6812] loop0: detected capacity change from 0 to 4096 [ 309.080905][ T6812] NILFS (loop0): invalid segment: Checksum error in segment payload [ 309.088976][ T6812] NILFS (loop0): trying rollback from an earlier position [ 309.107548][ T6812] NILFS (loop0): recovery complete [pid 6812] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6812] chdir("./file0") = 0 [pid 6812] ioctl(4, LOOP_CLR_FD) = 0 [pid 6812] close(4) = 0 [pid 6812] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6811] <... futex resumed>) = 0 [pid 6811] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6811] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6812] <... futex resumed>) = 1 [pid 6812] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6812] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6811] <... futex resumed>) = 0 [pid 6811] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6811] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6812] <... futex resumed>) = 1 [pid 6812] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6812] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6811] <... futex resumed>) = 0 [pid 6812] <... futex resumed>) = 1 [pid 6811] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6812] ftruncate(5, 33587195 [pid 6811] <... futex resumed>) = 0 [pid 6812] <... ftruncate resumed>) = 0 [pid 6811] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6812] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6811] <... futex resumed>) = 0 [pid 6812] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6811] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6811] <... futex resumed>) = 0 [pid 6812] sendfile(4, 5, NULL, 281474978811909 [ 309.113850][ T6813] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6811] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6811] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6811] exit_group(0) = ? [pid 6812] <... sendfile resumed>) = ? [pid 6812] +++ exited with 0 +++ [pid 6811] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6811, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./597", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./597", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./597/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./597/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./597/binderfs") = 0 umount2("./597/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./597/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./597/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./597/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./597/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./597/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./597") = 0 mkdir("./598", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6814 ./strace-static-x86_64: Process 6814 attached [pid 6814] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6814] chdir("./598") = 0 [pid 6814] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6814] setpgid(0, 0) = 0 [pid 6814] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6814] write(3, "1000", 4) = 4 [pid 6814] close(3) = 0 [pid 6814] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6814] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6814] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6814] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6815], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6815 [pid 6814] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6814] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6815 attached [pid 6815] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6815] memfd_create("syzkaller", 0) = 3 [pid 6815] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6815] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6815] munmap(0x7f927cba2000, 2097152) = 0 [pid 6815] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6815] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6815] close(3) = 0 [pid 6815] mkdir("./file0", 0777) = 0 [ 309.434140][ T6815] loop0: detected capacity change from 0 to 4096 [ 309.451319][ T6815] NILFS (loop0): invalid segment: Checksum error in segment payload [ 309.459424][ T6815] NILFS (loop0): trying rollback from an earlier position [ 309.474925][ T6815] NILFS (loop0): recovery complete [pid 6815] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6815] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6815] chdir("./file0") = 0 [pid 6815] ioctl(4, LOOP_CLR_FD) = 0 [pid 6815] close(4) = 0 [pid 6815] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6814] <... futex resumed>) = 0 [pid 6815] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6814] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6815] <... futex resumed>) = 0 [pid 6814] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6815] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6815] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6814] <... futex resumed>) = 0 [pid 6815] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6814] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6814] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6815] <... open resumed>) = 5 [pid 6815] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6814] <... futex resumed>) = 0 [pid 6814] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6814] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6815] <... futex resumed>) = 1 [pid 6815] ftruncate(5, 33587195) = 0 [pid 6815] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6814] <... futex resumed>) = 0 [pid 6815] sendfile(4, 5, NULL, 281474978811909 [pid 6814] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 309.480814][ T6816] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6814] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6814] exit_group(0) = ? [pid 6815] <... sendfile resumed>) = ? [pid 6815] +++ exited with 0 +++ [pid 6814] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6814, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./598", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./598", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./598/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./598/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./598/binderfs") = 0 umount2("./598/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./598/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./598/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./598/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./598/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./598/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./598") = 0 mkdir("./599", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6817 ./strace-static-x86_64: Process 6817 attached [pid 6817] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6817] chdir("./599") = 0 [pid 6817] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6817] setpgid(0, 0) = 0 [pid 6817] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6817] write(3, "1000", 4) = 4 [pid 6817] close(3) = 0 [pid 6817] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6817] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6817] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6817] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6817] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6818], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6818 [pid 6817] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6817] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6818 attached [pid 6818] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6818] memfd_create("syzkaller", 0) = 3 [pid 6818] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6818] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6818] munmap(0x7f927cba2000, 2097152) = 0 [pid 6818] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6818] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6818] close(3) = 0 [pid 6818] mkdir("./file0", 0777) = 0 [pid 6818] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 309.806131][ T6818] loop0: detected capacity change from 0 to 4096 [ 309.821804][ T6818] NILFS (loop0): invalid segment: Checksum error in segment payload [ 309.829926][ T6818] NILFS (loop0): trying rollback from an earlier position [ 309.848187][ T6818] NILFS (loop0): recovery complete [pid 6818] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6818] chdir("./file0") = 0 [pid 6818] ioctl(4, LOOP_CLR_FD) = 0 [pid 6818] close(4) = 0 [pid 6818] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6818] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6817] <... futex resumed>) = 0 [pid 6817] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6818] <... futex resumed>) = 0 [pid 6817] <... futex resumed>) = 1 [pid 6818] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6817] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6818] <... open resumed>) = 4 [pid 6818] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6817] <... futex resumed>) = 0 [pid 6818] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6817] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6817] <... futex resumed>) = 0 [pid 6818] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6817] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6818] <... open resumed>) = 5 [pid 6818] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6817] <... futex resumed>) = 0 [pid 6818] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6817] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6817] <... futex resumed>) = 0 [pid 6818] ftruncate(5, 33587195 [pid 6817] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6818] <... ftruncate resumed>) = 0 [pid 6818] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6817] <... futex resumed>) = 0 [pid 6818] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6817] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6817] <... futex resumed>) = 0 [pid 6818] sendfile(4, 5, NULL, 281474978811909 [ 309.855405][ T6819] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6817] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6817] exit_group(0) = ? [pid 6818] <... sendfile resumed>) = ? [pid 6818] +++ exited with 0 +++ [pid 6817] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6817, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./599", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./599", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./599/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./599/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./599/binderfs") = 0 umount2("./599/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./599/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./599/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./599/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./599/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./599/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./599") = 0 mkdir("./600", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6820 ./strace-static-x86_64: Process 6820 attached [pid 6820] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6820] chdir("./600") = 0 [pid 6820] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6820] setpgid(0, 0) = 0 [pid 6820] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6820] write(3, "1000", 4) = 4 [pid 6820] close(3) = 0 [pid 6820] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6820] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6820] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6820] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6820] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6821 attached , parent_tid=[6821], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6821 [pid 6821] set_robust_list(0x7f9284fc29e0, 24 [pid 6820] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6821] <... set_robust_list resumed>) = 0 [pid 6820] <... futex resumed>) = 0 [pid 6820] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6821] memfd_create("syzkaller", 0) = 3 [pid 6821] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6821] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6821] munmap(0x7f927cba2000, 2097152) = 0 [pid 6821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6821] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6821] close(3) = 0 [pid 6821] mkdir("./file0", 0777) = 0 [pid 6821] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6821] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6821] chdir("./file0") = 0 [pid 6821] ioctl(4, LOOP_CLR_FD) = 0 [pid 6821] close(4) = 0 [pid 6821] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 310.185459][ T6821] loop0: detected capacity change from 0 to 4096 [ 310.200395][ T6821] NILFS (loop0): invalid segment: Checksum error in segment payload [ 310.208522][ T6821] NILFS (loop0): trying rollback from an earlier position [ 310.223948][ T6821] NILFS (loop0): recovery complete [pid 6821] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6820] <... futex resumed>) = 0 [pid 6820] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6820] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6821] <... futex resumed>) = 0 [pid 6821] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6821] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6820] <... futex resumed>) = 0 [pid 6820] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6820] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6821] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6821] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6820] <... futex resumed>) = 0 [pid 6820] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6820] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6821] ftruncate(5, 33587195) = 0 [pid 6821] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6821] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6820] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6820] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6821] <... futex resumed>) = 0 [ 310.229868][ T6822] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6821] sendfile(4, 5, NULL, 281474978811909 [pid 6820] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6820] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6820] exit_group(0) = ? [pid 6821] <... sendfile resumed>) = ? [pid 6821] +++ exited with 0 +++ [pid 6820] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6820, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- umount2("./600", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./600", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./600/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./600/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./600/binderfs") = 0 umount2("./600/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./600/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./600/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./600/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./600/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./600/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./600") = 0 mkdir("./601", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6823 ./strace-static-x86_64: Process 6823 attached [pid 6823] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6823] chdir("./601") = 0 [pid 6823] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6823] setpgid(0, 0) = 0 [pid 6823] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6823] write(3, "1000", 4) = 4 [pid 6823] close(3) = 0 [pid 6823] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6823] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6823] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6823] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6823] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6824 attached [pid 6824] set_robust_list(0x7f9284fc29e0, 24 [pid 6823] <... clone resumed>, parent_tid=[6824], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6824 [pid 6824] <... set_robust_list resumed>) = 0 [pid 6824] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6823] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6824] <... futex resumed>) = 0 [pid 6824] memfd_create("syzkaller", 0 [pid 6823] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6824] <... memfd_create resumed>) = 3 [pid 6824] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6824] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6824] munmap(0x7f927cba2000, 2097152) = 0 [pid 6824] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6824] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6824] close(3) = 0 [pid 6824] mkdir("./file0", 0777) = 0 [pid 6824] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6824] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6824] chdir("./file0") = 0 [pid 6824] ioctl(4, LOOP_CLR_FD) = 0 [pid 6824] close(4) = 0 [ 310.562937][ T6824] loop0: detected capacity change from 0 to 4096 [ 310.578222][ T6824] NILFS (loop0): invalid segment: Checksum error in segment payload [ 310.586306][ T6824] NILFS (loop0): trying rollback from an earlier position [ 310.601827][ T6824] NILFS (loop0): recovery complete [pid 6824] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6823] <... futex resumed>) = 0 [pid 6823] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6823] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6824] <... futex resumed>) = 1 [pid 6824] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6824] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6823] <... futex resumed>) = 0 [pid 6823] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6823] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6824] <... futex resumed>) = 1 [pid 6824] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6824] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6823] <... futex resumed>) = 0 [pid 6823] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6823] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6824] <... futex resumed>) = 1 [pid 6824] ftruncate(5, 33587195) = 0 [pid 6824] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6823] <... futex resumed>) = 0 [pid 6823] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6823] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6824] <... futex resumed>) = 1 [ 310.607986][ T6825] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6824] sendfile(4, 5, NULL, 281474978811909 [pid 6823] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6823] exit_group(0) = ? [pid 6824] <... sendfile resumed>) = ? [pid 6824] +++ exited with 0 +++ [pid 6823] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6823, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./601", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./601", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./601/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./601/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./601/binderfs") = 0 umount2("./601/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./601/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./601/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./601/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./601/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./601/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./601") = 0 mkdir("./602", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6826 ./strace-static-x86_64: Process 6826 attached [pid 6826] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6826] chdir("./602") = 0 [pid 6826] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6826] setpgid(0, 0) = 0 [pid 6826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6826] write(3, "1000", 4) = 4 [pid 6826] close(3) = 0 [pid 6826] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6826] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6826] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6826] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6826] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6827], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6827 [pid 6826] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6827 attached ) = 0 [pid 6826] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6827] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6827] memfd_create("syzkaller", 0) = 3 [pid 6827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6827] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6827] munmap(0x7f927cba2000, 2097152) = 0 [pid 6827] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6827] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6827] close(3) = 0 [pid 6827] mkdir("./file0", 0777) = 0 [pid 6827] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6827] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6827] chdir("./file0") = 0 [pid 6827] ioctl(4, LOOP_CLR_FD) = 0 [ 310.917341][ T6827] loop0: detected capacity change from 0 to 4096 [ 310.932935][ T6827] NILFS (loop0): invalid segment: Checksum error in segment payload [ 310.940993][ T6827] NILFS (loop0): trying rollback from an earlier position [ 310.955002][ T6827] NILFS (loop0): recovery complete [pid 6827] close(4) = 0 [pid 6827] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6827] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6826] <... futex resumed>) = 0 [pid 6826] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6826] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6827] <... futex resumed>) = 0 [pid 6827] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6827] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6826] <... futex resumed>) = 0 [pid 6826] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6826] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6827] <... futex resumed>) = 1 [pid 6827] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6827] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6826] <... futex resumed>) = 0 [pid 6826] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6826] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6827] <... futex resumed>) = 1 [pid 6827] ftruncate(5, 33587195) = 0 [pid 6827] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6826] <... futex resumed>) = 0 [pid 6826] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6826] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6827] <... futex resumed>) = 1 [ 310.960928][ T6828] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6827] sendfile(4, 5, NULL, 281474978811909 [pid 6826] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6826] exit_group(0) = ? [pid 6827] <... sendfile resumed>) = ? [pid 6827] +++ exited with 0 +++ [pid 6826] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6826, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./602", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./602", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./602/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./602/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./602/binderfs") = 0 umount2("./602/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./602/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./602/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./602/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./602/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./602/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./602") = 0 mkdir("./603", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6829 ./strace-static-x86_64: Process 6829 attached [pid 6829] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6829] chdir("./603") = 0 [pid 6829] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6829] setpgid(0, 0) = 0 [pid 6829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6829] write(3, "1000", 4) = 4 [pid 6829] close(3) = 0 [pid 6829] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6829] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6829] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6829] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6829] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6830 attached , parent_tid=[6830], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6830 [pid 6829] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6829] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6830] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6830] memfd_create("syzkaller", 0) = 3 [pid 6830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6830] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6830] munmap(0x7f927cba2000, 2097152) = 0 [pid 6830] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6830] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6830] close(3) = 0 [pid 6830] mkdir("./file0", 0777) = 0 [ 311.305843][ T6830] loop0: detected capacity change from 0 to 4096 [ 311.321226][ T6830] NILFS (loop0): invalid segment: Checksum error in segment payload [ 311.329391][ T6830] NILFS (loop0): trying rollback from an earlier position [ 311.344874][ T6830] NILFS (loop0): recovery complete [pid 6830] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6830] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6830] chdir("./file0") = 0 [pid 6830] ioctl(4, LOOP_CLR_FD) = 0 [pid 6830] close(4) = 0 [pid 6830] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6829] <... futex resumed>) = 0 [pid 6829] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6829] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6830] <... futex resumed>) = 1 [pid 6830] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6830] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6829] <... futex resumed>) = 0 [pid 6829] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6829] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6830] <... futex resumed>) = 1 [pid 6830] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6830] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6829] <... futex resumed>) = 0 [pid 6829] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6829] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6830] <... futex resumed>) = 1 [pid 6830] ftruncate(5, 33587195) = 0 [pid 6830] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6829] <... futex resumed>) = 0 [pid 6829] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6829] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6830] <... futex resumed>) = 1 [pid 6830] sendfile(4, 5, NULL, 281474978811909 [pid 6829] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6829] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 311.351012][ T6831] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6829] exit_group(0) = ? [pid 6830] <... sendfile resumed>) = ? [pid 6830] +++ exited with 0 +++ [pid 6829] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6829, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./603", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./603", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./603/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./603/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./603/binderfs") = 0 umount2("./603/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./603/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./603/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./603/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./603/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./603/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./603") = 0 mkdir("./604", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6832 ./strace-static-x86_64: Process 6832 attached [pid 6832] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6832] chdir("./604") = 0 [pid 6832] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6832] setpgid(0, 0) = 0 [pid 6832] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6832] write(3, "1000", 4) = 4 [pid 6832] close(3) = 0 [pid 6832] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6832] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6832] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6832] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6832] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6833 attached , parent_tid=[6833], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6833 [pid 6832] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6833] set_robust_list(0x7f9284fc29e0, 24 [pid 6832] <... futex resumed>) = 0 [pid 6832] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6833] <... set_robust_list resumed>) = 0 [pid 6833] memfd_create("syzkaller", 0) = 3 [pid 6833] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6833] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6833] munmap(0x7f927cba2000, 2097152) = 0 [pid 6833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6833] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6833] close(3) = 0 [pid 6833] mkdir("./file0", 0777) = 0 [pid 6833] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6833] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 311.680108][ T6833] loop0: detected capacity change from 0 to 4096 [ 311.697072][ T6833] NILFS (loop0): invalid segment: Checksum error in segment payload [ 311.705183][ T6833] NILFS (loop0): trying rollback from an earlier position [ 311.720959][ T6833] NILFS (loop0): recovery complete [pid 6833] chdir("./file0") = 0 [pid 6833] ioctl(4, LOOP_CLR_FD) = 0 [pid 6833] close(4) = 0 [pid 6833] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6832] <... futex resumed>) = 0 [pid 6833] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6832] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6832] <... futex resumed>) = 0 [pid 6833] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6832] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6833] <... open resumed>) = 4 [pid 6833] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6832] <... futex resumed>) = 0 [pid 6833] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6832] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6832] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6833] <... open resumed>) = 5 [pid 6833] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6832] <... futex resumed>) = 0 [pid 6833] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6832] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6833] ftruncate(5, 33587195 [pid 6832] <... futex resumed>) = 0 [pid 6833] <... ftruncate resumed>) = 0 [pid 6832] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6833] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6833] <... futex resumed>) = 0 [pid 6832] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6833] sendfile(4, 5, NULL, 281474978811909 [pid 6832] <... futex resumed>) = 0 [ 311.727499][ T6834] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6832] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6832] exit_group(0) = ? [pid 6833] <... sendfile resumed>) = ? [pid 6833] +++ exited with 0 +++ [pid 6832] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6832, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- umount2("./604", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./604", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./604/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./604/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./604/binderfs") = 0 umount2("./604/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./604/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./604/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./604/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./604/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./604/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./604") = 0 mkdir("./605", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6835 ./strace-static-x86_64: Process 6835 attached [pid 6835] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6835] chdir("./605") = 0 [pid 6835] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6835] setpgid(0, 0) = 0 [pid 6835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6835] write(3, "1000", 4) = 4 [pid 6835] close(3) = 0 [pid 6835] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6835] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6835] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6835] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6835] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6836], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6836 [pid 6835] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6835] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6836 attached [pid 6836] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6836] memfd_create("syzkaller", 0) = 3 [pid 6836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6836] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6836] munmap(0x7f927cba2000, 2097152) = 0 [pid 6836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6836] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6836] close(3) = 0 [pid 6836] mkdir("./file0", 0777) = 0 [ 312.058214][ T6836] loop0: detected capacity change from 0 to 4096 [ 312.073888][ T6836] NILFS (loop0): invalid segment: Checksum error in segment payload [ 312.081930][ T6836] NILFS (loop0): trying rollback from an earlier position [ 312.096217][ T6836] NILFS (loop0): recovery complete [pid 6836] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6836] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6836] chdir("./file0") = 0 [pid 6836] ioctl(4, LOOP_CLR_FD) = 0 [pid 6836] close(4) = 0 [pid 6836] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6835] <... futex resumed>) = 0 [pid 6835] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6835] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6836] <... futex resumed>) = 1 [pid 6836] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6836] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6835] <... futex resumed>) = 0 [pid 6835] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6835] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6836] <... futex resumed>) = 1 [pid 6836] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6836] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6835] <... futex resumed>) = 0 [pid 6835] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6835] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6836] <... futex resumed>) = 1 [pid 6836] ftruncate(5, 33587195) = 0 [pid 6836] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6835] <... futex resumed>) = 0 [pid 6835] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6835] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6836] <... futex resumed>) = 1 [ 312.102161][ T6837] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6836] sendfile(4, 5, NULL, 281474978811909 [pid 6835] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6835] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6835] exit_group(0) = ? [pid 6836] <... sendfile resumed>) = ? [pid 6836] +++ exited with 0 +++ [pid 6835] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6835, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./605", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./605", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./605/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./605/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./605/binderfs") = 0 umount2("./605/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./605/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./605/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./605/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./605/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./605/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./605") = 0 mkdir("./606", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6838 ./strace-static-x86_64: Process 6838 attached [pid 6838] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6838] chdir("./606") = 0 [pid 6838] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6838] setpgid(0, 0) = 0 [pid 6838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6838] write(3, "1000", 4) = 4 [pid 6838] close(3) = 0 [pid 6838] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6838] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6838] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6838] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6838] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6839], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6839 [pid 6838] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6838] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6839 attached [pid 6839] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6839] memfd_create("syzkaller", 0) = 3 [pid 6839] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6839] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6839] munmap(0x7f927cba2000, 2097152) = 0 [pid 6839] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6839] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6839] close(3) = 0 [pid 6839] mkdir("./file0", 0777) = 0 [pid 6839] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6839] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6839] chdir("./file0") = 0 [pid 6839] ioctl(4, LOOP_CLR_FD) = 0 [pid 6839] close(4) = 0 [ 312.437820][ T6839] loop0: detected capacity change from 0 to 4096 [ 312.452899][ T6839] NILFS (loop0): invalid segment: Checksum error in segment payload [ 312.460964][ T6839] NILFS (loop0): trying rollback from an earlier position [ 312.476557][ T6839] NILFS (loop0): recovery complete [pid 6839] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6838] <... futex resumed>) = 0 [pid 6838] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6838] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6839] <... futex resumed>) = 1 [pid 6839] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6839] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6838] <... futex resumed>) = 0 [pid 6838] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6838] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6839] <... futex resumed>) = 1 [pid 6839] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6839] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6838] <... futex resumed>) = 0 [pid 6838] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6838] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6839] <... futex resumed>) = 1 [pid 6839] ftruncate(5, 33587195) = 0 [pid 6839] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6838] <... futex resumed>) = 0 [pid 6838] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6838] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6839] <... futex resumed>) = 1 [ 312.482362][ T6840] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6839] sendfile(4, 5, NULL, 281474978811909 [pid 6838] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6838] exit_group(0) = ? [pid 6839] <... sendfile resumed>) = ? [pid 6839] +++ exited with 0 +++ [pid 6838] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6838, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./606", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./606", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./606/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./606/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./606/binderfs") = 0 umount2("./606/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./606/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./606/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./606/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./606/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./606/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./606") = 0 mkdir("./607", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6841 ./strace-static-x86_64: Process 6841 attached [pid 6841] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6841] chdir("./607") = 0 [pid 6841] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6841] setpgid(0, 0) = 0 [pid 6841] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6841] write(3, "1000", 4) = 4 [pid 6841] close(3) = 0 [pid 6841] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6841] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6841] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6841] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6841] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6842 attached [pid 6842] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6842] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6841] <... clone resumed>, parent_tid=[6842], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6842 [pid 6841] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6841] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6842] <... futex resumed>) = 0 [pid 6842] memfd_create("syzkaller", 0) = 3 [pid 6842] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6842] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6842] munmap(0x7f927cba2000, 2097152) = 0 [pid 6842] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6842] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6842] close(3) = 0 [pid 6842] mkdir("./file0", 0777) = 0 [pid 6842] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6842] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6842] chdir("./file0") = 0 [pid 6842] ioctl(4, LOOP_CLR_FD) = 0 [pid 6842] close(4) = 0 [pid 6842] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 312.820330][ T6842] loop0: detected capacity change from 0 to 4096 [ 312.836438][ T6842] NILFS (loop0): invalid segment: Checksum error in segment payload [ 312.844522][ T6842] NILFS (loop0): trying rollback from an earlier position [ 312.860187][ T6842] NILFS (loop0): recovery complete [pid 6842] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6841] <... futex resumed>) = 0 [pid 6841] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6841] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6842] <... futex resumed>) = 0 [pid 6842] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6842] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6841] <... futex resumed>) = 0 [pid 6842] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6841] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6841] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6842] <... open resumed>) = 5 [pid 6842] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6841] <... futex resumed>) = 0 [pid 6842] ftruncate(5, 33587195 [pid 6841] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6842] <... ftruncate resumed>) = 0 [pid 6841] <... futex resumed>) = 0 [pid 6842] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6841] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6842] <... futex resumed>) = 0 [pid 6841] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6842] sendfile(4, 5, NULL, 281474978811909 [pid 6841] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 312.872538][ T6843] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6841] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6841] exit_group(0 [pid 6842] <... sendfile resumed>) = ? [pid 6841] <... exit_group resumed>) = ? [pid 6842] +++ exited with 0 +++ [pid 6841] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6841, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./607", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./607", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./607/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./607/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./607/binderfs") = 0 umount2("./607/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./607/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./607/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./607/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./607/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./607/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./607") = 0 mkdir("./608", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6844 ./strace-static-x86_64: Process 6844 attached [pid 6844] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6844] chdir("./608") = 0 [pid 6844] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6844] setpgid(0, 0) = 0 [pid 6844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6844] write(3, "1000", 4) = 4 [pid 6844] close(3) = 0 [pid 6844] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6844] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6844] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6844] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6845], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6845 [pid 6844] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6844] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6845 attached [pid 6845] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6845] memfd_create("syzkaller", 0) = 3 [pid 6845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6845] munmap(0x7f927cba2000, 2097152) = 0 [pid 6845] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6845] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6845] close(3) = 0 [pid 6845] mkdir("./file0", 0777) = 0 [pid 6845] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6845] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6845] chdir("./file0") = 0 [ 313.197402][ T6845] loop0: detected capacity change from 0 to 4096 [ 313.215118][ T6845] NILFS (loop0): invalid segment: Checksum error in segment payload [ 313.223241][ T6845] NILFS (loop0): trying rollback from an earlier position [ 313.238286][ T6845] NILFS (loop0): recovery complete [pid 6845] ioctl(4, LOOP_CLR_FD) = 0 [pid 6845] close(4) = 0 [pid 6845] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6844] <... futex resumed>) = 0 [pid 6845] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6844] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6844] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6845] <... open resumed>) = 4 [pid 6845] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6844] <... futex resumed>) = 0 [pid 6845] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6844] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6845] <... open resumed>) = 5 [pid 6844] <... futex resumed>) = 0 [pid 6845] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6844] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6845] <... futex resumed>) = 0 [pid 6844] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6845] ftruncate(5, 33587195 [pid 6844] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6845] <... ftruncate resumed>) = 0 [pid 6844] <... futex resumed>) = 0 [pid 6845] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6844] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6845] <... futex resumed>) = 0 [pid 6844] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6845] sendfile(4, 5, NULL, 281474978811909 [pid 6844] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 313.245196][ T6846] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6844] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6844] exit_group(0) = ? [pid 6845] <... sendfile resumed>) = ? [pid 6845] +++ exited with 0 +++ [pid 6844] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6844, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./608", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./608", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./608/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./608/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./608/binderfs") = 0 umount2("./608/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./608/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./608/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./608/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./608/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./608/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./608") = 0 mkdir("./609", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6847 ./strace-static-x86_64: Process 6847 attached [pid 6847] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6847] chdir("./609") = 0 [pid 6847] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6847] setpgid(0, 0) = 0 [pid 6847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6847] write(3, "1000", 4) = 4 [pid 6847] close(3) = 0 [pid 6847] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6847] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6847] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6847] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6847] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6848], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6848 [pid 6847] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6847] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6848 attached [pid 6848] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6848] memfd_create("syzkaller", 0) = 3 [pid 6848] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6848] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6848] munmap(0x7f927cba2000, 2097152) = 0 [pid 6848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6848] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6848] close(3) = 0 [pid 6848] mkdir("./file0", 0777) = 0 [pid 6848] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 313.575945][ T6848] loop0: detected capacity change from 0 to 4096 [ 313.593918][ T6848] NILFS (loop0): invalid segment: Checksum error in segment payload [ 313.601956][ T6848] NILFS (loop0): trying rollback from an earlier position [ 313.617729][ T6848] NILFS (loop0): recovery complete [pid 6848] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6848] chdir("./file0") = 0 [pid 6848] ioctl(4, LOOP_CLR_FD) = 0 [pid 6848] close(4) = 0 [pid 6848] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6848] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6847] <... futex resumed>) = 0 [pid 6847] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6847] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6848] <... futex resumed>) = 0 [pid 6848] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6848] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6847] <... futex resumed>) = 0 [pid 6848] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6847] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6848] <... open resumed>) = 5 [pid 6847] <... futex resumed>) = 0 [pid 6847] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6848] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6847] <... futex resumed>) = 0 [pid 6848] ftruncate(5, 33587195 [pid 6847] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6848] <... ftruncate resumed>) = 0 [pid 6847] <... futex resumed>) = 0 [pid 6848] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6847] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6848] <... futex resumed>) = 0 [pid 6847] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6848] sendfile(4, 5, NULL, 281474978811909 [pid 6847] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 313.625247][ T6849] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6847] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6847] exit_group(0) = ? [pid 6848] <... sendfile resumed>) = ? [pid 6848] +++ exited with 0 +++ [pid 6847] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6847, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./609", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./609", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./609/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./609/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./609/binderfs") = 0 umount2("./609/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./609/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./609/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./609/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./609/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./609/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./609") = 0 mkdir("./610", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6850 ./strace-static-x86_64: Process 6850 attached [pid 6850] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6850] chdir("./610") = 0 [pid 6850] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6850] setpgid(0, 0) = 0 [pid 6850] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6850] write(3, "1000", 4) = 4 [pid 6850] close(3) = 0 [pid 6850] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6850] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6850] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6850] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6850] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6851], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6851 [pid 6850] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6850] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6851 attached [pid 6851] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6851] memfd_create("syzkaller", 0) = 3 [pid 6851] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6851] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6851] munmap(0x7f927cba2000, 2097152) = 0 [pid 6851] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6851] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6851] close(3) = 0 [pid 6851] mkdir("./file0", 0777) = 0 [ 313.974509][ T6851] loop0: detected capacity change from 0 to 4096 [ 313.989733][ T6851] NILFS (loop0): invalid segment: Checksum error in segment payload [ 313.997857][ T6851] NILFS (loop0): trying rollback from an earlier position [ 314.013699][ T6851] NILFS (loop0): recovery complete [pid 6851] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6851] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6851] chdir("./file0") = 0 [pid 6851] ioctl(4, LOOP_CLR_FD) = 0 [pid 6851] close(4) = 0 [pid 6851] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6850] <... futex resumed>) = 0 [pid 6850] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6850] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6851] <... futex resumed>) = 1 [pid 6851] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6851] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6850] <... futex resumed>) = 0 [pid 6850] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6850] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6851] <... futex resumed>) = 1 [pid 6851] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6851] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6850] <... futex resumed>) = 0 [pid 6850] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6851] <... futex resumed>) = 1 [pid 6850] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6851] ftruncate(5, 33587195) = 0 [pid 6851] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6850] <... futex resumed>) = 0 [pid 6850] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6850] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 314.019836][ T6852] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6851] sendfile(4, 5, NULL, 281474978811909 [pid 6850] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6850] exit_group(0) = ? [pid 6851] <... sendfile resumed>) = ? [pid 6851] +++ exited with 0 +++ [pid 6850] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6850, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./610", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./610", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./610/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./610/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./610/binderfs") = 0 umount2("./610/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./610/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./610/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./610/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./610/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./610/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./610") = 0 mkdir("./611", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6853 ./strace-static-x86_64: Process 6853 attached [pid 6853] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6853] chdir("./611") = 0 [pid 6853] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6853] setpgid(0, 0) = 0 [pid 6853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6853] write(3, "1000", 4) = 4 [pid 6853] close(3) = 0 [pid 6853] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6853] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6853] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6853] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6853] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6854], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6854 [pid 6853] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6854 attached [pid 6853] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6854] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6854] memfd_create("syzkaller", 0) = 3 [pid 6854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6854] munmap(0x7f927cba2000, 2097152) = 0 [pid 6854] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6854] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6854] close(3) = 0 [pid 6854] mkdir("./file0", 0777) = 0 [pid 6854] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6854] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6854] chdir("./file0") = 0 [ 314.349019][ T6854] loop0: detected capacity change from 0 to 4096 [ 314.366026][ T6854] NILFS (loop0): invalid segment: Checksum error in segment payload [ 314.374116][ T6854] NILFS (loop0): trying rollback from an earlier position [ 314.389766][ T6854] NILFS (loop0): recovery complete [pid 6854] ioctl(4, LOOP_CLR_FD) = 0 [pid 6854] close(4) = 0 [pid 6854] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6853] <... futex resumed>) = 0 [pid 6853] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6853] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6854] <... futex resumed>) = 1 [pid 6854] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6854] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6853] <... futex resumed>) = 0 [pid 6853] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6853] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6854] <... futex resumed>) = 1 [pid 6854] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6854] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6853] <... futex resumed>) = 0 [pid 6853] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6853] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6854] <... futex resumed>) = 1 [pid 6854] ftruncate(5, 33587195) = 0 [pid 6854] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6853] <... futex resumed>) = 0 [pid 6853] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6853] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6854] <... futex resumed>) = 1 [ 314.395783][ T6855] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6854] sendfile(4, 5, NULL, 281474978811909 [pid 6853] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6853] exit_group(0) = ? [pid 6854] <... sendfile resumed>) = ? [pid 6854] +++ exited with 0 +++ [pid 6853] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6853, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- umount2("./611", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./611", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./611/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./611/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./611/binderfs") = 0 umount2("./611/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./611/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./611/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./611/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./611/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./611/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./611") = 0 mkdir("./612", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6856 ./strace-static-x86_64: Process 6856 attached [pid 6856] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6856] chdir("./612") = 0 [pid 6856] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6856] setpgid(0, 0) = 0 [pid 6856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6856] write(3, "1000", 4) = 4 [pid 6856] close(3) = 0 [pid 6856] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6856] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6856] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6856] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6857], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6857 ./strace-static-x86_64: Process 6857 attached [pid 6856] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6856] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6857] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6857] memfd_create("syzkaller", 0) = 3 [pid 6857] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6857] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6857] munmap(0x7f927cba2000, 2097152) = 0 [pid 6857] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6857] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6857] close(3) = 0 [pid 6857] mkdir("./file0", 0777) = 0 [ 314.731448][ T6857] loop0: detected capacity change from 0 to 4096 [ 314.748625][ T6857] NILFS (loop0): invalid segment: Checksum error in segment payload [ 314.756725][ T6857] NILFS (loop0): trying rollback from an earlier position [ 314.771560][ T6857] NILFS (loop0): recovery complete [pid 6857] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6857] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6857] chdir("./file0") = 0 [pid 6857] ioctl(4, LOOP_CLR_FD) = 0 [pid 6857] close(4) = 0 [pid 6857] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6856] <... futex resumed>) = 0 [pid 6856] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6856] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6857] <... futex resumed>) = 1 [pid 6857] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6857] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6856] <... futex resumed>) = 0 [pid 6856] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6856] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6857] <... futex resumed>) = 1 [pid 6857] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6857] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6856] <... futex resumed>) = 0 [pid 6856] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6856] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6857] <... futex resumed>) = 1 [pid 6857] ftruncate(5, 33587195) = 0 [pid 6857] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6856] <... futex resumed>) = 0 [pid 6856] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6856] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6857] <... futex resumed>) = 1 [ 314.777503][ T6858] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6857] sendfile(4, 5, NULL, 281474978811909 [pid 6856] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6856] exit_group(0) = ? [pid 6857] <... sendfile resumed>) = ? [pid 6857] +++ exited with 0 +++ [pid 6856] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6856, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./612", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./612", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./612/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./612/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./612/binderfs") = 0 umount2("./612/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./612/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./612/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./612/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./612/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./612/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./612") = 0 mkdir("./613", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6859 ./strace-static-x86_64: Process 6859 attached [pid 6859] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6859] chdir("./613") = 0 [pid 6859] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6859] setpgid(0, 0) = 0 [pid 6859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6859] write(3, "1000", 4) = 4 [pid 6859] close(3) = 0 [pid 6859] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6859] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6859] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6859] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6859] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6860], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6860 [pid 6859] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6859] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6860 attached [pid 6860] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6860] memfd_create("syzkaller", 0) = 3 [pid 6860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6860] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6860] munmap(0x7f927cba2000, 2097152) = 0 [pid 6860] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6860] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6860] close(3) = 0 [pid 6860] mkdir("./file0", 0777) = 0 [pid 6860] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 315.081048][ T6860] loop0: detected capacity change from 0 to 4096 [ 315.097981][ T6860] NILFS (loop0): invalid segment: Checksum error in segment payload [ 315.106062][ T6860] NILFS (loop0): trying rollback from an earlier position [ 315.121575][ T6860] NILFS (loop0): recovery complete [pid 6860] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6860] chdir("./file0") = 0 [pid 6860] ioctl(4, LOOP_CLR_FD) = 0 [pid 6860] close(4) = 0 [pid 6860] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6860] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6859] <... futex resumed>) = 0 [pid 6859] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6859] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6860] <... futex resumed>) = 0 [pid 6860] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6860] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6859] <... futex resumed>) = 0 [pid 6859] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6859] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6860] <... futex resumed>) = 1 [pid 6860] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6860] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6859] <... futex resumed>) = 0 [pid 6859] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6860] <... futex resumed>) = 1 [pid 6859] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6860] ftruncate(5, 33587195) = 0 [pid 6860] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6859] <... futex resumed>) = 0 [pid 6859] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6860] sendfile(4, 5, NULL, 281474978811909 [pid 6859] <... futex resumed>) = 0 [ 315.127608][ T6861] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6859] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6859] exit_group(0) = ? [pid 6860] <... sendfile resumed>) = ? [pid 6860] +++ exited with 0 +++ [pid 6859] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6859, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./613", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./613", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./613/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./613/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./613/binderfs") = 0 umount2("./613/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./613/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./613/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./613/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./613/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./613/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./613") = 0 mkdir("./614", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6862 ./strace-static-x86_64: Process 6862 attached [pid 6862] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6862] chdir("./614") = 0 [pid 6862] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6862] setpgid(0, 0) = 0 [pid 6862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6862] write(3, "1000", 4) = 4 [pid 6862] close(3) = 0 [pid 6862] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6862] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6862] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6862] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6862] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6863], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6863 ./strace-static-x86_64: Process 6863 attached [pid 6862] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6863] set_robust_list(0x7f9284fc29e0, 24 [pid 6862] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6863] <... set_robust_list resumed>) = 0 [pid 6863] memfd_create("syzkaller", 0) = 3 [pid 6863] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6863] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6863] munmap(0x7f927cba2000, 2097152) = 0 [pid 6863] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6863] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6863] close(3) = 0 [pid 6863] mkdir("./file0", 0777) = 0 [ 315.473028][ T6863] loop0: detected capacity change from 0 to 4096 [ 315.489430][ T6863] NILFS (loop0): invalid segment: Checksum error in segment payload [ 315.497538][ T6863] NILFS (loop0): trying rollback from an earlier position [ 315.512957][ T6863] NILFS (loop0): recovery complete [pid 6863] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6863] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6863] chdir("./file0") = 0 [pid 6863] ioctl(4, LOOP_CLR_FD) = 0 [pid 6863] close(4) = 0 [pid 6863] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6862] <... futex resumed>) = 0 [pid 6862] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6862] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6863] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6863] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6862] <... futex resumed>) = 0 [pid 6862] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6862] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6863] <... futex resumed>) = 1 [pid 6863] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6863] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6862] <... futex resumed>) = 0 [pid 6862] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6862] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6863] <... futex resumed>) = 1 [pid 6863] ftruncate(5, 33587195) = 0 [pid 6863] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6862] <... futex resumed>) = 0 [pid 6862] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6862] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6863] <... futex resumed>) = 1 [ 315.518891][ T6864] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6863] sendfile(4, 5, NULL, 281474978811909 [pid 6862] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6862] exit_group(0) = ? [pid 6863] <... sendfile resumed>) = ? [pid 6863] +++ exited with 0 +++ [pid 6862] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6862, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./614", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./614", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./614/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./614/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./614/binderfs") = 0 umount2("./614/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./614/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./614/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./614/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./614/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./614/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./614") = 0 mkdir("./615", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6865 ./strace-static-x86_64: Process 6865 attached [pid 6865] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6865] chdir("./615") = 0 [pid 6865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6865] setpgid(0, 0) = 0 [pid 6865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6865] write(3, "1000", 4) = 4 [pid 6865] close(3) = 0 [pid 6865] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6865] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6865] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6865] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6865] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6866], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6866 [pid 6865] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6865] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6866 attached [pid 6866] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6866] memfd_create("syzkaller", 0) = 3 [pid 6866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6866] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6866] munmap(0x7f927cba2000, 2097152) = 0 [pid 6866] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6866] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6866] close(3) = 0 [pid 6866] mkdir("./file0", 0777) = 0 [pid 6866] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6866] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 315.826482][ T6866] loop0: detected capacity change from 0 to 4096 [ 315.843321][ T6866] NILFS (loop0): invalid segment: Checksum error in segment payload [ 315.851472][ T6866] NILFS (loop0): trying rollback from an earlier position [ 315.867769][ T6866] NILFS (loop0): recovery complete [pid 6866] chdir("./file0") = 0 [pid 6866] ioctl(4, LOOP_CLR_FD) = 0 [pid 6866] close(4) = 0 [pid 6866] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6865] <... futex resumed>) = 0 [pid 6865] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6865] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6866] <... futex resumed>) = 1 [pid 6866] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6866] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6865] <... futex resumed>) = 0 [pid 6865] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6865] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6866] <... futex resumed>) = 1 [pid 6866] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6866] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6865] <... futex resumed>) = 0 [pid 6865] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6865] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6866] <... futex resumed>) = 1 [pid 6866] ftruncate(5, 33587195) = 0 [pid 6866] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6865] <... futex resumed>) = 0 [pid 6865] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6865] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6866] <... futex resumed>) = 1 [ 315.873904][ T6867] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6866] sendfile(4, 5, NULL, 281474978811909 [pid 6865] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6865] exit_group(0) = ? [pid 6866] <... sendfile resumed>) = ? [pid 6866] +++ exited with 0 +++ [pid 6865] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6865, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- umount2("./615", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./615", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./615/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./615/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./615/binderfs") = 0 umount2("./615/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./615/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./615/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./615/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./615/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./615/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./615") = 0 mkdir("./616", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6868 ./strace-static-x86_64: Process 6868 attached [pid 6868] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6868] chdir("./616") = 0 [pid 6868] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6868] setpgid(0, 0) = 0 [pid 6868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6868] write(3, "1000", 4) = 4 [pid 6868] close(3) = 0 [pid 6868] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6868] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6868] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6868] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6868] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6869], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6869 [pid 6868] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6868] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6869 attached [pid 6869] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6869] memfd_create("syzkaller", 0) = 3 [pid 6869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6869] munmap(0x7f927cba2000, 2097152) = 0 [pid 6869] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6869] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6869] close(3) = 0 [pid 6869] mkdir("./file0", 0777) = 0 [ 316.190588][ T6869] loop0: detected capacity change from 0 to 4096 [ 316.205130][ T6869] NILFS (loop0): invalid segment: Checksum error in segment payload [ 316.213150][ T6869] NILFS (loop0): trying rollback from an earlier position [ 316.228167][ T6869] NILFS (loop0): recovery complete [pid 6869] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6869] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6869] chdir("./file0") = 0 [pid 6869] ioctl(4, LOOP_CLR_FD) = 0 [pid 6869] close(4) = 0 [pid 6869] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6869] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6868] <... futex resumed>) = 0 [pid 6868] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6868] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6869] <... futex resumed>) = 0 [pid 6869] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6869] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6868] <... futex resumed>) = 0 [pid 6868] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6868] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6869] <... futex resumed>) = 1 [pid 6869] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6869] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6868] <... futex resumed>) = 0 [pid 6868] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6868] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6869] ftruncate(5, 33587195) = 0 [pid 6869] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6868] <... futex resumed>) = 0 [pid 6868] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6868] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 316.234396][ T6870] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6869] sendfile(4, 5, NULL, 281474978811909 [pid 6868] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6868] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6868] exit_group(0) = ? [pid 6869] <... sendfile resumed>) = ? [pid 6869] +++ exited with 0 +++ [pid 6868] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6868, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./616", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./616", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./616/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./616/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./616/binderfs") = 0 umount2("./616/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./616/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./616/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./616/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./616/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./616/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./616") = 0 mkdir("./617", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6871 ./strace-static-x86_64: Process 6871 attached [pid 6871] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6871] chdir("./617") = 0 [pid 6871] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6871] setpgid(0, 0) = 0 [pid 6871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6871] write(3, "1000", 4) = 4 [pid 6871] close(3) = 0 [pid 6871] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6871] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6871] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6871] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6871] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6872], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6872 ./strace-static-x86_64: Process 6872 attached [pid 6871] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6872] set_robust_list(0x7f9284fc29e0, 24 [pid 6871] <... futex resumed>) = 0 [pid 6871] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6872] <... set_robust_list resumed>) = 0 [pid 6872] memfd_create("syzkaller", 0) = 3 [pid 6872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6872] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6872] munmap(0x7f927cba2000, 2097152) = 0 [pid 6872] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6872] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6872] close(3) = 0 [pid 6872] mkdir("./file0", 0777) = 0 [ 316.574833][ T6872] loop0: detected capacity change from 0 to 4096 [ 316.589869][ T6872] NILFS (loop0): invalid segment: Checksum error in segment payload [ 316.597969][ T6872] NILFS (loop0): trying rollback from an earlier position [ 316.613701][ T6872] NILFS (loop0): recovery complete [pid 6872] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6872] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6872] chdir("./file0") = 0 [pid 6872] ioctl(4, LOOP_CLR_FD) = 0 [pid 6872] close(4) = 0 [pid 6872] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6871] <... futex resumed>) = 0 [pid 6872] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6871] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6871] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6872] <... open resumed>) = 4 [pid 6872] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6871] <... futex resumed>) = 0 [pid 6872] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6871] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6872] <... open resumed>) = 5 [pid 6871] <... futex resumed>) = 0 [pid 6872] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6871] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6872] <... futex resumed>) = 0 [pid 6871] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6872] ftruncate(5, 33587195 [pid 6871] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6872] <... ftruncate resumed>) = 0 [pid 6871] <... futex resumed>) = 0 [pid 6872] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6871] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6872] <... futex resumed>) = 0 [pid 6871] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6872] sendfile(4, 5, NULL, 281474978811909 [pid 6871] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 316.619694][ T6873] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6871] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6871] exit_group(0 [pid 6872] <... sendfile resumed>) = ? [pid 6871] <... exit_group resumed>) = ? [pid 6872] +++ exited with 0 +++ [pid 6871] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6871, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./617", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./617", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./617/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./617/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./617/binderfs") = 0 umount2("./617/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./617/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./617/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./617/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./617/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./617/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./617") = 0 mkdir("./618", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6874 ./strace-static-x86_64: Process 6874 attached [pid 6874] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6874] chdir("./618") = 0 [pid 6874] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6874] setpgid(0, 0) = 0 [pid 6874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6874] write(3, "1000", 4) = 4 [pid 6874] close(3) = 0 [pid 6874] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6874] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6874] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6874] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6875 attached , parent_tid=[6875], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6875 [pid 6874] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6874] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6875] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6875] memfd_create("syzkaller", 0) = 3 [pid 6875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6875] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6875] munmap(0x7f927cba2000, 2097152) = 0 [pid 6875] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6875] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6875] close(3) = 0 [pid 6875] mkdir("./file0", 0777) = 0 [pid 6875] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 316.953762][ T6875] loop0: detected capacity change from 0 to 4096 [ 316.971318][ T6875] NILFS (loop0): invalid segment: Checksum error in segment payload [ 316.979484][ T6875] NILFS (loop0): trying rollback from an earlier position [ 316.995256][ T6875] NILFS (loop0): recovery complete [pid 6875] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6875] chdir("./file0") = 0 [pid 6875] ioctl(4, LOOP_CLR_FD) = 0 [pid 6875] close(4) = 0 [pid 6875] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6874] <... futex resumed>) = 0 [pid 6875] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6874] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6874] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6875] <... open resumed>) = 4 [pid 6875] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6874] <... futex resumed>) = 0 [pid 6874] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6874] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6875] <... futex resumed>) = 1 [pid 6875] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6875] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6874] <... futex resumed>) = 0 [pid 6874] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6875] ftruncate(5, 33587195 [pid 6874] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6875] <... ftruncate resumed>) = 0 [pid 6875] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6874] <... futex resumed>) = 0 [pid 6875] sendfile(4, 5, NULL, 281474978811909 [pid 6874] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 317.001314][ T6876] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6874] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6874] exit_group(0) = ? [pid 6875] <... sendfile resumed>) = ? [pid 6875] +++ exited with 0 +++ [pid 6874] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6874, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./618", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./618", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./618/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./618/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./618/binderfs") = 0 umount2("./618/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./618/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./618/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./618/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./618/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./618/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./618") = 0 mkdir("./619", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6877 ./strace-static-x86_64: Process 6877 attached [pid 6877] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6877] chdir("./619") = 0 [pid 6877] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6877] setpgid(0, 0) = 0 [pid 6877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6877] write(3, "1000", 4) = 4 [pid 6877] close(3) = 0 [pid 6877] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6877] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6877] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6877] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6877] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6878 attached [pid 6878] set_robust_list(0x7f9284fc29e0, 24 [pid 6877] <... clone resumed>, parent_tid=[6878], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6878 [pid 6877] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6877] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6878] <... set_robust_list resumed>) = 0 [pid 6878] memfd_create("syzkaller", 0) = 3 [pid 6878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6878] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6878] munmap(0x7f927cba2000, 2097152) = 0 [pid 6878] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6878] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6878] close(3) = 0 [pid 6878] mkdir("./file0", 0777) = 0 [ 317.339384][ T6878] loop0: detected capacity change from 0 to 4096 [ 317.354547][ T6878] NILFS (loop0): invalid segment: Checksum error in segment payload [ 317.362587][ T6878] NILFS (loop0): trying rollback from an earlier position [ 317.378236][ T6878] NILFS (loop0): recovery complete [pid 6878] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6878] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6878] chdir("./file0") = 0 [pid 6878] ioctl(4, LOOP_CLR_FD) = 0 [pid 6878] close(4) = 0 [pid 6878] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6878] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6877] <... futex resumed>) = 0 [pid 6877] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6878] <... futex resumed>) = 0 [pid 6878] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6877] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6878] <... open resumed>) = 4 [pid 6878] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6878] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6877] <... futex resumed>) = 0 [pid 6877] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6878] <... futex resumed>) = 0 [pid 6877] <... futex resumed>) = 1 [pid 6878] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6877] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6878] <... open resumed>) = 5 [pid 6878] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6877] <... futex resumed>) = 0 [pid 6877] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6877] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6878] <... futex resumed>) = 1 [pid 6878] ftruncate(5, 33587195) = 0 [pid 6878] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6877] <... futex resumed>) = 0 [pid 6877] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6877] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6878] <... futex resumed>) = 1 [ 317.384523][ T6879] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6878] sendfile(4, 5, NULL, 281474978811909 [pid 6877] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6877] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6877] exit_group(0) = ? [pid 6878] <... sendfile resumed>) = ? [pid 6878] +++ exited with 0 +++ [pid 6877] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6877, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./619", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./619", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./619/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./619/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./619/binderfs") = 0 umount2("./619/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./619/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./619/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./619/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./619/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./619/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./619") = 0 mkdir("./620", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6880 ./strace-static-x86_64: Process 6880 attached [pid 6880] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6880] chdir("./620") = 0 [pid 6880] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6880] setpgid(0, 0) = 0 [pid 6880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6880] write(3, "1000", 4) = 4 [pid 6880] close(3) = 0 [pid 6880] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6880] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6880] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6880] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6880] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6881 attached , parent_tid=[6881], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6881 [pid 6880] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6880] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6881] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6881] memfd_create("syzkaller", 0) = 3 [pid 6881] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6881] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6881] munmap(0x7f927cba2000, 2097152) = 0 [pid 6881] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6881] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6881] close(3) = 0 [pid 6881] mkdir("./file0", 0777) = 0 [ 317.712324][ T6881] loop0: detected capacity change from 0 to 4096 [ 317.728808][ T6881] NILFS (loop0): invalid segment: Checksum error in segment payload [ 317.737029][ T6881] NILFS (loop0): trying rollback from an earlier position [ 317.752559][ T6881] NILFS (loop0): recovery complete [pid 6881] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6881] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6881] chdir("./file0") = 0 [pid 6881] ioctl(4, LOOP_CLR_FD) = 0 [pid 6881] close(4) = 0 [pid 6881] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6880] <... futex resumed>) = 0 [pid 6880] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6880] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6881] <... futex resumed>) = 1 [pid 6881] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6881] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6880] <... futex resumed>) = 0 [pid 6880] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6880] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6881] <... futex resumed>) = 1 [pid 6881] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6881] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6880] <... futex resumed>) = 0 [pid 6880] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6880] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6881] <... futex resumed>) = 1 [pid 6881] ftruncate(5, 33587195) = 0 [pid 6881] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6880] <... futex resumed>) = 0 [pid 6880] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6880] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6881] <... futex resumed>) = 1 [pid 6881] sendfile(4, 5, NULL, 281474978811909 [pid 6880] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 317.758687][ T6882] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6880] exit_group(0 [pid 6881] <... sendfile resumed>) = ? [pid 6880] <... exit_group resumed>) = ? [pid 6881] +++ exited with 0 +++ [pid 6880] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6880, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- umount2("./620", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./620", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./620/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./620/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./620/binderfs") = 0 umount2("./620/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./620/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./620/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./620/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./620/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./620/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./620") = 0 mkdir("./621", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6883 ./strace-static-x86_64: Process 6883 attached [pid 6883] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6883] chdir("./621") = 0 [pid 6883] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6883] setpgid(0, 0) = 0 [pid 6883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6883] write(3, "1000", 4) = 4 [pid 6883] close(3) = 0 [pid 6883] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6883] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6883] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6883] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6883] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6884 attached , parent_tid=[6884], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6884 [pid 6883] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6883] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6884] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6884] memfd_create("syzkaller", 0) = 3 [pid 6884] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6884] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6884] munmap(0x7f927cba2000, 2097152) = 0 [pid 6884] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6884] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6884] close(3) = 0 [pid 6884] mkdir("./file0", 0777) = 0 [pid 6884] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6884] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 318.086364][ T6884] loop0: detected capacity change from 0 to 4096 [ 318.101711][ T6884] NILFS (loop0): invalid segment: Checksum error in segment payload [ 318.109818][ T6884] NILFS (loop0): trying rollback from an earlier position [ 318.127056][ T6884] NILFS (loop0): recovery complete [pid 6884] chdir("./file0") = 0 [pid 6884] ioctl(4, LOOP_CLR_FD) = 0 [pid 6884] close(4) = 0 [pid 6884] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6884] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6883] <... futex resumed>) = 0 [pid 6883] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6883] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6884] <... futex resumed>) = 0 [pid 6884] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6884] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6883] <... futex resumed>) = 0 [pid 6883] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6883] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6884] <... futex resumed>) = 1 [pid 6884] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6884] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6883] <... futex resumed>) = 0 [pid 6883] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6884] <... futex resumed>) = 1 [pid 6883] <... futex resumed>) = 0 [pid 6883] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6884] ftruncate(5, 33587195) = 0 [pid 6884] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6883] <... futex resumed>) = 0 [pid 6884] sendfile(4, 5, NULL, 281474978811909 [pid 6883] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 318.133390][ T6885] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6883] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6883] exit_group(0 [pid 6884] <... sendfile resumed>) = ? [pid 6883] <... exit_group resumed>) = ? [pid 6884] +++ exited with 0 +++ [pid 6883] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6883, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./621", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./621", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./621/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./621/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./621/binderfs") = 0 umount2("./621/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./621/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./621/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./621/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./621/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./621/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./621") = 0 mkdir("./622", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6886 ./strace-static-x86_64: Process 6886 attached [pid 6886] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6886] chdir("./622") = 0 [pid 6886] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6886] setpgid(0, 0) = 0 [pid 6886] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6886] write(3, "1000", 4) = 4 [pid 6886] close(3) = 0 [pid 6886] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6886] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6886] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6886] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6886] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6887], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6887 [pid 6886] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6886] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6887 attached [pid 6887] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6887] memfd_create("syzkaller", 0) = 3 [pid 6887] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6887] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6887] munmap(0x7f927cba2000, 2097152) = 0 [pid 6887] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6887] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6887] close(3) = 0 [pid 6887] mkdir("./file0", 0777) = 0 [ 318.454020][ T6887] loop0: detected capacity change from 0 to 4096 [ 318.469634][ T6887] NILFS (loop0): invalid segment: Checksum error in segment payload [ 318.477702][ T6887] NILFS (loop0): trying rollback from an earlier position [ 318.493395][ T6887] NILFS (loop0): recovery complete [pid 6887] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6887] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6887] chdir("./file0") = 0 [pid 6887] ioctl(4, LOOP_CLR_FD) = 0 [pid 6887] close(4) = 0 [pid 6887] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6886] <... futex resumed>) = 0 [pid 6886] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6886] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6887] <... futex resumed>) = 1 [pid 6887] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6887] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6886] <... futex resumed>) = 0 [pid 6886] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6886] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6887] <... futex resumed>) = 1 [pid 6887] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6887] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6886] <... futex resumed>) = 0 [pid 6886] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6886] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6887] <... futex resumed>) = 1 [pid 6887] ftruncate(5, 33587195) = 0 [pid 6887] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6886] <... futex resumed>) = 0 [pid 6886] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6886] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6887] <... futex resumed>) = 1 [pid 6887] sendfile(4, 5, NULL, 281474978811909 [pid 6886] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6886] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 318.499785][ T6888] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6886] exit_group(0 [pid 6887] <... sendfile resumed>) = ? [pid 6886] <... exit_group resumed>) = ? [pid 6887] +++ exited with 0 +++ [pid 6886] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6886, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./622", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./622", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./622/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./622/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./622/binderfs") = 0 umount2("./622/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./622/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./622/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./622/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./622/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./622/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./622") = 0 mkdir("./623", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6889 ./strace-static-x86_64: Process 6889 attached [pid 6889] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6889] chdir("./623") = 0 [pid 6889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6889] setpgid(0, 0) = 0 [pid 6889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6889] write(3, "1000", 4) = 4 [pid 6889] close(3) = 0 [pid 6889] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6889] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6889] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6889] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6890], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6890 [pid 6889] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6889] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6890 attached [pid 6890] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6890] memfd_create("syzkaller", 0) = 3 [pid 6890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6890] munmap(0x7f927cba2000, 2097152) = 0 [pid 6890] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6890] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6890] close(3) = 0 [pid 6890] mkdir("./file0", 0777) = 0 [pid 6890] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6890] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6890] chdir("./file0") = 0 [ 318.801366][ T6890] loop0: detected capacity change from 0 to 4096 [ 318.817606][ T6890] NILFS (loop0): invalid segment: Checksum error in segment payload [ 318.825771][ T6890] NILFS (loop0): trying rollback from an earlier position [ 318.840814][ T6890] NILFS (loop0): recovery complete [pid 6890] ioctl(4, LOOP_CLR_FD) = 0 [pid 6890] close(4) = 0 [pid 6890] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6889] <... futex resumed>) = 0 [pid 6890] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6889] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6890] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6889] <... futex resumed>) = 0 [pid 6890] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6889] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6890] <... open resumed>) = 4 [pid 6890] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6889] <... futex resumed>) = 0 [pid 6890] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6889] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6890] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6889] <... futex resumed>) = 0 [pid 6890] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6889] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6890] <... open resumed>) = 5 [pid 6890] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6889] <... futex resumed>) = 0 [pid 6890] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6889] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6890] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6889] <... futex resumed>) = 0 [pid 6890] ftruncate(5, 33587195 [pid 6889] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6890] <... ftruncate resumed>) = 0 [pid 6890] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6889] <... futex resumed>) = 0 [pid 6890] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6889] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6890] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6889] <... futex resumed>) = 0 [pid 6890] sendfile(4, 5, NULL, 281474978811909 [ 318.847601][ T6891] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6889] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6889] exit_group(0) = ? [pid 6890] <... sendfile resumed>) = ? [pid 6890] +++ exited with 0 +++ [pid 6889] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6889, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./623", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./623", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./623/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./623/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./623/binderfs") = 0 umount2("./623/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./623/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./623/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./623/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./623/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./623/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./623") = 0 mkdir("./624", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6892 ./strace-static-x86_64: Process 6892 attached [pid 6892] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6892] chdir("./624") = 0 [pid 6892] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6892] setpgid(0, 0) = 0 [pid 6892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6892] write(3, "1000", 4) = 4 [pid 6892] close(3) = 0 [pid 6892] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6892] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6892] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6892] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6892] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6893 attached , parent_tid=[6893], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6893 [pid 6892] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6892] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6893] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6893] memfd_create("syzkaller", 0) = 3 [pid 6893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6893] munmap(0x7f927cba2000, 2097152) = 0 [pid 6893] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6893] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6893] close(3) = 0 [pid 6893] mkdir("./file0", 0777) = 0 [pid 6893] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6893] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6893] chdir("./file0") = 0 [pid 6893] ioctl(4, LOOP_CLR_FD) = 0 [pid 6893] close(4) = 0 [pid 6893] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 319.174080][ T6893] loop0: detected capacity change from 0 to 4096 [ 319.189016][ T6893] NILFS (loop0): invalid segment: Checksum error in segment payload [ 319.197093][ T6893] NILFS (loop0): trying rollback from an earlier position [ 319.212402][ T6893] NILFS (loop0): recovery complete [pid 6893] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6892] <... futex resumed>) = 0 [pid 6892] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6893] <... futex resumed>) = 0 [pid 6892] <... futex resumed>) = 1 [pid 6893] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6892] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6893] <... open resumed>) = 4 [pid 6893] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6893] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6892] <... futex resumed>) = 0 [pid 6892] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6893] <... futex resumed>) = 0 [pid 6892] <... futex resumed>) = 1 [pid 6893] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6892] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6893] <... open resumed>) = 5 [pid 6893] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6892] <... futex resumed>) = 0 [pid 6893] ftruncate(5, 33587195 [pid 6892] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6893] <... ftruncate resumed>) = 0 [pid 6892] <... futex resumed>) = 0 [pid 6893] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6892] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6893] <... futex resumed>) = 0 [pid 6892] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6893] sendfile(4, 5, NULL, 281474978811909 [pid 6892] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 319.220846][ T6894] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6892] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6892] exit_group(0) = ? [pid 6893] <... sendfile resumed>) = ? [pid 6893] +++ exited with 0 +++ [pid 6892] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6892, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./624", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./624", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./624/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./624/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./624/binderfs") = 0 umount2("./624/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./624/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./624/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./624/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./624/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./624/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./624") = 0 mkdir("./625", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6895 ./strace-static-x86_64: Process 6895 attached [pid 6895] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6895] chdir("./625") = 0 [pid 6895] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6895] setpgid(0, 0) = 0 [pid 6895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6895] write(3, "1000", 4) = 4 [pid 6895] close(3) = 0 [pid 6895] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6895] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6895] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6895] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6895] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6896], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6896 [pid 6895] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6895] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6896 attached [pid 6896] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6896] memfd_create("syzkaller", 0) = 3 [pid 6896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6896] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6896] munmap(0x7f927cba2000, 2097152) = 0 [pid 6896] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6896] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6896] close(3) = 0 [pid 6896] mkdir("./file0", 0777) = 0 [ 319.581463][ T6896] loop0: detected capacity change from 0 to 4096 [ 319.600247][ T6896] NILFS (loop0): invalid segment: Checksum error in segment payload [ 319.608596][ T6896] NILFS (loop0): trying rollback from an earlier position [ 319.623709][ T6896] NILFS (loop0): recovery complete [pid 6896] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6896] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6896] chdir("./file0") = 0 [pid 6896] ioctl(4, LOOP_CLR_FD) = 0 [pid 6896] close(4) = 0 [pid 6896] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6895] <... futex resumed>) = 0 [pid 6895] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6895] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6896] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6896] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6895] <... futex resumed>) = 0 [pid 6895] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6895] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6896] <... futex resumed>) = 1 [pid 6896] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6896] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6895] <... futex resumed>) = 0 [pid 6895] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6895] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6896] <... futex resumed>) = 1 [pid 6896] ftruncate(5, 33587195) = 0 [pid 6896] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6895] <... futex resumed>) = 0 [pid 6895] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6895] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 319.629578][ T6897] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6896] sendfile(4, 5, NULL, 281474978811909 [pid 6895] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6895] exit_group(0 [pid 6896] <... sendfile resumed>) = ? [pid 6895] <... exit_group resumed>) = ? [pid 6896] +++ exited with 0 +++ [pid 6895] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6895, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./625", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./625", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./625/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./625/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./625/binderfs") = 0 umount2("./625/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./625/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./625/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./625/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./625/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./625/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./625") = 0 mkdir("./626", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6898 ./strace-static-x86_64: Process 6898 attached [pid 6898] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6898] chdir("./626") = 0 [pid 6898] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6898] setpgid(0, 0) = 0 [pid 6898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6898] write(3, "1000", 4) = 4 [pid 6898] close(3) = 0 [pid 6898] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6898] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6898] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6898] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6898] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6899], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6899 [pid 6898] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6898] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6899 attached [pid 6899] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6899] memfd_create("syzkaller", 0) = 3 [pid 6899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6899] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6899] munmap(0x7f927cba2000, 2097152) = 0 [pid 6899] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6899] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6899] close(3) = 0 [pid 6899] mkdir("./file0", 0777) = 0 [ 319.971729][ T6899] loop0: detected capacity change from 0 to 4096 [ 319.987265][ T6899] NILFS (loop0): invalid segment: Checksum error in segment payload [ 319.995421][ T6899] NILFS (loop0): trying rollback from an earlier position [ 320.010557][ T6899] NILFS (loop0): recovery complete [pid 6899] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6899] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6899] chdir("./file0") = 0 [pid 6899] ioctl(4, LOOP_CLR_FD) = 0 [pid 6899] close(4) = 0 [pid 6899] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6898] <... futex resumed>) = 0 [pid 6898] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6899] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6898] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6899] <... open resumed>) = 4 [pid 6899] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6898] <... futex resumed>) = 0 [pid 6898] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6898] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6899] <... futex resumed>) = 1 [pid 6899] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6899] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6898] <... futex resumed>) = 0 [pid 6898] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6898] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6899] <... futex resumed>) = 1 [pid 6899] ftruncate(5, 33587195) = 0 [pid 6899] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6898] <... futex resumed>) = 0 [pid 6898] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6898] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6899] <... futex resumed>) = 1 [ 320.016631][ T6900] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6899] sendfile(4, 5, NULL, 281474978811909 [pid 6898] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6898] exit_group(0 [pid 6899] <... sendfile resumed>) = ? [pid 6898] <... exit_group resumed>) = ? [pid 6899] +++ exited with 0 +++ [pid 6898] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6898, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./626", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./626", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./626/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./626/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./626/binderfs") = 0 umount2("./626/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./626/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./626/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./626/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./626/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./626/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./626") = 0 mkdir("./627", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6901 ./strace-static-x86_64: Process 6901 attached [pid 6901] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6901] chdir("./627") = 0 [pid 6901] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6901] setpgid(0, 0) = 0 [pid 6901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6901] write(3, "1000", 4) = 4 [pid 6901] close(3) = 0 [pid 6901] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6901] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6901] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6901] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6901] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6902 attached , parent_tid=[6902], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6902 [pid 6902] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6901] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6902] memfd_create("syzkaller", 0 [pid 6901] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6902] <... memfd_create resumed>) = 3 [pid 6902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6902] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6902] munmap(0x7f927cba2000, 2097152) = 0 [pid 6902] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6902] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6902] close(3) = 0 [pid 6902] mkdir("./file0", 0777) = 0 [ 320.352674][ T6902] loop0: detected capacity change from 0 to 4096 [ 320.369642][ T6902] NILFS (loop0): invalid segment: Checksum error in segment payload [ 320.377776][ T6902] NILFS (loop0): trying rollback from an earlier position [ 320.392559][ T6902] NILFS (loop0): recovery complete [pid 6902] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6902] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6902] chdir("./file0") = 0 [pid 6902] ioctl(4, LOOP_CLR_FD) = 0 [pid 6902] close(4) = 0 [pid 6902] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6901] <... futex resumed>) = 0 [pid 6901] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6901] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6902] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6902] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6901] <... futex resumed>) = 0 [pid 6901] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6901] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6902] <... futex resumed>) = 1 [pid 6902] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6902] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6902] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6901] <... futex resumed>) = 0 [pid 6901] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6902] <... futex resumed>) = 0 [pid 6901] <... futex resumed>) = 1 [pid 6901] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6902] ftruncate(5, 33587195) = 0 [pid 6902] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6901] <... futex resumed>) = 0 [pid 6902] sendfile(4, 5, NULL, 281474978811909 [pid 6901] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 320.399118][ T6903] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6901] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6901] exit_group(0) = ? [pid 6902] <... sendfile resumed>) = ? [pid 6902] +++ exited with 0 +++ [pid 6901] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6901, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- umount2("./627", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./627", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./627/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./627/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./627/binderfs") = 0 umount2("./627/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./627/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./627/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./627/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./627/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./627/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./627") = 0 mkdir("./628", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6904 ./strace-static-x86_64: Process 6904 attached [pid 6904] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6904] chdir("./628") = 0 [pid 6904] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6904] setpgid(0, 0) = 0 [pid 6904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6904] write(3, "1000", 4) = 4 [pid 6904] close(3) = 0 [pid 6904] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6904] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6904] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6904] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6904] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6905 attached , parent_tid=[6905], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6905 [pid 6904] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6904] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6905] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6905] memfd_create("syzkaller", 0) = 3 [pid 6905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6905] munmap(0x7f927cba2000, 2097152) = 0 [pid 6905] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6905] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6905] close(3) = 0 [pid 6905] mkdir("./file0", 0777) = 0 [pid 6905] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6905] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6905] chdir("./file0") = 0 [ 320.728148][ T6905] loop0: detected capacity change from 0 to 4096 [ 320.744886][ T6905] NILFS (loop0): invalid segment: Checksum error in segment payload [ 320.752964][ T6905] NILFS (loop0): trying rollback from an earlier position [ 320.768378][ T6905] NILFS (loop0): recovery complete [pid 6905] ioctl(4, LOOP_CLR_FD) = 0 [pid 6905] close(4) = 0 [pid 6905] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6905] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6904] <... futex resumed>) = 0 [pid 6904] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6904] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6905] <... futex resumed>) = 0 [pid 6905] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6905] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6904] <... futex resumed>) = 0 [pid 6904] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6904] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6905] <... futex resumed>) = 1 [pid 6905] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6905] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6904] <... futex resumed>) = 0 [pid 6904] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6904] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6905] <... futex resumed>) = 1 [pid 6905] ftruncate(5, 33587195) = 0 [pid 6905] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6904] <... futex resumed>) = 0 [pid 6904] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6904] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 320.774394][ T6906] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6905] sendfile(4, 5, NULL, 281474978811909 [pid 6904] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6904] exit_group(0) = ? [pid 6905] <... sendfile resumed>) = ? [pid 6905] +++ exited with 0 +++ [pid 6904] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6904, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./628", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./628", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./628/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./628/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./628/binderfs") = 0 umount2("./628/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./628/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./628/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./628/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./628/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./628/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./628") = 0 mkdir("./629", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6907 ./strace-static-x86_64: Process 6907 attached [pid 6907] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6907] chdir("./629") = 0 [pid 6907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6907] setpgid(0, 0) = 0 [pid 6907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6907] write(3, "1000", 4) = 4 [pid 6907] close(3) = 0 [pid 6907] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6907] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6907] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6907] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6907] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6908], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6908 [pid 6907] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6907] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6908 attached [pid 6908] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6908] memfd_create("syzkaller", 0) = 3 [pid 6908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6908] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6908] munmap(0x7f927cba2000, 2097152) = 0 [pid 6908] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6908] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6908] close(3) = 0 [pid 6908] mkdir("./file0", 0777) = 0 [pid 6908] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6908] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6908] chdir("./file0") = 0 [pid 6908] ioctl(4, LOOP_CLR_FD) = 0 [pid 6908] close(4) = 0 [pid 6908] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 321.108243][ T6908] loop0: detected capacity change from 0 to 4096 [ 321.124908][ T6908] NILFS (loop0): invalid segment: Checksum error in segment payload [ 321.132929][ T6908] NILFS (loop0): trying rollback from an earlier position [ 321.148537][ T6908] NILFS (loop0): recovery complete [pid 6908] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6907] <... futex resumed>) = 0 [pid 6907] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6907] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6908] <... futex resumed>) = 0 [pid 6908] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6908] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6907] <... futex resumed>) = 0 [pid 6907] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6907] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6908] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6908] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6907] <... futex resumed>) = 0 [pid 6907] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6907] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6908] <... futex resumed>) = 1 [pid 6908] ftruncate(5, 33587195) = 0 [pid 6908] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6907] <... futex resumed>) = 0 [pid 6907] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6907] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6908] <... futex resumed>) = 1 [ 321.154599][ T6909] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6908] sendfile(4, 5, NULL, 281474978811909 [pid 6907] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6907] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6907] exit_group(0) = ? [pid 6908] <... sendfile resumed>) = ? [pid 6908] +++ exited with 0 +++ [pid 6907] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6907, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./629", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./629", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./629/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./629/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./629/binderfs") = 0 umount2("./629/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./629/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./629/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./629/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./629/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./629/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./629") = 0 mkdir("./630", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6910 ./strace-static-x86_64: Process 6910 attached [pid 6910] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6910] chdir("./630") = 0 [pid 6910] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6910] setpgid(0, 0) = 0 [pid 6910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6910] write(3, "1000", 4) = 4 [pid 6910] close(3) = 0 [pid 6910] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6910] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6910] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6910] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6910] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6911], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6911 ./strace-static-x86_64: Process 6911 attached [pid 6910] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6910] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6911] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6911] memfd_create("syzkaller", 0) = 3 [pid 6911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6911] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6911] munmap(0x7f927cba2000, 2097152) = 0 [pid 6911] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6911] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6911] close(3) = 0 [pid 6911] mkdir("./file0", 0777) = 0 [ 321.482452][ T6911] loop0: detected capacity change from 0 to 4096 [ 321.497357][ T6911] NILFS (loop0): invalid segment: Checksum error in segment payload [ 321.505495][ T6911] NILFS (loop0): trying rollback from an earlier position [ 321.520074][ T6911] NILFS (loop0): recovery complete [pid 6911] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6911] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6911] chdir("./file0") = 0 [pid 6911] ioctl(4, LOOP_CLR_FD) = 0 [pid 6911] close(4) = 0 [pid 6911] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6910] <... futex resumed>) = 0 [pid 6911] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6910] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6911] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6910] <... futex resumed>) = 0 [pid 6911] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6910] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6911] <... open resumed>) = 4 [pid 6911] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6910] <... futex resumed>) = 0 [pid 6911] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6910] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6911] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6910] <... futex resumed>) = 0 [pid 6911] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6910] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6911] <... open resumed>) = 5 [pid 6911] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6910] <... futex resumed>) = 0 [pid 6911] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6910] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6911] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6910] <... futex resumed>) = 0 [pid 6911] ftruncate(5, 33587195 [pid 6910] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6911] <... ftruncate resumed>) = 0 [pid 6911] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6910] <... futex resumed>) = 0 [pid 6911] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6910] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6911] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6910] <... futex resumed>) = 0 [pid 6911] sendfile(4, 5, NULL, 281474978811909 [ 321.526398][ T6912] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6910] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6910] exit_group(0) = ? [pid 6911] <... sendfile resumed>) = ? [pid 6911] +++ exited with 0 +++ [pid 6910] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6910, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./630", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./630", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./630/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./630/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./630/binderfs") = 0 umount2("./630/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./630/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./630/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./630/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./630/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./630/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./630") = 0 mkdir("./631", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6913 ./strace-static-x86_64: Process 6913 attached [pid 6913] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6913] chdir("./631") = 0 [pid 6913] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6913] setpgid(0, 0) = 0 [pid 6913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6913] write(3, "1000", 4) = 4 [pid 6913] close(3) = 0 [pid 6913] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6913] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6913] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6913] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6913] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6914], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6914 [pid 6913] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6914 attached ) = 0 [pid 6913] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6914] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6914] memfd_create("syzkaller", 0) = 3 [pid 6914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6914] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6914] munmap(0x7f927cba2000, 2097152) = 0 [pid 6914] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6914] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6914] close(3) = 0 [pid 6914] mkdir("./file0", 0777) = 0 [ 321.859686][ T6914] loop0: detected capacity change from 0 to 4096 [ 321.874186][ T6914] NILFS (loop0): invalid segment: Checksum error in segment payload [ 321.882208][ T6914] NILFS (loop0): trying rollback from an earlier position [ 321.897530][ T6914] NILFS (loop0): recovery complete [pid 6914] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6914] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6914] chdir("./file0") = 0 [pid 6914] ioctl(4, LOOP_CLR_FD) = 0 [pid 6914] close(4) = 0 [pid 6914] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6913] <... futex resumed>) = 0 [pid 6913] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6913] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6914] <... futex resumed>) = 1 [pid 6914] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6914] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6913] <... futex resumed>) = 0 [pid 6913] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6913] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6914] <... futex resumed>) = 1 [pid 6914] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6914] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6913] <... futex resumed>) = 0 [pid 6913] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6913] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6914] <... futex resumed>) = 1 [pid 6914] ftruncate(5, 33587195) = 0 [pid 6914] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6913] <... futex resumed>) = 0 [pid 6913] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6913] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6914] <... futex resumed>) = 1 [ 321.903316][ T6915] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6914] sendfile(4, 5, NULL, 281474978811909 [pid 6913] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6913] exit_group(0 [pid 6914] <... sendfile resumed>) = ? [pid 6913] <... exit_group resumed>) = ? [pid 6914] +++ exited with 0 +++ [pid 6913] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6913, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./631", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./631", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./631/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./631/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./631/binderfs") = 0 umount2("./631/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./631/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./631/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./631/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./631/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./631/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./631") = 0 mkdir("./632", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6916 ./strace-static-x86_64: Process 6916 attached [pid 6916] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6916] chdir("./632") = 0 [pid 6916] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6916] setpgid(0, 0) = 0 [pid 6916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6916] write(3, "1000", 4) = 4 [pid 6916] close(3) = 0 [pid 6916] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6916] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6916] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6916] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6916] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6917 attached , parent_tid=[6917], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6917 [pid 6916] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6916] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6917] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6917] memfd_create("syzkaller", 0) = 3 [pid 6917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6917] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6917] munmap(0x7f927cba2000, 2097152) = 0 [pid 6917] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6917] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6917] close(3) = 0 [pid 6917] mkdir("./file0", 0777) = 0 [pid 6917] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6917] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6917] chdir("./file0") = 0 [pid 6917] ioctl(4, LOOP_CLR_FD) = 0 [ 322.224821][ T6917] loop0: detected capacity change from 0 to 4096 [ 322.241564][ T6917] NILFS (loop0): invalid segment: Checksum error in segment payload [ 322.249770][ T6917] NILFS (loop0): trying rollback from an earlier position [ 322.264895][ T6917] NILFS (loop0): recovery complete [pid 6917] close(4) = 0 [pid 6917] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6916] <... futex resumed>) = 0 [pid 6916] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6916] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6917] <... futex resumed>) = 1 [pid 6917] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6917] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6916] <... futex resumed>) = 0 [pid 6916] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6916] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6917] <... futex resumed>) = 1 [pid 6917] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6917] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6916] <... futex resumed>) = 0 [pid 6916] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6916] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6917] <... futex resumed>) = 1 [pid 6917] ftruncate(5, 33587195) = 0 [pid 6917] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6916] <... futex resumed>) = 0 [pid 6916] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6916] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6917] <... futex resumed>) = 1 [ 322.270794][ T6918] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6917] sendfile(4, 5, NULL, 281474978811909 [pid 6916] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6916] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6916] exit_group(0) = ? [pid 6917] <... sendfile resumed>) = ? [pid 6917] +++ exited with 0 +++ [pid 6916] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6916, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./632", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./632", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./632/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./632/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./632/binderfs") = 0 umount2("./632/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./632/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./632/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./632/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./632/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./632/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./632") = 0 mkdir("./633", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6919 ./strace-static-x86_64: Process 6919 attached [pid 6919] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6919] chdir("./633") = 0 [pid 6919] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6919] setpgid(0, 0) = 0 [pid 6919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6919] write(3, "1000", 4) = 4 [pid 6919] close(3) = 0 [pid 6919] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6919] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6919] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6919] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6919] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6920], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6920 ./strace-static-x86_64: Process 6920 attached [pid 6919] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6920] set_robust_list(0x7f9284fc29e0, 24 [pid 6919] <... futex resumed>) = 0 [pid 6920] <... set_robust_list resumed>) = 0 [pid 6919] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6920] memfd_create("syzkaller", 0) = 3 [pid 6920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6920] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6920] munmap(0x7f927cba2000, 2097152) = 0 [pid 6920] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6920] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6920] close(3) = 0 [pid 6920] mkdir("./file0", 0777) = 0 [ 322.576889][ T6920] loop0: detected capacity change from 0 to 4096 [ 322.594816][ T6920] NILFS (loop0): invalid segment: Checksum error in segment payload [ 322.602837][ T6920] NILFS (loop0): trying rollback from an earlier position [ 322.618440][ T6920] NILFS (loop0): recovery complete [pid 6920] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6920] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6920] chdir("./file0") = 0 [pid 6920] ioctl(4, LOOP_CLR_FD) = 0 [pid 6920] close(4) = 0 [pid 6920] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6920] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6919] <... futex resumed>) = 0 [pid 6919] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6919] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6920] <... futex resumed>) = 0 [pid 6920] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6920] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6919] <... futex resumed>) = 0 [pid 6919] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6919] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6920] <... futex resumed>) = 1 [pid 6920] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6920] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6919] <... futex resumed>) = 0 [pid 6919] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6919] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6920] <... futex resumed>) = 1 [pid 6920] ftruncate(5, 33587195) = 0 [pid 6920] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6919] <... futex resumed>) = 0 [pid 6919] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6919] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6920] <... futex resumed>) = 1 [ 322.624770][ T6921] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6920] sendfile(4, 5, NULL, 281474978811909 [pid 6919] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6919] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6919] exit_group(0) = ? [pid 6920] <... sendfile resumed>) = ? [pid 6920] +++ exited with 0 +++ [pid 6919] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6919, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./633", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./633", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./633/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./633/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./633/binderfs") = 0 umount2("./633/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./633/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./633/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./633/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./633/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./633/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./633") = 0 mkdir("./634", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6922 ./strace-static-x86_64: Process 6922 attached [pid 6922] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6922] chdir("./634") = 0 [pid 6922] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6922] setpgid(0, 0) = 0 [pid 6922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6922] write(3, "1000", 4) = 4 [pid 6922] close(3) = 0 [pid 6922] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6922] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6922] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6922] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6922] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6923 attached , parent_tid=[6923], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6923 [pid 6922] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6922] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6923] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6923] memfd_create("syzkaller", 0) = 3 [pid 6923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6923] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6923] munmap(0x7f927cba2000, 2097152) = 0 [pid 6923] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6923] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6923] close(3) = 0 [pid 6923] mkdir("./file0", 0777) = 0 [ 322.951877][ T6923] loop0: detected capacity change from 0 to 4096 [ 322.967050][ T6923] NILFS (loop0): invalid segment: Checksum error in segment payload [ 322.975122][ T6923] NILFS (loop0): trying rollback from an earlier position [ 322.989649][ T6923] NILFS (loop0): recovery complete [pid 6923] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6923] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6923] chdir("./file0") = 0 [pid 6923] ioctl(4, LOOP_CLR_FD) = 0 [pid 6923] close(4) = 0 [pid 6923] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6923] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6922] <... futex resumed>) = 0 [pid 6922] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6923] <... futex resumed>) = 0 [pid 6922] <... futex resumed>) = 1 [pid 6923] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6922] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6923] <... open resumed>) = 4 [pid 6923] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6922] <... futex resumed>) = 0 [pid 6922] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6922] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6923] <... futex resumed>) = 1 [pid 6923] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6923] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6922] <... futex resumed>) = 0 [pid 6922] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6922] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6923] <... futex resumed>) = 1 [pid 6923] ftruncate(5, 33587195) = 0 [pid 6923] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6922] <... futex resumed>) = 0 [pid 6922] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6922] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6923] <... futex resumed>) = 1 [ 322.996143][ T6924] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6923] sendfile(4, 5, NULL, 281474978811909 [pid 6922] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6922] exit_group(0) = ? [pid 6923] <... sendfile resumed>) = ? [pid 6923] +++ exited with 0 +++ [pid 6922] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6922, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./634", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./634", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./634/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./634/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./634/binderfs") = 0 umount2("./634/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./634/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./634/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./634/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./634/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./634/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./634") = 0 mkdir("./635", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6925 ./strace-static-x86_64: Process 6925 attached [pid 6925] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6925] chdir("./635") = 0 [pid 6925] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6925] setpgid(0, 0) = 0 [pid 6925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6925] write(3, "1000", 4) = 4 [pid 6925] close(3) = 0 [pid 6925] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6925] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6925] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6925] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6925] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6926 attached , parent_tid=[6926], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6926 [pid 6925] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6925] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6926] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6926] memfd_create("syzkaller", 0) = 3 [pid 6926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6926] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6926] munmap(0x7f927cba2000, 2097152) = 0 [pid 6926] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6926] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6926] close(3) = 0 [pid 6926] mkdir("./file0", 0777) = 0 [pid 6926] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6926] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6926] chdir("./file0") = 0 [pid 6926] ioctl(4, LOOP_CLR_FD) = 0 [ 323.320962][ T6926] loop0: detected capacity change from 0 to 4096 [ 323.336365][ T6926] NILFS (loop0): invalid segment: Checksum error in segment payload [ 323.344536][ T6926] NILFS (loop0): trying rollback from an earlier position [ 323.361790][ T6926] NILFS (loop0): recovery complete [pid 6926] close(4) = 0 [pid 6926] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6925] <... futex resumed>) = 0 [pid 6926] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6925] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6926] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6925] <... futex resumed>) = 0 [pid 6925] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6926] <... open resumed>) = 4 [pid 6926] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6925] <... futex resumed>) = 0 [pid 6926] <... futex resumed>) = 1 [pid 6925] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6925] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6926] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6926] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6925] <... futex resumed>) = 0 [pid 6926] <... futex resumed>) = 1 [pid 6925] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6926] ftruncate(5, 33587195 [pid 6925] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6926] <... ftruncate resumed>) = 0 [pid 6926] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6925] <... futex resumed>) = 0 [pid 6926] sendfile(4, 5, NULL, 281474978811909 [pid 6925] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 323.373803][ T6927] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6925] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6925] exit_group(0) = ? [pid 6926] <... sendfile resumed>) = ? [pid 6926] +++ exited with 0 +++ [pid 6925] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6925, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./635", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./635", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./635/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./635/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./635/binderfs") = 0 umount2("./635/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./635/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./635/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./635/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./635/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./635/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./635") = 0 mkdir("./636", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6928 ./strace-static-x86_64: Process 6928 attached [pid 6928] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6928] chdir("./636") = 0 [pid 6928] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6928] setpgid(0, 0) = 0 [pid 6928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6928] write(3, "1000", 4) = 4 [pid 6928] close(3) = 0 [pid 6928] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6928] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6928] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6928] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6929], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6929 [pid 6928] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6928] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6929 attached [pid 6929] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6929] memfd_create("syzkaller", 0) = 3 [pid 6929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6929] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6929] munmap(0x7f927cba2000, 2097152) = 0 [pid 6929] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6929] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6929] close(3) = 0 [pid 6929] mkdir("./file0", 0777) = 0 [ 323.727675][ T6929] loop0: detected capacity change from 0 to 4096 [ 323.743928][ T6929] NILFS (loop0): invalid segment: Checksum error in segment payload [ 323.751964][ T6929] NILFS (loop0): trying rollback from an earlier position [ 323.767998][ T6929] NILFS (loop0): recovery complete [pid 6929] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6929] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6929] chdir("./file0") = 0 [pid 6929] ioctl(4, LOOP_CLR_FD) = 0 [pid 6929] close(4) = 0 [pid 6929] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6928] <... futex resumed>) = 0 [pid 6929] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6928] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6928] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6929] <... open resumed>) = 4 [pid 6929] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6928] <... futex resumed>) = 0 [pid 6928] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6928] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6929] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6929] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6928] <... futex resumed>) = 0 [pid 6928] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6928] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6929] ftruncate(5, 33587195) = 0 [pid 6929] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6928] <... futex resumed>) = 0 [pid 6928] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6928] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 323.774252][ T6930] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6929] sendfile(4, 5, NULL, 281474978811909 [pid 6928] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6928] exit_group(0) = ? [pid 6929] <... sendfile resumed>) = ? [pid 6929] +++ exited with 0 +++ [pid 6928] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6928, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./636", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./636", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./636/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./636/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./636/binderfs") = 0 umount2("./636/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./636/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./636/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./636/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./636/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./636/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./636") = 0 mkdir("./637", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6931 ./strace-static-x86_64: Process 6931 attached [pid 6931] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6931] chdir("./637") = 0 [pid 6931] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6931] setpgid(0, 0) = 0 [pid 6931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6931] write(3, "1000", 4) = 4 [pid 6931] close(3) = 0 [pid 6931] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6931] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6931] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6931] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6931] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6932], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6932 [pid 6931] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6931] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6932 attached [pid 6932] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6932] memfd_create("syzkaller", 0) = 3 [pid 6932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6932] munmap(0x7f927cba2000, 2097152) = 0 [pid 6932] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6932] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6932] close(3) = 0 [pid 6932] mkdir("./file0", 0777) = 0 [pid 6932] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6932] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6932] chdir("./file0") = 0 [pid 6932] ioctl(4, LOOP_CLR_FD) = 0 [pid 6932] close(4) = 0 [pid 6932] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 324.088529][ T6932] loop0: detected capacity change from 0 to 4096 [ 324.103302][ T6932] NILFS (loop0): invalid segment: Checksum error in segment payload [ 324.111584][ T6932] NILFS (loop0): trying rollback from an earlier position [ 324.126881][ T6932] NILFS (loop0): recovery complete [pid 6932] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6931] <... futex resumed>) = 0 [pid 6931] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6931] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6932] <... futex resumed>) = 0 [pid 6932] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6932] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6931] <... futex resumed>) = 0 [pid 6931] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6931] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6932] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6932] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6931] <... futex resumed>) = 0 [pid 6932] ftruncate(5, 33587195 [pid 6931] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6931] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6932] <... ftruncate resumed>) = 0 [pid 6932] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6931] <... futex resumed>) = 0 [pid 6931] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6931] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6932] <... futex resumed>) = 1 [ 324.133027][ T6933] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6932] sendfile(4, 5, NULL, 281474978811909 [pid 6931] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6931] exit_group(0) = ? [pid 6932] <... sendfile resumed>) = ? [pid 6932] +++ exited with 0 +++ [pid 6931] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6931, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./637", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./637", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./637/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./637/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./637/binderfs") = 0 umount2("./637/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./637/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./637/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./637/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./637/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./637/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./637") = 0 mkdir("./638", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6934 ./strace-static-x86_64: Process 6934 attached [pid 6934] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6934] chdir("./638") = 0 [pid 6934] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6934] setpgid(0, 0) = 0 [pid 6934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6934] write(3, "1000", 4) = 4 [pid 6934] close(3) = 0 [pid 6934] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6934] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6934] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6934] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6934] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6935], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6935 [pid 6934] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6934] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6935 attached [pid 6935] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6935] memfd_create("syzkaller", 0) = 3 [pid 6935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6935] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6935] munmap(0x7f927cba2000, 2097152) = 0 [pid 6935] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6935] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6935] close(3) = 0 [pid 6935] mkdir("./file0", 0777) = 0 [ 324.499697][ T6935] loop0: detected capacity change from 0 to 4096 [ 324.516377][ T6935] NILFS (loop0): invalid segment: Checksum error in segment payload [ 324.524478][ T6935] NILFS (loop0): trying rollback from an earlier position [ 324.539576][ T6935] NILFS (loop0): recovery complete [pid 6935] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6935] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6935] chdir("./file0") = 0 [pid 6935] ioctl(4, LOOP_CLR_FD) = 0 [pid 6935] close(4) = 0 [pid 6935] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6934] <... futex resumed>) = 0 [pid 6934] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6934] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6935] <... futex resumed>) = 1 [pid 6935] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6935] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6934] <... futex resumed>) = 0 [pid 6934] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6934] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6935] <... futex resumed>) = 1 [pid 6935] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6935] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6934] <... futex resumed>) = 0 [pid 6934] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6934] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6935] <... futex resumed>) = 1 [pid 6935] ftruncate(5, 33587195) = 0 [pid 6935] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6934] <... futex resumed>) = 0 [pid 6934] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6934] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6935] <... futex resumed>) = 1 [ 324.545615][ T6936] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6935] sendfile(4, 5, NULL, 281474978811909 [pid 6934] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6934] exit_group(0) = ? [pid 6935] <... sendfile resumed>) = ? [pid 6935] +++ exited with 0 +++ [pid 6934] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6934, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./638", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./638", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./638/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./638/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./638/binderfs") = 0 umount2("./638/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./638/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./638/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./638/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./638/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./638/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./638") = 0 mkdir("./639", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6937 ./strace-static-x86_64: Process 6937 attached [pid 6937] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6937] chdir("./639") = 0 [pid 6937] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6937] setpgid(0, 0) = 0 [pid 6937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6937] write(3, "1000", 4) = 4 [pid 6937] close(3) = 0 [pid 6937] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6937] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6937] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6937] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6937] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6938], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6938 [pid 6937] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6937] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6938 attached [pid 6938] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6938] memfd_create("syzkaller", 0) = 3 [pid 6938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6938] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6938] munmap(0x7f927cba2000, 2097152) = 0 [pid 6938] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6938] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6938] close(3) = 0 [pid 6938] mkdir("./file0", 0777) = 0 [ 324.871100][ T6938] loop0: detected capacity change from 0 to 4096 [ 324.886369][ T6938] NILFS (loop0): invalid segment: Checksum error in segment payload [ 324.894449][ T6938] NILFS (loop0): trying rollback from an earlier position [ 324.912913][ T6938] NILFS (loop0): recovery complete [pid 6938] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6938] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6938] chdir("./file0") = 0 [pid 6938] ioctl(4, LOOP_CLR_FD) = 0 [pid 6938] close(4) = 0 [pid 6938] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6937] <... futex resumed>) = 0 [pid 6937] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6937] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6938] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6938] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6937] <... futex resumed>) = 0 [pid 6937] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6937] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6938] <... futex resumed>) = 1 [pid 6938] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6938] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6937] <... futex resumed>) = 0 [pid 6937] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6937] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6938] <... futex resumed>) = 1 [pid 6938] ftruncate(5, 33587195) = 0 [pid 6938] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6937] <... futex resumed>) = 0 [pid 6937] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6937] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6938] <... futex resumed>) = 1 [ 324.919263][ T6939] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6938] sendfile(4, 5, NULL, 281474978811909 [pid 6937] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6937] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6937] exit_group(0 [pid 6938] <... sendfile resumed>) = ? [pid 6937] <... exit_group resumed>) = ? [pid 6938] +++ exited with 0 +++ [pid 6937] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6937, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- umount2("./639", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./639", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./639/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./639/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./639/binderfs") = 0 umount2("./639/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./639/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./639/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./639/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./639/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./639/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./639") = 0 mkdir("./640", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6940 ./strace-static-x86_64: Process 6940 attached [pid 6940] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6940] chdir("./640") = 0 [pid 6940] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6940] setpgid(0, 0) = 0 [pid 6940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6940] write(3, "1000", 4) = 4 [pid 6940] close(3) = 0 [pid 6940] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6940] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6940] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6940] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6940] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6941], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6941 [pid 6940] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6940] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6941 attached [pid 6941] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6941] memfd_create("syzkaller", 0) = 3 [pid 6941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6941] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6941] munmap(0x7f927cba2000, 2097152) = 0 [pid 6941] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6941] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6941] close(3) = 0 [pid 6941] mkdir("./file0", 0777) = 0 [pid 6941] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6941] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6941] chdir("./file0") = 0 [pid 6941] ioctl(4, LOOP_CLR_FD) = 0 [pid 6941] close(4) = 0 [ 325.247046][ T6941] loop0: detected capacity change from 0 to 4096 [ 325.261782][ T6941] NILFS (loop0): invalid segment: Checksum error in segment payload [ 325.269879][ T6941] NILFS (loop0): trying rollback from an earlier position [ 325.284907][ T6941] NILFS (loop0): recovery complete [pid 6941] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6940] <... futex resumed>) = 0 [pid 6941] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6940] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6941] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6940] <... futex resumed>) = 0 [pid 6941] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6940] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6941] <... open resumed>) = 4 [pid 6941] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6940] <... futex resumed>) = 0 [pid 6941] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6940] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6941] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6940] <... futex resumed>) = 0 [pid 6941] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6940] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6941] <... open resumed>) = 5 [pid 6941] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6940] <... futex resumed>) = 0 [pid 6941] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6940] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6941] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6940] <... futex resumed>) = 0 [pid 6941] ftruncate(5, 33587195 [pid 6940] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6941] <... ftruncate resumed>) = 0 [pid 6941] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6940] <... futex resumed>) = 0 [pid 6941] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6940] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6941] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6940] <... futex resumed>) = 0 [pid 6941] sendfile(4, 5, NULL, 281474978811909 [ 325.291678][ T6942] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6940] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6940] exit_group(0) = ? [pid 6941] <... sendfile resumed>) = ? [pid 6941] +++ exited with 0 +++ [pid 6940] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6940, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./640", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./640", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./640/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./640/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./640/binderfs") = 0 umount2("./640/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./640/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./640/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./640/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./640/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./640/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./640") = 0 mkdir("./641", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6943 ./strace-static-x86_64: Process 6943 attached [pid 6943] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6943] chdir("./641") = 0 [pid 6943] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6943] setpgid(0, 0) = 0 [pid 6943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6943] write(3, "1000", 4) = 4 [pid 6943] close(3) = 0 [pid 6943] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6943] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6943] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6943] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6943] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6944 attached , parent_tid=[6944], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6944 [pid 6944] set_robust_list(0x7f9284fc29e0, 24 [pid 6943] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6944] <... set_robust_list resumed>) = 0 [pid 6943] <... futex resumed>) = 0 [pid 6943] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6944] memfd_create("syzkaller", 0) = 3 [pid 6944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6944] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6944] munmap(0x7f927cba2000, 2097152) = 0 [pid 6944] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6944] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6944] close(3) = 0 [pid 6944] mkdir("./file0", 0777) = 0 [pid 6944] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6944] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6944] chdir("./file0") = 0 [pid 6944] ioctl(4, LOOP_CLR_FD) = 0 [pid 6944] close(4) = 0 [ 325.650692][ T6944] loop0: detected capacity change from 0 to 4096 [ 325.665919][ T6944] NILFS (loop0): invalid segment: Checksum error in segment payload [ 325.673997][ T6944] NILFS (loop0): trying rollback from an earlier position [ 325.689713][ T6944] NILFS (loop0): recovery complete [pid 6944] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6943] <... futex resumed>) = 0 [pid 6943] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6943] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6944] <... futex resumed>) = 1 [pid 6944] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6944] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6943] <... futex resumed>) = 0 [pid 6943] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6943] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6944] <... futex resumed>) = 1 [pid 6944] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6944] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6943] <... futex resumed>) = 0 [pid 6943] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6943] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6944] <... futex resumed>) = 1 [pid 6944] ftruncate(5, 33587195) = 0 [pid 6944] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6943] <... futex resumed>) = 0 [pid 6943] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6943] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6944] <... futex resumed>) = 1 [ 325.695686][ T6945] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6944] sendfile(4, 5, NULL, 281474978811909 [pid 6943] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6943] exit_group(0) = ? [pid 6944] <... sendfile resumed>) = ? [pid 6944] +++ exited with 0 +++ [pid 6943] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6943, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./641", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./641", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./641/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./641/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./641/binderfs") = 0 umount2("./641/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./641/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./641/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./641/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./641/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./641/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./641") = 0 mkdir("./642", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6946 ./strace-static-x86_64: Process 6946 attached [pid 6946] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6946] chdir("./642") = 0 [pid 6946] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6946] setpgid(0, 0) = 0 [pid 6946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6946] write(3, "1000", 4) = 4 [pid 6946] close(3) = 0 [pid 6946] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6946] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6946] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6946] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6946] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6947], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6947 [pid 6946] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6946] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6947 attached [pid 6947] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6947] memfd_create("syzkaller", 0) = 3 [pid 6947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6947] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6947] munmap(0x7f927cba2000, 2097152) = 0 [pid 6947] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6947] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6947] close(3) = 0 [pid 6947] mkdir("./file0", 0777) = 0 [pid 6947] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6947] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6947] chdir("./file0") = 0 [ 326.001620][ T6947] loop0: detected capacity change from 0 to 4096 [ 326.016901][ T6947] NILFS (loop0): invalid segment: Checksum error in segment payload [ 326.024987][ T6947] NILFS (loop0): trying rollback from an earlier position [ 326.041900][ T6947] NILFS (loop0): recovery complete [pid 6947] ioctl(4, LOOP_CLR_FD) = 0 [pid 6947] close(4) = 0 [pid 6947] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6946] <... futex resumed>) = 0 [pid 6946] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6946] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6947] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6947] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6946] <... futex resumed>) = 0 [pid 6947] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6946] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6946] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6947] <... open resumed>) = 5 [pid 6947] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6947] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6946] <... futex resumed>) = 0 [pid 6946] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6946] <... futex resumed>) = 0 [pid 6947] ftruncate(5, 33587195 [pid 6946] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6947] <... ftruncate resumed>) = 0 [pid 6947] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6946] <... futex resumed>) = 0 [pid 6947] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6946] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6946] <... futex resumed>) = 0 [pid 6947] sendfile(4, 5, NULL, 281474978811909 [ 326.048196][ T6948] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6946] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6946] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6946] exit_group(0) = ? [pid 6947] <... sendfile resumed>) = ? [pid 6947] +++ exited with 0 +++ [pid 6946] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6946, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./642", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./642", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./642/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./642/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./642/binderfs") = 0 umount2("./642/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./642/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./642/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./642/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./642/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./642/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./642") = 0 mkdir("./643", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6949 ./strace-static-x86_64: Process 6949 attached [pid 6949] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6949] chdir("./643") = 0 [pid 6949] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6949] setpgid(0, 0) = 0 [pid 6949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6949] write(3, "1000", 4) = 4 [pid 6949] close(3) = 0 [pid 6949] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6949] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6949] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6949] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6949] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6950], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6950 [pid 6949] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6949] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6950 attached [pid 6950] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6950] memfd_create("syzkaller", 0) = 3 [pid 6950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6950] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6950] munmap(0x7f927cba2000, 2097152) = 0 [pid 6950] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6950] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6950] close(3) = 0 [pid 6950] mkdir("./file0", 0777) = 0 [pid 6950] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 326.363618][ T6950] loop0: detected capacity change from 0 to 4096 [ 326.380727][ T6950] NILFS (loop0): invalid segment: Checksum error in segment payload [ 326.388790][ T6950] NILFS (loop0): trying rollback from an earlier position [ 326.405548][ T6950] NILFS (loop0): recovery complete [pid 6950] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6950] chdir("./file0") = 0 [pid 6950] ioctl(4, LOOP_CLR_FD) = 0 [pid 6950] close(4) = 0 [pid 6950] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6949] <... futex resumed>) = 0 [pid 6950] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6949] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6949] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6950] <... open resumed>) = 4 [pid 6950] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6950] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6949] <... futex resumed>) = 0 [pid 6949] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6950] <... futex resumed>) = 0 [pid 6949] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6950] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6950] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6949] <... futex resumed>) = 0 [pid 6949] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6949] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6950] <... futex resumed>) = 1 [pid 6950] ftruncate(5, 33587195) = 0 [pid 6950] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6949] <... futex resumed>) = 0 [pid 6949] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6949] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6950] <... futex resumed>) = 1 [ 326.411608][ T6951] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6950] sendfile(4, 5, NULL, 281474978811909 [pid 6949] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6949] exit_group(0) = ? [pid 6950] <... sendfile resumed>) = ? [pid 6950] +++ exited with 0 +++ [pid 6949] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6949, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./643", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./643", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./643/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./643/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./643/binderfs") = 0 umount2("./643/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./643/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./643/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./643/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./643/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./643/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./643") = 0 mkdir("./644", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6952 ./strace-static-x86_64: Process 6952 attached [pid 6952] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6952] chdir("./644") = 0 [pid 6952] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6952] setpgid(0, 0) = 0 [pid 6952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6952] write(3, "1000", 4) = 4 [pid 6952] close(3) = 0 [pid 6952] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6952] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6952] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6952] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6952] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6953], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6953 [pid 6952] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6952] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6953 attached [pid 6953] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6953] memfd_create("syzkaller", 0) = 3 [pid 6953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6953] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6953] munmap(0x7f927cba2000, 2097152) = 0 [pid 6953] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6953] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6953] close(3) = 0 [pid 6953] mkdir("./file0", 0777) = 0 [ 326.731199][ T6953] loop0: detected capacity change from 0 to 4096 [ 326.746319][ T6953] NILFS (loop0): invalid segment: Checksum error in segment payload [ 326.754384][ T6953] NILFS (loop0): trying rollback from an earlier position [ 326.769684][ T6953] NILFS (loop0): recovery complete [pid 6953] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6953] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6953] chdir("./file0") = 0 [pid 6953] ioctl(4, LOOP_CLR_FD) = 0 [pid 6953] close(4) = 0 [pid 6953] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6952] <... futex resumed>) = 0 [pid 6953] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6952] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6953] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6952] <... futex resumed>) = 0 [pid 6953] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6952] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6953] <... open resumed>) = 4 [pid 6953] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6952] <... futex resumed>) = 0 [pid 6953] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6952] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6953] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6952] <... futex resumed>) = 0 [pid 6953] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6952] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6953] <... open resumed>) = 5 [pid 6953] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6953] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6952] <... futex resumed>) = 0 [pid 6952] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6953] <... futex resumed>) = 0 [pid 6952] <... futex resumed>) = 1 [pid 6953] ftruncate(5, 33587195 [pid 6952] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6953] <... ftruncate resumed>) = 0 [pid 6953] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6952] <... futex resumed>) = 0 [pid 6953] sendfile(4, 5, NULL, 281474978811909 [pid 6952] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 326.776476][ T6954] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6952] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6952] exit_group(0) = ? [pid 6953] <... sendfile resumed>) = ? [pid 6953] +++ exited with 0 +++ [pid 6952] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6952, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./644", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./644", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./644/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./644/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./644/binderfs") = 0 umount2("./644/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./644/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./644/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./644/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./644/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./644/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./644") = 0 mkdir("./645", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6955 ./strace-static-x86_64: Process 6955 attached [pid 6955] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6955] chdir("./645") = 0 [pid 6955] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6955] setpgid(0, 0) = 0 [pid 6955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6955] write(3, "1000", 4) = 4 [pid 6955] close(3) = 0 [pid 6955] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6955] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6955] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6955] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6955] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6956], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6956 [pid 6955] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6955] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6956 attached [pid 6956] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6956] memfd_create("syzkaller", 0) = 3 [pid 6956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6956] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6956] munmap(0x7f927cba2000, 2097152) = 0 [pid 6956] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6956] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6956] close(3) = 0 [pid 6956] mkdir("./file0", 0777) = 0 [pid 6956] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6956] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6956] chdir("./file0") = 0 [pid 6956] ioctl(4, LOOP_CLR_FD) = 0 [pid 6956] close(4) = 0 [pid 6956] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 327.124538][ T6956] loop0: detected capacity change from 0 to 4096 [ 327.139583][ T6956] NILFS (loop0): invalid segment: Checksum error in segment payload [ 327.147666][ T6956] NILFS (loop0): trying rollback from an earlier position [ 327.162920][ T6956] NILFS (loop0): recovery complete [pid 6956] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6955] <... futex resumed>) = 0 [pid 6955] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6955] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6956] <... futex resumed>) = 0 [pid 6956] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6956] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6956] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6955] <... futex resumed>) = 0 [pid 6955] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6955] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6956] <... futex resumed>) = 0 [pid 6956] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6956] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6956] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6955] <... futex resumed>) = 0 [pid 6955] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6956] <... futex resumed>) = 0 [pid 6955] <... futex resumed>) = 1 [pid 6956] ftruncate(5, 33587195 [pid 6955] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6956] <... ftruncate resumed>) = 0 [pid 6956] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6955] <... futex resumed>) = 0 [pid 6956] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6955] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6956] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6955] <... futex resumed>) = 0 [pid 6956] sendfile(4, 5, NULL, 281474978811909 [ 327.169232][ T6957] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6955] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6955] exit_group(0 [pid 6956] <... sendfile resumed>) = ? [pid 6955] <... exit_group resumed>) = ? [pid 6956] +++ exited with 0 +++ [pid 6955] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6955, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- umount2("./645", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./645", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./645/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./645/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./645/binderfs") = 0 umount2("./645/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./645/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./645/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./645/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./645/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./645/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./645") = 0 mkdir("./646", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6958 ./strace-static-x86_64: Process 6958 attached [pid 6958] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6958] chdir("./646") = 0 [pid 6958] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6958] setpgid(0, 0) = 0 [pid 6958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6958] write(3, "1000", 4) = 4 [pid 6958] close(3) = 0 [pid 6958] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6958] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6958] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6958] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6958] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6959 attached , parent_tid=[6959], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6959 [pid 6959] set_robust_list(0x7f9284fc29e0, 24 [pid 6958] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6959] <... set_robust_list resumed>) = 0 [pid 6959] memfd_create("syzkaller", 0 [pid 6958] <... futex resumed>) = 0 [pid 6958] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6959] <... memfd_create resumed>) = 3 [pid 6959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6959] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6959] munmap(0x7f927cba2000, 2097152) = 0 [pid 6959] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6959] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6959] close(3) = 0 [pid 6959] mkdir("./file0", 0777) = 0 [ 327.506113][ T6959] loop0: detected capacity change from 0 to 4096 [ 327.521411][ T6959] NILFS (loop0): invalid segment: Checksum error in segment payload [ 327.529508][ T6959] NILFS (loop0): trying rollback from an earlier position [ 327.545347][ T6959] NILFS (loop0): recovery complete [pid 6959] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6959] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6959] chdir("./file0") = 0 [pid 6959] ioctl(4, LOOP_CLR_FD) = 0 [pid 6959] close(4) = 0 [pid 6959] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6958] <... futex resumed>) = 0 [pid 6959] <... futex resumed>) = 1 [pid 6958] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6959] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6958] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6959] <... open resumed>) = 4 [pid 6959] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6959] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6958] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6958] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6958] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6959] <... futex resumed>) = 0 [pid 6959] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6959] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6958] <... futex resumed>) = 0 [pid 6958] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6958] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6959] <... futex resumed>) = 1 [pid 6959] ftruncate(5, 33587195) = 0 [pid 6959] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6958] <... futex resumed>) = 0 [pid 6958] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6958] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6959] <... futex resumed>) = 1 [ 327.551325][ T6960] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6959] sendfile(4, 5, NULL, 281474978811909 [pid 6958] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6958] exit_group(0) = ? [pid 6959] <... sendfile resumed>) = ? [pid 6959] +++ exited with 0 +++ [pid 6958] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6958, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./646", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./646", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./646/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./646/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./646/binderfs") = 0 umount2("./646/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./646/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./646/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./646/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./646/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./646/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./646") = 0 mkdir("./647", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6961 ./strace-static-x86_64: Process 6961 attached [pid 6961] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6961] chdir("./647") = 0 [pid 6961] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6961] setpgid(0, 0) = 0 [pid 6961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6961] write(3, "1000", 4) = 4 [pid 6961] close(3) = 0 [pid 6961] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6961] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6961] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6961] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6962], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6962 [pid 6961] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6961] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6962 attached [pid 6962] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6962] memfd_create("syzkaller", 0) = 3 [pid 6962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6962] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6962] munmap(0x7f927cba2000, 2097152) = 0 [pid 6962] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6962] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6962] close(3) = 0 [pid 6962] mkdir("./file0", 0777) = 0 [pid 6962] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6962] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 327.896445][ T6962] loop0: detected capacity change from 0 to 4096 [ 327.912388][ T6962] NILFS (loop0): invalid segment: Checksum error in segment payload [ 327.920471][ T6962] NILFS (loop0): trying rollback from an earlier position [ 327.936115][ T6962] NILFS (loop0): recovery complete [pid 6962] chdir("./file0") = 0 [pid 6962] ioctl(4, LOOP_CLR_FD) = 0 [pid 6962] close(4) = 0 [pid 6962] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6962] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6961] <... futex resumed>) = 0 [pid 6961] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6962] <... futex resumed>) = 0 [pid 6961] <... futex resumed>) = 1 [pid 6962] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6961] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6962] <... open resumed>) = 4 [pid 6962] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6961] <... futex resumed>) = 0 [pid 6962] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6961] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6962] <... futex resumed>) = 0 [pid 6961] <... futex resumed>) = 1 [pid 6962] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6961] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6962] <... open resumed>) = 5 [pid 6962] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6961] <... futex resumed>) = 0 [pid 6961] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6961] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6962] <... futex resumed>) = 1 [pid 6962] ftruncate(5, 33587195) = 0 [pid 6962] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6961] <... futex resumed>) = 0 [pid 6961] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6961] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6962] <... futex resumed>) = 1 [ 327.944805][ T6963] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6962] sendfile(4, 5, NULL, 281474978811909 [pid 6961] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6961] exit_group(0) = ? [pid 6962] <... sendfile resumed>) = ? [pid 6962] +++ exited with 0 +++ [pid 6961] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6961, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./647", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./647", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./647/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./647/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./647/binderfs") = 0 umount2("./647/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./647/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./647/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./647/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./647/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./647/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./647") = 0 mkdir("./648", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6964 ./strace-static-x86_64: Process 6964 attached [pid 6964] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6964] chdir("./648") = 0 [pid 6964] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6964] setpgid(0, 0) = 0 [pid 6964] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6964] write(3, "1000", 4) = 4 [pid 6964] close(3) = 0 [pid 6964] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6964] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6964] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6964] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6964] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6965], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6965 [pid 6964] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6964] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6965 attached [pid 6965] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6965] memfd_create("syzkaller", 0) = 3 [pid 6965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6965] munmap(0x7f927cba2000, 2097152) = 0 [pid 6965] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6965] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6965] close(3) = 0 [pid 6965] mkdir("./file0", 0777) = 0 [pid 6965] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6965] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6965] chdir("./file0") = 0 [ 328.267840][ T6965] loop0: detected capacity change from 0 to 4096 [ 328.284360][ T6965] NILFS (loop0): invalid segment: Checksum error in segment payload [ 328.292382][ T6965] NILFS (loop0): trying rollback from an earlier position [ 328.307984][ T6965] NILFS (loop0): recovery complete [pid 6965] ioctl(4, LOOP_CLR_FD) = 0 [pid 6965] close(4) = 0 [pid 6965] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6964] <... futex resumed>) = 0 [pid 6964] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6964] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6965] <... futex resumed>) = 1 [pid 6965] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6965] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6964] <... futex resumed>) = 0 [pid 6964] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6964] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6965] <... futex resumed>) = 1 [pid 6965] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6965] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6964] <... futex resumed>) = 0 [pid 6964] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6964] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6965] <... futex resumed>) = 1 [pid 6965] ftruncate(5, 33587195) = 0 [pid 6965] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6964] <... futex resumed>) = 0 [pid 6964] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6964] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6965] <... futex resumed>) = 1 [ 328.314137][ T6966] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6965] sendfile(4, 5, NULL, 281474978811909 [pid 6964] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6964] exit_group(0) = ? [pid 6965] <... sendfile resumed>) = ? [pid 6965] +++ exited with 0 +++ [pid 6964] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6964, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./648", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./648", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./648/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./648/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./648/binderfs") = 0 umount2("./648/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./648/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./648/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./648/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./648/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./648/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./648") = 0 mkdir("./649", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6967 ./strace-static-x86_64: Process 6967 attached [pid 6967] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6967] chdir("./649") = 0 [pid 6967] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6967] setpgid(0, 0) = 0 [pid 6967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6967] write(3, "1000", 4) = 4 [pid 6967] close(3) = 0 [pid 6967] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6967] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6967] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6967] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6967] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6968], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6968 [pid 6967] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6967] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6968 attached [pid 6968] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6968] memfd_create("syzkaller", 0) = 3 [pid 6968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6968] munmap(0x7f927cba2000, 2097152) = 0 [pid 6968] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6968] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6968] close(3) = 0 [pid 6968] mkdir("./file0", 0777) = 0 [pid 6968] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 328.671768][ T6968] loop0: detected capacity change from 0 to 4096 [ 328.689346][ T6968] NILFS (loop0): invalid segment: Checksum error in segment payload [ 328.697718][ T6968] NILFS (loop0): trying rollback from an earlier position [ 328.713244][ T6968] NILFS (loop0): recovery complete [pid 6968] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6968] chdir("./file0") = 0 [pid 6968] ioctl(4, LOOP_CLR_FD) = 0 [pid 6968] close(4) = 0 [pid 6968] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6967] <... futex resumed>) = 0 [pid 6967] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6967] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6968] <... futex resumed>) = 1 [pid 6968] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6968] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6967] <... futex resumed>) = 0 [pid 6967] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6967] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6968] <... futex resumed>) = 1 [pid 6968] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6968] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6967] <... futex resumed>) = 0 [pid 6967] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6967] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6968] <... futex resumed>) = 1 [pid 6968] ftruncate(5, 33587195) = 0 [pid 6968] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6967] <... futex resumed>) = 0 [pid 6967] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6967] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6968] <... futex resumed>) = 1 [ 328.719406][ T6969] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6968] sendfile(4, 5, NULL, 281474978811909 [pid 6967] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6967] exit_group(0) = ? [pid 6968] <... sendfile resumed>) = ? [pid 6968] +++ exited with 0 +++ [pid 6967] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6967, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./649", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./649", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./649/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./649/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./649/binderfs") = 0 umount2("./649/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./649/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./649/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./649/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./649/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./649/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./649") = 0 mkdir("./650", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6970 ./strace-static-x86_64: Process 6970 attached [pid 6970] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6970] chdir("./650") = 0 [pid 6970] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6970] setpgid(0, 0) = 0 [pid 6970] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6970] write(3, "1000", 4) = 4 [pid 6970] close(3) = 0 [pid 6970] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6970] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6970] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6970] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6970] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6971], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6971 [pid 6970] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6970] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6971 attached [pid 6971] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6971] memfd_create("syzkaller", 0) = 3 [pid 6971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6971] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6971] munmap(0x7f927cba2000, 2097152) = 0 [pid 6971] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6971] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6971] close(3) = 0 [pid 6971] mkdir("./file0", 0777) = 0 [ 329.050574][ T6971] loop0: detected capacity change from 0 to 4096 [ 329.067044][ T6971] NILFS (loop0): invalid segment: Checksum error in segment payload [ 329.075098][ T6971] NILFS (loop0): trying rollback from an earlier position [ 329.090146][ T6971] NILFS (loop0): recovery complete [pid 6971] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6971] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6971] chdir("./file0") = 0 [pid 6971] ioctl(4, LOOP_CLR_FD) = 0 [pid 6971] close(4) = 0 [pid 6971] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6970] <... futex resumed>) = 0 [pid 6971] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6970] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6971] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6970] <... futex resumed>) = 0 [pid 6971] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6970] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6971] <... open resumed>) = 4 [pid 6971] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6970] <... futex resumed>) = 0 [pid 6971] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6970] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6971] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6970] <... futex resumed>) = 0 [pid 6971] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6970] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6971] <... open resumed>) = 5 [pid 6971] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6970] <... futex resumed>) = 0 [pid 6971] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6970] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6971] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6970] <... futex resumed>) = 0 [pid 6971] ftruncate(5, 33587195 [pid 6970] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6971] <... ftruncate resumed>) = 0 [pid 6971] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6970] <... futex resumed>) = 0 [pid 6971] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6970] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6971] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6970] <... futex resumed>) = 0 [pid 6971] sendfile(4, 5, NULL, 281474978811909 [ 329.096549][ T6972] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6970] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6970] exit_group(0) = ? [pid 6971] <... sendfile resumed>) = ? [pid 6971] +++ exited with 0 +++ [pid 6970] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6970, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./650", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./650", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./650/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./650/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./650/binderfs") = 0 umount2("./650/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./650/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./650/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./650/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./650/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./650/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./650") = 0 mkdir("./651", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6973 ./strace-static-x86_64: Process 6973 attached [pid 6973] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6973] chdir("./651") = 0 [pid 6973] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6973] setpgid(0, 0) = 0 [pid 6973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6973] write(3, "1000", 4) = 4 [pid 6973] close(3) = 0 [pid 6973] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6973] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6973] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6973] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6974 attached , parent_tid=[6974], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6974 [pid 6973] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6973] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6974] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6974] memfd_create("syzkaller", 0) = 3 [pid 6974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6974] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6974] munmap(0x7f927cba2000, 2097152) = 0 [pid 6974] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6974] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6974] close(3) = 0 [pid 6974] mkdir("./file0", 0777) = 0 [pid 6974] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [ 329.400385][ T6974] loop0: detected capacity change from 0 to 4096 [ 329.416443][ T6974] NILFS (loop0): invalid segment: Checksum error in segment payload [ 329.424582][ T6974] NILFS (loop0): trying rollback from an earlier position [ 329.439681][ T6974] NILFS (loop0): recovery complete [pid 6974] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6974] chdir("./file0") = 0 [pid 6974] ioctl(4, LOOP_CLR_FD) = 0 [pid 6974] close(4) = 0 [pid 6974] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6973] <... futex resumed>) = 0 [pid 6973] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6973] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6974] <... futex resumed>) = 1 [pid 6974] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6974] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6973] <... futex resumed>) = 0 [pid 6974] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6973] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6974] <... open resumed>) = 5 [pid 6973] <... futex resumed>) = 0 [pid 6973] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6974] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6973] <... futex resumed>) = 0 [pid 6974] ftruncate(5, 33587195 [pid 6973] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6974] <... ftruncate resumed>) = 0 [pid 6973] <... futex resumed>) = 0 [pid 6974] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6973] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6974] <... futex resumed>) = 0 [pid 6973] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6974] sendfile(4, 5, NULL, 281474978811909 [pid 6973] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 329.445926][ T6975] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6973] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6973] exit_group(0 [pid 6974] <... sendfile resumed>) = ? [pid 6973] <... exit_group resumed>) = ? [pid 6974] +++ exited with 0 +++ [pid 6973] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6973, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./651", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./651", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./651/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./651/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./651/binderfs") = 0 umount2("./651/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./651/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./651/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./651/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./651/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./651/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./651") = 0 mkdir("./652", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6976 ./strace-static-x86_64: Process 6976 attached [pid 6976] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6976] chdir("./652") = 0 [pid 6976] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6976] setpgid(0, 0) = 0 [pid 6976] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6976] write(3, "1000", 4) = 4 [pid 6976] close(3) = 0 [pid 6976] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6976] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6976] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6976] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6976] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6977], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6977 [pid 6976] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6976] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6977 attached [pid 6977] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6977] memfd_create("syzkaller", 0) = 3 [pid 6977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6977] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6977] munmap(0x7f927cba2000, 2097152) = 0 [pid 6977] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6977] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6977] close(3) = 0 [pid 6977] mkdir("./file0", 0777) = 0 [ 329.779199][ T6977] loop0: detected capacity change from 0 to 4096 [ 329.796619][ T6977] NILFS (loop0): invalid segment: Checksum error in segment payload [ 329.804791][ T6977] NILFS (loop0): trying rollback from an earlier position [ 329.822573][ T6977] NILFS (loop0): recovery complete [pid 6977] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6977] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6977] chdir("./file0") = 0 [pid 6977] ioctl(4, LOOP_CLR_FD) = 0 [pid 6977] close(4) = 0 [pid 6977] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6976] <... futex resumed>) = 0 [pid 6976] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6976] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6977] <... futex resumed>) = 1 [pid 6977] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6977] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6976] <... futex resumed>) = 0 [pid 6976] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6976] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6977] <... futex resumed>) = 1 [pid 6977] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6977] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6976] <... futex resumed>) = 0 [pid 6976] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6976] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6977] <... futex resumed>) = 1 [pid 6977] ftruncate(5, 33587195) = 0 [pid 6977] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6976] <... futex resumed>) = 0 [pid 6976] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6976] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6977] <... futex resumed>) = 1 [pid 6977] sendfile(4, 5, NULL, 281474978811909 [pid 6976] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 329.828886][ T6978] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6976] exit_group(0) = ? [pid 6977] <... sendfile resumed>) = ? [pid 6977] +++ exited with 0 +++ [pid 6976] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6976, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./652", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./652", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./652/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./652/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./652/binderfs") = 0 umount2("./652/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./652/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./652/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./652/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./652/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./652/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./652") = 0 mkdir("./653", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6979 ./strace-static-x86_64: Process 6979 attached [pid 6979] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6979] chdir("./653") = 0 [pid 6979] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6979] setpgid(0, 0) = 0 [pid 6979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6979] write(3, "1000", 4) = 4 [pid 6979] close(3) = 0 [pid 6979] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6979] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6979] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6979] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6979] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6980], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6980 [pid 6979] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6979] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6980 attached [pid 6980] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6980] memfd_create("syzkaller", 0) = 3 [pid 6980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6980] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6980] munmap(0x7f927cba2000, 2097152) = 0 [pid 6980] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6980] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6980] close(3) = 0 [pid 6980] mkdir("./file0", 0777) = 0 [pid 6980] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6980] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6980] chdir("./file0") = 0 [ 330.122045][ T6980] loop0: detected capacity change from 0 to 4096 [ 330.137888][ T6980] NILFS (loop0): invalid segment: Checksum error in segment payload [ 330.146036][ T6980] NILFS (loop0): trying rollback from an earlier position [ 330.161803][ T6980] NILFS (loop0): recovery complete [pid 6980] ioctl(4, LOOP_CLR_FD) = 0 [pid 6980] close(4) = 0 [pid 6980] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6979] <... futex resumed>) = 0 [pid 6979] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6979] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6980] <... futex resumed>) = 1 [pid 6980] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6980] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6979] <... futex resumed>) = 0 [pid 6979] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6979] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6980] <... futex resumed>) = 1 [pid 6980] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6980] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6979] <... futex resumed>) = 0 [pid 6979] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6979] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6980] <... futex resumed>) = 1 [pid 6980] ftruncate(5, 33587195) = 0 [pid 6980] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6979] <... futex resumed>) = 0 [pid 6979] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6979] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6980] <... futex resumed>) = 1 [ 330.167909][ T6981] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6980] sendfile(4, 5, NULL, 281474978811909 [pid 6979] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6979] exit_group(0) = ? [pid 6980] <... sendfile resumed>) = ? [pid 6980] +++ exited with 0 +++ [pid 6979] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6979, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./653", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./653", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./653/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./653/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./653/binderfs") = 0 umount2("./653/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./653/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./653/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./653/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./653/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./653/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./653") = 0 mkdir("./654", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6982 ./strace-static-x86_64: Process 6982 attached [pid 6982] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6982] chdir("./654") = 0 [pid 6982] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6982] setpgid(0, 0) = 0 [pid 6982] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6982] write(3, "1000", 4) = 4 [pid 6982] close(3) = 0 [pid 6982] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6982] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6982] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6982] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6982] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6983 attached [pid 6983] set_robust_list(0x7f9284fc29e0, 24 [pid 6982] <... clone resumed>, parent_tid=[6983], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6983 [pid 6982] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6982] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6983] <... set_robust_list resumed>) = 0 [pid 6983] memfd_create("syzkaller", 0) = 3 [pid 6983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6983] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6983] munmap(0x7f927cba2000, 2097152) = 0 [pid 6983] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6983] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6983] close(3) = 0 [pid 6983] mkdir("./file0", 0777) = 0 [ 330.482427][ T6983] loop0: detected capacity change from 0 to 4096 [ 330.498879][ T6983] NILFS (loop0): invalid segment: Checksum error in segment payload [ 330.507049][ T6983] NILFS (loop0): trying rollback from an earlier position [ 330.522406][ T6983] NILFS (loop0): recovery complete [pid 6983] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6983] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6983] chdir("./file0") = 0 [pid 6983] ioctl(4, LOOP_CLR_FD) = 0 [pid 6983] close(4) = 0 [pid 6983] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6982] <... futex resumed>) = 0 [pid 6982] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6982] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6983] <... futex resumed>) = 1 [pid 6983] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6983] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6982] <... futex resumed>) = 0 [pid 6982] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6982] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6983] <... futex resumed>) = 1 [pid 6983] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6983] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6982] <... futex resumed>) = 0 [pid 6982] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6982] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6983] <... futex resumed>) = 1 [pid 6983] ftruncate(5, 33587195) = 0 [pid 6983] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6982] <... futex resumed>) = 0 [pid 6982] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6982] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6983] <... futex resumed>) = 1 [ 330.528468][ T6984] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6983] sendfile(4, 5, NULL, 281474978811909 [pid 6982] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6982] exit_group(0) = ? [pid 6983] <... sendfile resumed>) = ? [pid 6983] +++ exited with 0 +++ [pid 6982] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6982, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./654", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./654", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./654/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./654/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./654/binderfs") = 0 umount2("./654/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./654/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./654/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./654/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./654/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./654/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./654") = 0 mkdir("./655", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6985 ./strace-static-x86_64: Process 6985 attached [pid 6985] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6985] chdir("./655") = 0 [pid 6985] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6985] setpgid(0, 0) = 0 [pid 6985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6985] write(3, "1000", 4) = 4 [pid 6985] close(3) = 0 [pid 6985] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6985] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6985] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6985] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6986], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6986 ./strace-static-x86_64: Process 6986 attached [pid 6985] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6986] set_robust_list(0x7f9284fc29e0, 24 [pid 6985] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6986] <... set_robust_list resumed>) = 0 [pid 6986] memfd_create("syzkaller", 0) = 3 [pid 6986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6986] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6986] munmap(0x7f927cba2000, 2097152) = 0 [pid 6986] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6986] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6986] close(3) = 0 [pid 6986] mkdir("./file0", 0777) = 0 [ 330.873939][ T6986] loop0: detected capacity change from 0 to 4096 [ 330.889928][ T6986] NILFS (loop0): invalid segment: Checksum error in segment payload [ 330.898039][ T6986] NILFS (loop0): trying rollback from an earlier position [ 330.913293][ T6986] NILFS (loop0): recovery complete [pid 6986] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6986] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6986] chdir("./file0") = 0 [pid 6986] ioctl(4, LOOP_CLR_FD) = 0 [pid 6986] close(4) = 0 [pid 6986] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6985] <... futex resumed>) = 0 [pid 6985] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6985] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6986] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6986] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6985] <... futex resumed>) = 0 [pid 6985] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6985] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6986] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6986] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6985] <... futex resumed>) = 0 [pid 6986] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6985] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6986] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6986] ftruncate(5, 33587195 [pid 6985] <... futex resumed>) = 0 [pid 6986] <... ftruncate resumed>) = 0 [pid 6986] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6986] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6985] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6985] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6986] <... futex resumed>) = 0 [pid 6985] <... futex resumed>) = 1 [pid 6986] sendfile(4, 5, NULL, 281474978811909 [ 330.919160][ T6987] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6985] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6985] exit_group(0) = ? [pid 6986] <... sendfile resumed>) = ? [pid 6986] +++ exited with 0 +++ [pid 6985] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6985, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./655", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./655", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./655/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./655/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./655/binderfs") = 0 umount2("./655/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./655/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./655/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./655/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./655/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./655/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./655") = 0 mkdir("./656", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6988 ./strace-static-x86_64: Process 6988 attached [pid 6988] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6988] chdir("./656") = 0 [pid 6988] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6988] setpgid(0, 0) = 0 [pid 6988] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6988] write(3, "1000", 4) = 4 [pid 6988] close(3) = 0 [pid 6988] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6988] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6988] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6988] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6988] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6989], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6989 ./strace-static-x86_64: Process 6989 attached [pid 6988] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6988] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6989] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6989] memfd_create("syzkaller", 0) = 3 [pid 6989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6989] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6989] munmap(0x7f927cba2000, 2097152) = 0 [pid 6989] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6989] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6989] close(3) = 0 [pid 6989] mkdir("./file0", 0777) = 0 [ 331.236677][ T6989] loop0: detected capacity change from 0 to 4096 [ 331.252196][ T6989] NILFS (loop0): invalid segment: Checksum error in segment payload [ 331.260276][ T6989] NILFS (loop0): trying rollback from an earlier position [ 331.276040][ T6989] NILFS (loop0): recovery complete [pid 6989] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6989] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6989] chdir("./file0") = 0 [pid 6989] ioctl(4, LOOP_CLR_FD) = 0 [pid 6989] close(4) = 0 [pid 6989] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6988] <... futex resumed>) = 0 [pid 6989] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6988] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6989] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6988] <... futex resumed>) = 0 [pid 6989] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6988] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6989] <... open resumed>) = 4 [pid 6989] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6988] <... futex resumed>) = 0 [pid 6989] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6988] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6989] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6988] <... futex resumed>) = 0 [pid 6989] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6988] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6989] <... open resumed>) = 5 [pid 6989] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6988] <... futex resumed>) = 0 [pid 6989] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6988] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6989] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6988] <... futex resumed>) = 0 [pid 6989] ftruncate(5, 33587195 [pid 6988] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6989] <... ftruncate resumed>) = 0 [pid 6989] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6988] <... futex resumed>) = 0 [pid 6989] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6988] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6989] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6988] <... futex resumed>) = 0 [pid 6989] sendfile(4, 5, NULL, 281474978811909 [ 331.282393][ T6990] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6988] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6988] exit_group(0) = ? [pid 6989] <... sendfile resumed>) = ? [pid 6989] +++ exited with 0 +++ [pid 6988] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6988, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./656", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./656", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./656/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./656/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./656/binderfs") = 0 umount2("./656/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./656/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./656/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./656/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./656/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./656/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./656") = 0 mkdir("./657", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6991 ./strace-static-x86_64: Process 6991 attached [pid 6991] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6991] chdir("./657") = 0 [pid 6991] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6991] setpgid(0, 0) = 0 [pid 6991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6991] write(3, "1000", 4) = 4 [pid 6991] close(3) = 0 [pid 6991] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6991] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6991] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6991] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6991] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6992 attached , parent_tid=[6992], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6992 [pid 6992] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6992] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6991] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6991] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6992] <... futex resumed>) = 0 [pid 6992] memfd_create("syzkaller", 0) = 3 [pid 6992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6992] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6992] munmap(0x7f927cba2000, 2097152) = 0 [pid 6992] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6992] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6992] close(3) = 0 [pid 6992] mkdir("./file0", 0777) = 0 [pid 6992] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6992] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 331.610059][ T6992] loop0: detected capacity change from 0 to 4096 [ 331.625671][ T6992] NILFS (loop0): invalid segment: Checksum error in segment payload [ 331.633749][ T6992] NILFS (loop0): trying rollback from an earlier position [ 331.650444][ T6992] NILFS (loop0): recovery complete [pid 6992] chdir("./file0") = 0 [pid 6992] ioctl(4, LOOP_CLR_FD) = 0 [pid 6992] close(4) = 0 [pid 6992] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6991] <... futex resumed>) = 0 [pid 6991] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6991] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6992] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 6992] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6991] <... futex resumed>) = 0 [pid 6991] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6991] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6992] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6992] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6991] <... futex resumed>) = 0 [pid 6991] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6991] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6992] <... futex resumed>) = 1 [pid 6992] ftruncate(5, 33587195) = 0 [pid 6992] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6991] <... futex resumed>) = 0 [pid 6991] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6991] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6992] <... futex resumed>) = 1 [ 331.656438][ T6993] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6992] sendfile(4, 5, NULL, 281474978811909 [pid 6991] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6991] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6991] exit_group(0) = ? [pid 6992] <... sendfile resumed>) = ? [pid 6992] +++ exited with 0 +++ [pid 6991] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6991, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- umount2("./657", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./657", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./657/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./657/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./657/binderfs") = 0 umount2("./657/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./657/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./657/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./657/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./657/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./657/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./657") = 0 mkdir("./658", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6994 ./strace-static-x86_64: Process 6994 attached [pid 6994] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6994] chdir("./658") = 0 [pid 6994] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6994] setpgid(0, 0) = 0 [pid 6994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6994] write(3, "1000", 4) = 4 [pid 6994] close(3) = 0 [pid 6994] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6994] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6994] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6994] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6994] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6995 attached , parent_tid=[6995], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6995 [pid 6995] set_robust_list(0x7f9284fc29e0, 24 [pid 6994] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6995] <... set_robust_list resumed>) = 0 [pid 6994] <... futex resumed>) = 0 [pid 6994] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6995] memfd_create("syzkaller", 0) = 3 [pid 6995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6995] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6995] munmap(0x7f927cba2000, 2097152) = 0 [pid 6995] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6995] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6995] close(3) = 0 [pid 6995] mkdir("./file0", 0777) = 0 [ 332.011523][ T6995] loop0: detected capacity change from 0 to 4096 [ 332.028205][ T6995] NILFS (loop0): invalid segment: Checksum error in segment payload [ 332.036271][ T6995] NILFS (loop0): trying rollback from an earlier position [ 332.051910][ T6995] NILFS (loop0): recovery complete [pid 6995] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6995] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6995] chdir("./file0") = 0 [pid 6995] ioctl(4, LOOP_CLR_FD) = 0 [pid 6995] close(4) = 0 [pid 6995] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6994] <... futex resumed>) = 0 [pid 6995] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6994] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6994] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6995] <... open resumed>) = 4 [pid 6995] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6994] <... futex resumed>) = 0 [pid 6994] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6994] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6995] <... futex resumed>) = 1 [pid 6995] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6995] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6994] <... futex resumed>) = 0 [pid 6994] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6995] <... futex resumed>) = 1 [pid 6994] <... futex resumed>) = 0 [pid 6995] ftruncate(5, 33587195 [pid 6994] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6995] <... ftruncate resumed>) = 0 [pid 6995] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6994] <... futex resumed>) = 0 [pid 6995] sendfile(4, 5, NULL, 281474978811909 [pid 6994] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6994] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6994] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6994] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 332.058416][ T6996] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6994] exit_group(0) = ? [pid 6995] <... sendfile resumed>) = ? [pid 6995] +++ exited with 0 +++ [pid 6994] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6994, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./658", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./658", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./658/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./658/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./658/binderfs") = 0 umount2("./658/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./658/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./658/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./658/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./658/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./658/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./658") = 0 mkdir("./659", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 6997 ./strace-static-x86_64: Process 6997 attached [pid 6997] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 6997] chdir("./659") = 0 [pid 6997] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6997] setpgid(0, 0) = 0 [pid 6997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6997] write(3, "1000", 4) = 4 [pid 6997] close(3) = 0 [pid 6997] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6997] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 6997] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6997] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6998 attached , parent_tid=[6998], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 6998 [pid 6997] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6997] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6998] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 6998] memfd_create("syzkaller", 0) = 3 [pid 6998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 6998] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6998] munmap(0x7f927cba2000, 2097152) = 0 [pid 6998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6998] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6998] close(3) = 0 [pid 6998] mkdir("./file0", 0777) = 0 [pid 6998] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6998] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6998] chdir("./file0") = 0 [pid 6998] ioctl(4, LOOP_CLR_FD) = 0 [pid 6998] close(4) = 0 [ 332.365453][ T6998] loop0: detected capacity change from 0 to 4096 [ 332.380996][ T6998] NILFS (loop0): invalid segment: Checksum error in segment payload [ 332.389063][ T6998] NILFS (loop0): trying rollback from an earlier position [ 332.404862][ T6998] NILFS (loop0): recovery complete [pid 6998] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6997] <... futex resumed>) = 0 [pid 6998] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6997] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6997] <... futex resumed>) = 0 [pid 6998] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6997] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6998] <... open resumed>) = 4 [pid 6998] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6997] <... futex resumed>) = 0 [pid 6998] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6997] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6997] <... futex resumed>) = 0 [pid 6998] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6997] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6998] <... open resumed>) = 5 [pid 6998] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6997] <... futex resumed>) = 0 [pid 6998] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6997] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6997] <... futex resumed>) = 0 [pid 6998] ftruncate(5, 33587195 [pid 6997] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6998] <... ftruncate resumed>) = 0 [pid 6998] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6997] <... futex resumed>) = 0 [pid 6998] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6997] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6997] <... futex resumed>) = 0 [pid 6998] sendfile(4, 5, NULL, 281474978811909 [ 332.411285][ T6999] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6997] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6997] exit_group(0) = ? [pid 6998] <... sendfile resumed>) = ? [pid 6998] +++ exited with 0 +++ [pid 6997] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6997, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./659", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./659", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./659/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./659/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./659/binderfs") = 0 umount2("./659/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./659/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./659/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./659/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./659/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./659/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./659") = 0 mkdir("./660", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 7000 ./strace-static-x86_64: Process 7000 attached [pid 7000] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 7000] chdir("./660") = 0 [pid 7000] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7000] setpgid(0, 0) = 0 [pid 7000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7000] write(3, "1000", 4) = 4 [pid 7000] close(3) = 0 [pid 7000] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7000] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7000] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 7000] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7000] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7001], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 7001 [pid 7000] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7000] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7001 attached [pid 7001] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 7001] memfd_create("syzkaller", 0) = 3 [pid 7001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 7001] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 7001] munmap(0x7f927cba2000, 2097152) = 0 [pid 7001] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7001] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7001] close(3) = 0 [pid 7001] mkdir("./file0", 0777) = 0 [ 332.841362][ T7001] loop0: detected capacity change from 0 to 4096 [ 332.864314][ T7001] NILFS (loop0): invalid segment: Checksum error in segment payload [ 332.872453][ T7001] NILFS (loop0): trying rollback from an earlier position [pid 7001] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 7001] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7001] chdir("./file0") = 0 [pid 7001] ioctl(4, LOOP_CLR_FD) = 0 [pid 7001] close(4) = 0 [pid 7001] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7000] <... futex resumed>) = 0 [pid 7000] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7000] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7001] <... futex resumed>) = 1 [pid 7001] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 7001] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7000] <... futex resumed>) = 0 [pid 7000] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7000] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7001] <... futex resumed>) = 1 [pid 7001] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 7001] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7000] <... futex resumed>) = 0 [pid 7000] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7000] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7001] <... futex resumed>) = 1 [pid 7001] ftruncate(5, 33587195) = 0 [pid 7001] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7000] <... futex resumed>) = 0 [pid 7000] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 332.895583][ T7001] NILFS (loop0): recovery complete [pid 7000] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7001] <... futex resumed>) = 1 [pid 7001] sendfile(4, 5, NULL, 281474978811909 [pid 7000] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 332.924762][ T7002] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 7000] exit_group(0) = ? [pid 7001] <... sendfile resumed>) = ? [pid 7001] +++ exited with 0 +++ [pid 7000] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7000, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./660", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./660", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./660/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./660/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./660/binderfs") = 0 umount2("./660/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./660/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./660/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./660/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./660/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./660/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./660") = 0 mkdir("./661", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 7003 ./strace-static-x86_64: Process 7003 attached [pid 7003] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 7003] chdir("./661") = 0 [pid 7003] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7003] setpgid(0, 0) = 0 [pid 7003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7003] write(3, "1000", 4) = 4 [pid 7003] close(3) = 0 [pid 7003] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7003] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7003] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 7003] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7003] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7004], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 7004 [pid 7003] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7003] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7004 attached [pid 7004] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 7004] memfd_create("syzkaller", 0) = 3 [pid 7004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 7004] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 7004] munmap(0x7f927cba2000, 2097152) = 0 [pid 7004] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7004] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7004] close(3) = 0 [pid 7004] mkdir("./file0", 0777) = 0 [ 333.209625][ T7004] loop0: detected capacity change from 0 to 4096 [ 333.225145][ T7004] NILFS (loop0): invalid segment: Checksum error in segment payload [ 333.233249][ T7004] NILFS (loop0): trying rollback from an earlier position [ 333.248413][ T7004] NILFS (loop0): recovery complete [pid 7004] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 7004] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7004] chdir("./file0") = 0 [pid 7004] ioctl(4, LOOP_CLR_FD) = 0 [pid 7004] close(4) = 0 [pid 7004] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7003] <... futex resumed>) = 0 [pid 7003] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7004] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 7003] <... futex resumed>) = 0 [pid 7003] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7004] <... open resumed>) = 4 [pid 7004] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7003] <... futex resumed>) = 0 [pid 7004] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 7003] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7004] <... open resumed>) = 5 [pid 7003] <... futex resumed>) = 0 [pid 7003] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7004] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7003] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7004] <... futex resumed>) = 0 [pid 7003] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7004] ftruncate(5, 33587195 [pid 7003] <... futex resumed>) = 0 [pid 7004] <... ftruncate resumed>) = 0 [pid 7003] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7004] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7003] <... futex resumed>) = 0 [pid 7004] sendfile(4, 5, NULL, 281474978811909 [pid 7003] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 333.254542][ T7005] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 7003] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7003] exit_group(0 [pid 7004] <... sendfile resumed>) = ? [pid 7003] <... exit_group resumed>) = ? [pid 7004] +++ exited with 0 +++ [pid 7003] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7003, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./661", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./661", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./661/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./661/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./661/binderfs") = 0 umount2("./661/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./661/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./661/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./661/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./661/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./661/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./661") = 0 mkdir("./662", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 7006 ./strace-static-x86_64: Process 7006 attached [pid 7006] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 7006] chdir("./662") = 0 [pid 7006] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7006] setpgid(0, 0) = 0 [pid 7006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7006] write(3, "1000", 4) = 4 [pid 7006] close(3) = 0 [pid 7006] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7006] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 7006] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7006] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7007 attached , parent_tid=[7007], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 7007 [pid 7007] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 7007] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7006] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7006] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7007] <... futex resumed>) = 0 [pid 7007] memfd_create("syzkaller", 0) = 3 [pid 7007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 7007] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 7007] munmap(0x7f927cba2000, 2097152) = 0 [pid 7007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7007] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7007] close(3) = 0 [pid 7007] mkdir("./file0", 0777) = 0 [pid 7007] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 7007] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7007] chdir("./file0") = 0 [pid 7007] ioctl(4, LOOP_CLR_FD) = 0 [pid 7007] close(4) = 0 [pid 7007] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 333.592234][ T7007] loop0: detected capacity change from 0 to 4096 [ 333.607107][ T7007] NILFS (loop0): invalid segment: Checksum error in segment payload [ 333.615178][ T7007] NILFS (loop0): trying rollback from an earlier position [ 333.630050][ T7007] NILFS (loop0): recovery complete [pid 7007] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7006] <... futex resumed>) = 0 [pid 7006] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7006] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7007] <... futex resumed>) = 0 [pid 7007] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 7007] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7006] <... futex resumed>) = 0 [pid 7007] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7006] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7007] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7006] <... futex resumed>) = 0 [pid 7007] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 7006] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7007] <... open resumed>) = 5 [pid 7007] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7006] <... futex resumed>) = 0 [pid 7007] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7006] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7007] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7006] <... futex resumed>) = 0 [pid 7007] ftruncate(5, 33587195 [pid 7006] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7007] <... ftruncate resumed>) = 0 [pid 7007] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7006] <... futex resumed>) = 0 [pid 7007] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7006] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7007] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7006] <... futex resumed>) = 0 [pid 7007] sendfile(4, 5, NULL, 281474978811909 [ 333.636394][ T7008] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 7006] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7006] exit_group(0) = ? [pid 7007] <... sendfile resumed>) = ? [pid 7007] +++ exited with 0 +++ [pid 7006] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7006, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- umount2("./662", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./662", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./662/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./662/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./662/binderfs") = 0 umount2("./662/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./662/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./662/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./662/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./662/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./662/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./662") = 0 mkdir("./663", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 7009 ./strace-static-x86_64: Process 7009 attached [pid 7009] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 7009] chdir("./663") = 0 [pid 7009] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7009] setpgid(0, 0) = 0 [pid 7009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7009] write(3, "1000", 4) = 4 [pid 7009] close(3) = 0 [pid 7009] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7009] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7009] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 7009] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7009] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7010], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 7010 [pid 7009] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7009] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7010 attached [pid 7010] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 7010] memfd_create("syzkaller", 0) = 3 [pid 7010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 7010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 7010] munmap(0x7f927cba2000, 2097152) = 0 [pid 7010] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7010] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7010] close(3) = 0 [pid 7010] mkdir("./file0", 0777) = 0 [pid 7010] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 7010] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7010] chdir("./file0") = 0 [ 333.979595][ T7010] loop0: detected capacity change from 0 to 4096 [ 333.995559][ T7010] NILFS (loop0): invalid segment: Checksum error in segment payload [ 334.003624][ T7010] NILFS (loop0): trying rollback from an earlier position [ 334.018140][ T7010] NILFS (loop0): recovery complete [pid 7010] ioctl(4, LOOP_CLR_FD) = 0 [pid 7010] close(4) = 0 [pid 7010] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7010] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7009] <... futex resumed>) = 0 [pid 7009] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7010] <... futex resumed>) = 0 [pid 7009] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7010] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 7010] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7009] <... futex resumed>) = 0 [pid 7010] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7009] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7009] <... futex resumed>) = 0 [pid 7010] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 7009] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7010] <... open resumed>) = 5 [pid 7010] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7009] <... futex resumed>) = 0 [pid 7010] ftruncate(5, 33587195 [pid 7009] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7010] <... ftruncate resumed>) = 0 [pid 7009] <... futex resumed>) = 0 [pid 7009] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7010] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7010] <... futex resumed>) = 0 [pid 7009] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7010] sendfile(4, 5, NULL, 281474978811909 [ 334.024260][ T7011] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 7009] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7009] exit_group(0) = ? [pid 7010] <... sendfile resumed>) = ? [pid 7010] +++ exited with 0 +++ [pid 7009] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7009, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./663", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./663", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./663/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./663/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./663/binderfs") = 0 umount2("./663/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./663/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./663/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./663/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./663/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./663/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./663") = 0 mkdir("./664", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 7012 ./strace-static-x86_64: Process 7012 attached [pid 7012] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 7012] chdir("./664") = 0 [pid 7012] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7012] setpgid(0, 0) = 0 [pid 7012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7012] write(3, "1000", 4) = 4 [pid 7012] close(3) = 0 [pid 7012] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7012] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7012] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 7012] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7012] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7013], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 7013 [pid 7012] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7012] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7013 attached [pid 7013] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 7013] memfd_create("syzkaller", 0) = 3 [pid 7013] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 7013] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 7013] munmap(0x7f927cba2000, 2097152) = 0 [pid 7013] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7013] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7013] close(3) = 0 [pid 7013] mkdir("./file0", 0777) = 0 [ 334.341282][ T7013] loop0: detected capacity change from 0 to 4096 [ 334.357945][ T7013] NILFS (loop0): invalid segment: Checksum error in segment payload [ 334.366129][ T7013] NILFS (loop0): trying rollback from an earlier position [ 334.381080][ T7013] NILFS (loop0): recovery complete [pid 7013] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 7013] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7013] chdir("./file0") = 0 [pid 7013] ioctl(4, LOOP_CLR_FD) = 0 [pid 7013] close(4) = 0 [pid 7013] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7012] <... futex resumed>) = 0 [pid 7013] <... futex resumed>) = 1 [pid 7012] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7012] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7013] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 7013] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7012] <... futex resumed>) = 0 [pid 7013] <... futex resumed>) = 1 [pid 7012] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7012] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7013] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 7013] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7012] <... futex resumed>) = 0 [pid 7012] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7012] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7013] ftruncate(5, 33587195) = 0 [pid 7013] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7012] <... futex resumed>) = 0 [pid 7013] sendfile(4, 5, NULL, 281474978811909 [pid 7012] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 334.387072][ T7014] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 7012] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7012] exit_group(0) = ? [pid 7013] <... sendfile resumed>) = ? [pid 7013] +++ exited with 0 +++ [pid 7012] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7012, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./664", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./664", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./664/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./664/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./664/binderfs") = 0 umount2("./664/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./664/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./664/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./664/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./664/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./664/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./664") = 0 mkdir("./665", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 7015 ./strace-static-x86_64: Process 7015 attached [pid 7015] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 7015] chdir("./665") = 0 [pid 7015] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7015] setpgid(0, 0) = 0 [pid 7015] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7015] write(3, "1000", 4) = 4 [pid 7015] close(3) = 0 [pid 7015] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7015] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7015] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 7015] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7015] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7016 attached , parent_tid=[7016], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 7016 [pid 7015] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7015] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7016] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 7016] memfd_create("syzkaller", 0) = 3 [pid 7016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 7016] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 7016] munmap(0x7f927cba2000, 2097152) = 0 [pid 7016] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7016] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7016] close(3) = 0 [pid 7016] mkdir("./file0", 0777) = 0 [ 334.723335][ T7016] loop0: detected capacity change from 0 to 4096 [ 334.740743][ T7016] NILFS (loop0): invalid segment: Checksum error in segment payload [ 334.748818][ T7016] NILFS (loop0): trying rollback from an earlier position [ 334.764811][ T7016] NILFS (loop0): recovery complete [pid 7016] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 7016] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7016] chdir("./file0") = 0 [pid 7016] ioctl(4, LOOP_CLR_FD) = 0 [pid 7016] close(4) = 0 [pid 7016] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7016] futex(0x7f928509c7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7015] <... futex resumed>) = 0 [pid 7015] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7015] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7016] <... futex resumed>) = 0 [pid 7016] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 7016] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7015] <... futex resumed>) = 0 [pid 7015] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7015] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7016] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 7016] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7015] <... futex resumed>) = 0 [pid 7015] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7016] <... futex resumed>) = 1 [pid 7015] <... futex resumed>) = 0 [pid 7016] ftruncate(5, 33587195 [pid 7015] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7016] <... ftruncate resumed>) = 0 [pid 7016] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7015] <... futex resumed>) = 0 [pid 7016] sendfile(4, 5, NULL, 281474978811909 [pid 7015] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 334.770681][ T7017] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 7015] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7015] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7015] exit_group(0 [pid 7016] <... sendfile resumed>) = ? [pid 7015] <... exit_group resumed>) = ? [pid 7016] +++ exited with 0 +++ [pid 7015] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7015, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./665", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./665", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./665/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./665/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./665/binderfs") = 0 umount2("./665/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./665/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./665/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./665/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./665/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e37660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e37660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./665/file0") = 0 getdents64(3, 0x555555e2f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./665") = 0 mkdir("./666", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e2e5d0) = 7018 ./strace-static-x86_64: Process 7018 attached [pid 7018] set_robust_list(0x555555e2e5e0, 24) = 0 [pid 7018] chdir("./666") = 0 [pid 7018] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7018] setpgid(0, 0) = 0 [pid 7018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7018] write(3, "1000", 4) = 4 [pid 7018] close(3) = 0 [pid 7018] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7018] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7018] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9284fa2000 [pid 7018] mprotect(0x7f9284fa3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7018] clone(child_stack=0x7f9284fc23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7019], tls=0x7f9284fc2700, child_tidptr=0x7f9284fc29d0) = 7019 [pid 7018] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7018] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7019 attached [pid 7019] set_robust_list(0x7f9284fc29e0, 24) = 0 [pid 7019] memfd_create("syzkaller", 0) = 3 [pid 7019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f927cba2000 [pid 7019] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 7019] munmap(0x7f927cba2000, 2097152) = 0 [pid 7019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7019] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7019] close(3) = 0 [pid 7019] mkdir("./file0", 0777) = 0 [ 335.093661][ T7019] loop0: detected capacity change from 0 to 4096 [ 335.109247][ T7019] NILFS (loop0): invalid segment: Checksum error in segment payload [ 335.117454][ T7019] NILFS (loop0): trying rollback from an earlier position [ 335.133930][ T7019] NILFS (loop0): recovery complete [pid 7019] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 7019] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7019] chdir("./file0") = 0 [pid 7019] ioctl(4, LOOP_CLR_FD) = 0 [pid 7019] close(4) = 0 [pid 7019] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7018] <... futex resumed>) = 0 [pid 7018] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7018] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7019] <... futex resumed>) = 1 [pid 7019] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 7019] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7018] <... futex resumed>) = 0 [pid 7018] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7018] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7019] <... futex resumed>) = 1 [pid 7019] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 7019] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7018] <... futex resumed>) = 0 [pid 7018] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7018] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7019] <... futex resumed>) = 1 [pid 7019] ftruncate(5, 33587195) = 0 [pid 7019] futex(0x7f928509c7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7018] <... futex resumed>) = 0 [pid 7018] futex(0x7f928509c7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7018] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7019] <... futex resumed>) = 1 [ 335.140195][ T7020] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 335.181245][ T7020] ------------[ cut here ]------------ [pid 7019] sendfile(4, 5, NULL, 281474978811909 [pid 7018] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7018] futex(0x7f928509c7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 335.187108][ T7020] WARNING: CPU: 0 PID: 7020 at fs/nilfs2/btree.c:2283 nilfs_btree_assign+0x978/0xdf0 [ 335.196836][ T7020] Modules linked in: [ 335.200962][ T7020] CPU: 0 PID: 7020 Comm: segctord Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 335.210408][ T7020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 335.220543][ T7020] RIP: 0010:nilfs_btree_assign+0x978/0xdf0 [ 335.226492][ T7020] Code: 00 00 00 00 e9 83 f8 ff ff e8 b4 78 55 fe 44 89 e6 bf fe ff ff ff e8 c7 74 55 fe 41 83 fc fe 0f 85 8a fb ff ff e8 98 78 55 fe <0f> 0b e9 7e fb ff ff e8 8c 78 55 fe 48 89 eb 48 c7 44 24 28 18 00 [ 335.246196][ T7020] RSP: 0018:ffffc900060c79f0 EFLAGS: 00010293 [ 335.252312][ T7020] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 335.260376][ T7020] RDX: ffff888023a6bb80 RSI: ffffffff832eab18 RDI: 0000000000000005 [ 335.268435][ T7020] RBP: ffff888072053358 R08: 0000000000000005 R09: 00000000fffffffe [ 335.276498][ T7020] R10: 00000000fffffffe R11: 0000000000094001 R12: 00000000fffffffe [ 335.284529][ T7020] R13: ffffc900060c7c78 R14: ffffc900060c7cb8 R15: 0000000000000082 [ 335.292603][ T7020] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 335.301613][ T7020] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.308294][ T7020] CR2: 00007f927cda1000 CR3: 0000000073198000 CR4: 00000000003506f0 [ 335.316520][ T7020] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 335.324584][ T7020] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 335.332588][ T7020] Call Trace: [ 335.335924][ T7020] [ 335.338888][ T7020] ? lock_acquire+0x32/0xc0 [pid 7018] exit_group(0 [pid 7019] <... sendfile resumed>) = ? [pid 7018] <... exit_group resumed>) = ? [pid 7019] +++ exited with 0 +++ [pid 7018] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7018, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- umount2("./666", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./666", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555e2f620 /* 4 entries */, 32768) = 112 umount2("./666/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 335.343432][ T7020] ? nilfs_bmap_assign+0x2f/0x180 [ 335.348550][ T7020] ? nilfs_btree_seek_key+0x450/0x450 [ 335.354029][ T7020] ? down_write+0x14f/0x200 [ 335.358619][ T7020] ? down_write_killable_nested+0x250/0x250 [ 335.364623][ T7020] ? up_write+0x1b4/0x520 [ 335.369013][ T7020] ? __getblk_gfp+0x4f/0x80 [ 335.373620][ T7020] nilfs_bmap_assign+0x87/0x180 [ 335.378566][ T7020] nilfs_segctor_do_construct+0x14d2/0x7200 [ 335.384616][ T7020] ? nilfs_segctor_abort_construction+0xe20/0xe20 lstat("./666/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./666/binderfs") = 0 [ 335.391767][ T7020] ? do_raw_spin_lock+0x124/0x2b0 [ 335.396944][ T7020] ? spin_bug+0x1c0/0x1c0 [ 335.402028][ T7020] ? do_raw_spin_unlock+0x175/0x230 [ 335.407307][ T7020] ? _raw_spin_unlock+0x28/0x40 [ 335.412213][ T7020] nilfs_segctor_construct+0x8e3/0xb30 [ 335.417751][ T7020] ? rcu_is_watching+0x12/0xb0 [ 335.422555][ T7020] ? trace_nilfs2_transaction_transition+0x17d/0x1c0 [ 335.429311][ T7020] nilfs_segctor_thread+0x3c7/0xf30 [ 335.434601][ T7020] ? nilfs_segctor_construct+0xb30/0xb30 [ 335.440272][ T7020] ? prepare_to_swait_exclusive+0x240/0x240 [ 335.446249][ T7020] ? __kthread_parkme+0x163/0x220 [ 335.451317][ T7020] ? nilfs_segctor_construct+0xb30/0xb30 [ 335.457027][ T7020] kthread+0x344/0x440 [ 335.461144][ T7020] ? kthread_complete_and_exit+0x40/0x40 [ 335.466862][ T7020] ret_from_fork+0x1f/0x30 [ 335.471349][ T7020] [ 335.474442][ T7020] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 335.481746][ T7020] CPU: 0 PID: 7020 Comm: segctord Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 335.491051][ T7020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 335.501124][ T7020] Call Trace: [ 335.504424][ T7020] [ 335.507373][ T7020] dump_stack_lvl+0xd9/0x150 [ 335.512010][ T7020] panic+0x686/0x730 [ 335.515944][ T7020] ? panic_smp_self_stop+0xa0/0xa0 [ 335.521090][ T7020] ? show_trace_log_lvl+0x285/0x390 [ 335.526341][ T7020] ? nilfs_btree_assign+0x978/0xdf0 [ 335.531565][ T7020] check_panic_on_warn+0xb1/0xc0 [ 335.536540][ T7020] __warn+0xf2/0x390 [ 335.540473][ T7020] ? nilfs_btree_assign+0x978/0xdf0 [ 335.545696][ T7020] report_bug+0x2da/0x500 [ 335.550081][ T7020] handle_bug+0x3c/0x70 [ 335.554251][ T7020] exc_invalid_op+0x18/0x50 [ 335.558773][ T7020] asm_exc_invalid_op+0x1a/0x20 [ 335.563842][ T7020] RIP: 0010:nilfs_btree_assign+0x978/0xdf0 [ 335.569680][ T7020] Code: 00 00 00 00 e9 83 f8 ff ff e8 b4 78 55 fe 44 89 e6 bf fe ff ff ff e8 c7 74 55 fe 41 83 fc fe 0f 85 8a fb ff ff e8 98 78 55 fe <0f> 0b e9 7e fb ff ff e8 8c 78 55 fe 48 89 eb 48 c7 44 24 28 18 00 [ 335.589400][ T7020] RSP: 0018:ffffc900060c79f0 EFLAGS: 00010293 [ 335.595574][ T7020] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 335.603560][ T7020] RDX: ffff888023a6bb80 RSI: ffffffff832eab18 RDI: 0000000000000005 [ 335.611549][ T7020] RBP: ffff888072053358 R08: 0000000000000005 R09: 00000000fffffffe [ 335.619535][ T7020] R10: 00000000fffffffe R11: 0000000000094001 R12: 00000000fffffffe [ 335.627541][ T7020] R13: ffffc900060c7c78 R14: ffffc900060c7cb8 R15: 0000000000000082 [ 335.635543][ T7020] ? nilfs_btree_assign+0x978/0xdf0 [ 335.640777][ T7020] ? lock_acquire+0x32/0xc0 [ 335.645319][ T7020] ? nilfs_bmap_assign+0x2f/0x180 [ 335.650374][ T7020] ? nilfs_btree_seek_key+0x450/0x450 [ 335.655777][ T7020] ? down_write+0x14f/0x200 [ 335.660315][ T7020] ? down_write_killable_nested+0x250/0x250 [ 335.666250][ T7020] ? up_write+0x1b4/0x520 [ 335.670602][ T7020] ? __getblk_gfp+0x4f/0x80 [ 335.675137][ T7020] nilfs_bmap_assign+0x87/0x180 [ 335.680026][ T7020] nilfs_segctor_do_construct+0x14d2/0x7200 [ 335.685984][ T7020] ? nilfs_segctor_abort_construction+0xe20/0xe20 [ 335.692435][ T7020] ? do_raw_spin_lock+0x124/0x2b0 [ 335.697493][ T7020] ? spin_bug+0x1c0/0x1c0 [ 335.701875][ T7020] ? do_raw_spin_unlock+0x175/0x230 [ 335.707115][ T7020] ? _raw_spin_unlock+0x28/0x40 [ 335.712002][ T7020] nilfs_segctor_construct+0x8e3/0xb30 [ 335.717500][ T7020] ? rcu_is_watching+0x12/0xb0 [ 335.722286][ T7020] ? trace_nilfs2_transaction_transition+0x17d/0x1c0 [ 335.729000][ T7020] nilfs_segctor_thread+0x3c7/0xf30 [ 335.734247][ T7020] ? nilfs_segctor_construct+0xb30/0xb30 [ 335.739927][ T7020] ? prepare_to_swait_exclusive+0x240/0x240 [ 335.745868][ T7020] ? __kthread_parkme+0x163/0x220 [ 335.750934][ T7020] ? nilfs_segctor_construct+0xb30/0xb30 [ 335.756605][ T7020] kthread+0x344/0x440 [ 335.760701][ T7020] ? kthread_complete_and_exit+0x40/0x40 [ 335.766366][ T7020] ret_from_fork+0x1f/0x30 [ 335.770838][ T7020] [ 335.774041][ T7020] Kernel Offset: disabled [ 335.778484][ T7020] Rebooting in 86400 seconds..