./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor904581472 <...> Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. execve("./syz-executor904581472", ["./syz-executor904581472"], 0x7ffdce99fd10 /* 10 vars */) = 0 brk(NULL) = 0x55557f95b000 brk(0x55557f95bd00) = 0x55557f95bd00 arch_prctl(ARCH_SET_FS, 0x55557f95b380) = 0 set_tid_address(0x55557f95b650) = 5832 set_robust_list(0x55557f95b660, 24) = 0 rseq(0x55557f95bca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor904581472", 4096) = 27 getrandom("\xe6\x03\x8a\xc5\xaf\x04\xe3\x32", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557f95bd00 brk(0x55557f97cd00) = 0x55557f97cd00 brk(0x55557f97d000) = 0x55557f97d000 mprotect(0x7ff1870c9000, 16384, PROT_READ) = 0 mmap(0x3ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3ffffffff000 mmap(0x400000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400000000000 mmap(0x400001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400001000000 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = 0 [ 90.924933][ T5832] cgroup: Unknown subsys name 'net' umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = 0 umount2("/syzcgroup/cpu", 0) = 0 [ 91.077364][ T5832] cgroup: Unknown subsys name 'cpuset' mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "memory") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) [ 91.130637][ T5832] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) mkdir("./syzkaller.Wmhrj1", 0700) = 0 chmod("./syzkaller.Wmhrj1", 0777) = 0 chdir("./syzkaller.Wmhrj1") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5833 attached [pid 5833] set_robust_list(0x55557f95b660, 24 [pid 5832] <... clone resumed>, child_tidptr=0x55557f95b650) = 5833 [pid 5833] <... set_robust_list resumed>) = 0 [pid 5833] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5833] getppid() = 0 [pid 5833] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5833] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5833] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5833] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5833] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5833] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5833] unshare(CLONE_NEWNS) = 0 [pid 5833] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5833] unshare(CLONE_NEWIPC) = 0 [pid 5833] unshare(CLONE_NEWCGROUP) = 0 [pid 5833] unshare(CLONE_NEWUTS) = 0 [pid 5833] unshare(CLONE_SYSVSEM) = 0 [pid 5833] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] write(3, "16777216", 8) = 8 [pid 5833] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] write(3, "536870912", 9) = 9 [pid 5833] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] write(3, "1024", 4) = 4 [pid 5833] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] write(3, "8192", 4) = 4 [pid 5833] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] write(3, "1024", 4) = 4 [pid 5833] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] write(3, "1024", 4) = 4 [pid 5833] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5833] close(3) = 0 [pid 5833] getpid() = 1 [pid 5833] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<) = 0 [pid 5833] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 7 entries */, 32768) = 208 [pid 5833] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5833] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557f964730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557f964730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./0/file1") = 0 [pid 5833] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./0/binderfs") = 0 [pid 5833] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./0/cgroup.net") = 0 [pid 5833] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./0/cgroup.cpu") = 0 [pid 5833] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./0/cgroup") = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./0") = 0 [pid 5833] mkdir("./1", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5839 attached , child_tidptr=0x55557f95b650) = 3 [pid 5839] set_robust_list(0x55557f95b660, 24) = 0 [pid 5839] chdir("./1") = 0 [pid 5839] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5839] setpgid(0, 0) = 0 [pid 5839] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5839] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5839] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5839] write(3, "1000", 4) = 4 [pid 5839] close(3) = 0 [pid 5839] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5839] write(1, "executing program\n", 18) = 18 [pid 5839] ioctl(-1, KVM_CREATE_VM, 0) = -1 EBADF (Bad file descriptor) [pid 5839] memfd_create("syzkaller", 0) = 3 [pid 5839] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff17ec00000 [pid 5839] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5839] munmap(0x7ff17ec00000, 138412032) = 0 [pid 5839] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5839] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5839] close(3) = 0 [pid 5839] close(4) = 0 [pid 5839] mkdir("./file1", 0777) = 0 [ 92.685354][ T5839] loop0: detected capacity change from 0 to 4096 [ 92.715356][ T5839] NILFS (loop0): invalid segment: Checksum error in segment payload [ 92.723774][ T5839] NILFS (loop0): trying rollback from an earlier position [pid 5839] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 5839] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5839] chdir("./file1") = 0 [pid 5839] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5839] open_by_handle_at(-1, NULL, O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 5839] dup(-1) = -1 EBADF (Bad file descriptor) [pid 5839] ioctl(-1, KVM_SET_USER_MEMORY_REGION, NULL) = -1 EBADF (Bad file descriptor) [pid 5839] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_DIRECT|O_CLOEXEC, 000) = -1 EFAULT (Bad address) [pid 5839] prctl(PR_SCHED_CORE, PR_SCHED_CORE_CREATE, 0, 0x2 /* PIDTYPE_PGID */, NULL) = 0 [pid 5839] sendmsg(-1, NULL, MSG_CONFIRM|MSG_NOSIGNAL) = -1 EBADF (Bad file descriptor) [pid 5839] ioctl(-1, KVM_RUN, 0) = -1 EBADF (Bad file descriptor) [pid 5839] close(3) = 0 [pid 5839] close(4) = -1 EBADF (Bad file descriptor) [pid 5839] close(5) = -1 EBADF (Bad file descriptor) [pid 5839] close(6) = -1 EBADF (Bad file descriptor) [pid 5839] close(7) = -1 EBADF (Bad file descriptor) [pid 5839] close(8) = -1 EBADF (Bad file descriptor) [pid 5839] close(9) = -1 EBADF (Bad file descriptor) [pid 5839] close(10) = -1 EBADF (Bad file descriptor) [pid 5839] close(11) = -1 EBADF (Bad file descriptor) [pid 5839] close(12) = -1 EBADF (Bad file descriptor) [pid 5839] close(13) = -1 EBADF (Bad file descriptor) [pid 5839] close(14) = -1 EBADF (Bad file descriptor) [pid 5839] close(15) = -1 EBADF (Bad file descriptor) [pid 5839] close(16) = -1 EBADF (Bad file descriptor) [pid 5839] close(17) = -1 EBADF (Bad file descriptor) [ 92.740559][ T5839] NILFS (loop0): recovery complete [ 92.746866][ T5840] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5839] close(18) = -1 EBADF (Bad file descriptor) [pid 5839] close(19) = -1 EBADF (Bad file descriptor) [pid 5839] close(20) = -1 EBADF (Bad file descriptor) [pid 5839] close(21) = -1 EBADF (Bad file descriptor) [pid 5839] close(22) = -1 EBADF (Bad file descriptor) [pid 5839] close(23) = -1 EBADF (Bad file descriptor) [pid 5839] close(24) = -1 EBADF (Bad file descriptor) [pid 5839] close(25) = -1 EBADF (Bad file descriptor) [pid 5839] close(26) = -1 EBADF (Bad file descriptor) [pid 5839] close(27) = -1 EBADF (Bad file descriptor) [pid 5839] close(28) = -1 EBADF (Bad file descriptor) [pid 5839] close(29) = -1 EBADF (Bad file descriptor) [pid 5839] exit_group(0) = ? [pid 5839] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5833] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 7 entries */, 32768) = 208 [pid 5833] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5833] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557f964730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557f964730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./1/file1") = 0 [pid 5833] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./1/binderfs") = 0 [pid 5833] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./1/cgroup.net") = 0 [pid 5833] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./1/cgroup.cpu") = 0 [pid 5833] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./1/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./1/cgroup") = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./1") = 0 [pid 5833] mkdir("./2", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [ 92.785086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5841 attached [pid 5841] set_robust_list(0x55557f95b660, 24) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x55557f95b650) = 4 [pid 5841] chdir("./2") = 0 [pid 5841] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5841] setpgid(0, 0) = 0 [pid 5841] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5841] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5841] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5841] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5841] write(3, "1000", 4) = 4 [pid 5841] close(3) = 0 [pid 5841] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5841] write(1, "executing program\n", 18) = 18 [pid 5841] ioctl(-1, KVM_CREATE_VM, 0) = -1 EBADF (Bad file descriptor) [pid 5841] memfd_create("syzkaller", 0) = 3 [pid 5841] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff17ec00000 [pid 5841] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5841] munmap(0x7ff17ec00000, 138412032) = 0 [pid 5841] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5841] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5841] close(3) = 0 [pid 5841] close(4) = 0 [pid 5841] mkdir("./file1", 0777) = 0 [ 92.936426][ T5841] loop0: detected capacity change from 0 to 4096 [ 92.964282][ T5841] NILFS (loop0): invalid segment: Checksum error in segment payload [ 92.972520][ T5841] NILFS (loop0): trying rollback from an earlier position [pid 5841] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 5841] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5841] chdir("./file1") = 0 [pid 5841] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5841] open_by_handle_at(-1, NULL, O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 5841] dup(-1) = -1 EBADF (Bad file descriptor) [pid 5841] ioctl(-1, KVM_SET_USER_MEMORY_REGION, NULL) = -1 EBADF (Bad file descriptor) [pid 5841] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_DIRECT|O_CLOEXEC, 000) = -1 EFAULT (Bad address) [pid 5841] prctl(PR_SCHED_CORE, PR_SCHED_CORE_CREATE, 0, 0x2 /* PIDTYPE_PGID */, NULL) = 0 [pid 5841] sendmsg(-1, NULL, MSG_CONFIRM|MSG_NOSIGNAL) = -1 EBADF (Bad file descriptor) [pid 5841] ioctl(-1, KVM_RUN, 0) = -1 EBADF (Bad file descriptor) [pid 5841] close(3) = 0 [pid 5841] close(4) = -1 EBADF (Bad file descriptor) [pid 5841] close(5) = -1 EBADF (Bad file descriptor) [pid 5841] close(6) = -1 EBADF (Bad file descriptor) [pid 5841] close(7) = -1 EBADF (Bad file descriptor) [pid 5841] close(8) = -1 EBADF (Bad file descriptor) [pid 5841] close(9) = -1 EBADF (Bad file descriptor) [pid 5841] close(10) = -1 EBADF (Bad file descriptor) [pid 5841] close(11) = -1 EBADF (Bad file descriptor) [pid 5841] close(12) = -1 EBADF (Bad file descriptor) [pid 5841] close(13) = -1 EBADF (Bad file descriptor) [pid 5841] close(14) = -1 EBADF (Bad file descriptor) [pid 5841] close(15) = -1 EBADF (Bad file descriptor) [pid 5841] close(16) = -1 EBADF (Bad file descriptor) [pid 5841] close(17) = -1 EBADF (Bad file descriptor) [pid 5841] close(18) = -1 EBADF (Bad file descriptor) [pid 5841] close(19) = -1 EBADF (Bad file descriptor) [pid 5841] close(20) = -1 EBADF (Bad file descriptor) [pid 5841] close(21) = -1 EBADF (Bad file descriptor) [pid 5841] close(22) = -1 EBADF (Bad file descriptor) [pid 5841] close(23) = -1 EBADF (Bad file descriptor) [pid 5841] close(24) = -1 EBADF (Bad file descriptor) [pid 5841] close(25) = -1 EBADF (Bad file descriptor) [pid 5841] close(26) = -1 EBADF (Bad file descriptor) [pid 5841] close(27) = -1 EBADF (Bad file descriptor) [pid 5841] close(28) = -1 EBADF (Bad file descriptor) [pid 5841] close(29) = -1 EBADF (Bad file descriptor) [pid 5841] exit_group(0) = ? [ 92.990161][ T5841] NILFS (loop0): recovery complete [ 92.996308][ T5842] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5841] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5833] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 7 entries */, 32768) = 208 [pid 5833] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5833] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557f964730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557f964730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./2/file1") = 0 [pid 5833] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./2/binderfs") = 0 [pid 5833] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./2/cgroup.net") = 0 [pid 5833] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./2/cgroup.cpu") = 0 [pid 5833] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./2/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./2/cgroup") = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./2") = 0 [pid 5833] mkdir("./3", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5843 attached , child_tidptr=0x55557f95b650) = 5 [pid 5843] set_robust_list(0x55557f95b660, 24) = 0 [pid 5843] chdir("./3") = 0 [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5843] setpgid(0, 0) = 0 [pid 5843] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5843] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5843] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5843] write(3, "1000", 4) = 4 [pid 5843] close(3) = 0 [pid 5843] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5843] write(1, "executing program\n", 18executing program ) = 18 [pid 5843] ioctl(-1, KVM_CREATE_VM, 0) = -1 EBADF (Bad file descriptor) [pid 5843] memfd_create("syzkaller", 0) = 3 [pid 5843] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff17ec00000 [pid 5843] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5843] munmap(0x7ff17ec00000, 138412032) = 0 [pid 5843] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5843] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5843] close(3) = 0 [pid 5843] close(4) = 0 [pid 5843] mkdir("./file1", 0777) = 0 [ 93.418075][ T5843] loop0: detected capacity change from 0 to 4096 [pid 5843] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 5843] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5843] chdir("./file1") = 0 [pid 5843] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5843] open_by_handle_at(-1, NULL, O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 5843] dup(-1) = -1 EBADF (Bad file descriptor) [pid 5843] ioctl(-1, KVM_SET_USER_MEMORY_REGION, NULL) = -1 EBADF (Bad file descriptor) [pid 5843] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_DIRECT|O_CLOEXEC, 000) = -1 EFAULT (Bad address) [ 93.460829][ T5843] NILFS (loop0): invalid segment: Checksum error in segment payload [ 93.468877][ T5843] NILFS (loop0): trying rollback from an earlier position [ 93.488746][ T5843] NILFS (loop0): recovery complete [ 93.495046][ T5844] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5843] prctl(PR_SCHED_CORE, PR_SCHED_CORE_CREATE, 0, 0x2 /* PIDTYPE_PGID */, NULL) = 0 [pid 5843] sendmsg(-1, NULL, MSG_CONFIRM|MSG_NOSIGNAL) = -1 EBADF (Bad file descriptor) [pid 5843] ioctl(-1, KVM_RUN, 0) = -1 EBADF (Bad file descriptor) [pid 5843] close(3) = 0 [pid 5843] close(4) = -1 EBADF (Bad file descriptor) [pid 5843] close(5) = -1 EBADF (Bad file descriptor) [pid 5843] close(6) = -1 EBADF (Bad file descriptor) [pid 5843] close(7) = -1 EBADF (Bad file descriptor) [pid 5843] close(8) = -1 EBADF (Bad file descriptor) [pid 5843] close(9) = -1 EBADF (Bad file descriptor) [pid 5843] close(10) = -1 EBADF (Bad file descriptor) [pid 5843] close(11) = -1 EBADF (Bad file descriptor) [pid 5843] close(12) = -1 EBADF (Bad file descriptor) [pid 5843] close(13) = -1 EBADF (Bad file descriptor) [pid 5843] close(14) = -1 EBADF (Bad file descriptor) [pid 5843] close(15) = -1 EBADF (Bad file descriptor) [pid 5843] close(16) = -1 EBADF (Bad file descriptor) [pid 5843] close(17) = -1 EBADF (Bad file descriptor) [pid 5843] close(18) = -1 EBADF (Bad file descriptor) [pid 5843] close(19) = -1 EBADF (Bad file descriptor) [pid 5843] close(20) = -1 EBADF (Bad file descriptor) [pid 5843] close(21) = -1 EBADF (Bad file descriptor) [pid 5843] close(22) = -1 EBADF (Bad file descriptor) [pid 5843] close(23) = -1 EBADF (Bad file descriptor) [pid 5843] close(24) = -1 EBADF (Bad file descriptor) [pid 5843] close(25) = -1 EBADF (Bad file descriptor) [pid 5843] close(26) = -1 EBADF (Bad file descriptor) [pid 5843] close(27) = -1 EBADF (Bad file descriptor) [pid 5843] close(28) = -1 EBADF (Bad file descriptor) [pid 5843] close(29) = -1 EBADF (Bad file descriptor) [pid 5843] exit_group(0) = ? [pid 5843] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5833] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 7 entries */, 32768) = 208 [pid 5833] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5833] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557f964730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557f964730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./3/file1") = 0 [pid 5833] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./3/binderfs") = 0 [pid 5833] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./3/cgroup.net") = 0 [pid 5833] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./3/cgroup.cpu") = 0 [pid 5833] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./3/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./3/cgroup") = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./3") = 0 [pid 5833] mkdir("./4", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5845 attached [pid 5845] set_robust_list(0x55557f95b660, 24 [pid 5833] <... clone resumed>, child_tidptr=0x55557f95b650) = 6 [pid 5845] <... set_robust_list resumed>) = 0 [pid 5845] chdir("./4") = 0 [pid 5845] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5845] setpgid(0, 0) = 0 [pid 5845] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5845] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5845] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "1000", 4) = 4 [pid 5845] close(3) = 0 [pid 5845] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5845] write(1, "executing program\n", 18) = 18 [pid 5845] ioctl(-1, KVM_CREATE_VM, 0) = -1 EBADF (Bad file descriptor) [pid 5845] memfd_create("syzkaller", 0) = 3 [pid 5845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff17ec00000 [pid 5845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5845] munmap(0x7ff17ec00000, 138412032) = 0 [pid 5845] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5845] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5845] close(3) = 0 [pid 5845] close(4) = 0 [pid 5845] mkdir("./file1", 0777) = 0 [ 93.776742][ T5845] loop0: detected capacity change from 0 to 4096 [pid 5845] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 5845] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5845] chdir("./file1") = 0 [pid 5845] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5845] open_by_handle_at(-1, NULL, O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 5845] dup(-1) = -1 EBADF (Bad file descriptor) [pid 5845] ioctl(-1, KVM_SET_USER_MEMORY_REGION, NULL) = -1 EBADF (Bad file descriptor) [pid 5845] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_DIRECT|O_CLOEXEC, 000) = -1 EFAULT (Bad address) [pid 5845] prctl(PR_SCHED_CORE, PR_SCHED_CORE_CREATE, 0, 0x2 /* PIDTYPE_PGID */, NULL) = 0 [pid 5845] sendmsg(-1, NULL, MSG_CONFIRM|MSG_NOSIGNAL) = -1 EBADF (Bad file descriptor) [pid 5845] ioctl(-1, KVM_RUN, 0) = -1 EBADF (Bad file descriptor) [pid 5845] close(3) = 0 [pid 5845] close(4) = -1 EBADF (Bad file descriptor) [pid 5845] close(5) = -1 EBADF (Bad file descriptor) [pid 5845] close(6) = -1 EBADF (Bad file descriptor) [pid 5845] close(7) = -1 EBADF (Bad file descriptor) [pid 5845] close(8) = -1 EBADF (Bad file descriptor) [pid 5845] close(9) = -1 EBADF (Bad file descriptor) [pid 5845] close(10) = -1 EBADF (Bad file descriptor) [pid 5845] close(11) = -1 EBADF (Bad file descriptor) [pid 5845] close(12) = -1 EBADF (Bad file descriptor) [pid 5845] close(13) = -1 EBADF (Bad file descriptor) [pid 5845] close(14) = -1 EBADF (Bad file descriptor) [pid 5845] close(15) = -1 EBADF (Bad file descriptor) [pid 5845] close(16) = -1 EBADF (Bad file descriptor) [pid 5845] close(17) = -1 EBADF (Bad file descriptor) [pid 5845] close(18) = -1 EBADF (Bad file descriptor) [pid 5845] close(19) = -1 EBADF (Bad file descriptor) [pid 5845] close(20) = -1 EBADF (Bad file descriptor) [pid 5845] close(21) = -1 EBADF (Bad file descriptor) [pid 5845] close(22) = -1 EBADF (Bad file descriptor) [pid 5845] close(23) = -1 EBADF (Bad file descriptor) [pid 5845] close(24) = -1 EBADF (Bad file descriptor) [pid 5845] close(25) = -1 EBADF (Bad file descriptor) [pid 5845] close(26) = -1 EBADF (Bad file descriptor) [pid 5845] close(27) = -1 EBADF (Bad file descriptor) [pid 5845] close(28) = -1 EBADF (Bad file descriptor) [pid 5845] close(29) = -1 EBADF (Bad file descriptor) [pid 5845] exit_group(0) = ? [pid 5845] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5833] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 93.845952][ T5845] NILFS (loop0): invalid segment: Checksum error in segment payload [ 93.854116][ T5845] NILFS (loop0): trying rollback from an earlier position [ 93.872747][ T5845] NILFS (loop0): recovery complete [ 93.878987][ T5846] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 7 entries */, 32768) = 208 [pid 5833] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5833] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557f964730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557f964730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./4/file1") = 0 [pid 5833] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./4/binderfs") = 0 [pid 5833] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./4/cgroup.net") = 0 [pid 5833] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./4/cgroup.cpu") = 0 [pid 5833] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./4/cgroup") = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./4") = 0 [pid 5833] mkdir("./5", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557f95b650) = 7 ./strace-static-x86_64: Process 5847 attached [pid 5847] set_robust_list(0x55557f95b660, 24) = 0 [pid 5847] chdir("./5") = 0 [pid 5847] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5847] setpgid(0, 0) = 0 [pid 5847] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5847] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5847] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5847] write(3, "1000", 4) = 4 [pid 5847] close(3) = 0 [pid 5847] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5847] write(1, "executing program\n", 18) = 18 [pid 5847] ioctl(-1, KVM_CREATE_VM, 0) = -1 EBADF (Bad file descriptor) [pid 5847] memfd_create("syzkaller", 0) = 3 [pid 5847] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff17ec00000 [pid 5847] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5847] munmap(0x7ff17ec00000, 138412032) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5847] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5847] close(3) = 0 [pid 5847] close(4) = 0 [pid 5847] mkdir("./file1", 0777) = 0 [ 94.114652][ T5847] loop0: detected capacity change from 0 to 4096 [ 94.147020][ T5847] NILFS (loop0): invalid segment: Checksum error in segment payload [ 94.155223][ T5847] NILFS (loop0): trying rollback from an earlier position [pid 5847] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 5847] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5847] chdir("./file1") = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5847] open_by_handle_at(-1, NULL, O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 5847] dup(-1) = -1 EBADF (Bad file descriptor) [pid 5847] ioctl(-1, KVM_SET_USER_MEMORY_REGION, NULL) = -1 EBADF (Bad file descriptor) [pid 5847] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_DIRECT|O_CLOEXEC, 000) = -1 EFAULT (Bad address) [pid 5847] prctl(PR_SCHED_CORE, PR_SCHED_CORE_CREATE, 0, 0x2 /* PIDTYPE_PGID */, NULL) = 0 [pid 5847] sendmsg(-1, NULL, MSG_CONFIRM|MSG_NOSIGNAL) = -1 EBADF (Bad file descriptor) [pid 5847] ioctl(-1, KVM_RUN, 0) = -1 EBADF (Bad file descriptor) [pid 5847] close(3) = 0 [pid 5847] close(4) = -1 EBADF (Bad file descriptor) [pid 5847] close(5) = -1 EBADF (Bad file descriptor) [pid 5847] close(6) = -1 EBADF (Bad file descriptor) [pid 5847] close(7) = -1 EBADF (Bad file descriptor) [pid 5847] close(8) = -1 EBADF (Bad file descriptor) [pid 5847] close(9) = -1 EBADF (Bad file descriptor) [ 94.173586][ T5847] NILFS (loop0): recovery complete [ 94.179858][ T5848] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5847] close(10) = -1 EBADF (Bad file descriptor) [pid 5847] close(11) = -1 EBADF (Bad file descriptor) [pid 5847] close(12) = -1 EBADF (Bad file descriptor) [pid 5847] close(13) = -1 EBADF (Bad file descriptor) [pid 5847] close(14) = -1 EBADF (Bad file descriptor) [pid 5847] close(15) = -1 EBADF (Bad file descriptor) [pid 5847] close(16) = -1 EBADF (Bad file descriptor) [pid 5847] close(17) = -1 EBADF (Bad file descriptor) [pid 5847] close(18) = -1 EBADF (Bad file descriptor) [pid 5847] close(19) = -1 EBADF (Bad file descriptor) [pid 5847] close(20) = -1 EBADF (Bad file descriptor) [pid 5847] close(21) = -1 EBADF (Bad file descriptor) [pid 5847] close(22) = -1 EBADF (Bad file descriptor) [pid 5847] close(23) = -1 EBADF (Bad file descriptor) [pid 5847] close(24) = -1 EBADF (Bad file descriptor) [pid 5847] close(25) = -1 EBADF (Bad file descriptor) [pid 5847] close(26) = -1 EBADF (Bad file descriptor) [pid 5847] close(27) = -1 EBADF (Bad file descriptor) [pid 5847] close(28) = -1 EBADF (Bad file descriptor) [pid 5847] close(29) = -1 EBADF (Bad file descriptor) [pid 5847] exit_group(0) = ? [pid 5847] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5833] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 7 entries */, 32768) = 208 [pid 5833] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5833] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557f964730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557f964730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./5/file1") = 0 [pid 5833] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./5/binderfs") = 0 [pid 5833] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./5/cgroup.net") = 0 [pid 5833] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./5/cgroup.cpu") = 0 [pid 5833] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./5/cgroup") = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./5") = 0 [pid 5833] mkdir("./6", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557f95b650) = 8 ./strace-static-x86_64: Process 5849 attached [pid 5849] set_robust_list(0x55557f95b660, 24) = 0 [pid 5849] chdir("./6") = 0 [pid 5849] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5849] setpgid(0, 0) = 0 [pid 5849] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5849] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5849] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5849] write(3, "1000", 4) = 4 [pid 5849] close(3) = 0 [pid 5849] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5849] write(1, "executing program\n", 18) = 18 [pid 5849] ioctl(-1, KVM_CREATE_VM, 0) = -1 EBADF (Bad file descriptor) [pid 5849] memfd_create("syzkaller", 0) = 3 [pid 5849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff17ec00000 [pid 5849] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5849] munmap(0x7ff17ec00000, 138412032) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5849] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5849] close(3) = 0 [pid 5849] close(4) = 0 [pid 5849] mkdir("./file1", 0777) = 0 [ 94.481900][ T5849] loop0: detected capacity change from 0 to 4096 [ 94.507211][ T5849] NILFS (loop0): invalid segment: Checksum error in segment payload [ 94.515449][ T5849] NILFS (loop0): trying rollback from an earlier position [pid 5849] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 5849] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5849] chdir("./file1") = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5849] open_by_handle_at(-1, NULL, O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 5849] dup(-1) = -1 EBADF (Bad file descriptor) [pid 5849] ioctl(-1, KVM_SET_USER_MEMORY_REGION, NULL) = -1 EBADF (Bad file descriptor) [pid 5849] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_DIRECT|O_CLOEXEC, 000) = -1 EFAULT (Bad address) [pid 5849] prctl(PR_SCHED_CORE, PR_SCHED_CORE_CREATE, 0, 0x2 /* PIDTYPE_PGID */, NULL) = 0 [pid 5849] sendmsg(-1, NULL, MSG_CONFIRM|MSG_NOSIGNAL) = -1 EBADF (Bad file descriptor) [pid 5849] ioctl(-1, KVM_RUN, 0) = -1 EBADF (Bad file descriptor) [pid 5849] close(3) = 0 [pid 5849] close(4) = -1 EBADF (Bad file descriptor) [pid 5849] close(5) = -1 EBADF (Bad file descriptor) [pid 5849] close(6) = -1 EBADF (Bad file descriptor) [pid 5849] close(7) = -1 EBADF (Bad file descriptor) [pid 5849] close(8) = -1 EBADF (Bad file descriptor) [pid 5849] close(9) = -1 EBADF (Bad file descriptor) [pid 5849] close(10) = -1 EBADF (Bad file descriptor) [pid 5849] close(11) = -1 EBADF (Bad file descriptor) [pid 5849] close(12) = -1 EBADF (Bad file descriptor) [pid 5849] close(13) = -1 EBADF (Bad file descriptor) [pid 5849] close(14) = -1 EBADF (Bad file descriptor) [pid 5849] close(15) = -1 EBADF (Bad file descriptor) [pid 5849] close(16) = -1 EBADF (Bad file descriptor) [pid 5849] close(17) = -1 EBADF (Bad file descriptor) [pid 5849] close(18) = -1 EBADF (Bad file descriptor) [pid 5849] close(19) = -1 EBADF (Bad file descriptor) [pid 5849] close(20) = -1 EBADF (Bad file descriptor) [pid 5849] close(21) = -1 EBADF (Bad file descriptor) [pid 5849] close(22) = -1 EBADF (Bad file descriptor) [pid 5849] close(23) = -1 EBADF (Bad file descriptor) [pid 5849] close(24) = -1 EBADF (Bad file descriptor) [pid 5849] close(25) = -1 EBADF (Bad file descriptor) [pid 5849] close(26) = -1 EBADF (Bad file descriptor) [pid 5849] close(27) = -1 EBADF (Bad file descriptor) [pid 5849] close(28) = -1 EBADF (Bad file descriptor) [pid 5849] close(29) = -1 EBADF (Bad file descriptor) [pid 5849] exit_group(0) = ? [pid 5849] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5833] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 7 entries */, 32768) = 208 [ 94.532524][ T5849] NILFS (loop0): recovery complete [ 94.538552][ T5850] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5833] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5833] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557f964730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557f964730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./6/file1") = 0 [pid 5833] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./6/binderfs") = 0 [pid 5833] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./6/cgroup.net") = 0 [pid 5833] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./6/cgroup.cpu") = 0 [pid 5833] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./6/cgroup") = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./6") = 0 [pid 5833] mkdir("./7", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5851 attached , child_tidptr=0x55557f95b650) = 9 [pid 5851] set_robust_list(0x55557f95b660, 24) = 0 [pid 5851] chdir("./7") = 0 [pid 5851] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5851] setpgid(0, 0) = 0 [pid 5851] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5851] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5851] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "1000", 4) = 4 [pid 5851] close(3) = 0 [pid 5851] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5851] write(1, "executing program\n", 18) = 18 [pid 5851] ioctl(-1, KVM_CREATE_VM, 0) = -1 EBADF (Bad file descriptor) [pid 5851] memfd_create("syzkaller", 0) = 3 [pid 5851] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff17ec00000 [pid 5851] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5851] munmap(0x7ff17ec00000, 138412032) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5851] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5851] close(3) = 0 [pid 5851] close(4) = 0 [pid 5851] mkdir("./file1", 0777) = 0 [ 94.806326][ T5851] loop0: detected capacity change from 0 to 4096 [ 94.835260][ T5851] NILFS (loop0): invalid segment: Checksum error in segment payload [ 94.843675][ T5851] NILFS (loop0): trying rollback from an earlier position [pid 5851] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 5851] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5851] chdir("./file1") = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5851] open_by_handle_at(-1, NULL, O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 5851] dup(-1) = -1 EBADF (Bad file descriptor) [pid 5851] ioctl(-1, KVM_SET_USER_MEMORY_REGION, NULL) = -1 EBADF (Bad file descriptor) [pid 5851] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_DIRECT|O_CLOEXEC, 000) = -1 EFAULT (Bad address) [pid 5851] prctl(PR_SCHED_CORE, PR_SCHED_CORE_CREATE, 0, 0x2 /* PIDTYPE_PGID */, NULL) = 0 [pid 5851] sendmsg(-1, NULL, MSG_CONFIRM|MSG_NOSIGNAL) = -1 EBADF (Bad file descriptor) [pid 5851] ioctl(-1, KVM_RUN, 0) = -1 EBADF (Bad file descriptor) [pid 5851] close(3) = 0 [pid 5851] close(4) = -1 EBADF (Bad file descriptor) [pid 5851] close(5) = -1 EBADF (Bad file descriptor) [pid 5851] close(6) = -1 EBADF (Bad file descriptor) [pid 5851] close(7) = -1 EBADF (Bad file descriptor) [ 94.867191][ T5851] NILFS (loop0): recovery complete [ 94.874025][ T5852] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5851] close(8) = -1 EBADF (Bad file descriptor) [pid 5851] close(9) = -1 EBADF (Bad file descriptor) [pid 5851] close(10) = -1 EBADF (Bad file descriptor) [pid 5851] close(11) = -1 EBADF (Bad file descriptor) [pid 5851] close(12) = -1 EBADF (Bad file descriptor) [pid 5851] close(13) = -1 EBADF (Bad file descriptor) [pid 5851] close(14) = -1 EBADF (Bad file descriptor) [pid 5851] close(15) = -1 EBADF (Bad file descriptor) [pid 5851] close(16) = -1 EBADF (Bad file descriptor) [pid 5851] close(17) = -1 EBADF (Bad file descriptor) [pid 5851] close(18) = -1 EBADF (Bad file descriptor) [pid 5851] close(19) = -1 EBADF (Bad file descriptor) [pid 5851] close(20) = -1 EBADF (Bad file descriptor) [pid 5851] close(21) = -1 EBADF (Bad file descriptor) [pid 5851] close(22) = -1 EBADF (Bad file descriptor) [pid 5851] close(23) = -1 EBADF (Bad file descriptor) [pid 5851] close(24) = -1 EBADF (Bad file descriptor) [pid 5851] close(25) = -1 EBADF (Bad file descriptor) [pid 5851] close(26) = -1 EBADF (Bad file descriptor) [pid 5851] close(27) = -1 EBADF (Bad file descriptor) [pid 5851] close(28) = -1 EBADF (Bad file descriptor) [pid 5851] close(29) = -1 EBADF (Bad file descriptor) [pid 5851] exit_group(0) = ? [pid 5851] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5833] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 7 entries */, 32768) = 208 [pid 5833] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5833] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557f964730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557f964730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./7/file1") = 0 [pid 5833] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./7/binderfs") = 0 [pid 5833] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./7/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./7/cgroup.net") = 0 [pid 5833] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./7/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./7/cgroup.cpu") = 0 [pid 5833] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./7/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./7/cgroup") = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./7") = 0 [pid 5833] mkdir("./8", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557f95b650) = 10 ./strace-static-x86_64: Process 5853 attached [pid 5853] set_robust_list(0x55557f95b660, 24) = 0 [pid 5853] chdir("./8") = 0 [pid 5853] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5853] setpgid(0, 0) = 0 [pid 5853] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5853] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5853] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5853] write(3, "1000", 4) = 4 [pid 5853] close(3executing program ) = 0 [pid 5853] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5853] write(1, "executing program\n", 18) = 18 [pid 5853] ioctl(-1, KVM_CREATE_VM, 0) = -1 EBADF (Bad file descriptor) [pid 5853] memfd_create("syzkaller", 0) = 3 [pid 5853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff17ec00000 [pid 5853] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5853] munmap(0x7ff17ec00000, 138412032) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5853] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5853] close(3) = 0 [pid 5853] close(4) = 0 [pid 5853] mkdir("./file1", 0777) = 0 [ 95.509283][ T5853] loop0: detected capacity change from 0 to 4096 [ 95.534110][ T5853] NILFS (loop0): invalid segment: Checksum error in segment payload [ 95.542245][ T5853] NILFS (loop0): trying rollback from an earlier position [pid 5853] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 5853] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5853] chdir("./file1") = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5853] open_by_handle_at(-1, NULL, O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 5853] dup(-1) = -1 EBADF (Bad file descriptor) [pid 5853] ioctl(-1, KVM_SET_USER_MEMORY_REGION, NULL) = -1 EBADF (Bad file descriptor) [pid 5853] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_DIRECT|O_CLOEXEC, 000) = -1 EFAULT (Bad address) [pid 5853] prctl(PR_SCHED_CORE, PR_SCHED_CORE_CREATE, 0, 0x2 /* PIDTYPE_PGID */, NULL) = 0 [pid 5853] sendmsg(-1, NULL, MSG_CONFIRM|MSG_NOSIGNAL) = -1 EBADF (Bad file descriptor) [pid 5853] ioctl(-1, KVM_RUN, 0) = -1 EBADF (Bad file descriptor) [pid 5853] close(3) = 0 [pid 5853] close(4) = -1 EBADF (Bad file descriptor) [pid 5853] close(5) = -1 EBADF (Bad file descriptor) [pid 5853] close(6) = -1 EBADF (Bad file descriptor) [pid 5853] close(7) = -1 EBADF (Bad file descriptor) [pid 5853] close(8) = -1 EBADF (Bad file descriptor) [pid 5853] close(9) = -1 EBADF (Bad file descriptor) [pid 5853] close(10) = -1 EBADF (Bad file descriptor) [pid 5853] close(11) = -1 EBADF (Bad file descriptor) [pid 5853] close(12) = -1 EBADF (Bad file descriptor) [pid 5853] close(13) = -1 EBADF (Bad file descriptor) [pid 5853] close(14) = -1 EBADF (Bad file descriptor) [pid 5853] close(15) = -1 EBADF (Bad file descriptor) [pid 5853] close(16) = -1 EBADF (Bad file descriptor) [pid 5853] close(17) = -1 EBADF (Bad file descriptor) [pid 5853] close(18) = -1 EBADF (Bad file descriptor) [pid 5853] close(19) = -1 EBADF (Bad file descriptor) [pid 5853] close(20) = -1 EBADF (Bad file descriptor) [pid 5853] close(21) = -1 EBADF (Bad file descriptor) [pid 5853] close(22) = -1 EBADF (Bad file descriptor) [pid 5853] close(23) = -1 EBADF (Bad file descriptor) [pid 5853] close(24) = -1 EBADF (Bad file descriptor) [pid 5853] close(25) = -1 EBADF (Bad file descriptor) [pid 5853] close(26) = -1 EBADF (Bad file descriptor) [pid 5853] close(27) = -1 EBADF (Bad file descriptor) [pid 5853] close(28) = -1 EBADF (Bad file descriptor) [pid 5853] close(29) = -1 EBADF (Bad file descriptor) [pid 5853] exit_group(0) = ? [pid 5853] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [ 95.558111][ T5853] NILFS (loop0): recovery complete [ 95.564485][ T5854] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.591145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [pid 5833] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 7 entries */, 32768) = 208 [pid 5833] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5833] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557f964730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557f964730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./8/file1") = 0 [pid 5833] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./8/binderfs") = 0 [pid 5833] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./8/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./8/cgroup.net") = 0 [pid 5833] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./8/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./8/cgroup.cpu") = 0 [pid 5833] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./8/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./8/cgroup") = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./8") = 0 [pid 5833] mkdir("./9", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5855 attached [pid 5855] set_robust_list(0x55557f95b660, 24 [pid 5833] <... clone resumed>, child_tidptr=0x55557f95b650) = 11 [pid 5855] <... set_robust_list resumed>) = 0 [pid 5855] chdir("./9") = 0 [pid 5855] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5855] setpgid(0, 0) = 0 [pid 5855] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5855] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5855] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5855] write(3, "1000", 4) = 4 [pid 5855] close(3) = 0 [pid 5855] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5855] write(1, "executing program\n", 18executing program ) = 18 [pid 5855] ioctl(-1, KVM_CREATE_VM, 0) = -1 EBADF (Bad file descriptor) [pid 5855] memfd_create("syzkaller", 0) = 3 [pid 5855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff17ec00000 [pid 5855] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5855] munmap(0x7ff17ec00000, 138412032) = 0 [pid 5855] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5855] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5855] close(3) = 0 [pid 5855] close(4) = 0 [pid 5855] mkdir("./file1", 0777) = 0 [ 96.042264][ T5855] loop0: detected capacity change from 0 to 4096 [ 96.064198][ T5855] NILFS (loop0): invalid segment: Checksum error in segment payload [ 96.072607][ T5855] NILFS (loop0): trying rollback from an earlier position [pid 5855] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 5855] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5855] chdir("./file1") = 0 [pid 5855] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5855] open_by_handle_at(-1, NULL, O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 5855] dup(-1) = -1 EBADF (Bad file descriptor) [pid 5855] ioctl(-1, KVM_SET_USER_MEMORY_REGION, NULL) = -1 EBADF (Bad file descriptor) [pid 5855] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_DIRECT|O_CLOEXEC, 000) = -1 EFAULT (Bad address) [pid 5855] prctl(PR_SCHED_CORE, PR_SCHED_CORE_CREATE, 0, 0x2 /* PIDTYPE_PGID */, NULL) = 0 [pid 5855] sendmsg(-1, NULL, MSG_CONFIRM|MSG_NOSIGNAL) = -1 EBADF (Bad file descriptor) [pid 5855] ioctl(-1, KVM_RUN, 0) = -1 EBADF (Bad file descriptor) [pid 5855] close(3) = 0 [pid 5855] close(4) = -1 EBADF (Bad file descriptor) [pid 5855] close(5) = -1 EBADF (Bad file descriptor) [pid 5855] close(6) = -1 EBADF (Bad file descriptor) [pid 5855] close(7) = -1 EBADF (Bad file descriptor) [pid 5855] close(8) = -1 EBADF (Bad file descriptor) [pid 5855] close(9) = -1 EBADF (Bad file descriptor) [pid 5855] close(10) = -1 EBADF (Bad file descriptor) [pid 5855] close(11) = -1 EBADF (Bad file descriptor) [pid 5855] close(12) = -1 EBADF (Bad file descriptor) [pid 5855] close(13) = -1 EBADF (Bad file descriptor) [pid 5855] close(14) = -1 EBADF (Bad file descriptor) [pid 5855] close(15) = -1 EBADF (Bad file descriptor) [pid 5855] close(16) = -1 EBADF (Bad file descriptor) [pid 5855] close(17) = -1 EBADF (Bad file descriptor) [pid 5855] close(18) = -1 EBADF (Bad file descriptor) [pid 5855] close(19) = -1 EBADF (Bad file descriptor) [pid 5855] close(20) = -1 EBADF (Bad file descriptor) [pid 5855] close(21) = -1 EBADF (Bad file descriptor) [pid 5855] close(22) = -1 EBADF (Bad file descriptor) [pid 5855] close(23) = -1 EBADF (Bad file descriptor) [pid 5855] close(24) = -1 EBADF (Bad file descriptor) [pid 5855] close(25) = -1 EBADF (Bad file descriptor) [pid 5855] close(26) = -1 EBADF (Bad file descriptor) [pid 5855] close(27) = -1 EBADF (Bad file descriptor) [pid 5855] close(28) = -1 EBADF (Bad file descriptor) [pid 5855] close(29) = -1 EBADF (Bad file descriptor) [pid 5855] exit_group(0) = ? [ 96.091944][ T5855] NILFS (loop0): recovery complete [ 96.098127][ T5856] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5855] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5833] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 7 entries */, 32768) = 208 [pid 5833] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5833] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557f964730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557f964730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./9/file1") = 0 [pid 5833] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./9/binderfs") = 0 [pid 5833] umount2("./9/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./9/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./9/cgroup.net") = 0 [pid 5833] umount2("./9/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./9/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./9/cgroup.cpu") = 0 [pid 5833] umount2("./9/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./9/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./9/cgroup") = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./9") = 0 [pid 5833] mkdir("./10", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5857 attached [pid 5857] set_robust_list(0x55557f95b660, 24 [pid 5833] <... clone resumed>, child_tidptr=0x55557f95b650) = 12 [pid 5857] <... set_robust_list resumed>) = 0 [pid 5857] chdir("./10") = 0 [pid 5857] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5857] setpgid(0, 0) = 0 [pid 5857] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5857] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5857] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5857] write(3, "1000", 4) = 4 [pid 5857] close(3) = 0 [pid 5857] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5857] write(1, "executing program\n", 18) = 18 [pid 5857] ioctl(-1, KVM_CREATE_VM, 0) = -1 EBADF (Bad file descriptor) [pid 5857] memfd_create("syzkaller", 0) = 3 [pid 5857] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff17ec00000 [pid 5857] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5857] munmap(0x7ff17ec00000, 138412032) = 0 [pid 5857] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5857] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5857] close(3) = 0 [pid 5857] close(4) = 0 [pid 5857] mkdir("./file1", 0777) = 0 [ 96.302163][ T5857] loop0: detected capacity change from 0 to 4096 [ 96.337069][ T5857] NILFS (loop0): invalid segment: Checksum error in segment payload [ 96.345231][ T5857] NILFS (loop0): trying rollback from an earlier position [pid 5857] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 5857] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5857] chdir("./file1") = 0 [pid 5857] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5857] open_by_handle_at(-1, NULL, O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 5857] dup(-1) = -1 EBADF (Bad file descriptor) [pid 5857] ioctl(-1, KVM_SET_USER_MEMORY_REGION, NULL) = -1 EBADF (Bad file descriptor) [pid 5857] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_DIRECT|O_CLOEXEC, 000) = -1 EFAULT (Bad address) [pid 5857] prctl(PR_SCHED_CORE, PR_SCHED_CORE_CREATE, 0, 0x2 /* PIDTYPE_PGID */, NULL) = 0 [pid 5857] sendmsg(-1, NULL, MSG_CONFIRM|MSG_NOSIGNAL) = -1 EBADF (Bad file descriptor) [pid 5857] ioctl(-1, KVM_RUN, 0) = -1 EBADF (Bad file descriptor) [pid 5857] close(3) = 0 [pid 5857] close(4) = -1 EBADF (Bad file descriptor) [pid 5857] close(5) = -1 EBADF (Bad file descriptor) [pid 5857] close(6) = -1 EBADF (Bad file descriptor) [pid 5857] close(7) = -1 EBADF (Bad file descriptor) [pid 5857] close(8) = -1 EBADF (Bad file descriptor) [pid 5857] close(9) = -1 EBADF (Bad file descriptor) [pid 5857] close(10) = -1 EBADF (Bad file descriptor) [pid 5857] close(11) = -1 EBADF (Bad file descriptor) [pid 5857] close(12) = -1 EBADF (Bad file descriptor) [pid 5857] close(13) = -1 EBADF (Bad file descriptor) [pid 5857] close(14) = -1 EBADF (Bad file descriptor) [pid 5857] close(15) = -1 EBADF (Bad file descriptor) [pid 5857] close(16) = -1 EBADF (Bad file descriptor) [pid 5857] close(17) = -1 EBADF (Bad file descriptor) [pid 5857] close(18) = -1 EBADF (Bad file descriptor) [pid 5857] close(19) = -1 EBADF (Bad file descriptor) [ 96.365909][ T5857] NILFS (loop0): recovery complete [ 96.372004][ T5858] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5857] close(20) = -1 EBADF (Bad file descriptor) [pid 5857] close(21) = -1 EBADF (Bad file descriptor) [pid 5857] close(22) = -1 EBADF (Bad file descriptor) [pid 5857] close(23) = -1 EBADF (Bad file descriptor) [pid 5857] close(24) = -1 EBADF (Bad file descriptor) [pid 5857] close(25) = -1 EBADF (Bad file descriptor) [pid 5857] close(26) = -1 EBADF (Bad file descriptor) [pid 5857] close(27) = -1 EBADF (Bad file descriptor) [pid 5857] close(28) = -1 EBADF (Bad file descriptor) [pid 5857] close(29) = -1 EBADF (Bad file descriptor) [pid 5857] exit_group(0) = ? [pid 5857] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5833] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 7 entries */, 32768) = 208 [pid 5833] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5833] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557f964730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557f964730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./10/file1") = 0 [pid 5833] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./10/binderfs") = 0 [pid 5833] umount2("./10/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./10/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./10/cgroup.net") = 0 [pid 5833] umount2("./10/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./10/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./10/cgroup.cpu") = 0 [pid 5833] umount2("./10/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./10/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./10/cgroup") = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./10") = 0 [pid 5833] mkdir("./11", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5859 attached [pid 5859] set_robust_list(0x55557f95b660, 24 [pid 5833] <... clone resumed>, child_tidptr=0x55557f95b650) = 13 [pid 5859] <... set_robust_list resumed>) = 0 [pid 5859] chdir("./11") = 0 [pid 5859] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5859] setpgid(0, 0) = 0 [pid 5859] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5859] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5859] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5859] write(3, "1000", 4) = 4 [pid 5859] close(3) = 0 [pid 5859] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5859] write(1, "executing program\n", 18) = 18 [pid 5859] ioctl(-1, KVM_CREATE_VM, 0) = -1 EBADF (Bad file descriptor) [pid 5859] memfd_create("syzkaller", 0) = 3 [pid 5859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff17ec00000 [pid 5859] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5859] munmap(0x7ff17ec00000, 138412032) = 0 [pid 5859] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5859] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5859] close(3) = 0 [pid 5859] close(4) = 0 [pid 5859] mkdir("./file1", 0777) = 0 [ 96.882258][ T5859] loop0: detected capacity change from 0 to 4096 [ 96.907868][ T5859] NILFS (loop0): invalid segment: Checksum error in segment payload [ 96.916105][ T5859] NILFS (loop0): trying rollback from an earlier position [pid 5859] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 5859] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5859] chdir("./file1") = 0 [pid 5859] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5859] open_by_handle_at(-1, NULL, O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 5859] dup(-1) = -1 EBADF (Bad file descriptor) [pid 5859] ioctl(-1, KVM_SET_USER_MEMORY_REGION, NULL) = -1 EBADF (Bad file descriptor) [pid 5859] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_DIRECT|O_CLOEXEC, 000) = -1 EFAULT (Bad address) [pid 5859] prctl(PR_SCHED_CORE, PR_SCHED_CORE_CREATE, 0, 0x2 /* PIDTYPE_PGID */, NULL) = 0 [pid 5859] sendmsg(-1, NULL, MSG_CONFIRM|MSG_NOSIGNAL) = -1 EBADF (Bad file descriptor) [pid 5859] ioctl(-1, KVM_RUN, 0) = -1 EBADF (Bad file descriptor) [pid 5859] close(3) = 0 [pid 5859] close(4) = -1 EBADF (Bad file descriptor) [pid 5859] close(5) = -1 EBADF (Bad file descriptor) [pid 5859] close(6) = -1 EBADF (Bad file descriptor) [pid 5859] close(7) = -1 EBADF (Bad file descriptor) [pid 5859] close(8) = -1 EBADF (Bad file descriptor) [pid 5859] close(9) = -1 EBADF (Bad file descriptor) [pid 5859] close(10) = -1 EBADF (Bad file descriptor) [pid 5859] close(11) = -1 EBADF (Bad file descriptor) [pid 5859] close(12) = -1 EBADF (Bad file descriptor) [pid 5859] close(13) = -1 EBADF (Bad file descriptor) [pid 5859] close(14) = -1 EBADF (Bad file descriptor) [ 96.941319][ T5859] NILFS (loop0): recovery complete [ 96.947342][ T5860] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5859] close(15) = -1 EBADF (Bad file descriptor) [pid 5859] close(16) = -1 EBADF (Bad file descriptor) [pid 5859] close(17) = -1 EBADF (Bad file descriptor) [pid 5859] close(18) = -1 EBADF (Bad file descriptor) [pid 5859] close(19) = -1 EBADF (Bad file descriptor) [pid 5859] close(20) = -1 EBADF (Bad file descriptor) [pid 5859] close(21) = -1 EBADF (Bad file descriptor) [pid 5859] close(22) = -1 EBADF (Bad file descriptor) [pid 5859] close(23) = -1 EBADF (Bad file descriptor) [pid 5859] close(24) = -1 EBADF (Bad file descriptor) [pid 5859] close(25) = -1 EBADF (Bad file descriptor) [pid 5859] close(26) = -1 EBADF (Bad file descriptor) [pid 5859] close(27) = -1 EBADF (Bad file descriptor) [pid 5859] close(28) = -1 EBADF (Bad file descriptor) [pid 5859] close(29) = -1 EBADF (Bad file descriptor) [pid 5859] exit_group(0) = ? [pid 5859] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5833] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 7 entries */, 32768) = 208 [pid 5833] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5833] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557f964730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557f964730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./11/file1") = 0 [pid 5833] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./11/binderfs") = 0 [pid 5833] umount2("./11/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./11/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./11/cgroup.net") = 0 [pid 5833] umount2("./11/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./11/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./11/cgroup.cpu") = 0 [pid 5833] umount2("./11/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./11/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./11/cgroup") = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./11") = 0 [pid 5833] mkdir("./12", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5861 attached [pid 5861] set_robust_list(0x55557f95b660, 24) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x55557f95b650) = 14 [pid 5861] chdir("./12") = 0 [pid 5861] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5861] setpgid(0, 0) = 0 [pid 5861] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5861] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5861] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5861] write(3, "1000", 4) = 4 [pid 5861] close(3) = 0 [pid 5861] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5861] write(1, "executing program\n", 18) = 18 [pid 5861] ioctl(-1, KVM_CREATE_VM, 0) = -1 EBADF (Bad file descriptor) [pid 5861] memfd_create("syzkaller", 0) = 3 [pid 5861] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff17ec00000 [pid 5861] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5861] munmap(0x7ff17ec00000, 138412032) = 0 [pid 5861] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5861] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5861] close(3) = 0 [pid 5861] close(4) = 0 [pid 5861] mkdir("./file1", 0777) = 0 [ 97.431962][ T5861] loop0: detected capacity change from 0 to 4096 [ 97.467287][ T5861] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5861] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 5861] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5861] chdir("./file1") = 0 [pid 5861] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5861] open_by_handle_at(-1, NULL, O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 5861] dup(-1) = -1 EBADF (Bad file descriptor) [pid 5861] ioctl(-1, KVM_SET_USER_MEMORY_REGION, NULL) = -1 EBADF (Bad file descriptor) [pid 5861] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_DIRECT|O_CLOEXEC, 000) = -1 EFAULT (Bad address) [pid 5861] prctl(PR_SCHED_CORE, PR_SCHED_CORE_CREATE, 0, 0x2 /* PIDTYPE_PGID */, NULL) = 0 [pid 5861] sendmsg(-1, NULL, MSG_CONFIRM|MSG_NOSIGNAL) = -1 EBADF (Bad file descriptor) [pid 5861] ioctl(-1, KVM_RUN, 0) = -1 EBADF (Bad file descriptor) [pid 5861] close(3) = 0 [pid 5861] close(4) = -1 EBADF (Bad file descriptor) [pid 5861] close(5) = -1 EBADF (Bad file descriptor) [pid 5861] close(6) = -1 EBADF (Bad file descriptor) [pid 5861] close(7) = -1 EBADF (Bad file descriptor) [pid 5861] close(8) = -1 EBADF (Bad file descriptor) [pid 5861] close(9) = -1 EBADF (Bad file descriptor) [pid 5861] close(10) = -1 EBADF (Bad file descriptor) [pid 5861] close(11) = -1 EBADF (Bad file descriptor) [pid 5861] close(12) = -1 EBADF (Bad file descriptor) [pid 5861] close(13) = -1 EBADF (Bad file descriptor) [pid 5861] close(14) = -1 EBADF (Bad file descriptor) [pid 5861] close(15) = -1 EBADF (Bad file descriptor) [pid 5861] close(16) = -1 EBADF (Bad file descriptor) [ 97.475661][ T5861] NILFS (loop0): trying rollback from an earlier position [ 97.494110][ T5861] NILFS (loop0): recovery complete [ 97.500694][ T5862] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5861] close(17) = -1 EBADF (Bad file descriptor) [pid 5861] close(18) = -1 EBADF (Bad file descriptor) [pid 5861] close(19) = -1 EBADF (Bad file descriptor) [pid 5861] close(20) = -1 EBADF (Bad file descriptor) [pid 5861] close(21) = -1 EBADF (Bad file descriptor) [pid 5861] close(22) = -1 EBADF (Bad file descriptor) [pid 5861] close(23) = -1 EBADF (Bad file descriptor) [pid 5861] close(24) = -1 EBADF (Bad file descriptor) [pid 5861] close(25) = -1 EBADF (Bad file descriptor) [pid 5861] close(26) = -1 EBADF (Bad file descriptor) [pid 5861] close(27) = -1 EBADF (Bad file descriptor) [pid 5861] close(28) = -1 EBADF (Bad file descriptor) [pid 5861] close(29) = -1 EBADF (Bad file descriptor) [pid 5861] exit_group(0) = ? [pid 5861] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5833] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 7 entries */, 32768) = 208 [pid 5833] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5833] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./12/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557f964730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557f964730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./12/file1") = 0 [pid 5833] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./12/binderfs") = 0 [pid 5833] umount2("./12/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./12/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./12/cgroup.net") = 0 [pid 5833] umount2("./12/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./12/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./12/cgroup.cpu") = 0 [pid 5833] umount2("./12/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./12/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./12/cgroup") = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./12") = 0 [pid 5833] mkdir("./13", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5863 attached [pid 5863] set_robust_list(0x55557f95b660, 24 [pid 5833] <... clone resumed>, child_tidptr=0x55557f95b650) = 15 [pid 5863] <... set_robust_list resumed>) = 0 [pid 5863] chdir("./13") = 0 [pid 5863] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5863] setpgid(0, 0) = 0 [pid 5863] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5863] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5863] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5863] write(3, "1000", 4) = 4 [pid 5863] close(3) = 0 [pid 5863] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5863] write(1, "executing program\n", 18executing program ) = 18 [pid 5863] ioctl(-1, KVM_CREATE_VM, 0) = -1 EBADF (Bad file descriptor) [pid 5863] memfd_create("syzkaller", 0) = 3 [pid 5863] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff17ec00000 [pid 5863] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5863] munmap(0x7ff17ec00000, 138412032) = 0 [pid 5863] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5863] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5863] close(3) = 0 [pid 5863] close(4) = 0 [pid 5863] mkdir("./file1", 0777) = 0 [ 98.072945][ T5863] loop0: detected capacity change from 0 to 4096 [ 98.103421][ T5863] NILFS (loop0): invalid segment: Checksum error in segment payload [ 98.111639][ T5863] NILFS (loop0): trying rollback from an earlier position [pid 5863] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 5863] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5863] chdir("./file1") = 0 [pid 5863] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5863] open_by_handle_at(-1, NULL, O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 5863] dup(-1) = -1 EBADF (Bad file descriptor) [pid 5863] ioctl(-1, KVM_SET_USER_MEMORY_REGION, NULL) = -1 EBADF (Bad file descriptor) [pid 5863] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_DIRECT|O_CLOEXEC, 000) = -1 EFAULT (Bad address) [pid 5863] prctl(PR_SCHED_CORE, PR_SCHED_CORE_CREATE, 0, 0x2 /* PIDTYPE_PGID */, NULL) = 0 [pid 5863] sendmsg(-1, NULL, MSG_CONFIRM|MSG_NOSIGNAL) = -1 EBADF (Bad file descriptor) [pid 5863] ioctl(-1, KVM_RUN, 0) = -1 EBADF (Bad file descriptor) [pid 5863] close(3) = 0 [pid 5863] close(4) = -1 EBADF (Bad file descriptor) [pid 5863] close(5) = -1 EBADF (Bad file descriptor) [ 98.133438][ T5863] NILFS (loop0): recovery complete [ 98.139701][ T5864] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5863] close(6) = -1 EBADF (Bad file descriptor) [pid 5863] close(7) = -1 EBADF (Bad file descriptor) [pid 5863] close(8) = -1 EBADF (Bad file descriptor) [pid 5863] close(9) = -1 EBADF (Bad file descriptor) [pid 5863] close(10) = -1 EBADF (Bad file descriptor) [pid 5863] close(11) = -1 EBADF (Bad file descriptor) [pid 5863] close(12) = -1 EBADF (Bad file descriptor) [pid 5863] close(13) = -1 EBADF (Bad file descriptor) [pid 5863] close(14) = -1 EBADF (Bad file descriptor) [pid 5863] close(15) = -1 EBADF (Bad file descriptor) [pid 5863] close(16) = -1 EBADF (Bad file descriptor) [pid 5863] close(17) = -1 EBADF (Bad file descriptor) [pid 5863] close(18) = -1 EBADF (Bad file descriptor) [pid 5863] close(19) = -1 EBADF (Bad file descriptor) [pid 5863] close(20) = -1 EBADF (Bad file descriptor) [pid 5863] close(21) = -1 EBADF (Bad file descriptor) [pid 5863] close(22) = -1 EBADF (Bad file descriptor) [pid 5863] close(23) = -1 EBADF (Bad file descriptor) [pid 5863] close(24) = -1 EBADF (Bad file descriptor) [pid 5863] close(25) = -1 EBADF (Bad file descriptor) [pid 5863] close(26) = -1 EBADF (Bad file descriptor) [pid 5863] close(27) = -1 EBADF (Bad file descriptor) [pid 5863] close(28) = -1 EBADF (Bad file descriptor) [pid 5863] close(29) = -1 EBADF (Bad file descriptor) [pid 5863] exit_group(0) = ? [pid 5863] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5833] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 7 entries */, 32768) = 208 [pid 5833] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5833] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./13/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557f964730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557f964730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./13/file1") = 0 [pid 5833] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./13/binderfs") = 0 [pid 5833] umount2("./13/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./13/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./13/cgroup.net") = 0 [pid 5833] umount2("./13/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./13/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./13/cgroup.cpu") = 0 [pid 5833] umount2("./13/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./13/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./13/cgroup") = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./13") = 0 [pid 5833] mkdir("./14", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5865 attached [pid 5865] set_robust_list(0x55557f95b660, 24 [pid 5833] <... clone resumed>, child_tidptr=0x55557f95b650) = 16 [pid 5865] <... set_robust_list resumed>) = 0 [pid 5865] chdir("./14") = 0 [pid 5865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5865] setpgid(0, 0) = 0 [pid 5865] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5865] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5865] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5865] write(3, "1000", 4) = 4 [pid 5865] close(3) = 0 executing program [pid 5865] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5865] write(1, "executing program\n", 18) = 18 [pid 5865] ioctl(-1, KVM_CREATE_VM, 0) = -1 EBADF (Bad file descriptor) [pid 5865] memfd_create("syzkaller", 0) = 3 [pid 5865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff17ec00000 [pid 5865] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5865] munmap(0x7ff17ec00000, 138412032) = 0 [pid 5865] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5865] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5865] close(3) = 0 [pid 5865] close(4) = 0 [pid 5865] mkdir("./file1", 0777) = 0 [ 98.525133][ T5865] loop0: detected capacity change from 0 to 4096 [ 98.555393][ T5865] NILFS (loop0): invalid segment: Checksum error in segment payload [ 98.563748][ T5865] NILFS (loop0): trying rollback from an earlier position [pid 5865] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 5865] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5865] chdir("./file1") = 0 [pid 5865] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5865] open_by_handle_at(-1, NULL, O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 5865] dup(-1) = -1 EBADF (Bad file descriptor) [pid 5865] ioctl(-1, KVM_SET_USER_MEMORY_REGION, NULL) = -1 EBADF (Bad file descriptor) [pid 5865] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_DIRECT|O_CLOEXEC, 000) = -1 EFAULT (Bad address) [pid 5865] prctl(PR_SCHED_CORE, PR_SCHED_CORE_CREATE, 0, 0x2 /* PIDTYPE_PGID */, NULL) = 0 [pid 5865] sendmsg(-1, NULL, MSG_CONFIRM|MSG_NOSIGNAL) = -1 EBADF (Bad file descriptor) [pid 5865] ioctl(-1, KVM_RUN, 0) = -1 EBADF (Bad file descriptor) [pid 5865] close(3) = 0 [ 98.588629][ T5865] NILFS (loop0): recovery complete [ 98.594972][ T5866] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5865] close(4) = -1 EBADF (Bad file descriptor) [pid 5865] close(5) = -1 EBADF (Bad file descriptor) [pid 5865] close(6) = -1 EBADF (Bad file descriptor) [pid 5865] close(7) = -1 EBADF (Bad file descriptor) [pid 5865] close(8) = -1 EBADF (Bad file descriptor) [pid 5865] close(9) = -1 EBADF (Bad file descriptor) [pid 5865] close(10) = -1 EBADF (Bad file descriptor) [pid 5865] close(11) = -1 EBADF (Bad file descriptor) [pid 5865] close(12) = -1 EBADF (Bad file descriptor) [pid 5865] close(13) = -1 EBADF (Bad file descriptor) [pid 5865] close(14) = -1 EBADF (Bad file descriptor) [pid 5865] close(15) = -1 EBADF (Bad file descriptor) [pid 5865] close(16) = -1 EBADF (Bad file descriptor) [pid 5865] close(17) = -1 EBADF (Bad file descriptor) [pid 5865] close(18) = -1 EBADF (Bad file descriptor) [pid 5865] close(19) = -1 EBADF (Bad file descriptor) [pid 5865] close(20) = -1 EBADF (Bad file descriptor) [pid 5865] close(21) = -1 EBADF (Bad file descriptor) [pid 5865] close(22) = -1 EBADF (Bad file descriptor) [pid 5865] close(23) = -1 EBADF (Bad file descriptor) [pid 5865] close(24) = -1 EBADF (Bad file descriptor) [pid 5865] close(25) = -1 EBADF (Bad file descriptor) [pid 5865] close(26) = -1 EBADF (Bad file descriptor) [pid 5865] close(27) = -1 EBADF (Bad file descriptor) [pid 5865] close(28) = -1 EBADF (Bad file descriptor) [pid 5865] close(29) = -1 EBADF (Bad file descriptor) [pid 5865] exit_group(0) = ? [pid 5865] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5833] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 7 entries */, 32768) = 208 [pid 5833] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5833] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./14/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557f964730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557f964730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./14/file1") = 0 [pid 5833] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./14/binderfs") = 0 [pid 5833] umount2("./14/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./14/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./14/cgroup.net") = 0 [pid 5833] umount2("./14/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./14/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./14/cgroup.cpu") = 0 [pid 5833] umount2("./14/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./14/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./14/cgroup") = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./14") = 0 [pid 5833] mkdir("./15", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5867 attached , child_tidptr=0x55557f95b650) = 17 [pid 5867] set_robust_list(0x55557f95b660, 24) = 0 [pid 5867] chdir("./15") = 0 [pid 5867] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5867] setpgid(0, 0) = 0 [pid 5867] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5867] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5867] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5867] write(3, "1000", 4) = 4 [pid 5867] close(3) = 0 [pid 5867] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5867] write(1, "executing program\n", 18executing program ) = 18 [pid 5867] ioctl(-1, KVM_CREATE_VM, 0) = -1 EBADF (Bad file descriptor) [pid 5867] memfd_create("syzkaller", 0) = 3 [pid 5867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff17ec00000 [pid 5867] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5867] munmap(0x7ff17ec00000, 138412032) = 0 [pid 5867] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5867] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5867] close(3) = 0 [pid 5867] close(4) = 0 [pid 5867] mkdir("./file1", 0777) = 0 [ 99.151196][ T5867] loop0: detected capacity change from 0 to 4096 [ 99.174658][ T5867] NILFS (loop0): invalid segment: Checksum error in segment payload [ 99.183639][ T5867] NILFS (loop0): trying rollback from an earlier position [pid 5867] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 5867] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5867] chdir("./file1") = 0 [pid 5867] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5867] open_by_handle_at(-1, NULL, O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 5867] dup(-1) = -1 EBADF (Bad file descriptor) [pid 5867] ioctl(-1, KVM_SET_USER_MEMORY_REGION, NULL) = -1 EBADF (Bad file descriptor) [pid 5867] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_DIRECT|O_CLOEXEC, 000) = -1 EFAULT (Bad address) [pid 5867] prctl(PR_SCHED_CORE, PR_SCHED_CORE_CREATE, 0, 0x2 /* PIDTYPE_PGID */, NULL) = 0 [pid 5867] sendmsg(-1, NULL, MSG_CONFIRM|MSG_NOSIGNAL) = -1 EBADF (Bad file descriptor) [pid 5867] ioctl(-1, KVM_RUN, 0) = -1 EBADF (Bad file descriptor) [pid 5867] close(3) = 0 [pid 5867] close(4) = -1 EBADF (Bad file descriptor) [pid 5867] close(5) = -1 EBADF (Bad file descriptor) [pid 5867] close(6) = -1 EBADF (Bad file descriptor) [pid 5867] close(7) = -1 EBADF (Bad file descriptor) [pid 5867] close(8) = -1 EBADF (Bad file descriptor) [pid 5867] close(9) = -1 EBADF (Bad file descriptor) [pid 5867] close(10) = -1 EBADF (Bad file descriptor) [ 99.213913][ T5867] NILFS (loop0): recovery complete [ 99.221874][ T5868] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5867] close(11) = -1 EBADF (Bad file descriptor) [pid 5867] close(12) = -1 EBADF (Bad file descriptor) [pid 5867] close(13) = -1 EBADF (Bad file descriptor) [pid 5867] close(14) = -1 EBADF (Bad file descriptor) [pid 5867] close(15) = -1 EBADF (Bad file descriptor) [pid 5867] close(16) = -1 EBADF (Bad file descriptor) [pid 5867] close(17) = -1 EBADF (Bad file descriptor) [pid 5867] close(18) = -1 EBADF (Bad file descriptor) [pid 5867] close(19) = -1 EBADF (Bad file descriptor) [pid 5867] close(20) = -1 EBADF (Bad file descriptor) [pid 5867] close(21) = -1 EBADF (Bad file descriptor) [pid 5867] close(22) = -1 EBADF (Bad file descriptor) [pid 5867] close(23) = -1 EBADF (Bad file descriptor) [pid 5867] close(24) = -1 EBADF (Bad file descriptor) [pid 5867] close(25) = -1 EBADF (Bad file descriptor) [pid 5867] close(26) = -1 EBADF (Bad file descriptor) [pid 5867] close(27) = -1 EBADF (Bad file descriptor) [pid 5867] close(28) = -1 EBADF (Bad file descriptor) [pid 5867] close(29) = -1 EBADF (Bad file descriptor) [pid 5867] exit_group(0) = ? [pid 5867] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5833] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 7 entries */, 32768) = 208 [pid 5833] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5833] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557f964730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557f964730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./15/file1") = 0 [pid 5833] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./15/binderfs") = 0 [pid 5833] umount2("./15/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./15/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./15/cgroup.net") = 0 [pid 5833] umount2("./15/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./15/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./15/cgroup.cpu") = 0 [pid 5833] umount2("./15/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./15/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./15/cgroup") = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./15") = 0 [pid 5833] mkdir("./16", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5869 attached [pid 5869] set_robust_list(0x55557f95b660, 24 [pid 5833] <... clone resumed>, child_tidptr=0x55557f95b650) = 18 [pid 5869] <... set_robust_list resumed>) = 0 [pid 5869] chdir("./16") = 0 [pid 5869] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5869] setpgid(0, 0) = 0 [pid 5869] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5869] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5869] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5869] write(3, "1000", 4) = 4 [pid 5869] close(3) = 0 [pid 5869] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5869] write(1, "executing program\n", 18executing program ) = 18 [pid 5869] ioctl(-1, KVM_CREATE_VM, 0) = -1 EBADF (Bad file descriptor) [pid 5869] memfd_create("syzkaller", 0) = 3 [pid 5869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff17ec00000 [pid 5869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5869] munmap(0x7ff17ec00000, 138412032) = 0 [pid 5869] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5869] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5869] close(3) = 0 [pid 5869] close(4) = 0 [pid 5869] mkdir("./file1", 0777) = 0 [ 99.677355][ T5869] loop0: detected capacity change from 0 to 4096 [ 99.705959][ T5869] NILFS (loop0): invalid segment: Checksum error in segment payload [ 99.714489][ T5869] NILFS (loop0): trying rollback from an earlier position [pid 5869] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 5869] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5869] chdir("./file1") = 0 [pid 5869] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5869] open_by_handle_at(-1, NULL, O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 5869] dup(-1) = -1 EBADF (Bad file descriptor) [pid 5869] ioctl(-1, KVM_SET_USER_MEMORY_REGION, NULL) = -1 EBADF (Bad file descriptor) [pid 5869] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_DIRECT|O_CLOEXEC, 000) = -1 EFAULT (Bad address) [pid 5869] prctl(PR_SCHED_CORE, PR_SCHED_CORE_CREATE, 0, 0x2 /* PIDTYPE_PGID */, NULL) = 0 [pid 5869] sendmsg(-1, NULL, MSG_CONFIRM|MSG_NOSIGNAL) = -1 EBADF (Bad file descriptor) [pid 5869] ioctl(-1, KVM_RUN, 0) = -1 EBADF (Bad file descriptor) [pid 5869] close(3) = 0 [pid 5869] close(4) = -1 EBADF (Bad file descriptor) [pid 5869] close(5) = -1 EBADF (Bad file descriptor) [pid 5869] close(6) = -1 EBADF (Bad file descriptor) [pid 5869] close(7) = -1 EBADF (Bad file descriptor) [pid 5869] close(8) = -1 EBADF (Bad file descriptor) [pid 5869] close(9) = -1 EBADF (Bad file descriptor) [pid 5869] close(10) = -1 EBADF (Bad file descriptor) [pid 5869] close(11) = -1 EBADF (Bad file descriptor) [pid 5869] close(12) = -1 EBADF (Bad file descriptor) [pid 5869] close(13) = -1 EBADF (Bad file descriptor) [pid 5869] close(14) = -1 EBADF (Bad file descriptor) [ 99.741402][ T5869] NILFS (loop0): recovery complete [ 99.747811][ T5870] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5869] close(15) = -1 EBADF (Bad file descriptor) [pid 5869] close(16) = -1 EBADF (Bad file descriptor) [pid 5869] close(17) = -1 EBADF (Bad file descriptor) [pid 5869] close(18) = -1 EBADF (Bad file descriptor) [pid 5869] close(19) = -1 EBADF (Bad file descriptor) [pid 5869] close(20) = -1 EBADF (Bad file descriptor) [pid 5869] close(21) = -1 EBADF (Bad file descriptor) [pid 5869] close(22) = -1 EBADF (Bad file descriptor) [pid 5869] close(23) = -1 EBADF (Bad file descriptor) [pid 5869] close(24) = -1 EBADF (Bad file descriptor) [pid 5869] close(25) = -1 EBADF (Bad file descriptor) [pid 5869] close(26) = -1 EBADF (Bad file descriptor) [pid 5869] close(27) = -1 EBADF (Bad file descriptor) [pid 5869] close(28) = -1 EBADF (Bad file descriptor) [pid 5869] close(29) = -1 EBADF (Bad file descriptor) [pid 5869] exit_group(0) = ? [pid 5869] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5833] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 7 entries */, 32768) = 208 [pid 5833] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5833] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557f964730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557f964730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./16/file1") = 0 [pid 5833] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./16/binderfs") = 0 [pid 5833] umount2("./16/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./16/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./16/cgroup.net") = 0 [pid 5833] umount2("./16/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./16/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./16/cgroup.cpu") = 0 [pid 5833] umount2("./16/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./16/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./16/cgroup") = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./16") = 0 [pid 5833] mkdir("./17", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5871 attached [pid 5871] set_robust_list(0x55557f95b660, 24 [pid 5833] <... clone resumed>, child_tidptr=0x55557f95b650) = 19 [pid 5871] <... set_robust_list resumed>) = 0 [pid 5871] chdir("./17") = 0 [pid 5871] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5871] setpgid(0, 0) = 0 [pid 5871] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5871] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5871] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5871] write(3, "1000", 4) = 4 [pid 5871] close(3) = 0 [pid 5871] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5871] write(1, "executing program\n", 18) = 18 [pid 5871] ioctl(-1, KVM_CREATE_VM, 0) = -1 EBADF (Bad file descriptor) [pid 5871] memfd_create("syzkaller", 0) = 3 [pid 5871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff17ec00000 [pid 5871] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5871] munmap(0x7ff17ec00000, 138412032) = 0 [pid 5871] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5871] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5871] close(3) = 0 [pid 5871] close(4) = 0 [pid 5871] mkdir("./file1", 0777) = 0 [ 99.988539][ T5871] loop0: detected capacity change from 0 to 4096 [ 100.015880][ T5871] NILFS (loop0): invalid segment: Checksum error in segment payload [ 100.024005][ T5871] NILFS (loop0): trying rollback from an earlier position [pid 5871] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 5871] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5871] chdir("./file1") = 0 [pid 5871] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5871] open_by_handle_at(-1, NULL, O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 5871] dup(-1) = -1 EBADF (Bad file descriptor) [pid 5871] ioctl(-1, KVM_SET_USER_MEMORY_REGION, NULL) = -1 EBADF (Bad file descriptor) [pid 5871] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_DIRECT|O_CLOEXEC, 000) = -1 EFAULT (Bad address) [pid 5871] prctl(PR_SCHED_CORE, PR_SCHED_CORE_CREATE, 0, 0x2 /* PIDTYPE_PGID */, NULL) = 0 [pid 5871] sendmsg(-1, NULL, MSG_CONFIRM|MSG_NOSIGNAL) = -1 EBADF (Bad file descriptor) [pid 5871] ioctl(-1, KVM_RUN, 0) = -1 EBADF (Bad file descriptor) [pid 5871] close(3) = 0 [pid 5871] close(4) = -1 EBADF (Bad file descriptor) [pid 5871] close(5) = -1 EBADF (Bad file descriptor) [pid 5871] close(6) = -1 EBADF (Bad file descriptor) [pid 5871] close(7) = -1 EBADF (Bad file descriptor) [pid 5871] close(8) = -1 EBADF (Bad file descriptor) [pid 5871] close(9) = -1 EBADF (Bad file descriptor) [pid 5871] close(10) = -1 EBADF (Bad file descriptor) [pid 5871] close(11) = -1 EBADF (Bad file descriptor) [pid 5871] close(12) = -1 EBADF (Bad file descriptor) [pid 5871] close(13) = -1 EBADF (Bad file descriptor) [pid 5871] close(14) = -1 EBADF (Bad file descriptor) [pid 5871] close(15) = -1 EBADF (Bad file descriptor) [pid 5871] close(16) = -1 EBADF (Bad file descriptor) [pid 5871] close(17) = -1 EBADF (Bad file descriptor) [pid 5871] close(18) = -1 EBADF (Bad file descriptor) [pid 5871] close(19) = -1 EBADF (Bad file descriptor) [pid 5871] close(20) = -1 EBADF (Bad file descriptor) [pid 5871] close(21) = -1 EBADF (Bad file descriptor) [pid 5871] close(22) = -1 EBADF (Bad file descriptor) [pid 5871] close(23) = -1 EBADF (Bad file descriptor) [pid 5871] close(24) = -1 EBADF (Bad file descriptor) [pid 5871] close(25) = -1 EBADF (Bad file descriptor) [pid 5871] close(26) = -1 EBADF (Bad file descriptor) [pid 5871] close(27) = -1 EBADF (Bad file descriptor) [pid 5871] close(28) = -1 EBADF (Bad file descriptor) [pid 5871] close(29) = -1 EBADF (Bad file descriptor) [pid 5871] exit_group(0) = ? [ 100.043700][ T5871] NILFS (loop0): recovery complete [ 100.053365][ T5872] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5871] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5833] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 7 entries */, 32768) = 208 [pid 5833] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5833] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557f964730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557f964730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./17/file1") = 0 [pid 5833] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./17/binderfs") = 0 [pid 5833] umount2("./17/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./17/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./17/cgroup.net") = 0 [pid 5833] umount2("./17/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./17/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./17/cgroup.cpu") = 0 [pid 5833] umount2("./17/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./17/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./17/cgroup") = 0 [pid 5833] getdents64(3, 0x55557f95c6f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./17") = 0 [pid 5833] mkdir("./18", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5873 attached , child_tidptr=0x55557f95b650) = 20 [pid 5873] set_robust_list(0x55557f95b660, 24) = 0 [pid 5873] chdir("./18") = 0 [pid 5873] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5873] setpgid(0, 0) = 0 [pid 5873] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5873] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5873] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5873] write(3, "1000", 4) = 4 [pid 5873] close(3) = 0 [pid 5873] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5873] write(1, "executing program\n", 18) = 18 [pid 5873] ioctl(-1, KVM_CREATE_VM, 0) = -1 EBADF (Bad file descriptor) [pid 5873] memfd_create("syzkaller", 0) = 3 [pid 5873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff17ec00000 [pid 5873] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5873] munmap(0x7ff17ec00000, 138412032) = 0 [pid 5873] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5873] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5873] close(3) = 0 [pid 5873] close(4) = 0 [pid 5873] mkdir("./file1", 0777) = 0 [ 100.257138][ T5873] loop0: detected capacity change from 0 to 4096 [ 100.287158][ T5873] NILFS (loop0): invalid segment: Checksum error in segment payload [ 100.295449][ T5873] NILFS (loop0): trying rollback from an earlier position [ 100.305657][ T12] list_add double add: new=ffff888025b9fb70, prev=ffff888025b9fb70, next=ffff888020f85960. [ 100.316188][ T12] ------------[ cut here ]------------ [ 100.321643][ T12] kernel BUG at lib/list_debug.c:37! [ 100.326952][ T12] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 100.333908][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 [ 100.344037][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.354072][ T12] Workqueue: loop0 loop_workfn [ 100.358849][ T12] RIP: 0010:__list_add_valid_or_report+0xa4/0x130 [ 100.365253][ T12] Code: f7 74 11 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 c7 c7 a0 59 81 8c 4c 89 fe 4c 89 e2 4c 89 f1 e8 0d e8 27 fc 90 <0f> 0b 48 c7 c7 a0 57 81 8c e8 fe e7 27 fc 90 0f 0b 48 c7 c7 40 58 [ 100.384840][ T12] RSP: 0018:ffffc90000117628 EFLAGS: 00010046 [ 100.390891][ T12] RAX: 0000000000000058 RBX: 1ffff11004b73f6e RCX: ade36bab2270aa00 [ 100.398852][ T12] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 100.406806][ T12] RBP: 1ffff110041f0b2d R08: ffffffff81a170dc R09: 1ffff92000022e60 [ 100.414798][ T12] R10: dffffc0000000000 R11: fffff52000022e61 R12: ffff888025b9fb70 [ 100.422785][ T12] R13: dffffc0000000000 R14: ffff888020f85960 R15: ffff888025b9fb70 [ 100.430739][ T12] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 100.439650][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.446215][ T12] CR2: 00007ff17edff000 CR3: 00000000351e2000 CR4: 00000000003526f0 [ 100.454170][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.462123][ T12] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.470079][ T12] Call Trace: [ 100.473342][ T12] [ 100.476257][ T12] ? __die_body+0x5f/0xb0 [ 100.480587][ T12] ? die+0x9e/0xc0 [ 100.484316][ T12] ? do_trap+0x15a/0x3a0 [ 100.488548][ T12] ? __list_add_valid_or_report+0xa4/0x130 [ 100.494358][ T12] ? do_error_trap+0x1dc/0x2c0 [ 100.499115][ T12] ? __list_add_valid_or_report+0xa4/0x130 [ 100.504916][ T12] ? __pfx_do_error_trap+0x10/0x10 [ 100.510036][ T12] ? report_bug+0x3cd/0x500 [ 100.514540][ T12] ? __list_add_valid_or_report+0xa4/0x130 [ 100.520343][ T12] ? handle_invalid_op+0x34/0x40 [ 100.525273][ T12] ? __list_add_valid_or_report+0xa4/0x130 [ 100.531107][ T12] ? exc_invalid_op+0x38/0x50 [ 100.535775][ T12] ? asm_exc_invalid_op+0x1a/0x20 [ 100.540807][ T12] ? __wake_up_klogd+0xcc/0x110 [ 100.545657][ T12] ? __list_add_valid_or_report+0xa4/0x130 [ 100.551457][ T12] ? __list_add_valid_or_report+0xa3/0x130 [ 100.557278][ T12] loop_process_work+0x1f96/0x21c0 [ 100.562427][ T12] ? __pfx_validate_chain+0x10/0x10 [ 100.567622][ T12] ? mark_lock+0x9a/0x360 [ 100.571939][ T12] ? __lock_acquire+0x1397/0x2100 [ 100.576982][ T12] ? __pfx_loop_process_work+0x10/0x10 [ 100.582444][ T12] ? register_lock_class+0x102/0x980 [ 100.587743][ T12] ? __pfx_register_lock_class+0x10/0x10 [ 100.593365][ T12] ? mark_lock+0x9a/0x360 [ 100.597677][ T12] ? debug_object_deactivate+0x2d5/0x390 [ 100.603327][ T12] ? __lock_acquire+0x1397/0x2100 [ 100.608342][ T12] ? do_raw_spin_unlock+0x13c/0x8b0 [ 100.613533][ T12] ? __pfx_lock_acquire+0x10/0x10 [ 100.618562][ T12] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 100.624557][ T12] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 100.630889][ T12] ? process_scheduled_works+0x9c6/0x18e0 [ 100.636618][ T12] process_scheduled_works+0xabe/0x18e0 [ 100.642166][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 100.648135][ T12] ? assign_work+0x364/0x3d0 [ 100.652720][ T12] worker_thread+0x870/0xd30 [ 100.657302][ T12] ? __kthread_parkme+0x169/0x1d0 [ 100.662316][ T12] ? __pfx_worker_thread+0x10/0x10 [ 100.667416][ T12] kthread+0x7a9/0x920 [ 100.671468][ T12] ? __pfx_kthread+0x10/0x10 [ 100.676046][ T12] ? __pfx_worker_thread+0x10/0x10 [ 100.681160][ T12] ? __pfx_kthread+0x10/0x10 [ 100.685745][ T12] ? __pfx_kthread+0x10/0x10 [ 100.690319][ T12] ? __pfx_kthread+0x10/0x10 [ 100.694890][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 100.700081][ T12] ? lockdep_hardirqs_on+0x99/0x150 [ 100.705267][ T12] ? __pfx_kthread+0x10/0x10 [ 100.709866][ T12] ret_from_fork+0x4b/0x80 [ 100.714271][ T12] ? __pfx_kthread+0x10/0x10 [ 100.718844][ T12] ret_from_fork_asm+0x1a/0x30 [ 100.723602][ T12] [ 100.726610][ T12] Modules linked in: [ 100.730499][ T12] ---[ end trace 0000000000000000 ]--- [ 100.735960][ T12] RIP: 0010:__list_add_valid_or_report+0xa4/0x130 [ 100.742367][ T12] Code: f7 74 11 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 c7 c7 a0 59 81 8c 4c 89 fe 4c 89 e2 4c 89 f1 e8 0d e8 27 fc 90 <0f> 0b 48 c7 c7 a0 57 81 8c e8 fe e7 27 fc 90 0f 0b 48 c7 c7 40 58 [ 100.761978][ T12] RSP: 0018:ffffc90000117628 EFLAGS: 00010046 [ 100.768029][ T12] RAX: 0000000000000058 RBX: 1ffff11004b73f6e RCX: ade36bab2270aa00 [ 100.775991][ T12] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 100.783973][ T12] RBP: 1ffff110041f0b2d R08: ffffffff81a170dc R09: 1ffff92000022e60 [ 100.791926][ T12] R10: dffffc0000000000 R11: fffff52000022e61 R12: ffff888025b9fb70 [ 100.799897][ T12] R13: dffffc0000000000 R14: ffff888020f85960 R15: ffff888025b9fb70 [ 100.807854][ T12] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 100.816764][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.823329][ T12] CR2: 00007ff17edff000 CR3: 00000000351e2000 CR4: 00000000003526f0 [ 100.831286][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.839241][ T12] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.847201][ T12] Kernel panic - not syncing: Fatal exception [ 101.959193][ T12] Shutting down cpus with NMI [ 101.964343][ T12] Kernel Offset: disabled [ 101.968662][ T12] Rebooting in 86400 seconds..