./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2761932107

<...>
Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts.
execve("./syz-executor2761932107", ["./syz-executor2761932107"], 0x7fff21d324e0 /* 10 vars */) = 0
brk(NULL)                               = 0x5555557e4000
brk(0x5555557e4d00)                     = 0x5555557e4d00
arch_prctl(ARCH_SET_FS, 0x5555557e4380) = 0
set_tid_address(0x5555557e4650)         = 5065
set_robust_list(0x5555557e4660, 24)     = 0
rseq(0x5555557e4ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2761932107", 4096) = 28
getrandom("\x3a\xe9\xe7\x2f\x5d\x13\xcf\x16", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x5555557e4d00
brk(0x555555805d00)                     = 0x555555805d00
brk(0x555555806000)                     = 0x555555806000
mprotect(0x7fcc503a9000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
mkdir("./syzkaller.IWuUcY", 0700)       = 0
chmod("./syzkaller.IWuUcY", 0777)       = 0
chdir("./syzkaller.IWuUcY")             = 0
mkdir("./0", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5067 attached
 <unfinished ...>
[pid  5067] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5067
[pid  5067] <... set_robust_list resumed>) = 0
[pid  5067] chdir("./0")                = 0
[pid  5067] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5067] setpgid(0, 0)               = 0
[pid  5067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5067] write(3, "1000", 4)         = 4
[pid  5067] close(3)                    = 0
[pid  5067] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5067] memfd_create("syzkaller", 0) = 3
[pid  5067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5067] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5067] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5067] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5067] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5067] close(3)                    = 0
[pid  5067] mkdir("./file0", 0777)      = 0
[pid  5067] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5067] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5067] chdir("./file0")            = 0
[pid  5067] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5067] close(4)                    = 0
[   58.620546][ T5067] loop0: detected capacity change from 0 to 2048
[   58.652794][ T5068] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5067] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5067] exit_group(0)               = ?
[pid  5067] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5067, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs")                  = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   58.681130][ T5067] syz-executor276: attempt to access beyond end of device
[   58.681130][ T5067] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   58.699336][ T5067] syz-executor276: attempt to access beyond end of device
[   58.699336][ T5067] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./0/file0")                      = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./0")                            = 0
mkdir("./1", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5069 attached
, child_tidptr=0x5555557e4650) = 5069
[pid  5069] set_robust_list(0x5555557e4660, 24) = 0
[pid  5069] chdir("./1")                = 0
[pid  5069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5069] setpgid(0, 0)               = 0
[pid  5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5069] write(3, "1000", 4)         = 4
[pid  5069] close(3)                    = 0
[pid  5069] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5069] memfd_create("syzkaller", 0) = 3
[pid  5069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5069] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5069] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5069] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5069] close(3)                    = 0
[pid  5069] mkdir("./file0", 0777)      = 0
[pid  5069] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5069] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5069] chdir("./file0")            = 0
[pid  5069] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5069] close(4)                    = 0
[   58.853574][ T5069] loop0: detected capacity change from 0 to 2048
[   58.872994][ T5070] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   58.892886][ T5069] syz-executor276: attempt to access beyond end of device
[pid  5069] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5069] exit_group(0)               = ?
[pid  5069] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5069, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./1/binderfs")                  = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   58.892886][ T5069] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   58.914457][ T5069] syz-executor276: attempt to access beyond end of device
[   58.914457][ T5069] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./1/file0")                      = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./1")                            = 0
mkdir("./2", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5071 attached
, child_tidptr=0x5555557e4650) = 5071
[pid  5071] set_robust_list(0x5555557e4660, 24) = 0
[pid  5071] chdir("./2")                = 0
[pid  5071] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5071] setpgid(0, 0)               = 0
[pid  5071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5071] write(3, "1000", 4)         = 4
[pid  5071] close(3)                    = 0
[pid  5071] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5071] memfd_create("syzkaller", 0) = 3
[pid  5071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5071] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5071] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5071] close(3)                    = 0
[pid  5071] mkdir("./file0", 0777)      = 0
[pid  5071] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5071] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5071] chdir("./file0")            = 0
[pid  5071] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5071] close(4)                    = 0
[   59.099026][ T5071] loop0: detected capacity change from 0 to 2048
[   59.119347][ T5072] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   59.139451][ T5071] syz-executor276: attempt to access beyond end of device
[pid  5071] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5071] exit_group(0)               = ?
[pid  5071] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5071, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./2/binderfs")                  = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   59.139451][ T5071] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   59.157872][ T5071] syz-executor276: attempt to access beyond end of device
[   59.157872][ T5071] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./2/file0")                      = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./2")                            = 0
mkdir("./3", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5073 attached
, child_tidptr=0x5555557e4650) = 5073
[pid  5073] set_robust_list(0x5555557e4660, 24) = 0
[pid  5073] chdir("./3")                = 0
[pid  5073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5073] setpgid(0, 0)               = 0
[pid  5073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5073] write(3, "1000", 4)         = 4
[pid  5073] close(3)                    = 0
[pid  5073] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5073] memfd_create("syzkaller", 0) = 3
[pid  5073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5073] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5073] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5073] close(3)                    = 0
[pid  5073] mkdir("./file0", 0777)      = 0
[pid  5073] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5073] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5073] chdir("./file0")            = 0
[pid  5073] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5073] close(4)                    = 0
[   59.346568][ T5073] loop0: detected capacity change from 0 to 2048
[   59.372072][ T5074] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5073] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5073] exit_group(0)               = ?
[pid  5073] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5073, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./3/binderfs")                  = 0
[   59.401051][ T5073] syz-executor276: attempt to access beyond end of device
[   59.401051][ T5073] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   59.417389][ T5073] syz-executor276: attempt to access beyond end of device
[   59.417389][ T5073] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./3/file0")                      = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./3")                            = 0
mkdir("./4", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5075 attached
, child_tidptr=0x5555557e4650) = 5075
[pid  5075] set_robust_list(0x5555557e4660, 24) = 0
[pid  5075] chdir("./4")                = 0
[pid  5075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5075] setpgid(0, 0)               = 0
[pid  5075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5075] write(3, "1000", 4)         = 4
[pid  5075] close(3)                    = 0
[pid  5075] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5075] memfd_create("syzkaller", 0) = 3
[pid  5075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5075] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5075] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5075] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5075] close(3)                    = 0
[pid  5075] mkdir("./file0", 0777)      = 0
[pid  5075] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5075] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5075] chdir("./file0")            = 0
[pid  5075] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5075] close(4)                    = 0
[   59.658993][ T5075] loop0: detected capacity change from 0 to 2048
[   59.689895][ T5076] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5075] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5075] exit_group(0)               = ?
[pid  5075] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5075, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./4/binderfs")                  = 0
[   59.709026][ T5075] syz-executor276: attempt to access beyond end of device
[   59.709026][ T5075] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   59.726803][ T5075] syz-executor276: attempt to access beyond end of device
[   59.726803][ T5075] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./4/file0")                      = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./4")                            = 0
mkdir("./5", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5077 attached
 <unfinished ...>
[pid  5077] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5077
[pid  5077] <... set_robust_list resumed>) = 0
[pid  5077] chdir("./5")                = 0
[pid  5077] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5077] setpgid(0, 0)               = 0
[pid  5077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5077] write(3, "1000", 4)         = 4
[pid  5077] close(3)                    = 0
[pid  5077] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5077] memfd_create("syzkaller", 0) = 3
[pid  5077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5077] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5077] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5077] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5077] close(3)                    = 0
[pid  5077] mkdir("./file0", 0777)      = 0
[pid  5077] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5077] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5077] chdir("./file0")            = 0
[pid  5077] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5077] close(4)                    = 0
[pid  5077] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5077] exit_group(0)               = ?
[pid  5077] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5077, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[   59.961886][ T5077] loop0: detected capacity change from 0 to 2048
[   59.981197][ T5078] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./5/binderfs")                  = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./5/file0")                      = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./5")                            = 0
mkdir("./6", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5079 attached
, child_tidptr=0x5555557e4650) = 5079
[pid  5079] set_robust_list(0x5555557e4660, 24) = 0
[pid  5079] chdir("./6")                = 0
[pid  5079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5079] setpgid(0, 0)               = 0
[pid  5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5079] write(3, "1000", 4)         = 4
[pid  5079] close(3)                    = 0
[pid  5079] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5079] memfd_create("syzkaller", 0) = 3
[pid  5079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5079] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5079] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5079] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5079] close(3)                    = 0
[pid  5079] mkdir("./file0", 0777)      = 0
[pid  5079] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5079] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5079] chdir("./file0")            = 0
[pid  5079] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5079] close(4)                    = 0
[pid  5079] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5079] exit_group(0)               = ?
[pid  5079] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5079, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./6/binderfs")                  = 0
[   60.151464][ T5079] loop0: detected capacity change from 0 to 2048
[   60.171022][ T5080] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./6/file0")                      = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./6")                            = 0
mkdir("./7", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5081 attached
 <unfinished ...>
[pid  5081] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5081
[pid  5081] <... set_robust_list resumed>) = 0
[pid  5081] chdir("./7")                = 0
[pid  5081] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5081] setpgid(0, 0)               = 0
[pid  5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5081] write(3, "1000", 4)         = 4
[pid  5081] close(3)                    = 0
[pid  5081] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5081] memfd_create("syzkaller", 0) = 3
[pid  5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5081] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5081] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5081] close(3)                    = 0
[pid  5081] mkdir("./file0", 0777)      = 0
[pid  5081] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5081] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5081] chdir("./file0")            = 0
[pid  5081] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5081] close(4)                    = 0
[pid  5081] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5081] exit_group(0)               = ?
[pid  5081] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5081, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   60.357301][ T5081] loop0: detected capacity change from 0 to 2048
[   60.372006][ T5082] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./7/binderfs")                  = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./7/file0")                      = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./7")                            = 0
mkdir("./8", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5083 attached
, child_tidptr=0x5555557e4650) = 5083
[pid  5083] set_robust_list(0x5555557e4660, 24) = 0
[pid  5083] chdir("./8")                = 0
[pid  5083] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5083] setpgid(0, 0)               = 0
[pid  5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5083] write(3, "1000", 4)         = 4
[pid  5083] close(3)                    = 0
[pid  5083] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5083] memfd_create("syzkaller", 0) = 3
[pid  5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5083] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5083] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5083] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5083] close(3)                    = 0
[pid  5083] mkdir("./file0", 0777)      = 0
[pid  5083] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5083] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5083] chdir("./file0")            = 0
[pid  5083] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5083] close(4)                    = 0
[pid  5083] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5083] exit_group(0)               = ?
[pid  5083] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5083, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
[   60.607586][ T5083] loop0: detected capacity change from 0 to 2048
[   60.636283][ T5084] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./8/binderfs")                  = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./8/file0")                      = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./8")                            = 0
mkdir("./9", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5085 attached
 <unfinished ...>
[pid  5085] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5085
[pid  5085] <... set_robust_list resumed>) = 0
[pid  5085] chdir("./9")                = 0
[pid  5085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5085] setpgid(0, 0)               = 0
[pid  5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5085] write(3, "1000", 4)         = 4
[pid  5085] close(3)                    = 0
[pid  5085] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5085] memfd_create("syzkaller", 0) = 3
[pid  5085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5085] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5085] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5085] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5085] close(3)                    = 0
[pid  5085] mkdir("./file0", 0777)      = 0
[pid  5085] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5085] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5085] chdir("./file0")            = 0
[pid  5085] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5085] close(4)                    = 0
[pid  5085] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5085] exit_group(0)               = ?
[   60.905465][ T5085] loop0: detected capacity change from 0 to 2048
[   60.925692][ T5086] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5085] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5085, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./9/binderfs")                  = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./9/file0")                      = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./9")                            = 0
mkdir("./10", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5087 attached
 <unfinished ...>
[pid  5087] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5087
[pid  5087] <... set_robust_list resumed>) = 0
[pid  5087] chdir("./10")               = 0
[pid  5087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5087] setpgid(0, 0)               = 0
[pid  5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5087] write(3, "1000", 4)         = 4
[pid  5087] close(3)                    = 0
[pid  5087] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5087] memfd_create("syzkaller", 0) = 3
[pid  5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5087] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5087] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5087] close(3)                    = 0
[pid  5087] mkdir("./file0", 0777)      = 0
[pid  5087] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5087] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5087] chdir("./file0")            = 0
[pid  5087] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5087] close(4)                    = 0
[pid  5087] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5087] exit_group(0)               = ?
[pid  5087] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5087, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./10/binderfs")                 = 0
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[   61.122511][ T5087] loop0: detected capacity change from 0 to 2048
[   61.141261][ T5088] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./10/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./10")                           = 0
mkdir("./11", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5089 attached
, child_tidptr=0x5555557e4650) = 5089
[pid  5089] set_robust_list(0x5555557e4660, 24) = 0
[pid  5089] chdir("./11")               = 0
[pid  5089] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5089] setpgid(0, 0)               = 0
[pid  5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5089] write(3, "1000", 4)         = 4
[pid  5089] close(3)                    = 0
[pid  5089] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5089] memfd_create("syzkaller", 0) = 3
[pid  5089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5089] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5089] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5089] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5089] close(3)                    = 0
[pid  5089] mkdir("./file0", 0777)      = 0
[pid  5089] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5089] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5089] chdir("./file0")            = 0
[pid  5089] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5089] close(4)                    = 0
[   61.330537][ T5089] loop0: detected capacity change from 0 to 2048
[   61.361352][ T5090] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5089] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5089] exit_group(0)               = ?
[pid  5089] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5089, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./11/binderfs")                 = 0
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./11/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./11")                           = 0
mkdir("./12", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5091 attached
, child_tidptr=0x5555557e4650) = 5091
[pid  5091] set_robust_list(0x5555557e4660, 24) = 0
[pid  5091] chdir("./12")               = 0
[pid  5091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5091] setpgid(0, 0)               = 0
[pid  5091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5091] write(3, "1000", 4)         = 4
[pid  5091] close(3)                    = 0
[pid  5091] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5091] memfd_create("syzkaller", 0) = 3
[pid  5091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5091] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5091] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5091] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5091] close(3)                    = 0
[pid  5091] mkdir("./file0", 0777)      = 0
[pid  5091] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5091] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5091] chdir("./file0")            = 0
[pid  5091] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5091] close(4)                    = 0
[pid  5091] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5091] exit_group(0)               = ?
[pid  5091] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5091, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
[   61.579830][ T5091] loop0: detected capacity change from 0 to 2048
[   61.598123][ T5092] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./12/binderfs")                 = 0
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./12/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./12")                           = 0
mkdir("./13", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5093 attached
 <unfinished ...>
[pid  5093] set_robust_list(0x5555557e4660, 24) = 0
[pid  5093] chdir("./13" <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5093
[pid  5093] <... chdir resumed>)        = 0
[pid  5093] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5093] setpgid(0, 0)               = 0
[pid  5093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5093] write(3, "1000", 4)         = 4
[pid  5093] close(3)                    = 0
[pid  5093] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5093] memfd_create("syzkaller", 0) = 3
[pid  5093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5093] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5093] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5093] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5093] close(3)                    = 0
[pid  5093] mkdir("./file0", 0777)      = 0
[pid  5093] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5093] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5093] chdir("./file0")            = 0
[pid  5093] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5093] close(4)                    = 0
[pid  5093] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[   61.863086][ T5093] loop0: detected capacity change from 0 to 2048
[   61.877192][ T5094] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5093] exit_group(0)               = ?
[pid  5093] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5093, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./13/binderfs")                 = 0
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./13/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./13")                           = 0
mkdir("./14", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5095 attached
, child_tidptr=0x5555557e4650) = 5095
[pid  5095] set_robust_list(0x5555557e4660, 24) = 0
[pid  5095] chdir("./14")               = 0
[pid  5095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5095] setpgid(0, 0)               = 0
[pid  5095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5095] write(3, "1000", 4)         = 4
[pid  5095] close(3)                    = 0
[pid  5095] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5095] memfd_create("syzkaller", 0) = 3
[pid  5095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5095] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5095] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5095] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5095] close(3)                    = 0
[pid  5095] mkdir("./file0", 0777)      = 0
[pid  5095] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5095] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5095] chdir("./file0")            = 0
[pid  5095] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5095] close(4)                    = 0
[pid  5095] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5095] exit_group(0)               = ?
[pid  5095] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5095, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./14/binderfs")                 = 0
[   62.048329][ T5095] loop0: detected capacity change from 0 to 2048
[   62.067788][ T5096] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./14/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./14")                           = 0
mkdir("./15", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5097 attached
, child_tidptr=0x5555557e4650) = 5097
[pid  5097] set_robust_list(0x5555557e4660, 24) = 0
[pid  5097] chdir("./15")               = 0
[pid  5097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5097] setpgid(0, 0)               = 0
[pid  5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5097] write(3, "1000", 4)         = 4
[pid  5097] close(3)                    = 0
[pid  5097] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5097] memfd_create("syzkaller", 0) = 3
[pid  5097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5097] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5097] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5097] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5097] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5097] close(3)                    = 0
[pid  5097] mkdir("./file0", 0777)      = 0
[pid  5097] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5097] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5097] chdir("./file0")            = 0
[pid  5097] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5097] close(4)                    = 0
[pid  5097] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5097] exit_group(0)               = ?
[pid  5097] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5097, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   62.278222][ T5097] loop0: detected capacity change from 0 to 2048
[   62.298496][ T5098] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./15/binderfs")                 = 0
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./15/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./15")                           = 0
mkdir("./16", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5099 attached
, child_tidptr=0x5555557e4650) = 5099
[pid  5099] set_robust_list(0x5555557e4660, 24) = 0
[pid  5099] chdir("./16")               = 0
[pid  5099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5099] setpgid(0, 0)               = 0
[pid  5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5099] write(3, "1000", 4)         = 4
[pid  5099] close(3)                    = 0
[pid  5099] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5099] memfd_create("syzkaller", 0) = 3
[pid  5099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5099] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5099] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5099] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5099] close(3)                    = 0
[pid  5099] mkdir("./file0", 0777)      = 0
[pid  5099] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5099] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5099] chdir("./file0")            = 0
[pid  5099] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5099] close(4)                    = 0
[pid  5099] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5099] exit_group(0)               = ?
[pid  5099] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5099, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
[   62.494937][ T5099] loop0: detected capacity change from 0 to 2048
[   62.524350][ T5100] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./16/binderfs")                 = 0
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./16/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./16")                           = 0
mkdir("./17", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5101 attached
, child_tidptr=0x5555557e4650) = 5101
[pid  5101] set_robust_list(0x5555557e4660, 24) = 0
[pid  5101] chdir("./17")               = 0
[pid  5101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5101] setpgid(0, 0)               = 0
[pid  5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5101] write(3, "1000", 4)         = 4
[pid  5101] close(3)                    = 0
[pid  5101] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5101] memfd_create("syzkaller", 0) = 3
[pid  5101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5101] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5101] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5101] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5101] close(3)                    = 0
[pid  5101] mkdir("./file0", 0777)      = 0
[pid  5101] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5101] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5101] chdir("./file0")            = 0
[pid  5101] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5101] close(4)                    = 0
[pid  5101] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5101] exit_group(0)               = ?
[pid  5101] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5101, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   62.741018][ T5101] loop0: detected capacity change from 0 to 2048
[   62.760119][ T5102] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./17/binderfs")                 = 0
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./17/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./17")                           = 0
mkdir("./18", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5103 attached
, child_tidptr=0x5555557e4650) = 5103
[pid  5103] set_robust_list(0x5555557e4660, 24) = 0
[pid  5103] chdir("./18")               = 0
[pid  5103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5103] setpgid(0, 0)               = 0
[pid  5103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5103] write(3, "1000", 4)         = 4
[pid  5103] close(3)                    = 0
[pid  5103] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5103] memfd_create("syzkaller", 0) = 3
[pid  5103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5103] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5103] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5103] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5103] close(3)                    = 0
[pid  5103] mkdir("./file0", 0777)      = 0
[pid  5103] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5103] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5103] chdir("./file0")            = 0
[pid  5103] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5103] close(4)                    = 0
[pid  5103] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5103] exit_group(0)               = ?
[pid  5103] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5103, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./18/binderfs")                 = 0
[   63.002144][ T5103] loop0: detected capacity change from 0 to 2048
[   63.026123][ T5104] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./18/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./18")                           = 0
mkdir("./19", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5105 attached
, child_tidptr=0x5555557e4650) = 5105
[pid  5105] set_robust_list(0x5555557e4660, 24) = 0
[pid  5105] chdir("./19")               = 0
[pid  5105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5105] setpgid(0, 0)               = 0
[pid  5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5105] write(3, "1000", 4)         = 4
[pid  5105] close(3)                    = 0
[pid  5105] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5105] memfd_create("syzkaller", 0) = 3
[pid  5105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5105] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5105] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5105] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5105] close(3)                    = 0
[pid  5105] mkdir("./file0", 0777)      = 0
[pid  5105] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5105] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5105] chdir("./file0")            = 0
[pid  5105] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5105] close(4)                    = 0
[pid  5105] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5105] exit_group(0)               = ?
[pid  5105] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5105, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[   63.246563][ T5105] loop0: detected capacity change from 0 to 2048
[   63.266052][ T5106] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./19/binderfs")                 = 0
umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./19/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./19")                           = 0
mkdir("./20", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5107 attached
, child_tidptr=0x5555557e4650) = 5107
[pid  5107] set_robust_list(0x5555557e4660, 24) = 0
[pid  5107] chdir("./20")               = 0
[pid  5107] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5107] setpgid(0, 0)               = 0
[pid  5107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5107] write(3, "1000", 4)         = 4
[pid  5107] close(3)                    = 0
[pid  5107] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5107] memfd_create("syzkaller", 0) = 3
[pid  5107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5107] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5107] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5107] close(3)                    = 0
[pid  5107] mkdir("./file0", 0777)      = 0
[pid  5107] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5107] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5107] chdir("./file0")            = 0
[pid  5107] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5107] close(4)                    = 0
[pid  5107] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5107] exit_group(0)               = ?
[pid  5107] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5107, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   63.535210][ T5107] loop0: detected capacity change from 0 to 2048
[   63.555832][ T5108] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./20/binderfs")                 = 0
umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./20/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./20")                           = 0
mkdir("./21", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5110 attached
, child_tidptr=0x5555557e4650) = 5110
[pid  5110] set_robust_list(0x5555557e4660, 24) = 0
[pid  5110] chdir("./21")               = 0
[pid  5110] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5110] setpgid(0, 0)               = 0
[pid  5110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5110] write(3, "1000", 4)         = 4
[pid  5110] close(3)                    = 0
[pid  5110] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5110] memfd_create("syzkaller", 0) = 3
[pid  5110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5110] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5110] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5110] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5110] close(3)                    = 0
[pid  5110] mkdir("./file0", 0777)      = 0
[pid  5110] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5110] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5110] chdir("./file0")            = 0
[pid  5110] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5110] close(4)                    = 0
[   63.771242][ T5110] loop0: detected capacity change from 0 to 2048
[   63.785052][ T5111] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5110] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5110] exit_group(0)               = ?
[pid  5110] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5110, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./21/binderfs")                 = 0
[   63.817115][ T5110] bio_check_eod: 32 callbacks suppressed
[   63.817128][ T5110] syz-executor276: attempt to access beyond end of device
[   63.817128][ T5110] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   63.838964][ T5110] syz-executor276: attempt to access beyond end of device
[   63.838964][ T5110] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./21/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./21")                           = 0
mkdir("./22", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5112 attached
, child_tidptr=0x5555557e4650) = 5112
[pid  5112] set_robust_list(0x5555557e4660, 24) = 0
[pid  5112] chdir("./22")               = 0
[pid  5112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5112] setpgid(0, 0)               = 0
[pid  5112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5112] write(3, "1000", 4)         = 4
[pid  5112] close(3)                    = 0
[pid  5112] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5112] memfd_create("syzkaller", 0) = 3
[pid  5112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5112] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5112] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5112] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5112] close(3)                    = 0
[pid  5112] mkdir("./file0", 0777)      = 0
[pid  5112] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5112] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5112] chdir("./file0")            = 0
[pid  5112] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5112] close(4)                    = 0
[   64.049107][ T5112] loop0: detected capacity change from 0 to 2048
[   64.069126][ T5113] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   64.087445][ T5112] syz-executor276: attempt to access beyond end of device
[pid  5112] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5112] exit_group(0)               = ?
[pid  5112] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5112, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   64.087445][ T5112] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   64.103583][ T5112] syz-executor276: attempt to access beyond end of device
[   64.103583][ T5112] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./22/binderfs")                 = 0
umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./22/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./22")                           = 0
mkdir("./23", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5114 attached
, child_tidptr=0x5555557e4650) = 5114
[pid  5114] set_robust_list(0x5555557e4660, 24) = 0
[pid  5114] chdir("./23")               = 0
[pid  5114] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5114] setpgid(0, 0)               = 0
[pid  5114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5114] write(3, "1000", 4)         = 4
[pid  5114] close(3)                    = 0
[pid  5114] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5114] memfd_create("syzkaller", 0) = 3
[pid  5114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5114] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5114] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5114] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5114] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5114] close(3)                    = 0
[pid  5114] mkdir("./file0", 0777)      = 0
[pid  5114] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5114] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5114] chdir("./file0")            = 0
[pid  5114] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5114] close(4)                    = 0
[   64.325195][ T5114] loop0: detected capacity change from 0 to 2048
[   64.344867][ T5115] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5114] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5114] exit_group(0)               = ?
[pid  5114] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5114, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[   64.377075][ T5114] syz-executor276: attempt to access beyond end of device
[   64.377075][ T5114] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   64.393859][ T5114] syz-executor276: attempt to access beyond end of device
[   64.393859][ T5114] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
unlink("./23/binderfs")                 = 0
umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./23/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./23")                           = 0
mkdir("./24", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5116 attached
, child_tidptr=0x5555557e4650) = 5116
[pid  5116] set_robust_list(0x5555557e4660, 24) = 0
[pid  5116] chdir("./24")               = 0
[pid  5116] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5116] setpgid(0, 0)               = 0
[pid  5116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5116] write(3, "1000", 4)         = 4
[pid  5116] close(3)                    = 0
[pid  5116] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5116] memfd_create("syzkaller", 0) = 3
[pid  5116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5116] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5116] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5116] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5116] close(3)                    = 0
[pid  5116] mkdir("./file0", 0777)      = 0
[pid  5116] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5116] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5116] chdir("./file0")            = 0
[pid  5116] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5116] close(4)                    = 0
[   64.616021][ T5116] loop0: detected capacity change from 0 to 2048
[   64.631103][ T5117] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5116] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5116] exit_group(0)               = ?
[pid  5116] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5116, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./24/binderfs")                 = 0
umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   64.667419][ T5116] syz-executor276: attempt to access beyond end of device
[   64.667419][ T5116] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   64.684135][ T5116] syz-executor276: attempt to access beyond end of device
[   64.684135][ T5116] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./24/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./24")                           = 0
mkdir("./25", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5118 attached
, child_tidptr=0x5555557e4650) = 5118
[pid  5118] set_robust_list(0x5555557e4660, 24) = 0
[pid  5118] chdir("./25")               = 0
[pid  5118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5118] setpgid(0, 0)               = 0
[pid  5118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5118] write(3, "1000", 4)         = 4
[pid  5118] close(3)                    = 0
[pid  5118] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5118] memfd_create("syzkaller", 0) = 3
[pid  5118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5118] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5118] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5118] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5118] close(3)                    = 0
[pid  5118] mkdir("./file0", 0777)      = 0
[pid  5118] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5118] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5118] chdir("./file0")            = 0
[pid  5118] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5118] close(4)                    = 0
[   64.860837][ T5118] loop0: detected capacity change from 0 to 2048
[   64.879984][ T5119] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5118] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5118] exit_group(0)               = ?
[pid  5118] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5118, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./25/binderfs")                 = 0
umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./25/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./25")                           = 0
mkdir("./26", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
[   64.921203][ T5118] syz-executor276: attempt to access beyond end of device
[   64.921203][ T5118] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   64.937817][ T5118] syz-executor276: attempt to access beyond end of device
[   64.937817][ T5118] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5120 attached
 <unfinished ...>
[pid  5120] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5120
[pid  5120] <... set_robust_list resumed>) = 0
[pid  5120] chdir("./26")               = 0
[pid  5120] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5120] setpgid(0, 0)               = 0
[pid  5120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5120] write(3, "1000", 4)         = 4
[pid  5120] close(3)                    = 0
[pid  5120] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5120] memfd_create("syzkaller", 0) = 3
[pid  5120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5120] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5120] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5120] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5120] close(3)                    = 0
[pid  5120] mkdir("./file0", 0777)      = 0
[pid  5120] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5120] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5120] chdir("./file0")            = 0
[pid  5120] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5120] close(4)                    = 0
[   65.075544][ T5120] loop0: detected capacity change from 0 to 2048
[   65.089816][ T5121] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5120] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5120] exit_group(0)               = ?
[pid  5120] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5120, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./26/binderfs")                 = 0
umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./26/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./26")                           = 0
mkdir("./27", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5122 attached
, child_tidptr=0x5555557e4650) = 5122
[pid  5122] set_robust_list(0x5555557e4660, 24) = 0
[pid  5122] chdir("./27")               = 0
[pid  5122] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5122] setpgid(0, 0)               = 0
[pid  5122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5122] write(3, "1000", 4)         = 4
[pid  5122] close(3)                    = 0
[pid  5122] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5122] memfd_create("syzkaller", 0) = 3
[pid  5122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5122] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5122] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5122] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5122] close(3)                    = 0
[pid  5122] mkdir("./file0", 0777)      = 0
[pid  5122] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5122] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5122] chdir("./file0")            = 0
[pid  5122] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5122] close(4)                    = 0
[pid  5122] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5122] exit_group(0)               = ?
[pid  5122] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5122, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./27/binderfs")                 = 0
umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   65.298831][ T5122] loop0: detected capacity change from 0 to 2048
[   65.319239][ T5123] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./27/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./27")                           = 0
mkdir("./28", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5124 attached
, child_tidptr=0x5555557e4650) = 5124
[pid  5124] set_robust_list(0x5555557e4660, 24) = 0
[pid  5124] chdir("./28")               = 0
[pid  5124] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5124] setpgid(0, 0)               = 0
[pid  5124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5124] write(3, "1000", 4)         = 4
[pid  5124] close(3)                    = 0
[pid  5124] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5124] memfd_create("syzkaller", 0) = 3
[pid  5124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5124] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5124] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5124] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5124] close(3)                    = 0
[pid  5124] mkdir("./file0", 0777)      = 0
[pid  5124] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5124] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5124] chdir("./file0")            = 0
[pid  5124] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5124] close(4)                    = 0
[pid  5124] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5124] exit_group(0)               = ?
[pid  5124] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5124, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./28/binderfs")                 = 0
umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./28/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
[   65.465522][ T5124] loop0: detected capacity change from 0 to 2048
[   65.490891][ T5125] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
close(3)                                = 0
rmdir("./28")                           = 0
mkdir("./29", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5126 attached
, child_tidptr=0x5555557e4650) = 5126
[pid  5126] set_robust_list(0x5555557e4660, 24) = 0
[pid  5126] chdir("./29")               = 0
[pid  5126] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5126] setpgid(0, 0)               = 0
[pid  5126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5126] write(3, "1000", 4)         = 4
[pid  5126] close(3)                    = 0
[pid  5126] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5126] memfd_create("syzkaller", 0) = 3
[pid  5126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5126] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5126] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5126] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5126] close(3)                    = 0
[pid  5126] mkdir("./file0", 0777)      = 0
[pid  5126] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5126] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5126] chdir("./file0")            = 0
[pid  5126] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5126] close(4)                    = 0
[pid  5126] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5126] exit_group(0)               = ?
[pid  5126] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5126, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./29/binderfs")                 = 0
[   65.609184][ T5126] loop0: detected capacity change from 0 to 2048
[   65.627927][ T5127] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./29/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./29")                           = 0
mkdir("./30", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5128 attached
 <unfinished ...>
[pid  5128] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5128
[pid  5128] <... set_robust_list resumed>) = 0
[pid  5128] chdir("./30")               = 0
[pid  5128] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5128] setpgid(0, 0)               = 0
[pid  5128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5128] write(3, "1000", 4)         = 4
[pid  5128] close(3)                    = 0
[pid  5128] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5128] memfd_create("syzkaller", 0) = 3
[pid  5128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5128] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5128] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5128] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5128] close(3)                    = 0
[pid  5128] mkdir("./file0", 0777)      = 0
[pid  5128] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5128] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5128] chdir("./file0")            = 0
[pid  5128] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5128] close(4)                    = 0
[pid  5128] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5128] exit_group(0)               = ?
[   65.779558][ T5128] loop0: detected capacity change from 0 to 2048
[   65.809403][ T5129] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5128] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5128, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./30/binderfs")                 = 0
umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./30/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./30")                           = 0
mkdir("./31", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5130 attached
, child_tidptr=0x5555557e4650) = 5130
[pid  5130] set_robust_list(0x5555557e4660, 24) = 0
[pid  5130] chdir("./31")               = 0
[pid  5130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5130] setpgid(0, 0)               = 0
[pid  5130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5130] write(3, "1000", 4)         = 4
[pid  5130] close(3)                    = 0
[pid  5130] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5130] memfd_create("syzkaller", 0) = 3
[pid  5130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5130] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5130] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5130] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5130] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5130] close(3)                    = 0
[pid  5130] mkdir("./file0", 0777)      = 0
[pid  5130] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5130] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5130] chdir("./file0")            = 0
[pid  5130] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5130] close(4)                    = 0
[pid  5130] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5130] exit_group(0)               = ?
[pid  5130] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5130, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
[   66.055570][ T5130] loop0: detected capacity change from 0 to 2048
[   66.073834][ T5131] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./31/binderfs")                 = 0
umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./31/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./31")                           = 0
mkdir("./32", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5132 attached
, child_tidptr=0x5555557e4650) = 5132
[pid  5132] set_robust_list(0x5555557e4660, 24) = 0
[pid  5132] chdir("./32")               = 0
[pid  5132] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5132] setpgid(0, 0)               = 0
[pid  5132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5132] write(3, "1000", 4)         = 4
[pid  5132] close(3)                    = 0
[pid  5132] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5132] memfd_create("syzkaller", 0) = 3
[pid  5132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5132] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5132] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5132] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5132] close(3)                    = 0
[pid  5132] mkdir("./file0", 0777)      = 0
[pid  5132] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5132] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5132] chdir("./file0")            = 0
[pid  5132] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5132] close(4)                    = 0
[pid  5132] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5132] exit_group(0)               = ?
[pid  5132] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5132, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
[   66.309469][ T5132] loop0: detected capacity change from 0 to 2048
[   66.329930][ T5133] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./32/binderfs")                 = 0
umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./32/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./32")                           = 0
mkdir("./33", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5134 attached
, child_tidptr=0x5555557e4650) = 5134
[pid  5134] set_robust_list(0x5555557e4660, 24) = 0
[pid  5134] chdir("./33")               = 0
[pid  5134] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5134] setpgid(0, 0)               = 0
[pid  5134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5134] write(3, "1000", 4)         = 4
[pid  5134] close(3)                    = 0
[pid  5134] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5134] memfd_create("syzkaller", 0) = 3
[pid  5134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5134] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5134] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5134] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5134] close(3)                    = 0
[pid  5134] mkdir("./file0", 0777)      = 0
[pid  5134] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5134] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5134] chdir("./file0")            = 0
[pid  5134] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5134] close(4)                    = 0
[pid  5134] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5134] exit_group(0)               = ?
[pid  5134] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5134, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   66.555667][ T5134] loop0: detected capacity change from 0 to 2048
[   66.574800][ T5135] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./33/binderfs")                 = 0
umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./33/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./33")                           = 0
mkdir("./34", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5136 attached
, child_tidptr=0x5555557e4650) = 5136
[pid  5136] set_robust_list(0x5555557e4660, 24) = 0
[pid  5136] chdir("./34")               = 0
[pid  5136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5136] setpgid(0, 0)               = 0
[pid  5136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5136] write(3, "1000", 4)         = 4
[pid  5136] close(3)                    = 0
[pid  5136] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5136] memfd_create("syzkaller", 0) = 3
[pid  5136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5136] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5136] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5136] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5136] close(3)                    = 0
[pid  5136] mkdir("./file0", 0777)      = 0
[pid  5136] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5136] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5136] chdir("./file0")            = 0
[pid  5136] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5136] close(4)                    = 0
[pid  5136] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5136] exit_group(0)               = ?
[pid  5136] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5136, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
[   66.766493][ T5136] loop0: detected capacity change from 0 to 2048
[   66.787531][ T5137] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./34/binderfs")                 = 0
umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./34/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./34")                           = 0
mkdir("./35", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5138 attached
 <unfinished ...>
[pid  5138] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5138
[pid  5138] <... set_robust_list resumed>) = 0
[pid  5138] chdir("./35")               = 0
[pid  5138] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5138] setpgid(0, 0)               = 0
[pid  5138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5138] write(3, "1000", 4)         = 4
[pid  5138] close(3)                    = 0
[pid  5138] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5138] memfd_create("syzkaller", 0) = 3
[pid  5138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5138] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5138] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5138] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5138] close(3)                    = 0
[pid  5138] mkdir("./file0", 0777)      = 0
[pid  5138] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5138] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5138] chdir("./file0")            = 0
[pid  5138] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5138] close(4)                    = 0
[pid  5138] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5138] exit_group(0)               = ?
[pid  5138] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5138, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
[   67.058220][ T5138] loop0: detected capacity change from 0 to 2048
[   67.078243][ T5139] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./35/binderfs")                 = 0
umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./35/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./35")                           = 0
mkdir("./36", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5140 attached
 <unfinished ...>
[pid  5140] set_robust_list(0x5555557e4660, 24) = 0
[pid  5140] chdir("./36")               = 0
[pid  5140] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5140
[pid  5140] setpgid(0, 0)               = 0
[pid  5140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5140] write(3, "1000", 4)         = 4
[pid  5140] close(3)                    = 0
[pid  5140] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5140] memfd_create("syzkaller", 0) = 3
[pid  5140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5140] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5140] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5140] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5140] close(3)                    = 0
[pid  5140] mkdir("./file0", 0777)      = 0
[pid  5140] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5140] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5140] chdir("./file0")            = 0
[pid  5140] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5140] close(4)                    = 0
[pid  5140] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5140] exit_group(0)               = ?
[pid  5140] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5140, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./36/binderfs")                 = 0
[   67.255800][ T5140] loop0: detected capacity change from 0 to 2048
[   67.276136][ T5141] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./36/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./36")                           = 0
mkdir("./37", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5142 attached
, child_tidptr=0x5555557e4650) = 5142
[pid  5142] set_robust_list(0x5555557e4660, 24) = 0
[pid  5142] chdir("./37")               = 0
[pid  5142] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5142] setpgid(0, 0)               = 0
[pid  5142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5142] write(3, "1000", 4)         = 4
[pid  5142] close(3)                    = 0
[pid  5142] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5142] memfd_create("syzkaller", 0) = 3
[pid  5142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5142] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5142] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5142] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5142] close(3)                    = 0
[pid  5142] mkdir("./file0", 0777)      = 0
[pid  5142] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5142] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5142] chdir("./file0")            = 0
[pid  5142] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5142] close(4)                    = 0
[pid  5142] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5142] exit_group(0)               = ?
[pid  5142] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5142, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./37/binderfs")                 = 0
[   67.453455][ T5142] loop0: detected capacity change from 0 to 2048
[   67.477735][ T5143] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./37/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./37")                           = 0
mkdir("./38", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557e4650) = 5144
./strace-static-x86_64: Process 5144 attached
[pid  5144] set_robust_list(0x5555557e4660, 24) = 0
[pid  5144] chdir("./38")               = 0
[pid  5144] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5144] setpgid(0, 0)               = 0
[pid  5144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5144] write(3, "1000", 4)         = 4
[pid  5144] close(3)                    = 0
[pid  5144] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5144] memfd_create("syzkaller", 0) = 3
[pid  5144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5144] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5144] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5144] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5144] close(3)                    = 0
[pid  5144] mkdir("./file0", 0777)      = 0
[pid  5144] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5144] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5144] chdir("./file0")            = 0
[pid  5144] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5144] close(4)                    = 0
[pid  5144] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5144] exit_group(0)               = ?
[pid  5144] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5144, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[   67.636675][ T5144] loop0: detected capacity change from 0 to 2048
[   67.656531][ T5145] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./38/binderfs")                 = 0
umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./38/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./38")                           = 0
mkdir("./39", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5146 attached
, child_tidptr=0x5555557e4650) = 5146
[pid  5146] set_robust_list(0x5555557e4660, 24) = 0
[pid  5146] chdir("./39")               = 0
[pid  5146] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5146] setpgid(0, 0)               = 0
[pid  5146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5146] write(3, "1000", 4)         = 4
[pid  5146] close(3)                    = 0
[pid  5146] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5146] memfd_create("syzkaller", 0) = 3
[pid  5146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5146] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5146] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5146] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5146] close(3)                    = 0
[pid  5146] mkdir("./file0", 0777)      = 0
[pid  5146] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5146] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5146] chdir("./file0")            = 0
[pid  5146] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5146] close(4)                    = 0
[pid  5146] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5146] exit_group(0)               = ?
[pid  5146] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5146, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   67.914325][ T5146] loop0: detected capacity change from 0 to 2048
[   67.933873][ T5147] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./39/binderfs")                 = 0
umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./39/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./39")                           = 0
mkdir("./40", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5148 attached
, child_tidptr=0x5555557e4650) = 5148
[pid  5148] set_robust_list(0x5555557e4660, 24) = 0
[pid  5148] chdir("./40")               = 0
[pid  5148] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5148] setpgid(0, 0)               = 0
[pid  5148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5148] write(3, "1000", 4)         = 4
[pid  5148] close(3)                    = 0
[pid  5148] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5148] memfd_create("syzkaller", 0) = 3
[pid  5148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5148] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5148] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5148] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5148] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5148] close(3)                    = 0
[pid  5148] mkdir("./file0", 0777)      = 0
[pid  5148] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5148] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5148] chdir("./file0")            = 0
[pid  5148] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5148] close(4)                    = 0
[pid  5148] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5148] exit_group(0)               = ?
[pid  5148] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5148, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   68.151459][ T5148] loop0: detected capacity change from 0 to 2048
[   68.171007][ T5149] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./40/binderfs")                 = 0
umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./40/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./40")                           = 0
mkdir("./41", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5150 attached
 <unfinished ...>
[pid  5150] set_robust_list(0x5555557e4660, 24) = 0
[pid  5150] chdir("./41")               = 0
[pid  5150] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5150] setpgid(0, 0)               = 0
[pid  5150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5150
[pid  5150] <... openat resumed>)       = 3
[pid  5150] write(3, "1000", 4)         = 4
[pid  5150] close(3)                    = 0
[pid  5150] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5150] memfd_create("syzkaller", 0) = 3
[pid  5150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5150] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5150] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5150] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5150] close(3)                    = 0
[pid  5150] mkdir("./file0", 0777)      = 0
[pid  5150] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5150] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5150] chdir("./file0")            = 0
[pid  5150] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5150] close(4)                    = 0
[pid  5150] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5150] exit_group(0)               = ?
[pid  5150] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5150, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./41/binderfs")                 = 0
[   68.391168][ T5150] loop0: detected capacity change from 0 to 2048
[   68.411658][ T5151] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./41/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./41")                           = 0
mkdir("./42", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5152 attached
, child_tidptr=0x5555557e4650) = 5152
[pid  5152] set_robust_list(0x5555557e4660, 24) = 0
[pid  5152] chdir("./42")               = 0
[pid  5152] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5152] setpgid(0, 0)               = 0
[pid  5152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5152] write(3, "1000", 4)         = 4
[pid  5152] close(3)                    = 0
[pid  5152] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5152] memfd_create("syzkaller", 0) = 3
[pid  5152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5152] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5152] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5152] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5152] close(3)                    = 0
[pid  5152] mkdir("./file0", 0777)      = 0
[pid  5152] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5152] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5152] chdir("./file0")            = 0
[pid  5152] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5152] close(4)                    = 0
[pid  5152] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5152] exit_group(0)               = ?
[pid  5152] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5152, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./42/binderfs")                 = 0
umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   68.608771][ T5152] loop0: detected capacity change from 0 to 2048
[   68.628245][ T5153] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./42/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./42")                           = 0
mkdir("./43", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557e4650) = 5154
./strace-static-x86_64: Process 5154 attached
[pid  5154] set_robust_list(0x5555557e4660, 24) = 0
[pid  5154] chdir("./43")               = 0
[pid  5154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5154] setpgid(0, 0)               = 0
[pid  5154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5154] write(3, "1000", 4)         = 4
[pid  5154] close(3)                    = 0
[pid  5154] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5154] memfd_create("syzkaller", 0) = 3
[pid  5154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5154] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5154] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5154] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5154] close(3)                    = 0
[pid  5154] mkdir("./file0", 0777)      = 0
[pid  5154] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5154] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5154] chdir("./file0")            = 0
[pid  5154] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5154] close(4)                    = 0
[pid  5154] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5154] exit_group(0)               = ?
[pid  5154] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5154, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   68.759581][ T5154] loop0: detected capacity change from 0 to 2048
[   68.778471][ T5155] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./43/binderfs")                 = 0
umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./43/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./43")                           = 0
mkdir("./44", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5156 attached
, child_tidptr=0x5555557e4650) = 5156
[pid  5156] set_robust_list(0x5555557e4660, 24) = 0
[pid  5156] chdir("./44")               = 0
[pid  5156] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5156] setpgid(0, 0)               = 0
[pid  5156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5156] write(3, "1000", 4)         = 4
[pid  5156] close(3)                    = 0
[pid  5156] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5156] memfd_create("syzkaller", 0) = 3
[pid  5156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5156] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5156] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5156] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5156] close(3)                    = 0
[pid  5156] mkdir("./file0", 0777)      = 0
[pid  5156] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5156] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5156] chdir("./file0")            = 0
[pid  5156] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5156] close(4)                    = 0
[   68.945906][ T5156] loop0: detected capacity change from 0 to 2048
[   68.970470][ T5157] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5156] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5156] exit_group(0)               = ?
[pid  5156] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5156, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./44/binderfs")                 = 0
[   69.003426][ T5156] bio_check_eod: 36 callbacks suppressed
[   69.003440][ T5156] syz-executor276: attempt to access beyond end of device
[   69.003440][ T5156] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   69.025671][ T5156] syz-executor276: attempt to access beyond end of device
[   69.025671][ T5156] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./44/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./44")                           = 0
mkdir("./45", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5158 attached
, child_tidptr=0x5555557e4650) = 5158
[pid  5158] set_robust_list(0x5555557e4660, 24) = 0
[pid  5158] chdir("./45")               = 0
[pid  5158] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5158] setpgid(0, 0)               = 0
[pid  5158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5158] write(3, "1000", 4)         = 4
[pid  5158] close(3)                    = 0
[pid  5158] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5158] memfd_create("syzkaller", 0) = 3
[pid  5158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5158] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5158] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5158] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5158] close(3)                    = 0
[pid  5158] mkdir("./file0", 0777)      = 0
[pid  5158] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5158] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5158] chdir("./file0")            = 0
[pid  5158] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5158] close(4)                    = 0
[   69.230770][ T5158] loop0: detected capacity change from 0 to 2048
[   69.249883][ T5159] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5158] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5158] exit_group(0)               = ?
[pid  5158] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5158, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[   69.294590][ T5158] syz-executor276: attempt to access beyond end of device
[   69.294590][ T5158] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   69.311610][ T5158] syz-executor276: attempt to access beyond end of device
[   69.311610][ T5158] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
unlink("./45/binderfs")                 = 0
umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./45/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./45")                           = 0
mkdir("./46", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557e4650) = 5160
./strace-static-x86_64: Process 5160 attached
[pid  5160] set_robust_list(0x5555557e4660, 24) = 0
[pid  5160] chdir("./46")               = 0
[pid  5160] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5160] setpgid(0, 0)               = 0
[pid  5160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5160] write(3, "1000", 4)         = 4
[pid  5160] close(3)                    = 0
[pid  5160] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5160] memfd_create("syzkaller", 0) = 3
[pid  5160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5160] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5160] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5160] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5160] close(3)                    = 0
[pid  5160] mkdir("./file0", 0777)      = 0
[pid  5160] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5160] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5160] chdir("./file0")            = 0
[pid  5160] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5160] close(4)                    = 0
[   69.457476][ T5160] loop0: detected capacity change from 0 to 2048
[   69.488241][ T5161] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5160] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5160] exit_group(0)               = ?
[pid  5160] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5160, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./46/binderfs")                 = 0
umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   69.527743][ T5160] syz-executor276: attempt to access beyond end of device
[   69.527743][ T5160] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   69.543982][ T5160] syz-executor276: attempt to access beyond end of device
[   69.543982][ T5160] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
newfstatat(AT_FDCWD, "./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./46/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./46")                           = 0
mkdir("./47", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5162 attached
, child_tidptr=0x5555557e4650) = 5162
[pid  5162] set_robust_list(0x5555557e4660, 24) = 0
[pid  5162] chdir("./47")               = 0
[pid  5162] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5162] setpgid(0, 0)               = 0
[pid  5162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5162] write(3, "1000", 4)         = 4
[pid  5162] close(3)                    = 0
[pid  5162] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5162] memfd_create("syzkaller", 0) = 3
[pid  5162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5162] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5162] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5162] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5162] close(3)                    = 0
[pid  5162] mkdir("./file0", 0777)      = 0
[pid  5162] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5162] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5162] chdir("./file0")            = 0
[pid  5162] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5162] close(4)                    = 0
[   69.687962][ T5162] loop0: detected capacity change from 0 to 2048
[   69.709072][ T5163] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5162] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5162] exit_group(0)               = ?
[pid  5162] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5162, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./47/binderfs")                 = 0
umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   69.732198][ T5162] syz-executor276: attempt to access beyond end of device
[   69.732198][ T5162] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   69.748547][ T5162] syz-executor276: attempt to access beyond end of device
[   69.748547][ T5162] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./47/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./47")                           = 0
mkdir("./48", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5164 attached
, child_tidptr=0x5555557e4650) = 5164
[pid  5164] set_robust_list(0x5555557e4660, 24) = 0
[pid  5164] chdir("./48")               = 0
[pid  5164] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5164] setpgid(0, 0)               = 0
[pid  5164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5164] write(3, "1000", 4)         = 4
[pid  5164] close(3)                    = 0
[pid  5164] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5164] memfd_create("syzkaller", 0) = 3
[pid  5164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5164] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5164] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5164] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5164] close(3)                    = 0
[pid  5164] mkdir("./file0", 0777)      = 0
[pid  5164] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5164] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5164] chdir("./file0")            = 0
[pid  5164] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5164] close(4)                    = 0
[   69.899647][ T5164] loop0: detected capacity change from 0 to 2048
[   69.913068][ T5165] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5164] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5164] exit_group(0)               = ?
[pid  5164] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5164, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./48/binderfs")                 = 0
umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./48/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./48")                           = 0
mkdir("./49", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
[   69.956085][ T5164] syz-executor276: attempt to access beyond end of device
[   69.956085][ T5164] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   69.972130][ T5164] syz-executor276: attempt to access beyond end of device
[   69.972130][ T5164] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5166 attached
, child_tidptr=0x5555557e4650) = 5166
[pid  5166] set_robust_list(0x5555557e4660, 24) = 0
[pid  5166] chdir("./49")               = 0
[pid  5166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5166] setpgid(0, 0)               = 0
[pid  5166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5166] write(3, "1000", 4)         = 4
[pid  5166] close(3)                    = 0
[pid  5166] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5166] memfd_create("syzkaller", 0) = 3
[pid  5166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5166] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5166] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5166] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5166] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5166] close(3)                    = 0
[pid  5166] mkdir("./file0", 0777)      = 0
[pid  5166] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5166] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5166] chdir("./file0")            = 0
[pid  5166] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5166] close(4)                    = 0
[pid  5166] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5166] exit_group(0)               = ?
[pid  5166] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5166, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   70.105984][ T5166] loop0: detected capacity change from 0 to 2048
[   70.126557][ T5167] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./49/binderfs")                 = 0
umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./49/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./49")                           = 0
mkdir("./50", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5168 attached
 <unfinished ...>
[pid  5168] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5168
[pid  5168] <... set_robust_list resumed>) = 0
[pid  5168] chdir("./50")               = 0
[pid  5168] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5168] setpgid(0, 0)               = 0
[pid  5168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5168] write(3, "1000", 4)         = 4
[pid  5168] close(3)                    = 0
[pid  5168] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5168] memfd_create("syzkaller", 0) = 3
[pid  5168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5168] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5168] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5168] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5168] close(3)                    = 0
[pid  5168] mkdir("./file0", 0777)      = 0
[pid  5168] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5168] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5168] chdir("./file0")            = 0
[pid  5168] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5168] close(4)                    = 0
[pid  5168] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5168] exit_group(0)               = ?
[pid  5168] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5168, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./50/binderfs")                 = 0
[   70.365491][ T5168] loop0: detected capacity change from 0 to 2048
[   70.383623][ T5169] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./50/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./50")                           = 0
mkdir("./51", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5170 attached
 <unfinished ...>
[pid  5170] set_robust_list(0x5555557e4660, 24) = 0
[pid  5170] chdir("./51")               = 0
[pid  5170] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5170
[pid  5170] setpgid(0, 0)               = 0
[pid  5170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5170] write(3, "1000", 4)         = 4
[pid  5170] close(3)                    = 0
[pid  5170] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5170] memfd_create("syzkaller", 0) = 3
[pid  5170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5170] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5170] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5170] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5170] close(3)                    = 0
[pid  5170] mkdir("./file0", 0777)      = 0
[pid  5170] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5170] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5170] chdir("./file0")            = 0
[pid  5170] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5170] close(4)                    = 0
[pid  5170] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5170] exit_group(0)               = ?
[pid  5170] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5170, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   70.579835][ T5170] loop0: detected capacity change from 0 to 2048
[   70.600981][ T5171] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./51/binderfs")                 = 0
umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./51/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./51")                           = 0
mkdir("./52", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5172 attached
, child_tidptr=0x5555557e4650) = 5172
[pid  5172] set_robust_list(0x5555557e4660, 24) = 0
[pid  5172] chdir("./52")               = 0
[pid  5172] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5172] setpgid(0, 0)               = 0
[pid  5172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5172] write(3, "1000", 4)         = 4
[pid  5172] close(3)                    = 0
[pid  5172] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5172] memfd_create("syzkaller", 0) = 3
[pid  5172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5172] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5172] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5172] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5172] close(3)                    = 0
[pid  5172] mkdir("./file0", 0777)      = 0
[pid  5172] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5172] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5172] chdir("./file0")            = 0
[pid  5172] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5172] close(4)                    = 0
[pid  5172] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5172] exit_group(0)               = ?
[pid  5172] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5172, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[   70.811425][ T5172] loop0: detected capacity change from 0 to 2048
[   70.829804][ T5173] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./52/binderfs")                 = 0
umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./52/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./52")                           = 0
mkdir("./53", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557e4650) = 5174
./strace-static-x86_64: Process 5174 attached
[pid  5174] set_robust_list(0x5555557e4660, 24) = 0
[pid  5174] chdir("./53")               = 0
[pid  5174] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5174] setpgid(0, 0)               = 0
[pid  5174] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5174] write(3, "1000", 4)         = 4
[pid  5174] close(3)                    = 0
[pid  5174] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5174] memfd_create("syzkaller", 0) = 3
[pid  5174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5174] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5174] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5174] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5174] close(3)                    = 0
[pid  5174] mkdir("./file0", 0777)      = 0
[pid  5174] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5174] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5174] chdir("./file0")            = 0
[pid  5174] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5174] close(4)                    = 0
[pid  5174] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5174] exit_group(0)               = ?
[pid  5174] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5174, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
[   71.122775][ T5174] loop0: detected capacity change from 0 to 2048
[   71.142797][ T5175] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./53/binderfs")                 = 0
umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./53/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./53")                           = 0
mkdir("./54", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5176 attached
, child_tidptr=0x5555557e4650) = 5176
[pid  5176] set_robust_list(0x5555557e4660, 24) = 0
[pid  5176] chdir("./54")               = 0
[pid  5176] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5176] setpgid(0, 0)               = 0
[pid  5176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5176] write(3, "1000", 4)         = 4
[pid  5176] close(3)                    = 0
[pid  5176] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5176] memfd_create("syzkaller", 0) = 3
[pid  5176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5176] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5176] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5176] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5176] close(3)                    = 0
[pid  5176] mkdir("./file0", 0777)      = 0
[pid  5176] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5176] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5176] chdir("./file0")            = 0
[pid  5176] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5176] close(4)                    = 0
[pid  5176] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5176] exit_group(0)               = ?
[pid  5176] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5176, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
[   71.385630][ T5176] loop0: detected capacity change from 0 to 2048
[   71.405733][ T5177] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./54/binderfs")                 = 0
umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./54/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./54")                           = 0
mkdir("./55", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5178 attached
, child_tidptr=0x5555557e4650) = 5178
[pid  5178] set_robust_list(0x5555557e4660, 24) = 0
[pid  5178] chdir("./55")               = 0
[pid  5178] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5178] setpgid(0, 0)               = 0
[pid  5178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5178] write(3, "1000", 4)         = 4
[pid  5178] close(3)                    = 0
[pid  5178] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5178] memfd_create("syzkaller", 0) = 3
[pid  5178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5178] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5178] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5178] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5178] close(3)                    = 0
[pid  5178] mkdir("./file0", 0777)      = 0
[pid  5178] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5178] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5178] chdir("./file0")            = 0
[pid  5178] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5178] close(4)                    = 0
[pid  5178] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5178] exit_group(0)               = ?
[pid  5178] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5178, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   71.609105][ T5178] loop0: detected capacity change from 0 to 2048
[   71.638417][ T5179] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./55/binderfs")                 = 0
umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./55/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./55")                           = 0
mkdir("./56", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5180 attached
, child_tidptr=0x5555557e4650) = 5180
[pid  5180] set_robust_list(0x5555557e4660, 24) = 0
[pid  5180] chdir("./56")               = 0
[pid  5180] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5180] setpgid(0, 0)               = 0
[pid  5180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5180] write(3, "1000", 4)         = 4
[pid  5180] close(3)                    = 0
[pid  5180] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5180] memfd_create("syzkaller", 0) = 3
[pid  5180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5180] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5180] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5180] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5180] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5180] close(3)                    = 0
[pid  5180] mkdir("./file0", 0777)      = 0
[pid  5180] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5180] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5180] chdir("./file0")            = 0
[pid  5180] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5180] close(4)                    = 0
[pid  5180] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5180] exit_group(0)               = ?
[pid  5180] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5180, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
[   71.865873][ T5180] loop0: detected capacity change from 0 to 2048
[   71.895910][ T5181] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./56/binderfs")                 = 0
umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./56/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./56")                           = 0
mkdir("./57", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557e4650) = 5182
./strace-static-x86_64: Process 5182 attached
[pid  5182] set_robust_list(0x5555557e4660, 24) = 0
[pid  5182] chdir("./57")               = 0
[pid  5182] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5182] setpgid(0, 0)               = 0
[pid  5182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5182] write(3, "1000", 4)         = 4
[pid  5182] close(3)                    = 0
[pid  5182] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5182] memfd_create("syzkaller", 0) = 3
[pid  5182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5182] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5182] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5182] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5182] close(3)                    = 0
[pid  5182] mkdir("./file0", 0777)      = 0
[pid  5182] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5182] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5182] chdir("./file0")            = 0
[pid  5182] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5182] close(4)                    = 0
[pid  5182] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5182] exit_group(0)               = ?
[   72.077939][ T5182] loop0: detected capacity change from 0 to 2048
[   72.107624][ T5183] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5182] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5182, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./57/binderfs")                 = 0
umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./57/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./57")                           = 0
mkdir("./58", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5184 attached
, child_tidptr=0x5555557e4650) = 5184
[pid  5184] set_robust_list(0x5555557e4660, 24) = 0
[pid  5184] chdir("./58")               = 0
[pid  5184] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5184] setpgid(0, 0)               = 0
[pid  5184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5184] write(3, "1000", 4)         = 4
[pid  5184] close(3)                    = 0
[pid  5184] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5184] memfd_create("syzkaller", 0) = 3
[pid  5184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5184] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5184] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5184] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5184] close(3)                    = 0
[pid  5184] mkdir("./file0", 0777)      = 0
[pid  5184] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5184] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5184] chdir("./file0")            = 0
[pid  5184] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5184] close(4)                    = 0
[pid  5184] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[   72.349809][ T5184] loop0: detected capacity change from 0 to 2048
[   72.364067][ T5185] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5184] exit_group(0)               = ?
[pid  5184] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5184, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./58/binderfs")                 = 0
umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./58/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./58")                           = 0
mkdir("./59", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557e4650) = 5186
./strace-static-x86_64: Process 5186 attached
[pid  5186] set_robust_list(0x5555557e4660, 24) = 0
[pid  5186] chdir("./59")               = 0
[pid  5186] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5186] setpgid(0, 0)               = 0
[pid  5186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5186] write(3, "1000", 4)         = 4
[pid  5186] close(3)                    = 0
[pid  5186] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5186] memfd_create("syzkaller", 0) = 3
[pid  5186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5186] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5186] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5186] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5186] close(3)                    = 0
[pid  5186] mkdir("./file0", 0777)      = 0
[pid  5186] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5186] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5186] chdir("./file0")            = 0
[pid  5186] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5186] close(4)                    = 0
[pid  5186] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5186] exit_group(0)               = ?
[pid  5186] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5186, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   72.608593][ T5186] loop0: detected capacity change from 0 to 2048
[   72.637960][ T5187] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./59/binderfs")                 = 0
umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./59/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./59")                           = 0
mkdir("./60", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5188 attached
, child_tidptr=0x5555557e4650) = 5188
[pid  5188] set_robust_list(0x5555557e4660, 24) = 0
[pid  5188] chdir("./60")               = 0
[pid  5188] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5188] setpgid(0, 0)               = 0
[pid  5188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5188] write(3, "1000", 4)         = 4
[pid  5188] close(3)                    = 0
[pid  5188] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5188] memfd_create("syzkaller", 0) = 3
[pid  5188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5188] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5188] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5188] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5188] close(3)                    = 0
[pid  5188] mkdir("./file0", 0777)      = 0
[pid  5188] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5188] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5188] chdir("./file0")            = 0
[pid  5188] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5188] close(4)                    = 0
[pid  5188] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5188] exit_group(0)               = ?
[pid  5188] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5188, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./60/binderfs")                 = 0
[   72.864398][ T5188] loop0: detected capacity change from 0 to 2048
[   72.895053][ T5189] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./60/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./60")                           = 0
mkdir("./61", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5190 attached
, child_tidptr=0x5555557e4650) = 5190
[pid  5190] set_robust_list(0x5555557e4660, 24) = 0
[pid  5190] chdir("./61")               = 0
[pid  5190] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5190] setpgid(0, 0)               = 0
[pid  5190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5190] write(3, "1000", 4)         = 4
[pid  5190] close(3)                    = 0
[pid  5190] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5190] memfd_create("syzkaller", 0) = 3
[pid  5190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5190] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5190] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5190] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5190] close(3)                    = 0
[pid  5190] mkdir("./file0", 0777)      = 0
[pid  5190] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5190] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5190] chdir("./file0")            = 0
[pid  5190] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5190] close(4)                    = 0
[pid  5190] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5190] exit_group(0)               = ?
[pid  5190] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5190, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./61/binderfs")                 = 0
[   73.102952][ T5190] loop0: detected capacity change from 0 to 2048
[   73.122437][ T5191] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./61/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./61")                           = 0
mkdir("./62", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5192 attached
, child_tidptr=0x5555557e4650) = 5192
[pid  5192] set_robust_list(0x5555557e4660, 24) = 0
[pid  5192] chdir("./62")               = 0
[pid  5192] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5192] setpgid(0, 0)               = 0
[pid  5192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5192] write(3, "1000", 4)         = 4
[pid  5192] close(3)                    = 0
[pid  5192] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5192] memfd_create("syzkaller", 0) = 3
[pid  5192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5192] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5192] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5192] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5192] close(3)                    = 0
[pid  5192] mkdir("./file0", 0777)      = 0
[pid  5192] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5192] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5192] chdir("./file0")            = 0
[pid  5192] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5192] close(4)                    = 0
[pid  5192] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5192] exit_group(0)               = ?
[pid  5192] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5192, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
[   73.347517][ T5192] loop0: detected capacity change from 0 to 2048
[   73.377816][ T5193] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./62/binderfs")                 = 0
umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./62/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./62")                           = 0
mkdir("./63", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5194 attached
, child_tidptr=0x5555557e4650) = 5194
[pid  5194] set_robust_list(0x5555557e4660, 24) = 0
[pid  5194] chdir("./63")               = 0
[pid  5194] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5194] setpgid(0, 0)               = 0
[pid  5194] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5194] write(3, "1000", 4)         = 4
[pid  5194] close(3)                    = 0
[pid  5194] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5194] memfd_create("syzkaller", 0) = 3
[pid  5194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5194] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5194] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5194] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5194] close(3)                    = 0
[pid  5194] mkdir("./file0", 0777)      = 0
[pid  5194] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5194] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5194] chdir("./file0")            = 0
[pid  5194] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5194] close(4)                    = 0
[pid  5194] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5194] exit_group(0)               = ?
[pid  5194] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5194, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   73.620513][ T5194] loop0: detected capacity change from 0 to 2048
[   73.640729][ T5195] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./63/binderfs")                 = 0
umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./63/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./63")                           = 0
mkdir("./64", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5196 attached
, child_tidptr=0x5555557e4650) = 5196
[pid  5196] set_robust_list(0x5555557e4660, 24) = 0
[pid  5196] chdir("./64")               = 0
[pid  5196] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5196] setpgid(0, 0)               = 0
[pid  5196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5196] write(3, "1000", 4)         = 4
[pid  5196] close(3)                    = 0
[pid  5196] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5196] memfd_create("syzkaller", 0) = 3
[pid  5196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5196] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5196] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5196] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5196] close(3)                    = 0
[pid  5196] mkdir("./file0", 0777)      = 0
[pid  5196] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[   73.896919][ T5196] loop0: detected capacity change from 0 to 2048
[   73.936838][ T5197] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5196] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5196] chdir("./file0")            = 0
[pid  5196] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5196] close(4)                    = 0
[pid  5196] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5196] exit_group(0)               = ?
[pid  5196] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5196, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./64/binderfs")                 = 0
umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./64/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./64")                           = 0
mkdir("./65", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5198 attached
, child_tidptr=0x5555557e4650) = 5198
[pid  5198] set_robust_list(0x5555557e4660, 24) = 0
[pid  5198] chdir("./65")               = 0
[pid  5198] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5198] setpgid(0, 0)               = 0
[pid  5198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5198] write(3, "1000", 4)         = 4
[pid  5198] close(3)                    = 0
[pid  5198] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5198] memfd_create("syzkaller", 0) = 3
[pid  5198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5198] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5198] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5198] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5198] close(3)                    = 0
[pid  5198] mkdir("./file0", 0777)      = 0
[pid  5198] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5198] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5198] chdir("./file0")            = 0
[pid  5198] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5198] close(4)                    = 0
[   74.175365][ T5198] loop0: detected capacity change from 0 to 2048
[   74.195942][ T5199] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   74.216879][ T5198] bio_check_eod: 32 callbacks suppressed
[pid  5198] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5198] exit_group(0)               = ?
[pid  5198] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5198, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./65/binderfs")                 = 0
[   74.216892][ T5198] syz-executor276: attempt to access beyond end of device
[   74.216892][ T5198] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   74.238530][ T5198] syz-executor276: attempt to access beyond end of device
[   74.238530][ T5198] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./65/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./65")                           = 0
mkdir("./66", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5200 attached
, child_tidptr=0x5555557e4650) = 5200
[pid  5200] set_robust_list(0x5555557e4660, 24) = 0
[pid  5200] chdir("./66")               = 0
[pid  5200] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5200] setpgid(0, 0)               = 0
[pid  5200] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5200] write(3, "1000", 4)         = 4
[pid  5200] close(3)                    = 0
[pid  5200] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5200] memfd_create("syzkaller", 0) = 3
[pid  5200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5200] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5200] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5200] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5200] close(3)                    = 0
[pid  5200] mkdir("./file0", 0777)      = 0
[pid  5200] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5200] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5200] chdir("./file0")            = 0
[pid  5200] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5200] close(4)                    = 0
[   74.412315][ T5200] loop0: detected capacity change from 0 to 2048
[   74.432298][ T5201] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5200] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5200] exit_group(0)               = ?
[pid  5200] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5200, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./66/binderfs")                 = 0
[   74.460554][ T5200] syz-executor276: attempt to access beyond end of device
[   74.460554][ T5200] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   74.476495][ T5200] syz-executor276: attempt to access beyond end of device
[   74.476495][ T5200] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./66/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./66")                           = 0
mkdir("./67", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5202 attached
, child_tidptr=0x5555557e4650) = 5202
[pid  5202] set_robust_list(0x5555557e4660, 24) = 0
[pid  5202] chdir("./67")               = 0
[pid  5202] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5202] setpgid(0, 0)               = 0
[pid  5202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5202] write(3, "1000", 4)         = 4
[pid  5202] close(3)                    = 0
[pid  5202] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5202] memfd_create("syzkaller", 0) = 3
[pid  5202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5202] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5202] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5202] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5202] close(3)                    = 0
[pid  5202] mkdir("./file0", 0777)      = 0
[pid  5202] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5202] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5202] chdir("./file0")            = 0
[pid  5202] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5202] close(4)                    = 0
[   74.642532][ T5202] loop0: detected capacity change from 0 to 2048
[   74.663799][ T5203] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5202] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5202] exit_group(0)               = ?
[pid  5202] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5202, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./67/binderfs")                 = 0
[   74.693799][ T5202] syz-executor276: attempt to access beyond end of device
[   74.693799][ T5202] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   74.710268][ T5202] syz-executor276: attempt to access beyond end of device
[   74.710268][ T5202] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./67/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./67")                           = 0
mkdir("./68", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5204 attached
, child_tidptr=0x5555557e4650) = 5204
[pid  5204] set_robust_list(0x5555557e4660, 24) = 0
[pid  5204] chdir("./68")               = 0
[pid  5204] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5204] setpgid(0, 0)               = 0
[pid  5204] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5204] write(3, "1000", 4)         = 4
[pid  5204] close(3)                    = 0
[pid  5204] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5204] memfd_create("syzkaller", 0) = 3
[pid  5204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5204] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5204] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5204] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5204] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5204] close(3)                    = 0
[pid  5204] mkdir("./file0", 0777)      = 0
[pid  5204] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5204] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5204] chdir("./file0")            = 0
[pid  5204] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5204] close(4)                    = 0
[   74.947475][ T5204] loop0: detected capacity change from 0 to 2048
[   74.966991][ T5205] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   74.987929][ T5204] syz-executor276: attempt to access beyond end of device
[pid  5204] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5204] exit_group(0)               = ?
[pid  5204] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5204, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./68/binderfs")                 = 0
umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   74.987929][ T5204] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   75.004606][ T5204] syz-executor276: attempt to access beyond end of device
[   75.004606][ T5204] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
newfstatat(AT_FDCWD, "./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./68/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./68")                           = 0
mkdir("./69", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5206 attached
, child_tidptr=0x5555557e4650) = 5206
[pid  5206] set_robust_list(0x5555557e4660, 24) = 0
[pid  5206] chdir("./69")               = 0
[pid  5206] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5206] setpgid(0, 0)               = 0
[pid  5206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5206] write(3, "1000", 4)         = 4
[pid  5206] close(3)                    = 0
[pid  5206] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5206] memfd_create("syzkaller", 0) = 3
[pid  5206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5206] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5206] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5206] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5206] close(3)                    = 0
[pid  5206] mkdir("./file0", 0777)      = 0
[pid  5206] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5206] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5206] chdir("./file0")            = 0
[pid  5206] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5206] close(4)                    = 0
[   75.159378][ T5206] loop0: detected capacity change from 0 to 2048
[   75.179123][ T5207] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5206] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5206] exit_group(0)               = ?
[pid  5206] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5206, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./69/binderfs")                 = 0
umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   75.208715][ T5206] syz-executor276: attempt to access beyond end of device
[   75.208715][ T5206] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   75.224710][ T5206] syz-executor276: attempt to access beyond end of device
[   75.224710][ T5206] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./69/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./69")                           = 0
mkdir("./70", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5208 attached
 <unfinished ...>
[pid  5208] set_robust_list(0x5555557e4660, 24) = 0
[pid  5208] chdir("./70")               = 0
[pid  5208] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5208] setpgid(0, 0 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5208
[pid  5208] <... setpgid resumed>)      = 0
[pid  5208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5208] write(3, "1000", 4)         = 4
[pid  5208] close(3)                    = 0
[pid  5208] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5208] memfd_create("syzkaller", 0) = 3
[pid  5208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5208] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5208] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5208] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5208] close(3)                    = 0
[pid  5208] mkdir("./file0", 0777)      = 0
[pid  5208] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5208] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5208] chdir("./file0")            = 0
[pid  5208] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5208] close(4)                    = 0
[pid  5208] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5208] exit_group(0)               = ?
[pid  5208] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5208, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./70/binderfs")                 = 0
umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[   75.406407][ T5208] loop0: detected capacity change from 0 to 2048
[   75.436862][ T5209] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./70/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./70")                           = 0
mkdir("./71", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5210 attached
 <unfinished ...>
[pid  5210] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5210
[pid  5210] <... set_robust_list resumed>) = 0
[pid  5210] chdir("./71")               = 0
[pid  5210] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5210] setpgid(0, 0)               = 0
[pid  5210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5210] write(3, "1000", 4)         = 4
[pid  5210] close(3)                    = 0
[pid  5210] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5210] memfd_create("syzkaller", 0) = 3
[pid  5210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5210] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5210] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5210] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5210] close(3)                    = 0
[pid  5210] mkdir("./file0", 0777)      = 0
[pid  5210] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5210] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5210] chdir("./file0")            = 0
[pid  5210] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5210] close(4)                    = 0
[pid  5210] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5210] exit_group(0)               = ?
[pid  5210] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5210, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./71/binderfs")                 = 0
[   75.579286][ T5210] loop0: detected capacity change from 0 to 2048
[   75.608577][ T5211] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./71/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./71")                           = 0
mkdir("./72", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5212 attached
 <unfinished ...>
[pid  5212] set_robust_list(0x5555557e4660, 24) = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5212
[pid  5212] chdir("./72")               = 0
[pid  5212] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5212] setpgid(0, 0)               = 0
[pid  5212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5212] write(3, "1000", 4)         = 4
[pid  5212] close(3)                    = 0
[pid  5212] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5212] memfd_create("syzkaller", 0) = 3
[pid  5212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5212] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5212] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5212] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5212] close(3)                    = 0
[pid  5212] mkdir("./file0", 0777)      = 0
[pid  5212] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5212] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5212] chdir("./file0")            = 0
[pid  5212] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5212] close(4)                    = 0
[pid  5212] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5212] exit_group(0)               = ?
[pid  5212] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5212, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[   75.831361][ T5212] loop0: detected capacity change from 0 to 2048
[   75.851090][ T5213] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./72/binderfs")                 = 0
umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./72/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./72")                           = 0
mkdir("./73", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5214 attached
 <unfinished ...>
[pid  5214] set_robust_list(0x5555557e4660, 24) = 0
[pid  5214] chdir("./73")               = 0
[pid  5214] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5214
[pid  5214] setpgid(0, 0)               = 0
[pid  5214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5214] write(3, "1000", 4)         = 4
[pid  5214] close(3)                    = 0
[pid  5214] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5214] memfd_create("syzkaller", 0) = 3
[pid  5214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[   76.042747][   T23] cfg80211: failed to load regulatory.db
[pid  5214] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5214] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5214] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5214] close(3)                    = 0
[pid  5214] mkdir("./file0", 0777)      = 0
[pid  5214] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5214] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5214] chdir("./file0")            = 0
[pid  5214] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5214] close(4)                    = 0
[   76.106021][ T5214] loop0: detected capacity change from 0 to 2048
[   76.124554][ T5215] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5214] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5214] exit_group(0)               = ?
[pid  5214] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5214, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./73/binderfs")                 = 0
umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./73/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./73")                           = 0
mkdir("./74", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5216 attached
, child_tidptr=0x5555557e4650) = 5216
[pid  5216] set_robust_list(0x5555557e4660, 24) = 0
[pid  5216] chdir("./74")               = 0
[pid  5216] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5216] setpgid(0, 0)               = 0
[pid  5216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5216] write(3, "1000", 4)         = 4
[pid  5216] close(3)                    = 0
[pid  5216] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5216] memfd_create("syzkaller", 0) = 3
[pid  5216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5216] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5216] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5216] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5216] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5216] close(3)                    = 0
[pid  5216] mkdir("./file0", 0777)      = 0
[pid  5216] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5216] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5216] chdir("./file0")            = 0
[pid  5216] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5216] close(4)                    = 0
[pid  5216] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5216] exit_group(0)               = ?
[pid  5216] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5216, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
[   76.386801][ T5216] loop0: detected capacity change from 0 to 2048
[   76.406758][ T5217] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./74/binderfs")                 = 0
umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./74/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./74")                           = 0
mkdir("./75", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5218 attached
, child_tidptr=0x5555557e4650) = 5218
[pid  5218] set_robust_list(0x5555557e4660, 24) = 0
[pid  5218] chdir("./75")               = 0
[pid  5218] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5218] setpgid(0, 0)               = 0
[pid  5218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5218] write(3, "1000", 4)         = 4
[pid  5218] close(3)                    = 0
[pid  5218] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5218] memfd_create("syzkaller", 0) = 3
[pid  5218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5218] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5218] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5218] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5218] close(3)                    = 0
[pid  5218] mkdir("./file0", 0777)      = 0
[pid  5218] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5218] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5218] chdir("./file0")            = 0
[pid  5218] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5218] close(4)                    = 0
[pid  5218] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5218] exit_group(0)               = ?
[pid  5218] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5218, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   76.642235][ T5218] loop0: detected capacity change from 0 to 2048
[   76.661767][ T5219] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./75/binderfs")                 = 0
umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./75/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./75/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./75")                           = 0
mkdir("./76", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5220 attached
 <unfinished ...>
[pid  5220] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5220
[pid  5220] <... set_robust_list resumed>) = 0
[pid  5220] chdir("./76")               = 0
[pid  5220] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5220] setpgid(0, 0)               = 0
[pid  5220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5220] write(3, "1000", 4)         = 4
[pid  5220] close(3)                    = 0
[pid  5220] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5220] memfd_create("syzkaller", 0) = 3
[pid  5220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5220] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5220] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5220] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5220] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5220] close(3)                    = 0
[pid  5220] mkdir("./file0", 0777)      = 0
[pid  5220] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5220] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5220] chdir("./file0")            = 0
[pid  5220] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5220] close(4)                    = 0
[pid  5220] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5220] exit_group(0)               = ?
[pid  5220] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5220, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./76/binderfs")                 = 0
umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
[   76.863291][ T5220] loop0: detected capacity change from 0 to 2048
[   76.882050][ T5221] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./76/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./76/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./76")                           = 0
mkdir("./77", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5222 attached
 <unfinished ...>
[pid  5222] set_robust_list(0x5555557e4660, 24) = 0
[pid  5222] chdir("./77")               = 0
[pid  5222] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5222
[pid  5222] setpgid(0, 0)               = 0
[pid  5222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5222] write(3, "1000", 4)         = 4
[pid  5222] close(3)                    = 0
[pid  5222] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5222] memfd_create("syzkaller", 0) = 3
[pid  5222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5222] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5222] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5222] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5222] close(3)                    = 0
[pid  5222] mkdir("./file0", 0777)      = 0
[pid  5222] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5222] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5222] chdir("./file0")            = 0
[pid  5222] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5222] close(4)                    = 0
[pid  5222] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5222] exit_group(0)               = ?
[pid  5222] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5222, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   77.057696][ T5222] loop0: detected capacity change from 0 to 2048
[   77.077777][ T5223] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(AT_FDCWD, "./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./77/binderfs")                 = 0
umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./77/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./77")                           = 0
mkdir("./78", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5224 attached
 <unfinished ...>
[pid  5224] set_robust_list(0x5555557e4660, 24) = 0
[pid  5224] chdir("./78")               = 0
[pid  5224] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5224] setpgid(0, 0 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5224
[pid  5224] <... setpgid resumed>)      = 0
[pid  5224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5224] write(3, "1000", 4)         = 4
[pid  5224] close(3)                    = 0
[pid  5224] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5224] memfd_create("syzkaller", 0) = 3
[pid  5224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5224] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5224] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5224] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5224] close(3)                    = 0
[pid  5224] mkdir("./file0", 0777)      = 0
[pid  5224] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5224] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5224] chdir("./file0")            = 0
[pid  5224] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5224] close(4)                    = 0
[pid  5224] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5224] exit_group(0)               = ?
[pid  5224] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5224, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   77.245412][ T5224] loop0: detected capacity change from 0 to 2048
[   77.263389][ T5225] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./78/binderfs")                 = 0
umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./78/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./78")                           = 0
mkdir("./79", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5226 attached
, child_tidptr=0x5555557e4650) = 5226
[pid  5226] set_robust_list(0x5555557e4660, 24) = 0
[pid  5226] chdir("./79")               = 0
[pid  5226] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5226] setpgid(0, 0)               = 0
[pid  5226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5226] write(3, "1000", 4)         = 4
[pid  5226] close(3)                    = 0
[pid  5226] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5226] memfd_create("syzkaller", 0) = 3
[pid  5226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5226] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5226] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5226] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5226] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5226] close(3)                    = 0
[pid  5226] mkdir("./file0", 0777)      = 0
[pid  5226] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5226] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5226] chdir("./file0")            = 0
[pid  5226] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5226] close(4)                    = 0
[pid  5226] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5226] exit_group(0)               = ?
[pid  5226] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5226, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   77.475894][ T5226] loop0: detected capacity change from 0 to 2048
[   77.495992][ T5227] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./79/binderfs")                 = 0
umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./79/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./79/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./79")                           = 0
mkdir("./80", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5228 attached
, child_tidptr=0x5555557e4650) = 5228
[pid  5228] set_robust_list(0x5555557e4660, 24) = 0
[pid  5228] chdir("./80")               = 0
[pid  5228] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5228] setpgid(0, 0)               = 0
[pid  5228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5228] write(3, "1000", 4)         = 4
[pid  5228] close(3)                    = 0
[pid  5228] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5228] memfd_create("syzkaller", 0) = 3
[pid  5228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5228] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5228] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5228] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5228] close(3)                    = 0
[pid  5228] mkdir("./file0", 0777)      = 0
[pid  5228] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5228] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5228] chdir("./file0")            = 0
[pid  5228] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5228] close(4)                    = 0
[pid  5228] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5228] exit_group(0)               = ?
[pid  5228] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5228, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./80/binderfs")                 = 0
[   77.740420][ T5228] loop0: detected capacity change from 0 to 2048
[   77.771108][ T5229] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./80/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./80")                           = 0
mkdir("./81", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557e4650) = 5230
./strace-static-x86_64: Process 5230 attached
[pid  5230] set_robust_list(0x5555557e4660, 24) = 0
[pid  5230] chdir("./81")               = 0
[pid  5230] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5230] setpgid(0, 0)               = 0
[pid  5230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5230] write(3, "1000", 4)         = 4
[pid  5230] close(3)                    = 0
[pid  5230] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5230] memfd_create("syzkaller", 0) = 3
[pid  5230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5230] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5230] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5230] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5230] close(3)                    = 0
[pid  5230] mkdir("./file0", 0777)      = 0
[pid  5230] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5230] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5230] chdir("./file0")            = 0
[pid  5230] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5230] close(4)                    = 0
[pid  5230] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5230] exit_group(0)               = ?
[pid  5230] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5230, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
[   77.937940][ T5230] loop0: detected capacity change from 0 to 2048
[   77.965759][ T5231] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./81/binderfs")                 = 0
umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./81/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./81")                           = 0
mkdir("./82", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5232 attached
, child_tidptr=0x5555557e4650) = 5232
[pid  5232] set_robust_list(0x5555557e4660, 24) = 0
[pid  5232] chdir("./82")               = 0
[pid  5232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5232] setpgid(0, 0)               = 0
[pid  5232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5232] write(3, "1000", 4)         = 4
[pid  5232] close(3)                    = 0
[pid  5232] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5232] memfd_create("syzkaller", 0) = 3
[pid  5232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5232] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5232] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5232] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5232] close(3)                    = 0
[pid  5232] mkdir("./file0", 0777)      = 0
[pid  5232] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5232] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5232] chdir("./file0")            = 0
[pid  5232] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5232] close(4)                    = 0
[pid  5232] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[   78.233583][ T5232] loop0: detected capacity change from 0 to 2048
[   78.247691][ T5233] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5232] exit_group(0)               = ?
[pid  5232] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5232, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./82/binderfs")                 = 0
umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./82/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./82")                           = 0
mkdir("./83", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5234 attached
, child_tidptr=0x5555557e4650) = 5234
[pid  5234] set_robust_list(0x5555557e4660, 24) = 0
[pid  5234] chdir("./83")               = 0
[pid  5234] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5234] setpgid(0, 0)               = 0
[pid  5234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5234] write(3, "1000", 4)         = 4
[pid  5234] close(3)                    = 0
[pid  5234] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5234] memfd_create("syzkaller", 0) = 3
[pid  5234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5234] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5234] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5234] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5234] close(3)                    = 0
[pid  5234] mkdir("./file0", 0777)      = 0
[pid  5234] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5234] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5234] chdir("./file0")            = 0
[pid  5234] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5234] close(4)                    = 0
[pid  5234] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5234] exit_group(0)               = ?
[pid  5234] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5234, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[   78.476732][ T5234] loop0: detected capacity change from 0 to 2048
[   78.501315][ T5235] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
unlink("./83/binderfs")                 = 0
umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./83/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./83/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./83")                           = 0
mkdir("./84", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5236 attached
, child_tidptr=0x5555557e4650) = 5236
[pid  5236] set_robust_list(0x5555557e4660, 24) = 0
[pid  5236] chdir("./84")               = 0
[pid  5236] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5236] setpgid(0, 0)               = 0
[pid  5236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5236] write(3, "1000", 4)         = 4
[pid  5236] close(3)                    = 0
[pid  5236] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5236] memfd_create("syzkaller", 0) = 3
[pid  5236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5236] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5236] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5236] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5236] close(3)                    = 0
[pid  5236] mkdir("./file0", 0777)      = 0
[   78.686854][ T5236] loop0: detected capacity change from 0 to 2048
[pid  5236] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5236] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5236] chdir("./file0")            = 0
[pid  5236] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5236] close(4)                    = 0
[pid  5236] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5236] exit_group(0)               = ?
[pid  5236] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5236, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[   78.728895][ T5237] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
unlink("./84/binderfs")                 = 0
umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./84/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./84/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./84")                           = 0
mkdir("./85", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5238 attached
, child_tidptr=0x5555557e4650) = 5238
[pid  5238] set_robust_list(0x5555557e4660, 24) = 0
[pid  5238] chdir("./85")               = 0
[pid  5238] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5238] setpgid(0, 0)               = 0
[pid  5238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5238] write(3, "1000", 4)         = 4
[pid  5238] close(3)                    = 0
[pid  5238] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5238] memfd_create("syzkaller", 0) = 3
[pid  5238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5238] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5238] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5238] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5238] close(3)                    = 0
[pid  5238] mkdir("./file0", 0777)      = 0
[pid  5238] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5238] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5238] chdir("./file0")            = 0
[pid  5238] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5238] close(4)                    = 0
[pid  5238] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5238] exit_group(0)               = ?
[   78.978892][ T5238] loop0: detected capacity change from 0 to 2048
[   79.008230][ T5239] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5238] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5238, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./85/binderfs")                 = 0
umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./85/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./85")                           = 0
mkdir("./86", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5240 attached
, child_tidptr=0x5555557e4650) = 5240
[pid  5240] set_robust_list(0x5555557e4660, 24) = 0
[pid  5240] chdir("./86")               = 0
[pid  5240] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5240] setpgid(0, 0)               = 0
[pid  5240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5240] write(3, "1000", 4)         = 4
[pid  5240] close(3)                    = 0
[pid  5240] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5240] memfd_create("syzkaller", 0) = 3
[pid  5240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5240] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5240] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5240] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5240] close(3)                    = 0
[pid  5240] mkdir("./file0", 0777)      = 0
[pid  5240] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5240] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5240] chdir("./file0")            = 0
[pid  5240] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5240] close(4)                    = 0
[   79.271138][ T5240] loop0: detected capacity change from 0 to 2048
[   79.295834][ T5241] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5240] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5240] exit_group(0)               = ?
[pid  5240] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5240, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   79.330569][ T5240] bio_check_eod: 32 callbacks suppressed
[   79.330868][ T5240] syz-executor276: attempt to access beyond end of device
[   79.330868][ T5240] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   79.352635][ T5240] syz-executor276: attempt to access beyond end of device
[   79.352635][ T5240] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./86/binderfs")                 = 0
umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./86/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./86")                           = 0
mkdir("./87", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5242 attached
, child_tidptr=0x5555557e4650) = 5242
[pid  5242] set_robust_list(0x5555557e4660, 24) = 0
[pid  5242] chdir("./87")               = 0
[pid  5242] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5242] setpgid(0, 0)               = 0
[pid  5242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5242] write(3, "1000", 4)         = 4
[pid  5242] close(3)                    = 0
[pid  5242] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5242] memfd_create("syzkaller", 0) = 3
[pid  5242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5242] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5242] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5242] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5242] close(3)                    = 0
[pid  5242] mkdir("./file0", 0777)      = 0
[pid  5242] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5242] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5242] chdir("./file0")            = 0
[pid  5242] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5242] close(4)                    = 0
[   79.514429][ T5242] loop0: detected capacity change from 0 to 2048
[   79.532812][ T5243] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   79.551666][ T5242] syz-executor276: attempt to access beyond end of device
[pid  5242] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5242] exit_group(0)               = ?
[pid  5242] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5242, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
[   79.551666][ T5242] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   79.568402][ T5242] syz-executor276: attempt to access beyond end of device
[   79.568402][ T5242] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./87/binderfs")                 = 0
umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./87/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./87/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./87")                           = 0
mkdir("./88", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5244 attached
, child_tidptr=0x5555557e4650) = 5244
[pid  5244] set_robust_list(0x5555557e4660, 24) = 0
[pid  5244] chdir("./88")               = 0
[pid  5244] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5244] setpgid(0, 0)               = 0
[pid  5244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5244] write(3, "1000", 4)         = 4
[pid  5244] close(3)                    = 0
[pid  5244] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5244] memfd_create("syzkaller", 0) = 3
[pid  5244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5244] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5244] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5244] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5244] close(3)                    = 0
[pid  5244] mkdir("./file0", 0777)      = 0
[pid  5244] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5244] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5244] chdir("./file0")            = 0
[pid  5244] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5244] close(4)                    = 0
[   79.804391][ T5244] loop0: detected capacity change from 0 to 2048
[   79.823515][ T5245] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5244] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5244] exit_group(0)               = ?
[pid  5244] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5244, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./88/binderfs")                 = 0
umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[   79.853080][ T5244] syz-executor276: attempt to access beyond end of device
[   79.853080][ T5244] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   79.869793][ T5244] syz-executor276: attempt to access beyond end of device
[   79.869793][ T5244] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./88/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./88")                           = 0
mkdir("./89", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5246 attached
, child_tidptr=0x5555557e4650) = 5246
[pid  5246] set_robust_list(0x5555557e4660, 24) = 0
[pid  5246] chdir("./89")               = 0
[pid  5246] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5246] setpgid(0, 0)               = 0
[pid  5246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5246] write(3, "1000", 4)         = 4
[pid  5246] close(3)                    = 0
[pid  5246] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5246] memfd_create("syzkaller", 0) = 3
[pid  5246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5246] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5246] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5246] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5246] close(3)                    = 0
[pid  5246] mkdir("./file0", 0777)      = 0
[pid  5246] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5246] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5246] chdir("./file0")            = 0
[pid  5246] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5246] close(4)                    = 0
[   80.075754][ T5246] loop0: detected capacity change from 0 to 2048
[   80.093000][ T5247] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5246] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5246] exit_group(0)               = ?
[pid  5246] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5246, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./89/binderfs")                 = 0
[   80.124242][ T5246] syz-executor276: attempt to access beyond end of device
[   80.124242][ T5246] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   80.140682][ T5246] syz-executor276: attempt to access beyond end of device
[   80.140682][ T5246] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./89/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./89/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./89")                           = 0
mkdir("./90", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5248 attached
, child_tidptr=0x5555557e4650) = 5248
[pid  5248] set_robust_list(0x5555557e4660, 24) = 0
[pid  5248] chdir("./90")               = 0
[pid  5248] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5248] setpgid(0, 0)               = 0
[pid  5248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5248] write(3, "1000", 4)         = 4
[pid  5248] close(3)                    = 0
[pid  5248] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5248] memfd_create("syzkaller", 0) = 3
[pid  5248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5248] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5248] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5248] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5248] close(3)                    = 0
[pid  5248] mkdir("./file0", 0777)      = 0
[pid  5248] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5248] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5248] chdir("./file0")            = 0
[pid  5248] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5248] close(4)                    = 0
[   80.294096][ T5248] loop0: detected capacity change from 0 to 2048
[   80.315311][ T5249] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5248] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5248] exit_group(0)               = ?
[pid  5248] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5248, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   80.337525][ T5248] syz-executor276: attempt to access beyond end of device
[   80.337525][ T5248] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   80.353997][ T5248] syz-executor276: attempt to access beyond end of device
[   80.353997][ T5248] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
newfstatat(AT_FDCWD, "./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./90/binderfs")                 = 0
umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./90/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./90/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./90")                           = 0
mkdir("./91", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5250 attached
, child_tidptr=0x5555557e4650) = 5250
[pid  5250] set_robust_list(0x5555557e4660, 24) = 0
[pid  5250] chdir("./91")               = 0
[pid  5250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5250] setpgid(0, 0)               = 0
[pid  5250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5250] write(3, "1000", 4)         = 4
[pid  5250] close(3)                    = 0
[pid  5250] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5250] memfd_create("syzkaller", 0) = 3
[pid  5250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5250] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5250] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5250] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5250] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5250] close(3)                    = 0
[pid  5250] mkdir("./file0", 0777)      = 0
[pid  5250] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5250] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5250] chdir("./file0")            = 0
[pid  5250] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5250] close(4)                    = 0
[pid  5250] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5250] exit_group(0)               = ?
[   80.596604][ T5250] loop0: detected capacity change from 0 to 2048
[   80.627290][ T5251] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5250] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5250, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./91/binderfs")                 = 0
umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./91/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./91/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./91")                           = 0
mkdir("./92", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5252 attached
, child_tidptr=0x5555557e4650) = 5252
[pid  5252] set_robust_list(0x5555557e4660, 24) = 0
[pid  5252] chdir("./92")               = 0
[pid  5252] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5252] setpgid(0, 0)               = 0
[pid  5252] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5252] write(3, "1000", 4)         = 4
[pid  5252] close(3)                    = 0
[pid  5252] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5252] memfd_create("syzkaller", 0) = 3
[pid  5252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5252] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5252] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5252] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5252] close(3)                    = 0
[pid  5252] mkdir("./file0", 0777)      = 0
[pid  5252] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5252] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5252] chdir("./file0")            = 0
[pid  5252] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5252] close(4)                    = 0
[pid  5252] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5252] exit_group(0)               = ?
[pid  5252] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5252, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   80.829447][ T5252] loop0: detected capacity change from 0 to 2048
[   80.858196][ T5253] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(AT_FDCWD, "./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./92/binderfs")                 = 0
umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./92/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./92/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./92")                           = 0
mkdir("./93", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5254 attached
, child_tidptr=0x5555557e4650) = 5254
[pid  5254] set_robust_list(0x5555557e4660, 24) = 0
[pid  5254] chdir("./93")               = 0
[pid  5254] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5254] setpgid(0, 0)               = 0
[pid  5254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5254] write(3, "1000", 4)         = 4
[pid  5254] close(3)                    = 0
[pid  5254] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5254] memfd_create("syzkaller", 0) = 3
[pid  5254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5254] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5254] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5254] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5254] close(3)                    = 0
[pid  5254] mkdir("./file0", 0777)      = 0
[pid  5254] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5254] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5254] chdir("./file0")            = 0
[pid  5254] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5254] close(4)                    = 0
[pid  5254] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5254] exit_group(0)               = ?
[pid  5254] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5254, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./93/binderfs")                 = 0
umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
[   81.096431][ T5254] loop0: detected capacity change from 0 to 2048
[   81.116714][ T5255] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./93/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./93/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./93")                           = 0
mkdir("./94", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5256 attached
 <unfinished ...>
[pid  5256] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5256
[pid  5256] <... set_robust_list resumed>) = 0
[pid  5256] chdir("./94")               = 0
[pid  5256] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5256] setpgid(0, 0)               = 0
[pid  5256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5256] write(3, "1000", 4)         = 4
[pid  5256] close(3)                    = 0
[pid  5256] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5256] memfd_create("syzkaller", 0) = 3
[pid  5256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5256] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5256] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5256] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5256] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5256] close(3)                    = 0
[pid  5256] mkdir("./file0", 0777)      = 0
[pid  5256] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5256] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5256] chdir("./file0")            = 0
[pid  5256] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5256] close(4)                    = 0
[pid  5256] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5256] exit_group(0)               = ?
[pid  5256] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5256, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./94/binderfs")                 = 0
[   81.276361][ T5256] loop0: detected capacity change from 0 to 2048
[   81.307261][ T5257] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./94/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./94/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./94")                           = 0
mkdir("./95", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5258 attached
 <unfinished ...>
[pid  5258] set_robust_list(0x5555557e4660, 24) = 0
[pid  5258] chdir("./95")               = 0
[pid  5258] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5258
[pid  5258] setpgid(0, 0)               = 0
[pid  5258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5258] write(3, "1000", 4)         = 4
[pid  5258] close(3)                    = 0
[pid  5258] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5258] memfd_create("syzkaller", 0) = 3
[pid  5258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5258] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5258] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5258] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5258] close(3)                    = 0
[pid  5258] mkdir("./file0", 0777)      = 0
[pid  5258] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5258] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5258] chdir("./file0")            = 0
[pid  5258] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5258] close(4)                    = 0
[pid  5258] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5258] exit_group(0)               = ?
[pid  5258] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5258, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[   81.462569][ T5258] loop0: detected capacity change from 0 to 2048
[   81.492271][ T5259] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./95/binderfs")                 = 0
umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./95/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./95/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./95")                           = 0
mkdir("./96", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5260 attached
 <unfinished ...>
[pid  5260] set_robust_list(0x5555557e4660, 24) = 0
[pid  5260] chdir("./96")               = 0
[pid  5260] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5260
[pid  5260] setpgid(0, 0)               = 0
[pid  5260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5260] write(3, "1000", 4)         = 4
[pid  5260] close(3)                    = 0
[pid  5260] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5260] memfd_create("syzkaller", 0) = 3
[pid  5260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5260] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5260] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5260] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5260] close(3)                    = 0
[pid  5260] mkdir("./file0", 0777)      = 0
[pid  5260] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5260] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5260] chdir("./file0")            = 0
[pid  5260] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5260] close(4)                    = 0
[pid  5260] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5260] exit_group(0)               = ?
[pid  5260] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5260, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   81.700721][ T5260] loop0: detected capacity change from 0 to 2048
[   81.728946][ T5261] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./96/binderfs")                 = 0
umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./96/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./96/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./96")                           = 0
mkdir("./97", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5262 attached
, child_tidptr=0x5555557e4650) = 5262
[pid  5262] set_robust_list(0x5555557e4660, 24) = 0
[pid  5262] chdir("./97")               = 0
[pid  5262] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5262] setpgid(0, 0)               = 0
[pid  5262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5262] write(3, "1000", 4)         = 4
[pid  5262] close(3)                    = 0
[pid  5262] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5262] memfd_create("syzkaller", 0) = 3
[pid  5262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5262] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5262] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5262] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5262] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5262] close(3)                    = 0
[pid  5262] mkdir("./file0", 0777)      = 0
[pid  5262] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5262] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5262] chdir("./file0")            = 0
[pid  5262] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5262] close(4)                    = 0
[pid  5262] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5262] exit_group(0)               = ?
[pid  5262] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5262, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[   81.917785][ T5262] loop0: detected capacity change from 0 to 2048
[   81.937160][ T5263] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./97/binderfs")                 = 0
umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./97/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./97/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./97")                           = 0
mkdir("./98", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5264 attached
 <unfinished ...>
[pid  5264] set_robust_list(0x5555557e4660, 24) = 0
[pid  5264] chdir("./98" <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5264
[pid  5264] <... chdir resumed>)        = 0
[pid  5264] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5264] setpgid(0, 0)               = 0
[pid  5264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5264] write(3, "1000", 4)         = 4
[pid  5264] close(3)                    = 0
[pid  5264] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5264] memfd_create("syzkaller", 0) = 3
[pid  5264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5264] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5264] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5264] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5264] close(3)                    = 0
[pid  5264] mkdir("./file0", 0777)      = 0
[pid  5264] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5264] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5264] chdir("./file0")            = 0
[pid  5264] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5264] close(4)                    = 0
[   82.126665][ T5264] loop0: detected capacity change from 0 to 2048
[   82.146382][ T5265] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5264] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5264] exit_group(0)               = ?
[pid  5264] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5264, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./98/binderfs")                 = 0
umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./98/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./98/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./98")                           = 0
mkdir("./99", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5266 attached
, child_tidptr=0x5555557e4650) = 5266
[pid  5266] set_robust_list(0x5555557e4660, 24) = 0
[pid  5266] chdir("./99")               = 0
[pid  5266] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5266] setpgid(0, 0)               = 0
[pid  5266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5266] write(3, "1000", 4)         = 4
[pid  5266] close(3)                    = 0
[pid  5266] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5266] memfd_create("syzkaller", 0) = 3
[pid  5266] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5266] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5266] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5266] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5266] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5266] close(3)                    = 0
[pid  5266] mkdir("./file0", 0777)      = 0
[pid  5266] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5266] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5266] chdir("./file0")            = 0
[pid  5266] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5266] close(4)                    = 0
[pid  5266] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5266] exit_group(0)               = ?
[pid  5266] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5266, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
[   82.410219][ T5266] loop0: detected capacity change from 0 to 2048
[   82.424990][ T5267] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./99/binderfs")                 = 0
umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./99/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./99/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./99/file0")                     = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./99")                           = 0
mkdir("./100", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5268 attached
, child_tidptr=0x5555557e4650) = 5268
[pid  5268] set_robust_list(0x5555557e4660, 24) = 0
[pid  5268] chdir("./100")              = 0
[pid  5268] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5268] setpgid(0, 0)               = 0
[pid  5268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5268] write(3, "1000", 4)         = 4
[pid  5268] close(3)                    = 0
[pid  5268] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5268] memfd_create("syzkaller", 0) = 3
[pid  5268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5268] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5268] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5268] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5268] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5268] close(3)                    = 0
[pid  5268] mkdir("./file0", 0777)      = 0
[pid  5268] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5268] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5268] chdir("./file0")            = 0
[pid  5268] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5268] close(4)                    = 0
[pid  5268] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5268] exit_group(0)               = ?
[pid  5268] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5268, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   82.660167][ T5268] loop0: detected capacity change from 0 to 2048
[   82.681098][ T5269] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./100/binderfs")                = 0
umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./100/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./100/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./100/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./100")                          = 0
mkdir("./101", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5270 attached
 <unfinished ...>
[pid  5270] set_robust_list(0x5555557e4660, 24) = 0
[pid  5270] chdir("./101")              = 0
[pid  5270] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5270
[pid  5270] setpgid(0, 0)               = 0
[pid  5270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5270] write(3, "1000", 4)         = 4
[pid  5270] close(3)                    = 0
[pid  5270] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5270] memfd_create("syzkaller", 0) = 3
[pid  5270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5270] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5270] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5270] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5270] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5270] close(3)                    = 0
[pid  5270] mkdir("./file0", 0777)      = 0
[pid  5270] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5270] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5270] chdir("./file0")            = 0
[pid  5270] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5270] close(4)                    = 0
[pid  5270] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5270] exit_group(0)               = ?
[pid  5270] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5270, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
[   82.918048][ T5270] loop0: detected capacity change from 0 to 2048
[   82.938066][ T5271] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./101/binderfs")                = 0
umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./101/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./101/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./101/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./101")                          = 0
mkdir("./102", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5272 attached
, child_tidptr=0x5555557e4650) = 5272
[pid  5272] set_robust_list(0x5555557e4660, 24) = 0
[pid  5272] chdir("./102")              = 0
[pid  5272] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5272] setpgid(0, 0)               = 0
[pid  5272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5272] write(3, "1000", 4)         = 4
[pid  5272] close(3)                    = 0
[pid  5272] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5272] memfd_create("syzkaller", 0) = 3
[pid  5272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5272] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5272] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5272] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5272] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5272] close(3)                    = 0
[pid  5272] mkdir("./file0", 0777)      = 0
[pid  5272] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5272] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5272] chdir("./file0")            = 0
[pid  5272] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5272] close(4)                    = 0
[pid  5272] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5272] exit_group(0)               = ?
[pid  5272] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5272, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
[   83.166705][ T5272] loop0: detected capacity change from 0 to 2048
[   83.197401][ T5273] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./102/binderfs")                = 0
umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./102/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./102/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./102/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./102")                          = 0
mkdir("./103", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5274 attached
, child_tidptr=0x5555557e4650) = 5274
[pid  5274] set_robust_list(0x5555557e4660, 24) = 0
[pid  5274] chdir("./103")              = 0
[pid  5274] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5274] setpgid(0, 0)               = 0
[pid  5274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5274] write(3, "1000", 4)         = 4
[pid  5274] close(3)                    = 0
[pid  5274] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5274] memfd_create("syzkaller", 0) = 3
[pid  5274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5274] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5274] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5274] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5274] close(3)                    = 0
[pid  5274] mkdir("./file0", 0777)      = 0
[pid  5274] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5274] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5274] chdir("./file0")            = 0
[pid  5274] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5274] close(4)                    = 0
[pid  5274] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5274] exit_group(0)               = ?
[pid  5274] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5274, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
[   83.456212][ T5274] loop0: detected capacity change from 0 to 2048
[   83.486924][ T5275] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./103/binderfs")                = 0
umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./103/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./103/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./103")                          = 0
mkdir("./104", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5276 attached
 <unfinished ...>
[pid  5276] set_robust_list(0x5555557e4660, 24) = 0
[pid  5276] chdir("./104")              = 0
[pid  5276] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5276
[pid  5276] <... prctl resumed>)        = 0
[pid  5276] setpgid(0, 0)               = 0
[pid  5276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5276] write(3, "1000", 4)         = 4
[pid  5276] close(3)                    = 0
[pid  5276] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5276] memfd_create("syzkaller", 0) = 3
[pid  5276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5276] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5276] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5276] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5276] close(3)                    = 0
[pid  5276] mkdir("./file0", 0777)      = 0
[pid  5276] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5276] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5276] chdir("./file0")            = 0
[pid  5276] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5276] close(4)                    = 0
[pid  5276] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5276] exit_group(0)               = ?
[pid  5276] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5276, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
[   83.741436][ T5276] loop0: detected capacity change from 0 to 2048
[   83.761868][ T5277] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./104/binderfs")                = 0
umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./104/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./104/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./104")                          = 0
mkdir("./105", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5278 attached
 <unfinished ...>
[pid  5278] set_robust_list(0x5555557e4660, 24) = 0
[pid  5278] chdir("./105")              = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5278
[pid  5278] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5278] setpgid(0, 0)               = 0
[pid  5278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5278] write(3, "1000", 4)         = 4
[pid  5278] close(3)                    = 0
[pid  5278] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5278] memfd_create("syzkaller", 0) = 3
[pid  5278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5278] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5278] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5278] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5278] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5278] close(3)                    = 0
[pid  5278] mkdir("./file0", 0777)      = 0
[pid  5278] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5278] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5278] chdir("./file0")            = 0
[pid  5278] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5278] close(4)                    = 0
[pid  5278] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5278] exit_group(0)               = ?
[pid  5278] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5278, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./105/binderfs")                = 0
umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   83.964128][ T5278] loop0: detected capacity change from 0 to 2048
[   83.983490][ T5279] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(AT_FDCWD, "./105/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./105/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./105")                          = 0
mkdir("./106", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5280 attached
, child_tidptr=0x5555557e4650) = 5280
[pid  5280] set_robust_list(0x5555557e4660, 24) = 0
[pid  5280] chdir("./106")              = 0
[pid  5280] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5280] setpgid(0, 0)               = 0
[pid  5280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5280] write(3, "1000", 4)         = 4
[pid  5280] close(3)                    = 0
[pid  5280] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5280] memfd_create("syzkaller", 0) = 3
[pid  5280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5280] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5280] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5280] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5280] close(3)                    = 0
[pid  5280] mkdir("./file0", 0777)      = 0
[pid  5280] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5280] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5280] chdir("./file0")            = 0
[pid  5280] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5280] close(4)                    = 0
[pid  5280] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[   84.163816][ T5280] loop0: detected capacity change from 0 to 2048
[   84.196247][ T5281] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5280] exit_group(0)               = ?
[pid  5280] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5280, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./106/binderfs")                = 0
umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./106/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./106")                          = 0
mkdir("./107", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5282 attached
 <unfinished ...>
[pid  5282] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5282
[pid  5282] <... set_robust_list resumed>) = 0
[pid  5282] chdir("./107")              = 0
[pid  5282] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5282] setpgid(0, 0)               = 0
[pid  5282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5282] write(3, "1000", 4)         = 4
[pid  5282] close(3)                    = 0
[pid  5282] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5282] memfd_create("syzkaller", 0) = 3
[pid  5282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5282] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5282] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5282] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5282] close(3)                    = 0
[pid  5282] mkdir("./file0", 0777)      = 0
[pid  5282] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5282] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5282] chdir("./file0")            = 0
[pid  5282] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5282] close(4)                    = 0
[   84.417457][ T5282] loop0: detected capacity change from 0 to 2048
[   84.437779][ T5283] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.457694][ T5282] bio_check_eod: 32 callbacks suppressed
[pid  5282] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5282] exit_group(0)               = ?
[pid  5282] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5282, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./107/binderfs")                = 0
[   84.457706][ T5282] syz-executor276: attempt to access beyond end of device
[   84.457706][ T5282] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   84.480809][ T5282] syz-executor276: attempt to access beyond end of device
[   84.480809][ T5282] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./107/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./107")                          = 0
mkdir("./108", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5284 attached
, child_tidptr=0x5555557e4650) = 5284
[pid  5284] set_robust_list(0x5555557e4660, 24) = 0
[pid  5284] chdir("./108")              = 0
[pid  5284] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5284] setpgid(0, 0)               = 0
[pid  5284] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5284] write(3, "1000", 4)         = 4
[pid  5284] close(3)                    = 0
[pid  5284] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5284] memfd_create("syzkaller", 0) = 3
[pid  5284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5284] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5284] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5284] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5284] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5284] close(3)                    = 0
[pid  5284] mkdir("./file0", 0777)      = 0
[pid  5284] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5284] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5284] chdir("./file0")            = 0
[pid  5284] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5284] close(4)                    = 0
[   84.616531][ T5284] loop0: detected capacity change from 0 to 2048
[   84.647670][ T5285] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5284] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5284] exit_group(0)               = ?
[pid  5284] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5284, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./108/binderfs")                = 0
umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./108/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
[   84.661357][ T5284] syz-executor276: attempt to access beyond end of device
[   84.661357][ T5284] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   84.681466][ T5284] syz-executor276: attempt to access beyond end of device
[   84.681466][ T5284] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
rmdir("./108/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./108")                          = 0
mkdir("./109", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5286 attached
 <unfinished ...>
[pid  5286] set_robust_list(0x5555557e4660, 24) = 0
[pid  5286] chdir("./109")              = 0
[pid  5286] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5286
[pid  5286] <... prctl resumed>)        = 0
[pid  5286] setpgid(0, 0)               = 0
[pid  5286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5286] write(3, "1000", 4)         = 4
[pid  5286] close(3)                    = 0
[pid  5286] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5286] memfd_create("syzkaller", 0) = 3
[pid  5286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5286] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5286] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5286] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5286] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5286] close(3)                    = 0
[pid  5286] mkdir("./file0", 0777)      = 0
[pid  5286] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5286] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5286] chdir("./file0")            = 0
[pid  5286] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5286] close(4)                    = 0
[   84.831296][ T5286] loop0: detected capacity change from 0 to 2048
[   84.859871][ T5287] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5286] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5286] exit_group(0)               = ?
[pid  5286] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5286, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./109/binderfs")                = 0
umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./109/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   84.877525][ T5286] syz-executor276: attempt to access beyond end of device
[   84.877525][ T5286] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   84.893578][ T5286] syz-executor276: attempt to access beyond end of device
[   84.893578][ T5286] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./109/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./109")                          = 0
mkdir("./110", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5288 attached
, child_tidptr=0x5555557e4650) = 5288
[pid  5288] set_robust_list(0x5555557e4660, 24) = 0
[pid  5288] chdir("./110")              = 0
[pid  5288] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5288] setpgid(0, 0)               = 0
[pid  5288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5288] write(3, "1000", 4)         = 4
[pid  5288] close(3)                    = 0
[pid  5288] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5288] memfd_create("syzkaller", 0) = 3
[pid  5288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5288] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5288] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5288] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5288] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5288] close(3)                    = 0
[pid  5288] mkdir("./file0", 0777)      = 0
[pid  5288] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5288] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5288] chdir("./file0")            = 0
[pid  5288] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5288] close(4)                    = 0
[   85.089578][ T5288] loop0: detected capacity change from 0 to 2048
[   85.103171][ T5289] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5288] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5288] exit_group(0)               = ?
[pid  5288] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5288, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./110/binderfs")                = 0
umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[   85.131796][ T5288] syz-executor276: attempt to access beyond end of device
[   85.131796][ T5288] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   85.149766][ T5288] syz-executor276: attempt to access beyond end of device
[   85.149766][ T5288] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./110/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./110")                          = 0
mkdir("./111", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5290 attached
 <unfinished ...>
[pid  5290] set_robust_list(0x5555557e4660, 24) = 0
[pid  5290] chdir("./111")              = 0
[pid  5290] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5290] setpgid(0, 0 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5290
[pid  5290] <... setpgid resumed>)      = 0
[pid  5290] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5290] write(3, "1000", 4)         = 4
[pid  5290] close(3)                    = 0
[pid  5290] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5290] memfd_create("syzkaller", 0) = 3
[pid  5290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5290] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5290] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5290] close(3)                    = 0
[pid  5290] mkdir("./file0", 0777)      = 0
[pid  5290] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5290] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5290] chdir("./file0")            = 0
[pid  5290] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5290] close(4)                    = 0
[   85.324807][ T5290] loop0: detected capacity change from 0 to 2048
[   85.344091][ T5291] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5290] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5290] exit_group(0)               = ?
[pid  5290] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5290, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./111/binderfs")                = 0
[   85.375301][ T5290] syz-executor276: attempt to access beyond end of device
[   85.375301][ T5290] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   85.392286][ T5290] syz-executor276: attempt to access beyond end of device
[   85.392286][ T5290] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./111/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./111/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./111")                          = 0
mkdir("./112", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5292 attached
 <unfinished ...>
[pid  5292] set_robust_list(0x5555557e4660, 24) = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5292
[pid  5292] chdir("./112")              = 0
[pid  5292] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5292] setpgid(0, 0)               = 0
[pid  5292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5292] write(3, "1000", 4)         = 4
[pid  5292] close(3)                    = 0
[pid  5292] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5292] memfd_create("syzkaller", 0) = 3
[pid  5292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5292] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5292] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5292] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5292] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5292] close(3)                    = 0
[pid  5292] mkdir("./file0", 0777)      = 0
[pid  5292] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5292] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5292] chdir("./file0")            = 0
[pid  5292] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5292] close(4)                    = 0
[pid  5292] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5292] exit_group(0)               = ?
[pid  5292] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5292, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./112/binderfs")                = 0
[   85.565511][ T5292] loop0: detected capacity change from 0 to 2048
[   85.579685][ T5293] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./112/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./112/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./112")                          = 0
mkdir("./113", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5295 attached
, child_tidptr=0x5555557e4650) = 5295
[pid  5295] set_robust_list(0x5555557e4660, 24) = 0
[pid  5295] chdir("./113")              = 0
[pid  5295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5295] setpgid(0, 0)               = 0
[pid  5295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5295] write(3, "1000", 4)         = 4
[pid  5295] close(3)                    = 0
[pid  5295] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5295] memfd_create("syzkaller", 0) = 3
[pid  5295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5295] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5295] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5295] close(3)                    = 0
[pid  5295] mkdir("./file0", 0777)      = 0
[pid  5295] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5295] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5295] chdir("./file0")            = 0
[pid  5295] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5295] close(4)                    = 0
[pid  5295] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5295] exit_group(0)               = ?
[pid  5295] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5295, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
[   85.729988][ T5295] loop0: detected capacity change from 0 to 2048
[   85.750956][ T5296] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./113/binderfs")                = 0
umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./113/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./113")                          = 0
mkdir("./114", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5297 attached
, child_tidptr=0x5555557e4650) = 5297
[pid  5297] set_robust_list(0x5555557e4660, 24) = 0
[pid  5297] chdir("./114")              = 0
[pid  5297] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5297] setpgid(0, 0)               = 0
[pid  5297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5297] write(3, "1000", 4)         = 4
[pid  5297] close(3)                    = 0
[pid  5297] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5297] memfd_create("syzkaller", 0) = 3
[pid  5297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5297] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5297] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5297] close(3)                    = 0
[pid  5297] mkdir("./file0", 0777)      = 0
[pid  5297] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5297] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5297] chdir("./file0")            = 0
[pid  5297] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5297] close(4)                    = 0
[pid  5297] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5297] exit_group(0)               = ?
[pid  5297] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5297, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
[   85.948949][ T5297] loop0: detected capacity change from 0 to 2048
[   85.974059][ T5298] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./114/binderfs")                = 0
umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./114/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./114")                          = 0
mkdir("./115", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5299 attached
, child_tidptr=0x5555557e4650) = 5299
[pid  5299] set_robust_list(0x5555557e4660, 24) = 0
[pid  5299] chdir("./115")              = 0
[pid  5299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5299] setpgid(0, 0)               = 0
[pid  5299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5299] write(3, "1000", 4)         = 4
[pid  5299] close(3)                    = 0
[pid  5299] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5299] memfd_create("syzkaller", 0) = 3
[pid  5299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5299] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5299] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5299] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5299] close(3)                    = 0
[pid  5299] mkdir("./file0", 0777)      = 0
[pid  5299] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5299] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5299] chdir("./file0")            = 0
[pid  5299] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5299] close(4)                    = 0
[pid  5299] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5299] exit_group(0)               = ?
[pid  5299] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5299, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   86.264118][ T5299] loop0: detected capacity change from 0 to 2048
[   86.283632][ T5300] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(AT_FDCWD, "./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./115/binderfs")                = 0
umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./115/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./115")                          = 0
mkdir("./116", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5301 attached
 <unfinished ...>
[pid  5301] set_robust_list(0x5555557e4660, 24) = 0
[pid  5301] chdir("./116")              = 0
[pid  5301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5301] setpgid(0, 0)               = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5301
[pid  5301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5301] write(3, "1000", 4)         = 4
[pid  5301] close(3)                    = 0
[pid  5301] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5301] memfd_create("syzkaller", 0) = 3
[pid  5301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5301] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5301] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5301] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5301] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5301] close(3)                    = 0
[pid  5301] mkdir("./file0", 0777)      = 0
[pid  5301] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5301] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5301] chdir("./file0")            = 0
[pid  5301] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5301] close(4)                    = 0
[pid  5301] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5301] exit_group(0)               = ?
[   86.516016][ T5301] loop0: detected capacity change from 0 to 2048
[   86.546465][ T5302] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5301] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5301, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./116/binderfs")                = 0
umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./116/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./116")                          = 0
mkdir("./117", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5303 attached
, child_tidptr=0x5555557e4650) = 5303
[pid  5303] set_robust_list(0x5555557e4660, 24) = 0
[pid  5303] chdir("./117")              = 0
[pid  5303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5303] setpgid(0, 0)               = 0
[pid  5303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5303] write(3, "1000", 4)         = 4
[pid  5303] close(3)                    = 0
[pid  5303] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5303] memfd_create("syzkaller", 0) = 3
[pid  5303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5303] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5303] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5303] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5303] close(3)                    = 0
[pid  5303] mkdir("./file0", 0777)      = 0
[pid  5303] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5303] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5303] chdir("./file0")            = 0
[pid  5303] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5303] close(4)                    = 0
[pid  5303] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5303] exit_group(0)               = ?
[pid  5303] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5303, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./117/binderfs")                = 0
[   86.742978][ T5303] loop0: detected capacity change from 0 to 2048
[   86.762321][ T5304] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./117/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./117/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./117")                          = 0
mkdir("./118", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5305 attached
, child_tidptr=0x5555557e4650) = 5305
[pid  5305] set_robust_list(0x5555557e4660, 24) = 0
[pid  5305] chdir("./118")              = 0
[pid  5305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5305] setpgid(0, 0)               = 0
[pid  5305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5305] write(3, "1000", 4)         = 4
[pid  5305] close(3)                    = 0
[pid  5305] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5305] memfd_create("syzkaller", 0) = 3
[pid  5305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5305] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5305] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5305] close(3)                    = 0
[pid  5305] mkdir("./file0", 0777)      = 0
[pid  5305] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5305] chdir("./file0")            = 0
[pid  5305] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5305] close(4)                    = 0
[pid  5305] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5305] exit_group(0)               = ?
[pid  5305] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5305, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   86.919049][ T5305] loop0: detected capacity change from 0 to 2048
[   86.947536][ T5306] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./118/binderfs")                = 0
umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./118/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./118/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./118")                          = 0
mkdir("./119", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5307 attached
, child_tidptr=0x5555557e4650) = 5307
[pid  5307] set_robust_list(0x5555557e4660, 24) = 0
[pid  5307] chdir("./119")              = 0
[pid  5307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5307] setpgid(0, 0)               = 0
[pid  5307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5307] write(3, "1000", 4)         = 4
[pid  5307] close(3)                    = 0
[pid  5307] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5307] memfd_create("syzkaller", 0) = 3
[pid  5307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5307] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5307] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5307] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5307] close(3)                    = 0
[pid  5307] mkdir("./file0", 0777)      = 0
[pid  5307] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5307] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5307] chdir("./file0")            = 0
[pid  5307] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5307] close(4)                    = 0
[pid  5307] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5307] exit_group(0)               = ?
[pid  5307] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5307, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[   87.155421][ T5307] loop0: detected capacity change from 0 to 2048
[   87.175493][ T5308] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
unlink("./119/binderfs")                = 0
umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./119/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./119")                          = 0
mkdir("./120", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5309 attached
, child_tidptr=0x5555557e4650) = 5309
[pid  5309] set_robust_list(0x5555557e4660, 24) = 0
[pid  5309] chdir("./120")              = 0
[pid  5309] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5309] setpgid(0, 0)               = 0
[pid  5309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5309] write(3, "1000", 4)         = 4
[pid  5309] close(3)                    = 0
[pid  5309] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5309] memfd_create("syzkaller", 0) = 3
[pid  5309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5309] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5309] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5309] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5309] close(3)                    = 0
[pid  5309] mkdir("./file0", 0777)      = 0
[pid  5309] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5309] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5309] chdir("./file0")            = 0
[pid  5309] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5309] close(4)                    = 0
[pid  5309] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5309] exit_group(0)               = ?
[pid  5309] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5309, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
[   87.412516][ T5309] loop0: detected capacity change from 0 to 2048
[   87.432814][ T5310] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./120/binderfs")                = 0
umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./120/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./120/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./120")                          = 0
mkdir("./121", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5311 attached
 <unfinished ...>
[pid  5311] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5311
[pid  5311] <... set_robust_list resumed>) = 0
[pid  5311] chdir("./121")              = 0
[pid  5311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5311] setpgid(0, 0)               = 0
[pid  5311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5311] write(3, "1000", 4)         = 4
[pid  5311] close(3)                    = 0
[pid  5311] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5311] memfd_create("syzkaller", 0) = 3
[pid  5311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5311] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5311] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5311] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5311] close(3)                    = 0
[pid  5311] mkdir("./file0", 0777)      = 0
[pid  5311] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5311] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5311] chdir("./file0")            = 0
[pid  5311] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5311] close(4)                    = 0
[pid  5311] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5311] exit_group(0)               = ?
[pid  5311] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5311, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   87.643349][ T5311] loop0: detected capacity change from 0 to 2048
[   87.663495][ T5312] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(AT_FDCWD, "./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./121/binderfs")                = 0
umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./121/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./121/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./121")                          = 0
mkdir("./122", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5313 attached
, child_tidptr=0x5555557e4650) = 5313
[pid  5313] set_robust_list(0x5555557e4660, 24) = 0
[pid  5313] chdir("./122")              = 0
[pid  5313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5313] setpgid(0, 0)               = 0
[pid  5313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5313] write(3, "1000", 4)         = 4
[pid  5313] close(3)                    = 0
[pid  5313] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5313] memfd_create("syzkaller", 0) = 3
[pid  5313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5313] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5313] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5313] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5313] close(3)                    = 0
[pid  5313] mkdir("./file0", 0777)      = 0
[pid  5313] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5313] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5313] chdir("./file0")            = 0
[pid  5313] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5313] close(4)                    = 0
[pid  5313] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5313] exit_group(0)               = ?
[pid  5313] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5313, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./122/binderfs")                = 0
[   87.882794][ T5313] loop0: detected capacity change from 0 to 2048
[   87.903524][ T5314] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./122/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./122/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./122")                          = 0
mkdir("./123", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5315 attached
 <unfinished ...>
[pid  5315] set_robust_list(0x5555557e4660, 24) = 0
[pid  5315] chdir("./123")              = 0
[pid  5315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5315
[pid  5315] setpgid(0, 0)               = 0
[pid  5315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5315] write(3, "1000", 4)         = 4
[pid  5315] close(3)                    = 0
[pid  5315] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5315] memfd_create("syzkaller", 0) = 3
[pid  5315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5315] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5315] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5315] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5315] close(3)                    = 0
[pid  5315] mkdir("./file0", 0777)      = 0
[pid  5315] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5315] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5315] chdir("./file0")            = 0
[pid  5315] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5315] close(4)                    = 0
[pid  5315] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5315] exit_group(0)               = ?
[pid  5315] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5315, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./123/binderfs")                = 0
umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./123/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
[   88.064402][ T5315] loop0: detected capacity change from 0 to 2048
[   88.083383][ T5316] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
rmdir("./123/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./123")                          = 0
mkdir("./124", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5317 attached
, child_tidptr=0x5555557e4650) = 5317
[pid  5317] set_robust_list(0x5555557e4660, 24) = 0
[pid  5317] chdir("./124")              = 0
[pid  5317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5317] setpgid(0, 0)               = 0
[pid  5317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5317] write(3, "1000", 4)         = 4
[pid  5317] close(3)                    = 0
[pid  5317] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5317] memfd_create("syzkaller", 0) = 3
[pid  5317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5317] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5317] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5317] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5317] close(3)                    = 0
[pid  5317] mkdir("./file0", 0777)      = 0
[pid  5317] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5317] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5317] chdir("./file0")            = 0
[pid  5317] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5317] close(4)                    = 0
[pid  5317] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5317] exit_group(0)               = ?
[pid  5317] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5317, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[   88.263724][ T5317] loop0: detected capacity change from 0 to 2048
[   88.284961][ T5318] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./124/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./124/binderfs")                = 0
umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./124/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./124/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./124")                          = 0
mkdir("./125", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5319 attached
, child_tidptr=0x5555557e4650) = 5319
[pid  5319] set_robust_list(0x5555557e4660, 24) = 0
[pid  5319] chdir("./125")              = 0
[pid  5319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5319] setpgid(0, 0)               = 0
[pid  5319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5319] write(3, "1000", 4)         = 4
[pid  5319] close(3)                    = 0
[pid  5319] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5319] memfd_create("syzkaller", 0) = 3
[pid  5319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5319] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5319] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5319] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5319] close(3)                    = 0
[pid  5319] mkdir("./file0", 0777)      = 0
[pid  5319] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5319] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5319] chdir("./file0")            = 0
[pid  5319] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5319] close(4)                    = 0
[pid  5319] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5319] exit_group(0)               = ?
[pid  5319] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5319, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
[   88.483106][ T5319] loop0: detected capacity change from 0 to 2048
[   88.503169][ T5320] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./125/binderfs")                = 0
umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./125/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./125/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./125")                          = 0
mkdir("./126", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5321 attached
 <unfinished ...>
[pid  5321] set_robust_list(0x5555557e4660, 24) = 0
[pid  5321] chdir("./126")              = 0
[pid  5321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5321] setpgid(0, 0)               = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5321
[pid  5321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5321] write(3, "1000", 4)         = 4
[pid  5321] close(3)                    = 0
[pid  5321] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5321] memfd_create("syzkaller", 0) = 3
[pid  5321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5321] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5321] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5321] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5321] close(3)                    = 0
[pid  5321] mkdir("./file0", 0777)      = 0
[pid  5321] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5321] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5321] chdir("./file0")            = 0
[pid  5321] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5321] close(4)                    = 0
[pid  5321] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5321] exit_group(0)               = ?
[   88.686800][ T5321] loop0: detected capacity change from 0 to 2048
[   88.717652][ T5322] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5321] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5321, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./126/binderfs")                = 0
umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./126/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./126/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./126")                          = 0
mkdir("./127", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5323 attached
 <unfinished ...>
[pid  5323] set_robust_list(0x5555557e4660, 24) = 0
[pid  5323] chdir("./127")              = 0
[pid  5323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5323] setpgid(0, 0)               = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5323
[pid  5323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5323] write(3, "1000", 4)         = 4
[pid  5323] close(3)                    = 0
[pid  5323] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5323] memfd_create("syzkaller", 0) = 3
[pid  5323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5323] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5323] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5323] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5323] close(3)                    = 0
[pid  5323] mkdir("./file0", 0777)      = 0
[pid  5323] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5323] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5323] chdir("./file0")            = 0
[pid  5323] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5323] close(4)                    = 0
[pid  5323] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5323] exit_group(0)               = ?
[   88.970609][ T5323] loop0: detected capacity change from 0 to 2048
[   88.992118][ T5324] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5323] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5323, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./127/binderfs")                = 0
umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./127/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./127/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./127")                          = 0
mkdir("./128", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5325 attached
 <unfinished ...>
[pid  5325] set_robust_list(0x5555557e4660, 24) = 0
[pid  5325] chdir("./128")              = 0
[pid  5325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5325
[pid  5325] setpgid(0, 0)               = 0
[pid  5325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5325] write(3, "1000", 4)         = 4
[pid  5325] close(3)                    = 0
[pid  5325] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5325] memfd_create("syzkaller", 0) = 3
[pid  5325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5325] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5325] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5325] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5325] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5325] close(3)                    = 0
[pid  5325] mkdir("./file0", 0777)      = 0
[pid  5325] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5325] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5325] chdir("./file0")            = 0
[pid  5325] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5325] close(4)                    = 0
[pid  5325] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5325] exit_group(0)               = ?
[pid  5325] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5325, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   89.185364][ T5325] loop0: detected capacity change from 0 to 2048
[   89.203497][ T5326] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./128/binderfs")                = 0
umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./128/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./128/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./128")                          = 0
mkdir("./129", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557e4650) = 5327
./strace-static-x86_64: Process 5327 attached
[pid  5327] set_robust_list(0x5555557e4660, 24) = 0
[pid  5327] chdir("./129")              = 0
[pid  5327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5327] setpgid(0, 0)               = 0
[pid  5327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5327] write(3, "1000", 4)         = 4
[pid  5327] close(3)                    = 0
[pid  5327] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5327] memfd_create("syzkaller", 0) = 3
[pid  5327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5327] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5327] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5327] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5327] close(3)                    = 0
[pid  5327] mkdir("./file0", 0777)      = 0
[pid  5327] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5327] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5327] chdir("./file0")            = 0
[pid  5327] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5327] close(4)                    = 0
[pid  5327] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5327] exit_group(0)               = ?
[pid  5327] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5327, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
[   89.398348][ T5327] loop0: detected capacity change from 0 to 2048
[   89.412247][ T5328] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./129/binderfs")                = 0
umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./129/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./129/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./129")                          = 0
mkdir("./130", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5329 attached
, child_tidptr=0x5555557e4650) = 5329
[pid  5329] set_robust_list(0x5555557e4660, 24) = 0
[pid  5329] chdir("./130")              = 0
[pid  5329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5329] setpgid(0, 0)               = 0
[pid  5329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5329] write(3, "1000", 4)         = 4
[pid  5329] close(3)                    = 0
[pid  5329] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5329] memfd_create("syzkaller", 0) = 3
[pid  5329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5329] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5329] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5329] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5329] close(3)                    = 0
[pid  5329] mkdir("./file0", 0777)      = 0
[pid  5329] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5329] chdir("./file0")            = 0
[pid  5329] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5329] close(4)                    = 0
[   89.641630][ T5329] loop0: detected capacity change from 0 to 2048
[   89.660699][ T5330] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5329] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5329] exit_group(0)               = ?
[pid  5329] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5329, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./130/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./130/binderfs")                = 0
umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./130/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[   89.704276][ T5329] bio_check_eod: 36 callbacks suppressed
[   89.704290][ T5329] syz-executor276: attempt to access beyond end of device
[   89.704290][ T5329] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   89.726572][ T5329] syz-executor276: attempt to access beyond end of device
[   89.726572][ T5329] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./130/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./130")                          = 0
mkdir("./131", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5331 attached
, child_tidptr=0x5555557e4650) = 5331
[pid  5331] set_robust_list(0x5555557e4660, 24) = 0
[pid  5331] chdir("./131")              = 0
[pid  5331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5331] setpgid(0, 0)               = 0
[pid  5331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5331] write(3, "1000", 4)         = 4
[pid  5331] close(3)                    = 0
[pid  5331] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5331] memfd_create("syzkaller", 0) = 3
[pid  5331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5331] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5331] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5331] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5331] close(3)                    = 0
[pid  5331] mkdir("./file0", 0777)      = 0
[pid  5331] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5331] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5331] chdir("./file0")            = 0
[pid  5331] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5331] close(4)                    = 0
[   89.888939][ T5331] loop0: detected capacity change from 0 to 2048
[   89.908099][ T5332] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   89.916593][ T5331] syz-executor276: attempt to access beyond end of device
[   89.916593][ T5331] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[pid  5331] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5331] exit_group(0)               = ?
[pid  5331] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5331, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   89.935200][ T5331] syz-executor276: attempt to access beyond end of device
[   89.935200][ T5331] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
newfstatat(AT_FDCWD, "./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./131/binderfs")                = 0
umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./131/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./131/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./131")                          = 0
mkdir("./132", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5333 attached
, child_tidptr=0x5555557e4650) = 5333
[pid  5333] set_robust_list(0x5555557e4660, 24) = 0
[pid  5333] chdir("./132")              = 0
[pid  5333] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5333] setpgid(0, 0)               = 0
[pid  5333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5333] write(3, "1000", 4)         = 4
[pid  5333] close(3)                    = 0
[pid  5333] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5333] memfd_create("syzkaller", 0) = 3
[pid  5333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5333] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5333] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5333] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5333] close(3)                    = 0
[pid  5333] mkdir("./file0", 0777)      = 0
[pid  5333] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5333] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5333] chdir("./file0")            = 0
[pid  5333] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5333] close(4)                    = 0
[   90.121489][ T5333] loop0: detected capacity change from 0 to 2048
[   90.142036][ T5334] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   90.157800][ T5333] syz-executor276: attempt to access beyond end of device
[pid  5333] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5333] exit_group(0)               = ?
[pid  5333] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5333, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./132/binderfs")                = 0
umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./132/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./132/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
[   90.157800][ T5333] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   90.173943][ T5333] syz-executor276: attempt to access beyond end of device
[   90.173943][ T5333] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
rmdir("./132")                          = 0
mkdir("./133", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5335 attached
 <unfinished ...>
[pid  5335] set_robust_list(0x5555557e4660, 24) = 0
[pid  5335] chdir("./133" <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5335
[pid  5335] <... chdir resumed>)        = 0
[pid  5335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5335] setpgid(0, 0)               = 0
[pid  5335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5335] write(3, "1000", 4)         = 4
[pid  5335] close(3)                    = 0
[pid  5335] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5335] memfd_create("syzkaller", 0) = 3
[pid  5335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5335] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5335] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5335] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5335] close(3)                    = 0
[pid  5335] mkdir("./file0", 0777)      = 0
[pid  5335] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5335] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5335] chdir("./file0")            = 0
[pid  5335] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5335] close(4)                    = 0
[   90.296594][ T5335] loop0: detected capacity change from 0 to 2048
[   90.315991][ T5336] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5335] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5335] exit_group(0)               = ?
[pid  5335] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5335, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./133/binderfs")                = 0
[   90.360789][ T5335] syz-executor276: attempt to access beyond end of device
[   90.360789][ T5335] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   90.377228][ T5335] syz-executor276: attempt to access beyond end of device
[   90.377228][ T5335] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./133/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./133/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./133")                          = 0
mkdir("./134", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5337 attached
, child_tidptr=0x5555557e4650) = 5337
[pid  5337] set_robust_list(0x5555557e4660, 24) = 0
[pid  5337] chdir("./134")              = 0
[pid  5337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5337] setpgid(0, 0)               = 0
[pid  5337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5337] write(3, "1000", 4)         = 4
[pid  5337] close(3)                    = 0
[pid  5337] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5337] memfd_create("syzkaller", 0) = 3
[pid  5337] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5337] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5337] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5337] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5337] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5337] close(3)                    = 0
[pid  5337] mkdir("./file0", 0777)      = 0
[pid  5337] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5337] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5337] chdir("./file0")            = 0
[pid  5337] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5337] close(4)                    = 0
[   90.631160][ T5337] loop0: detected capacity change from 0 to 2048
[   90.650848][ T5338] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5337] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5337] exit_group(0)               = ?
[pid  5337] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5337, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[   90.679539][ T5337] syz-executor276: attempt to access beyond end of device
[   90.679539][ T5337] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   90.695740][ T5337] syz-executor276: attempt to access beyond end of device
[   90.695740][ T5337] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
unlink("./134/binderfs")                = 0
umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./134/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./134/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./134")                          = 0
mkdir("./135", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5339 attached
 <unfinished ...>
[pid  5339] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5339
[pid  5339] <... set_robust_list resumed>) = 0
[pid  5339] chdir("./135")              = 0
[pid  5339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5339] setpgid(0, 0)               = 0
[pid  5339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5339] write(3, "1000", 4)         = 4
[pid  5339] close(3)                    = 0
[pid  5339] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5339] memfd_create("syzkaller", 0) = 3
[pid  5339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5339] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5339] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5339] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5339] close(3)                    = 0
[pid  5339] mkdir("./file0", 0777)      = 0
[pid  5339] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5339] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5339] chdir("./file0")            = 0
[pid  5339] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5339] close(4)                    = 0
[pid  5339] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5339] exit_group(0)               = ?
[pid  5339] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5339, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   90.915574][ T5339] loop0: detected capacity change from 0 to 2048
[   90.944472][ T5340] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(AT_FDCWD, "./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./135/binderfs")                = 0
umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./135/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./135/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./135")                          = 0
mkdir("./136", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5341 attached
, child_tidptr=0x5555557e4650) = 5341
[pid  5341] set_robust_list(0x5555557e4660, 24) = 0
[pid  5341] chdir("./136")              = 0
[pid  5341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5341] setpgid(0, 0)               = 0
[pid  5341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5341] write(3, "1000", 4)         = 4
[pid  5341] close(3)                    = 0
[pid  5341] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5341] memfd_create("syzkaller", 0) = 3
[pid  5341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5341] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5341] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5341] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5341] close(3)                    = 0
[pid  5341] mkdir("./file0", 0777)      = 0
[pid  5341] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5341] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5341] chdir("./file0")            = 0
[pid  5341] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5341] close(4)                    = 0
[pid  5341] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5341] exit_group(0)               = ?
[pid  5341] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5341, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   91.160326][ T5341] loop0: detected capacity change from 0 to 2048
[   91.175992][ T5343] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(AT_FDCWD, "./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./136/binderfs")                = 0
umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./136/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./136/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./136")                          = 0
mkdir("./137", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5344 attached
, child_tidptr=0x5555557e4650) = 5344
[pid  5344] set_robust_list(0x5555557e4660, 24) = 0
[pid  5344] chdir("./137")              = 0
[pid  5344] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5344] setpgid(0, 0)               = 0
[pid  5344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5344] write(3, "1000", 4)         = 4
[pid  5344] close(3)                    = 0
[pid  5344] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5344] memfd_create("syzkaller", 0) = 3
[pid  5344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5344] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5344] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5344] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5344] close(3)                    = 0
[pid  5344] mkdir("./file0", 0777)      = 0
[pid  5344] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5344] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5344] chdir("./file0")            = 0
[pid  5344] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5344] close(4)                    = 0
[pid  5344] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5344] exit_group(0)               = ?
[pid  5344] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5344, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[   91.401998][ T5344] loop0: detected capacity change from 0 to 2048
[   91.422334][ T5345] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./137/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./137/binderfs")                = 0
umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./137/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./137/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./137")                          = 0
mkdir("./138", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5346 attached
, child_tidptr=0x5555557e4650) = 5346
[pid  5346] set_robust_list(0x5555557e4660, 24) = 0
[pid  5346] chdir("./138")              = 0
[pid  5346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5346] setpgid(0, 0)               = 0
[pid  5346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5346] write(3, "1000", 4)         = 4
[pid  5346] close(3)                    = 0
[pid  5346] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5346] memfd_create("syzkaller", 0) = 3
[pid  5346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5346] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5346] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5346] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5346] close(3)                    = 0
[pid  5346] mkdir("./file0", 0777)      = 0
[pid  5346] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5346] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5346] chdir("./file0")            = 0
[pid  5346] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5346] close(4)                    = 0
[pid  5346] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5346] exit_group(0)               = ?
[pid  5346] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5346, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
[   91.693397][ T5346] loop0: detected capacity change from 0 to 2048
[   91.707301][ T5347] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./138/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./138/binderfs")                = 0
umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./138/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./138/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./138/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./138")                          = 0
mkdir("./139", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5349 attached
 <unfinished ...>
[pid  5349] set_robust_list(0x5555557e4660, 24) = 0
[pid  5349] chdir("./139")              = 0
[pid  5349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5349] setpgid(0, 0)               = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5349
[pid  5349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5349] write(3, "1000", 4)         = 4
[pid  5349] close(3)                    = 0
[pid  5349] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5349] memfd_create("syzkaller", 0) = 3
[pid  5349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5349] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5349] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5349] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5349] close(3)                    = 0
[pid  5349] mkdir("./file0", 0777)      = 0
[pid  5349] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5349] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5349] chdir("./file0")            = 0
[pid  5349] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5349] close(4)                    = 0
[pid  5349] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5349] exit_group(0)               = ?
[pid  5349] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5349, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[   91.884311][ T5349] loop0: detected capacity change from 0 to 2048
[   91.914137][ T5350] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./139/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./139/binderfs")                = 0
umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./139/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./139/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./139/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./139")                          = 0
mkdir("./140", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5351 attached
, child_tidptr=0x5555557e4650) = 5351
[pid  5351] set_robust_list(0x5555557e4660, 24) = 0
[pid  5351] chdir("./140")              = 0
[pid  5351] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5351] setpgid(0, 0)               = 0
[pid  5351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5351] write(3, "1000", 4)         = 4
[pid  5351] close(3)                    = 0
[pid  5351] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5351] memfd_create("syzkaller", 0) = 3
[pid  5351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5351] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5351] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5351] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5351] close(3)                    = 0
[pid  5351] mkdir("./file0", 0777)      = 0
[pid  5351] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5351] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5351] chdir("./file0")            = 0
[pid  5351] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5351] close(4)                    = 0
[pid  5351] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5351] exit_group(0)               = ?
[pid  5351] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5351, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
[   92.099241][ T5351] loop0: detected capacity change from 0 to 2048
[   92.114393][ T5353] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./140/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./140/binderfs")                = 0
umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./140/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./140/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./140/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./140")                          = 0
mkdir("./141", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5354 attached
, child_tidptr=0x5555557e4650) = 5354
[pid  5354] set_robust_list(0x5555557e4660, 24) = 0
[pid  5354] chdir("./141")              = 0
[pid  5354] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5354] setpgid(0, 0)               = 0
[pid  5354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5354] write(3, "1000", 4)         = 4
[pid  5354] close(3)                    = 0
[pid  5354] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5354] memfd_create("syzkaller", 0) = 3
[pid  5354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5354] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5354] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5354] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5354] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5354] close(3)                    = 0
[pid  5354] mkdir("./file0", 0777)      = 0
[pid  5354] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5354] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5354] chdir("./file0")            = 0
[pid  5354] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5354] close(4)                    = 0
[pid  5354] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5354] exit_group(0)               = ?
[   92.367339][ T5354] loop0: detected capacity change from 0 to 2048
[   92.396519][ T5357] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5354] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5354, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./141/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./141/binderfs")                = 0
umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./141/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./141/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./141/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./141")                          = 0
mkdir("./142", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5358 attached
, child_tidptr=0x5555557e4650) = 5358
[pid  5358] set_robust_list(0x5555557e4660, 24) = 0
[pid  5358] chdir("./142")              = 0
[pid  5358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5358] setpgid(0, 0)               = 0
[pid  5358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5358] write(3, "1000", 4)         = 4
[pid  5358] close(3)                    = 0
[pid  5358] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5358] memfd_create("syzkaller", 0) = 3
[pid  5358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5358] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5358] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5358] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5358] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5358] close(3)                    = 0
[pid  5358] mkdir("./file0", 0777)      = 0
[pid  5358] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5358] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5358] chdir("./file0")            = 0
[pid  5358] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5358] close(4)                    = 0
[pid  5358] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5358] exit_group(0)               = ?
[pid  5358] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5358, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   92.623065][ T5358] loop0: detected capacity change from 0 to 2048
[   92.642524][ T5359] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./142/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./142/binderfs")                = 0
umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./142/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./142/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./142/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./142")                          = 0
mkdir("./143", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5360 attached
, child_tidptr=0x5555557e4650) = 5360
[pid  5360] set_robust_list(0x5555557e4660, 24) = 0
[pid  5360] chdir("./143")              = 0
[pid  5360] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5360] setpgid(0, 0)               = 0
[pid  5360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5360] write(3, "1000", 4)         = 4
[pid  5360] close(3)                    = 0
[pid  5360] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5360] memfd_create("syzkaller", 0) = 3
[pid  5360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5360] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5360] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5360] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5360] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5360] close(3)                    = 0
[pid  5360] mkdir("./file0", 0777)      = 0
[pid  5360] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5360] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5360] chdir("./file0")            = 0
[pid  5360] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5360] close(4)                    = 0
[pid  5360] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5360] exit_group(0)               = ?
[pid  5360] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5360, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   92.839801][ T5360] loop0: detected capacity change from 0 to 2048
[   92.859353][ T5361] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./143/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./143/binderfs")                = 0
umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./143/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./143/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./143/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./143")                          = 0
mkdir("./144", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5362 attached
 <unfinished ...>
[pid  5362] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5362
[pid  5362] <... set_robust_list resumed>) = 0
[pid  5362] chdir("./144")              = 0
[pid  5362] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5362] setpgid(0, 0)               = 0
[pid  5362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5362] write(3, "1000", 4)         = 4
[pid  5362] close(3)                    = 0
[pid  5362] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5362] memfd_create("syzkaller", 0) = 3
[pid  5362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5362] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5362] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5362] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5362] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5362] close(3)                    = 0
[pid  5362] mkdir("./file0", 0777)      = 0
[pid  5362] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5362] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5362] chdir("./file0")            = 0
[pid  5362] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5362] close(4)                    = 0
[pid  5362] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5362] exit_group(0)               = ?
[pid  5362] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5362, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
[   93.116214][ T5362] loop0: detected capacity change from 0 to 2048
[   93.129723][ T5363] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./144/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./144/binderfs")                = 0
umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./144/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./144/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./144/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./144")                          = 0
mkdir("./145", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5365 attached
, child_tidptr=0x5555557e4650) = 5365
[pid  5365] set_robust_list(0x5555557e4660, 24) = 0
[pid  5365] chdir("./145")              = 0
[pid  5365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5365] setpgid(0, 0)               = 0
[pid  5365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5365] write(3, "1000", 4)         = 4
[pid  5365] close(3)                    = 0
[pid  5365] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5365] memfd_create("syzkaller", 0) = 3
[pid  5365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5365] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5365] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5365] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5365] close(3)                    = 0
[pid  5365] mkdir("./file0", 0777)      = 0
[pid  5365] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5365] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5365] chdir("./file0")            = 0
[pid  5365] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5365] close(4)                    = 0
[pid  5365] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5365] exit_group(0)               = ?
[pid  5365] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5365, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./145/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./145/binderfs")                = 0
[   93.323187][ T5365] loop0: detected capacity change from 0 to 2048
[   93.347518][ T5366] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./145/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./145/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./145/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./145")                          = 0
mkdir("./146", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5367 attached
, child_tidptr=0x5555557e4650) = 5367
[pid  5367] set_robust_list(0x5555557e4660, 24) = 0
[pid  5367] chdir("./146")              = 0
[pid  5367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5367] setpgid(0, 0)               = 0
[pid  5367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5367] write(3, "1000", 4)         = 4
[pid  5367] close(3)                    = 0
[pid  5367] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5367] memfd_create("syzkaller", 0) = 3
[pid  5367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5367] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5367] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5367] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5367] close(3)                    = 0
[pid  5367] mkdir("./file0", 0777)      = 0
[pid  5367] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5367] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5367] chdir("./file0")            = 0
[pid  5367] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5367] close(4)                    = 0
[pid  5367] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5367] exit_group(0)               = ?
[pid  5367] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5367, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   93.555965][ T5367] loop0: detected capacity change from 0 to 2048
[   93.576391][ T5368] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./146/binderfs")                = 0
umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./146/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./146/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./146/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./146")                          = 0
mkdir("./147", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5369 attached
 <unfinished ...>
[pid  5369] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5369
[pid  5369] <... set_robust_list resumed>) = 0
[pid  5369] chdir("./147")              = 0
[pid  5369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5369] setpgid(0, 0)               = 0
[pid  5369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5369] write(3, "1000", 4)         = 4
[pid  5369] close(3)                    = 0
[pid  5369] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5369] memfd_create("syzkaller", 0) = 3
[pid  5369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5369] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5369] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5369] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5369] close(3)                    = 0
[pid  5369] mkdir("./file0", 0777)      = 0
[pid  5369] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5369] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5369] chdir("./file0")            = 0
[pid  5369] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5369] close(4)                    = 0
[pid  5369] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5369] exit_group(0)               = ?
[pid  5369] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5369, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   93.792591][ T5369] loop0: detected capacity change from 0 to 2048
[   93.813206][ T5370] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./147/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./147/binderfs")                = 0
umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./147/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./147/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./147/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./147")                          = 0
mkdir("./148", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5371 attached
, child_tidptr=0x5555557e4650) = 5371
[pid  5371] set_robust_list(0x5555557e4660, 24) = 0
[pid  5371] chdir("./148")              = 0
[pid  5371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5371] setpgid(0, 0)               = 0
[pid  5371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5371] write(3, "1000", 4)         = 4
[pid  5371] close(3)                    = 0
[pid  5371] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5371] memfd_create("syzkaller", 0) = 3
[pid  5371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5371] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5371] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5371] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5371] close(3)                    = 0
[pid  5371] mkdir("./file0", 0777)      = 0
[pid  5371] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5371] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5371] chdir("./file0")            = 0
[pid  5371] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5371] close(4)                    = 0
[pid  5371] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5371] exit_group(0)               = ?
[pid  5371] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5371, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./148/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./148/binderfs")                = 0
[   93.980768][ T5371] loop0: detected capacity change from 0 to 2048
[   94.005253][ T5372] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./148/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./148/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./148/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./148")                          = 0
mkdir("./149", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5373 attached
, child_tidptr=0x5555557e4650) = 5373
[pid  5373] set_robust_list(0x5555557e4660, 24) = 0
[pid  5373] chdir("./149")              = 0
[pid  5373] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5373] setpgid(0, 0)               = 0
[pid  5373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5373] write(3, "1000", 4)         = 4
[pid  5373] close(3)                    = 0
[pid  5373] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5373] memfd_create("syzkaller", 0) = 3
[pid  5373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5373] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5373] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5373] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5373] close(3)                    = 0
[pid  5373] mkdir("./file0", 0777)      = 0
[pid  5373] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5373] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5373] chdir("./file0")            = 0
[pid  5373] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5373] close(4)                    = 0
[pid  5373] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5373] exit_group(0)               = ?
[pid  5373] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5373, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./149/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./149/binderfs")                = 0
[   94.195304][ T5373] loop0: detected capacity change from 0 to 2048
[   94.215526][ T5374] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./149/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./149/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./149/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./149")                          = 0
mkdir("./150", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5375 attached
, child_tidptr=0x5555557e4650) = 5375
[pid  5375] set_robust_list(0x5555557e4660, 24) = 0
[pid  5375] chdir("./150")              = 0
[pid  5375] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5375] setpgid(0, 0)               = 0
[pid  5375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5375] write(3, "1000", 4)         = 4
[pid  5375] close(3)                    = 0
[pid  5375] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5375] memfd_create("syzkaller", 0) = 3
[pid  5375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5375] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5375] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5375] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5375] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5375] close(3)                    = 0
[pid  5375] mkdir("./file0", 0777)      = 0
[pid  5375] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5375] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5375] chdir("./file0")            = 0
[pid  5375] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5375] close(4)                    = 0
[pid  5375] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5375] exit_group(0)               = ?
[pid  5375] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5375, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   94.409665][ T5375] loop0: detected capacity change from 0 to 2048
[   94.431078][ T5376] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./150/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./150/binderfs")                = 0
umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./150/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./150/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./150/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./150")                          = 0
mkdir("./151", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5377 attached
, child_tidptr=0x5555557e4650) = 5377
[pid  5377] set_robust_list(0x5555557e4660, 24) = 0
[pid  5377] chdir("./151")              = 0
[pid  5377] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5377] setpgid(0, 0)               = 0
[pid  5377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5377] write(3, "1000", 4)         = 4
[pid  5377] close(3)                    = 0
[pid  5377] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5377] memfd_create("syzkaller", 0) = 3
[pid  5377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5377] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5377] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5377] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5377] close(3)                    = 0
[pid  5377] mkdir("./file0", 0777)      = 0
[pid  5377] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5377] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5377] chdir("./file0")            = 0
[pid  5377] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5377] close(4)                    = 0
[   94.659092][ T5377] loop0: detected capacity change from 0 to 2048
[   94.680013][ T5378] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5377] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5377] exit_group(0)               = ?
[pid  5377] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5377, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./151/binderfs")                = 0
[   94.710770][ T5377] bio_check_eod: 33 callbacks suppressed
[   94.710782][ T5377] syz-executor276: attempt to access beyond end of device
[   94.710782][ T5377] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./151/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./151/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./151/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./151")                          = 0
mkdir("./152", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5379 attached
, child_tidptr=0x5555557e4650) = 5379
[pid  5379] set_robust_list(0x5555557e4660, 24) = 0
[pid  5379] chdir("./152")              = 0
[pid  5379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5379] setpgid(0, 0)               = 0
[pid  5379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5379] write(3, "1000", 4)         = 4
[pid  5379] close(3)                    = 0
[pid  5379] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5379] memfd_create("syzkaller", 0) = 3
[pid  5379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5379] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5379] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5379] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5379] close(3)                    = 0
[pid  5379] mkdir("./file0", 0777)      = 0
[pid  5379] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5379] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5379] chdir("./file0")            = 0
[pid  5379] ioctl(4, LOOP_CLR_FD)       = 0
[   94.913235][ T5379] loop0: detected capacity change from 0 to 2048
[   94.933942][ T5380] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5379] close(4)                    = 0
[pid  5379] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5379] exit_group(0)               = ?
[pid  5379] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5379, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./152/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./152/binderfs")                = 0
[   94.972767][ T5379] syz-executor276: attempt to access beyond end of device
[   94.972767][ T5379] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   94.989294][ T5379] syz-executor276: attempt to access beyond end of device
[   94.989294][ T5379] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./152/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./152/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./152/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./152")                          = 0
mkdir("./153", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5381 attached
, child_tidptr=0x5555557e4650) = 5381
[pid  5381] set_robust_list(0x5555557e4660, 24) = 0
[pid  5381] chdir("./153")              = 0
[pid  5381] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5381] setpgid(0, 0)               = 0
[pid  5381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5381] write(3, "1000", 4)         = 4
[pid  5381] close(3)                    = 0
[pid  5381] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5381] memfd_create("syzkaller", 0) = 3
[pid  5381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5381] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5381] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5381] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5381] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5381] close(3)                    = 0
[pid  5381] mkdir("./file0", 0777)      = 0
[pid  5381] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5381] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5381] chdir("./file0")            = 0
[pid  5381] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5381] close(4)                    = 0
[   95.215586][ T5381] loop0: detected capacity change from 0 to 2048
[   95.235701][ T5382] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5381] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5381] exit_group(0)               = ?
[pid  5381] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5381, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./153/binderfs")                = 0
[   95.279298][ T5381] syz-executor276: attempt to access beyond end of device
[   95.279298][ T5381] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   95.296322][ T5381] syz-executor276: attempt to access beyond end of device
[   95.296322][ T5381] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./153/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./153/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./153/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./153")                          = 0
mkdir("./154", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5383 attached
 <unfinished ...>
[pid  5383] set_robust_list(0x5555557e4660, 24) = 0
[pid  5383] chdir("./154")              = 0
[pid  5383] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5383] setpgid(0, 0 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5383
[pid  5383] <... setpgid resumed>)      = 0
[pid  5383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5383] write(3, "1000", 4)         = 4
[pid  5383] close(3)                    = 0
[pid  5383] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5383] memfd_create("syzkaller", 0) = 3
[pid  5383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5383] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5383] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5383] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5383] close(3)                    = 0
[pid  5383] mkdir("./file0", 0777)      = 0
[pid  5383] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5383] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5383] chdir("./file0")            = 0
[pid  5383] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5383] close(4)                    = 0
[   95.516033][ T5383] loop0: detected capacity change from 0 to 2048
[   95.535118][ T5384] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5383] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5383] exit_group(0)               = ?
[pid  5383] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5383, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} ---
umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   95.564127][ T5383] syz-executor276: attempt to access beyond end of device
[   95.564127][ T5383] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   95.581936][ T5383] syz-executor276: attempt to access beyond end of device
[   95.581936][ T5383] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./154/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./154/binderfs")                = 0
umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./154/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./154/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./154/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./154")                          = 0
mkdir("./155", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5385 attached
, child_tidptr=0x5555557e4650) = 5385
[pid  5385] set_robust_list(0x5555557e4660, 24) = 0
[pid  5385] chdir("./155")              = 0
[pid  5385] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5385] setpgid(0, 0)               = 0
[pid  5385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5385] write(3, "1000", 4)         = 4
[pid  5385] close(3)                    = 0
[pid  5385] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5385] memfd_create("syzkaller", 0) = 3
[pid  5385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5385] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5385] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5385] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5385] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5385] close(3)                    = 0
[pid  5385] mkdir("./file0", 0777)      = 0
[pid  5385] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5385] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5385] chdir("./file0")            = 0
[pid  5385] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5385] close(4)                    = 0
[   95.806400][ T5385] loop0: detected capacity change from 0 to 2048
[   95.835942][ T5386] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5385] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5385] exit_group(0)               = ?
[pid  5385] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5385, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./155/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./155/binderfs")                = 0
umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
[   95.864467][ T5385] syz-executor276: attempt to access beyond end of device
[   95.864467][ T5385] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   95.881804][ T5385] syz-executor276: attempt to access beyond end of device
[   95.881804][ T5385] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./155/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./155/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./155/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./155")                          = 0
mkdir("./156", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5387 attached
, child_tidptr=0x5555557e4650) = 5387
[pid  5387] set_robust_list(0x5555557e4660, 24) = 0
[pid  5387] chdir("./156")              = 0
[pid  5387] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5387] setpgid(0, 0)               = 0
[pid  5387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5387] write(3, "1000", 4)         = 4
[pid  5387] close(3)                    = 0
[pid  5387] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5387] memfd_create("syzkaller", 0) = 3
[pid  5387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5387] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5387] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5387] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5387] close(3)                    = 0
[pid  5387] mkdir("./file0", 0777)      = 0
[pid  5387] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5387] chdir("./file0")            = 0
[pid  5387] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5387] close(4)                    = 0
[pid  5387] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5387] exit_group(0)               = ?
[pid  5387] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5387, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./156/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./156/binderfs")                = 0
[   96.075565][ T5387] loop0: detected capacity change from 0 to 2048
[   96.089630][ T5388] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   96.102173][ T5387] syz-executor276: attempt to access beyond end of device
[   96.102173][ T5387] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./156/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./156/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./156/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./156")                          = 0
mkdir("./157", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5389 attached
, child_tidptr=0x5555557e4650) = 5389
[pid  5389] set_robust_list(0x5555557e4660, 24) = 0
[pid  5389] chdir("./157")              = 0
[pid  5389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5389] setpgid(0, 0)               = 0
[pid  5389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5389] write(3, "1000", 4)         = 4
[pid  5389] close(3)                    = 0
[pid  5389] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5389] memfd_create("syzkaller", 0) = 3
[pid  5389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5389] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5389] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5389] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5389] close(3)                    = 0
[pid  5389] mkdir("./file0", 0777)      = 0
[pid  5389] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5389] chdir("./file0")            = 0
[pid  5389] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5389] close(4)                    = 0
[pid  5389] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5389] exit_group(0)               = ?
[pid  5389] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5389, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   96.295215][ T5389] loop0: detected capacity change from 0 to 2048
[   96.324506][ T5390] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(AT_FDCWD, "./157/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./157/binderfs")                = 0
umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./157/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./157/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./157/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./157")                          = 0
mkdir("./158", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5391 attached
, child_tidptr=0x5555557e4650) = 5391
[pid  5391] set_robust_list(0x5555557e4660, 24) = 0
[pid  5391] chdir("./158")              = 0
[pid  5391] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5391] setpgid(0, 0)               = 0
[pid  5391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5391] write(3, "1000", 4)         = 4
[pid  5391] close(3)                    = 0
[pid  5391] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5391] memfd_create("syzkaller", 0) = 3
[pid  5391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5391] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5391] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5391] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5391] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5391] close(3)                    = 0
[pid  5391] mkdir("./file0", 0777)      = 0
[pid  5391] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5391] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5391] chdir("./file0")            = 0
[pid  5391] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5391] close(4)                    = 0
[pid  5391] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5391] exit_group(0)               = ?
[pid  5391] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5391, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   96.548646][ T5391] loop0: detected capacity change from 0 to 2048
[   96.567284][ T5392] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./158/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./158/binderfs")                = 0
umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./158/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./158/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./158/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./158")                          = 0
mkdir("./159", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5393 attached
, child_tidptr=0x5555557e4650) = 5393
[pid  5393] set_robust_list(0x5555557e4660, 24) = 0
[pid  5393] chdir("./159")              = 0
[pid  5393] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5393] setpgid(0, 0)               = 0
[pid  5393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5393] write(3, "1000", 4)         = 4
[pid  5393] close(3)                    = 0
[pid  5393] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5393] memfd_create("syzkaller", 0) = 3
[pid  5393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5393] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5393] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5393] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5393] close(3)                    = 0
[pid  5393] mkdir("./file0", 0777)      = 0
[pid  5393] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5393] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5393] chdir("./file0")            = 0
[pid  5393] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5393] close(4)                    = 0
[pid  5393] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5393] exit_group(0)               = ?
[pid  5393] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5393, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./159/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./159/binderfs")                = 0
[   96.806799][ T5393] loop0: detected capacity change from 0 to 2048
[   96.826002][ T5394] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./159/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./159/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./159/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./159")                          = 0
mkdir("./160", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557e4650) = 5395
./strace-static-x86_64: Process 5395 attached
[pid  5395] set_robust_list(0x5555557e4660, 24) = 0
[pid  5395] chdir("./160")              = 0
[pid  5395] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5395] setpgid(0, 0)               = 0
[pid  5395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5395] write(3, "1000", 4)         = 4
[pid  5395] close(3)                    = 0
[pid  5395] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5395] memfd_create("syzkaller", 0) = 3
[pid  5395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5395] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5395] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5395] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5395] close(3)                    = 0
[pid  5395] mkdir("./file0", 0777)      = 0
[pid  5395] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5395] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5395] chdir("./file0")            = 0
[pid  5395] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5395] close(4)                    = 0
[pid  5395] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5395] exit_group(0)               = ?
[pid  5395] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5395, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   96.992238][ T5395] loop0: detected capacity change from 0 to 2048
[   97.006090][ T5396] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./160/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./160/binderfs")                = 0
umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./160/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./160/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./160/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./160")                          = 0
mkdir("./161", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5397 attached
, child_tidptr=0x5555557e4650) = 5397
[pid  5397] set_robust_list(0x5555557e4660, 24) = 0
[pid  5397] chdir("./161")              = 0
[pid  5397] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5397] setpgid(0, 0)               = 0
[pid  5397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5397] write(3, "1000", 4)         = 4
[pid  5397] close(3)                    = 0
[pid  5397] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5397] memfd_create("syzkaller", 0) = 3
[pid  5397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5397] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5397] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5397] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5397] close(3)                    = 0
[pid  5397] mkdir("./file0", 0777)      = 0
[pid  5397] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5397] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5397] chdir("./file0")            = 0
[pid  5397] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5397] close(4)                    = 0
[pid  5397] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5397] exit_group(0)               = ?
[pid  5397] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5397, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
[   97.226329][ T5397] loop0: detected capacity change from 0 to 2048
[   97.245769][ T5398] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./161/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./161/binderfs")                = 0
umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./161/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./161/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./161/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./161")                          = 0
mkdir("./162", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5399 attached
, child_tidptr=0x5555557e4650) = 5399
[pid  5399] set_robust_list(0x5555557e4660, 24) = 0
[pid  5399] chdir("./162")              = 0
[pid  5399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5399] setpgid(0, 0)               = 0
[pid  5399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5399] write(3, "1000", 4)         = 4
[pid  5399] close(3)                    = 0
[pid  5399] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5399] memfd_create("syzkaller", 0) = 3
[pid  5399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5399] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5399] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5399] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5399] close(3)                    = 0
[pid  5399] mkdir("./file0", 0777)      = 0
[pid  5399] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5399] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5399] chdir("./file0")            = 0
[pid  5399] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5399] close(4)                    = 0
[pid  5399] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5399] exit_group(0)               = ?
[pid  5399] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5399, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
[   97.479141][ T5399] loop0: detected capacity change from 0 to 2048
[   97.498882][ T5400] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./162/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./162/binderfs")                = 0
umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./162/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./162/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./162/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./162")                          = 0
mkdir("./163", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557e4650) = 5401
./strace-static-x86_64: Process 5401 attached
[pid  5401] set_robust_list(0x5555557e4660, 24) = 0
[pid  5401] chdir("./163")              = 0
[pid  5401] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5401] setpgid(0, 0)               = 0
[pid  5401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5401] write(3, "1000", 4)         = 4
[pid  5401] close(3)                    = 0
[pid  5401] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5401] memfd_create("syzkaller", 0) = 3
[pid  5401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5401] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5401] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5401] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5401] close(3)                    = 0
[pid  5401] mkdir("./file0", 0777)      = 0
[pid  5401] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5401] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5401] chdir("./file0")            = 0
[pid  5401] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5401] close(4)                    = 0
[pid  5401] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5401] exit_group(0)               = ?
[pid  5401] +++ exited with 0 +++
[   97.693131][ T5401] loop0: detected capacity change from 0 to 2048
[   97.706797][ T5402] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5401, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./163/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./163/binderfs")                = 0
umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./163/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./163/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./163/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./163")                          = 0
mkdir("./164", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557e4650) = 5403
./strace-static-x86_64: Process 5403 attached
[pid  5403] set_robust_list(0x5555557e4660, 24) = 0
[pid  5403] chdir("./164")              = 0
[pid  5403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5403] setpgid(0, 0)               = 0
[pid  5403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5403] write(3, "1000", 4)         = 4
[pid  5403] close(3)                    = 0
[pid  5403] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5403] memfd_create("syzkaller", 0) = 3
[pid  5403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5403] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5403] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5403] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5403] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5403] close(3)                    = 0
[pid  5403] mkdir("./file0", 0777)      = 0
[pid  5403] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5403] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5403] chdir("./file0")            = 0
[pid  5403] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5403] close(4)                    = 0
[pid  5403] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5403] exit_group(0)               = ?
[pid  5403] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5403, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./164/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./164/binderfs")                = 0
[   97.917345][ T5403] loop0: detected capacity change from 0 to 2048
[   97.938346][ T5404] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./164/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./164/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./164/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./164")                          = 0
mkdir("./165", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5405 attached
, child_tidptr=0x5555557e4650) = 5405
[pid  5405] set_robust_list(0x5555557e4660, 24) = 0
[pid  5405] chdir("./165")              = 0
[pid  5405] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5405] setpgid(0, 0)               = 0
[pid  5405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5405] write(3, "1000", 4)         = 4
[pid  5405] close(3)                    = 0
[pid  5405] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5405] memfd_create("syzkaller", 0) = 3
[pid  5405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5405] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5405] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5405] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5405] close(3)                    = 0
[pid  5405] mkdir("./file0", 0777)      = 0
[pid  5405] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5405] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5405] chdir("./file0")            = 0
[pid  5405] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5405] close(4)                    = 0
[pid  5405] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5405] exit_group(0)               = ?
[pid  5405] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5405, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   98.075273][ T5405] loop0: detected capacity change from 0 to 2048
[   98.105160][ T5406] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./165/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./165/binderfs")                = 0
umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./165/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./165/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./165/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./165")                          = 0
mkdir("./166", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5407 attached
, child_tidptr=0x5555557e4650) = 5407
[pid  5407] set_robust_list(0x5555557e4660, 24) = 0
[pid  5407] chdir("./166")              = 0
[pid  5407] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5407] setpgid(0, 0)               = 0
[pid  5407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5407] write(3, "1000", 4)         = 4
[pid  5407] close(3)                    = 0
[pid  5407] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5407] memfd_create("syzkaller", 0) = 3
[pid  5407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5407] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5407] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5407] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5407] close(3)                    = 0
[pid  5407] mkdir("./file0", 0777)      = 0
[pid  5407] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5407] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5407] chdir("./file0")            = 0
[pid  5407] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5407] close(4)                    = 0
[pid  5407] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5407] exit_group(0)               = ?
[pid  5407] +++ exited with 0 +++
[   98.297911][ T5407] loop0: detected capacity change from 0 to 2048
[   98.312430][ T5408] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5407, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./166/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./166/binderfs")                = 0
umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./166/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./166/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./166/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./166")                          = 0
mkdir("./167", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557e4650) = 5409
./strace-static-x86_64: Process 5409 attached
[pid  5409] set_robust_list(0x5555557e4660, 24) = 0
[pid  5409] chdir("./167")              = 0
[pid  5409] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5409] setpgid(0, 0)               = 0
[pid  5409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5409] write(3, "1000", 4)         = 4
[pid  5409] close(3)                    = 0
[pid  5409] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5409] memfd_create("syzkaller", 0) = 3
[pid  5409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5409] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5409] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5409] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5409] close(3)                    = 0
[pid  5409] mkdir("./file0", 0777)      = 0
[pid  5409] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5409] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5409] chdir("./file0")            = 0
[pid  5409] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5409] close(4)                    = 0
[pid  5409] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5409] exit_group(0)               = ?
[pid  5409] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5409, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./167/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./167/binderfs")                = 0
[   98.493684][ T5409] loop0: detected capacity change from 0 to 2048
[   98.512981][ T5410] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./167/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./167/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./167/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./167")                          = 0
mkdir("./168", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5411 attached
, child_tidptr=0x5555557e4650) = 5411
[pid  5411] set_robust_list(0x5555557e4660, 24) = 0
[pid  5411] chdir("./168")              = 0
[pid  5411] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5411] setpgid(0, 0)               = 0
[pid  5411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5411] write(3, "1000", 4)         = 4
[pid  5411] close(3)                    = 0
[pid  5411] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5411] memfd_create("syzkaller", 0) = 3
[pid  5411] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5411] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5411] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5411] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5411] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5411] close(3)                    = 0
[pid  5411] mkdir("./file0", 0777)      = 0
[pid  5411] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5411] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5411] chdir("./file0")            = 0
[pid  5411] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5411] close(4)                    = 0
[pid  5411] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5411] exit_group(0)               = ?
[pid  5411] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5411, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./168/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./168/binderfs")                = 0
[   98.743537][ T5411] loop0: detected capacity change from 0 to 2048
[   98.758817][ T5412] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./168/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./168/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./168/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./168")                          = 0
mkdir("./169", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5413 attached
, child_tidptr=0x5555557e4650) = 5413
[pid  5413] set_robust_list(0x5555557e4660, 24) = 0
[pid  5413] chdir("./169")              = 0
[pid  5413] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5413] setpgid(0, 0)               = 0
[pid  5413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5413] write(3, "1000", 4)         = 4
[pid  5413] close(3)                    = 0
[pid  5413] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5413] memfd_create("syzkaller", 0) = 3
[pid  5413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5413] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5413] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5413] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5413] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5413] close(3)                    = 0
[pid  5413] mkdir("./file0", 0777)      = 0
[pid  5413] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5413] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5413] chdir("./file0")            = 0
[pid  5413] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5413] close(4)                    = 0
[pid  5413] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5413] exit_group(0)               = ?
[pid  5413] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5413, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   98.913231][ T5413] loop0: detected capacity change from 0 to 2048
[   98.934116][ T5414] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./169/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./169/binderfs")                = 0
umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./169/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./169/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./169/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./169")                          = 0
mkdir("./170", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5415 attached
, child_tidptr=0x5555557e4650) = 5415
[pid  5415] set_robust_list(0x5555557e4660, 24) = 0
[pid  5415] chdir("./170")              = 0
[pid  5415] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5415] setpgid(0, 0)               = 0
[pid  5415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5415] write(3, "1000", 4)         = 4
[pid  5415] close(3)                    = 0
[pid  5415] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5415] memfd_create("syzkaller", 0) = 3
[pid  5415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5415] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5415] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5415] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5415] close(3)                    = 0
[pid  5415] mkdir("./file0", 0777)      = 0
[pid  5415] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5415] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5415] chdir("./file0")            = 0
[pid  5415] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5415] close(4)                    = 0
[pid  5415] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5415] exit_group(0)               = ?
[pid  5415] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5415, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./170/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./170/binderfs")                = 0
[   99.176196][ T5415] loop0: detected capacity change from 0 to 2048
[   99.196256][ T5416] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./170/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./170/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./170/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./170")                          = 0
mkdir("./171", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5417 attached
 <unfinished ...>
[pid  5417] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5417
[pid  5417] <... set_robust_list resumed>) = 0
[pid  5417] chdir("./171")              = 0
[pid  5417] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5417] setpgid(0, 0)               = 0
[pid  5417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5417] write(3, "1000", 4)         = 4
[pid  5417] close(3)                    = 0
[pid  5417] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5417] memfd_create("syzkaller", 0) = 3
[pid  5417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5417] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5417] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5417] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5417] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5417] close(3)                    = 0
[pid  5417] mkdir("./file0", 0777)      = 0
[pid  5417] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5417] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5417] chdir("./file0")            = 0
[pid  5417] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5417] close(4)                    = 0
[pid  5417] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5417] exit_group(0)               = ?
[pid  5417] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5417, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./171/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./171/binderfs")                = 0
[   99.402507][ T5417] loop0: detected capacity change from 0 to 2048
[   99.421648][ T5418] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./171/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./171/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./171/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./171")                          = 0
mkdir("./172", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557e4650) = 5419
./strace-static-x86_64: Process 5419 attached
[pid  5419] set_robust_list(0x5555557e4660, 24) = 0
[pid  5419] chdir("./172")              = 0
[pid  5419] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5419] setpgid(0, 0)               = 0
[pid  5419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5419] write(3, "1000", 4)         = 4
[pid  5419] close(3)                    = 0
[pid  5419] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5419] memfd_create("syzkaller", 0) = 3
[pid  5419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5419] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5419] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5419] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5419] close(3)                    = 0
[pid  5419] mkdir("./file0", 0777)      = 0
[pid  5419] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5419] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5419] chdir("./file0")            = 0
[pid  5419] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5419] close(4)                    = 0
[pid  5419] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5419] exit_group(0)               = ?
[pid  5419] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5419, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   99.611093][ T5419] loop0: detected capacity change from 0 to 2048
[   99.629300][ T5420] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./172/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./172/binderfs")                = 0
umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./172/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./172/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./172/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./172")                          = 0
mkdir("./173", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5421 attached
 <unfinished ...>
[pid  5421] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5421
[pid  5421] <... set_robust_list resumed>) = 0
[pid  5421] chdir("./173")              = 0
[pid  5421] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5421] setpgid(0, 0)               = 0
[pid  5421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5421] write(3, "1000", 4)         = 4
[pid  5421] close(3)                    = 0
[pid  5421] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5421] memfd_create("syzkaller", 0) = 3
[pid  5421] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5421] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5421] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5421] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5421] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5421] close(3)                    = 0
[pid  5421] mkdir("./file0", 0777)      = 0
[pid  5421] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5421] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5421] chdir("./file0")            = 0
[pid  5421] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5421] close(4)                    = 0
[   99.887146][ T5421] loop0: detected capacity change from 0 to 2048
[   99.916970][ T5422] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5421] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5421] exit_group(0)               = ?
[pid  5421] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5421, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./173/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./173/binderfs")                = 0
[   99.942116][ T5421] bio_check_eod: 33 callbacks suppressed
[   99.942128][ T5421] syz-executor276: attempt to access beyond end of device
[   99.942128][ T5421] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[   99.964379][ T5421] syz-executor276: attempt to access beyond end of device
[   99.964379][ T5421] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./173/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./173/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./173/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./173")                          = 0
mkdir("./174", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5423 attached
 <unfinished ...>
[pid  5423] set_robust_list(0x5555557e4660, 24) = 0
[pid  5423] chdir("./174")              = 0
[pid  5423] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5423] setpgid(0, 0)               = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5423
[pid  5423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5423] write(3, "1000", 4)         = 4
[pid  5423] close(3)                    = 0
[pid  5423] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5423] memfd_create("syzkaller", 0) = 3
[pid  5423] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5423] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5423] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5423] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5423] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5423] close(3)                    = 0
[pid  5423] mkdir("./file0", 0777)      = 0
[pid  5423] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5423] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5423] chdir("./file0")            = 0
[pid  5423] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5423] close(4)                    = 0
[  100.174430][ T5423] loop0: detected capacity change from 0 to 2048
[  100.188492][ T5424] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  100.207283][ T5423] syz-executor276: attempt to access beyond end of device
[  100.207283][ T5423] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[pid  5423] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5423] exit_group(0)               = ?
[pid  5423] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5423, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./174/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./174/binderfs")                = 0
umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./174/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[  100.223592][ T5423] syz-executor276: attempt to access beyond end of device
[  100.223592][ T5423] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
openat(AT_FDCWD, "./174/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./174/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./174")                          = 0
mkdir("./175", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5425 attached
 <unfinished ...>
[pid  5425] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5425
[pid  5425] <... set_robust_list resumed>) = 0
[pid  5425] chdir("./175")              = 0
[pid  5425] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5425] setpgid(0, 0)               = 0
[pid  5425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5425] write(3, "1000", 4)         = 4
[pid  5425] close(3)                    = 0
[pid  5425] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5425] memfd_create("syzkaller", 0) = 3
[pid  5425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5425] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5425] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5425] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5425] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5425] close(3)                    = 0
[pid  5425] mkdir("./file0", 0777)      = 0
[pid  5425] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5425] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5425] chdir("./file0")            = 0
[pid  5425] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5425] close(4)                    = 0
[  100.382843][ T5425] loop0: detected capacity change from 0 to 2048
[  100.396833][ T5426] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  100.419025][ T5425] syz-executor276: attempt to access beyond end of device
[pid  5425] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5425] exit_group(0)               = ?
[pid  5425] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5425, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./175/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./175/binderfs")                = 0
[  100.419025][ T5425] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[  100.435109][ T5425] syz-executor276: attempt to access beyond end of device
[  100.435109][ T5425] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./175/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./175/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./175/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./175")                          = 0
mkdir("./176", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5427 attached
 <unfinished ...>
[pid  5427] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5427
[pid  5427] <... set_robust_list resumed>) = 0
[pid  5427] chdir("./176")              = 0
[pid  5427] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5427] setpgid(0, 0)               = 0
[pid  5427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5427] write(3, "1000", 4)         = 4
[pid  5427] close(3)                    = 0
[pid  5427] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5427] memfd_create("syzkaller", 0) = 3
[pid  5427] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5427] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5427] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5427] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5427] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5427] close(3)                    = 0
[pid  5427] mkdir("./file0", 0777)      = 0
[pid  5427] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5427] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5427] chdir("./file0")            = 0
[pid  5427] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5427] close(4)                    = 0
[  100.590997][ T5427] loop0: detected capacity change from 0 to 2048
[  100.620657][ T5428] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5427] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5427] exit_group(0)               = ?
[pid  5427] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5427, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./176/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./176/binderfs")                = 0
[  100.640067][ T5427] syz-executor276: attempt to access beyond end of device
[  100.640067][ T5427] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[  100.656465][ T5427] syz-executor276: attempt to access beyond end of device
[  100.656465][ T5427] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./176/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./176/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./176/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./176")                          = 0
mkdir("./177", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5429 attached
, child_tidptr=0x5555557e4650) = 5429
[pid  5429] set_robust_list(0x5555557e4660, 24) = 0
[pid  5429] chdir("./177")              = 0
[pid  5429] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5429] setpgid(0, 0)               = 0
[pid  5429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5429] write(3, "1000", 4)         = 4
[pid  5429] close(3)                    = 0
[pid  5429] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5429] memfd_create("syzkaller", 0) = 3
[pid  5429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5429] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5429] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5429] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5429] close(3)                    = 0
[pid  5429] mkdir("./file0", 0777)      = 0
[pid  5429] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5429] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5429] chdir("./file0")            = 0
[pid  5429] ioctl(4, LOOP_CLR_FD)       = 0
[  100.848636][ T5429] loop0: detected capacity change from 0 to 2048
[  100.862470][ T5430] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5429] close(4)                    = 0
[pid  5429] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5429] exit_group(0)               = ?
[pid  5429] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5429, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} ---
umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./177/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./177/binderfs")                = 0
umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./177/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[  100.893698][ T5429] syz-executor276: attempt to access beyond end of device
[  100.893698][ T5429] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[  100.910711][ T5429] syz-executor276: attempt to access beyond end of device
[  100.910711][ T5429] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./177/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./177/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./177")                          = 0
mkdir("./178", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5431 attached
 <unfinished ...>
[pid  5431] set_robust_list(0x5555557e4660, 24) = 0
[pid  5431] chdir("./178")              = 0
[pid  5431] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5431
[pid  5431] setpgid(0, 0)               = 0
[pid  5431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5431] write(3, "1000", 4)         = 4
[pid  5431] close(3)                    = 0
[pid  5431] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5431] memfd_create("syzkaller", 0) = 3
[pid  5431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5431] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5431] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5431] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5431] close(3)                    = 0
[pid  5431] mkdir("./file0", 0777)      = 0
[pid  5431] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5431] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5431] chdir("./file0")            = 0
[pid  5431] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5431] close(4)                    = 0
[pid  5431] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5431] exit_group(0)               = ?
[pid  5431] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5431, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./178/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[  101.094775][ T5431] loop0: detected capacity change from 0 to 2048
[  101.113970][ T5432] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
unlink("./178/binderfs")                = 0
umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./178/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./178/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./178/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./178")                          = 0
mkdir("./179", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5433 attached
, child_tidptr=0x5555557e4650) = 5433
[pid  5433] set_robust_list(0x5555557e4660, 24) = 0
[pid  5433] chdir("./179")              = 0
[pid  5433] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5433] setpgid(0, 0)               = 0
[pid  5433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5433] write(3, "1000", 4)         = 4
[pid  5433] close(3)                    = 0
[pid  5433] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5433] memfd_create("syzkaller", 0) = 3
[pid  5433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5433] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5433] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5433] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5433] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5433] close(3)                    = 0
[pid  5433] mkdir("./file0", 0777)      = 0
[pid  5433] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5433] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5433] chdir("./file0")            = 0
[pid  5433] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5433] close(4)                    = 0
[pid  5433] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5433] exit_group(0)               = ?
[pid  5433] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5433, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
[  101.327017][ T5433] loop0: detected capacity change from 0 to 2048
[  101.347320][ T5434] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./179/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./179/binderfs")                = 0
umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./179/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./179/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./179/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./179")                          = 0
mkdir("./180", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5435 attached
, child_tidptr=0x5555557e4650) = 5435
[pid  5435] set_robust_list(0x5555557e4660, 24) = 0
[pid  5435] chdir("./180")              = 0
[pid  5435] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5435] setpgid(0, 0)               = 0
[pid  5435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5435] write(3, "1000", 4)         = 4
[pid  5435] close(3)                    = 0
[pid  5435] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5435] memfd_create("syzkaller", 0) = 3
[pid  5435] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5435] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5435] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5435] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5435] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5435] close(3)                    = 0
[pid  5435] mkdir("./file0", 0777)      = 0
[pid  5435] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5435] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5435] chdir("./file0")            = 0
[pid  5435] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5435] close(4)                    = 0
[pid  5435] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5435] exit_group(0)               = ?
[pid  5435] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5435, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./180/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./180/binderfs")                = 0
umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[  101.550249][ T5435] loop0: detected capacity change from 0 to 2048
[  101.571366][ T5436] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(AT_FDCWD, "./180/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./180/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./180/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./180")                          = 0
mkdir("./181", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557e4650) = 5437
./strace-static-x86_64: Process 5437 attached
[pid  5437] set_robust_list(0x5555557e4660, 24) = 0
[pid  5437] chdir("./181")              = 0
[pid  5437] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5437] setpgid(0, 0)               = 0
[pid  5437] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5437] write(3, "1000", 4)         = 4
[pid  5437] close(3)                    = 0
[pid  5437] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5437] memfd_create("syzkaller", 0) = 3
[pid  5437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5437] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5437] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5437] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5437] close(3)                    = 0
[pid  5437] mkdir("./file0", 0777)      = 0
[pid  5437] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5437] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5437] chdir("./file0")            = 0
[pid  5437] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5437] close(4)                    = 0
[pid  5437] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5437] exit_group(0)               = ?
[pid  5437] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5437, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
[  101.734691][ T5437] loop0: detected capacity change from 0 to 2048
[  101.753767][ T5438] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./181/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./181/binderfs")                = 0
umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./181/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./181/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./181/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./181")                          = 0
mkdir("./182", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5439 attached
 <unfinished ...>
[pid  5439] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5439
[pid  5439] <... set_robust_list resumed>) = 0
[pid  5439] chdir("./182")              = 0
[pid  5439] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5439] setpgid(0, 0)               = 0
[pid  5439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5439] write(3, "1000", 4)         = 4
[pid  5439] close(3)                    = 0
[pid  5439] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5439] memfd_create("syzkaller", 0) = 3
[pid  5439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5439] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5439] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5439] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5439] close(3)                    = 0
[pid  5439] mkdir("./file0", 0777)      = 0
[pid  5439] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5439] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5439] chdir("./file0")            = 0
[pid  5439] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5439] close(4)                    = 0
[pid  5439] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5439] exit_group(0)               = ?
[pid  5439] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5439, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  101.956032][ T5439] loop0: detected capacity change from 0 to 2048
[  101.974525][ T5440] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./182/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./182/binderfs")                = 0
umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./182/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./182/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./182/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./182")                          = 0
mkdir("./183", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5441 attached
 <unfinished ...>
[pid  5441] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5441
[pid  5441] <... set_robust_list resumed>) = 0
[pid  5441] chdir("./183")              = 0
[pid  5441] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5441] setpgid(0, 0)               = 0
[pid  5441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5441] write(3, "1000", 4)         = 4
[pid  5441] close(3)                    = 0
[pid  5441] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5441] memfd_create("syzkaller", 0) = 3
[pid  5441] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5441] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5441] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5441] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5441] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5441] close(3)                    = 0
[pid  5441] mkdir("./file0", 0777)      = 0
[pid  5441] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5441] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5441] chdir("./file0")            = 0
[pid  5441] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5441] close(4)                    = 0
[pid  5441] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5441] exit_group(0)               = ?
[pid  5441] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5441, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[  102.187985][ T5441] loop0: detected capacity change from 0 to 2048
[  102.202391][ T5442] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./183/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./183/binderfs")                = 0
umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./183/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./183/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./183/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./183")                          = 0
mkdir("./184", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5443 attached
, child_tidptr=0x5555557e4650) = 5443
[pid  5443] set_robust_list(0x5555557e4660, 24) = 0
[pid  5443] chdir("./184")              = 0
[pid  5443] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5443] setpgid(0, 0)               = 0
[pid  5443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5443] write(3, "1000", 4)         = 4
[pid  5443] close(3)                    = 0
[pid  5443] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5443] memfd_create("syzkaller", 0) = 3
[pid  5443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5443] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5443] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5443] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5443] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5443] close(3)                    = 0
[pid  5443] mkdir("./file0", 0777)      = 0
[pid  5443] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5443] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5443] chdir("./file0")            = 0
[pid  5443] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5443] close(4)                    = 0
[pid  5443] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5443] exit_group(0)               = ?
[pid  5443] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5443, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[  102.367920][ T5443] loop0: detected capacity change from 0 to 2048
[  102.386281][ T5444] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./184/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./184/binderfs")                = 0
umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./184/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./184/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./184/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./184")                          = 0
mkdir("./185", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5445 attached
, child_tidptr=0x5555557e4650) = 5445
[pid  5445] set_robust_list(0x5555557e4660, 24) = 0
[pid  5445] chdir("./185")              = 0
[pid  5445] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5445] setpgid(0, 0)               = 0
[pid  5445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5445] write(3, "1000", 4)         = 4
[pid  5445] close(3)                    = 0
[pid  5445] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5445] memfd_create("syzkaller", 0) = 3
[pid  5445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5445] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5445] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5445] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5445] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5445] close(3)                    = 0
[pid  5445] mkdir("./file0", 0777)      = 0
[pid  5445] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5445] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5445] chdir("./file0")            = 0
[pid  5445] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5445] close(4)                    = 0
[pid  5445] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5445] exit_group(0)               = ?
[pid  5445] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5445, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[  102.600957][ T5445] loop0: detected capacity change from 0 to 2048
[  102.630697][ T5446] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(AT_FDCWD, "./185/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./185/binderfs")                = 0
umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./185/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./185/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./185/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./185")                          = 0
mkdir("./186", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5447 attached
 <unfinished ...>
[pid  5447] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5447
[pid  5447] <... set_robust_list resumed>) = 0
[pid  5447] chdir("./186")              = 0
[pid  5447] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5447] setpgid(0, 0)               = 0
[pid  5447] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5447] write(3, "1000", 4)         = 4
[pid  5447] close(3)                    = 0
[pid  5447] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5447] memfd_create("syzkaller", 0) = 3
[pid  5447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5447] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5447] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5447] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5447] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5447] close(3)                    = 0
[pid  5447] mkdir("./file0", 0777)      = 0
[pid  5447] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5447] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5447] chdir("./file0")            = 0
[pid  5447] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5447] close(4)                    = 0
[pid  5447] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5447] exit_group(0)               = ?
[pid  5447] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5447, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
[  102.825973][ T5447] loop0: detected capacity change from 0 to 2048
[  102.856850][ T5448] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./186/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./186/binderfs")                = 0
umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./186/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./186/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./186/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./186")                          = 0
mkdir("./187", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5449 attached
, child_tidptr=0x5555557e4650) = 5449
[pid  5449] set_robust_list(0x5555557e4660, 24) = 0
[pid  5449] chdir("./187")              = 0
[pid  5449] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5449] setpgid(0, 0)               = 0
[pid  5449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5449] write(3, "1000", 4)         = 4
[pid  5449] close(3)                    = 0
[pid  5449] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5449] memfd_create("syzkaller", 0) = 3
[pid  5449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5449] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5449] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5449] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5449] close(3)                    = 0
[pid  5449] mkdir("./file0", 0777)      = 0
[pid  5449] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5449] chdir("./file0")            = 0
[pid  5449] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5449] close(4)                    = 0
[pid  5449] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5449] exit_group(0)               = ?
[pid  5449] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5449, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  103.047961][ T5449] loop0: detected capacity change from 0 to 2048
[  103.066057][ T5450] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./187/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./187/binderfs")                = 0
umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./187/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./187/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./187/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./187")                          = 0
mkdir("./188", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5451 attached
, child_tidptr=0x5555557e4650) = 5451
[pid  5451] set_robust_list(0x5555557e4660, 24) = 0
[pid  5451] chdir("./188")              = 0
[pid  5451] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5451] setpgid(0, 0)               = 0
[pid  5451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5451] write(3, "1000", 4)         = 4
[pid  5451] close(3)                    = 0
[pid  5451] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5451] memfd_create("syzkaller", 0) = 3
[pid  5451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5451] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5451] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5451] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5451] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5451] close(3)                    = 0
[pid  5451] mkdir("./file0", 0777)      = 0
[pid  5451] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5451] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5451] chdir("./file0")            = 0
[pid  5451] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5451] close(4)                    = 0
[pid  5451] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[  103.272663][ T5451] loop0: detected capacity change from 0 to 2048
[  103.301917][ T5452] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5451] exit_group(0)               = ?
[pid  5451] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5451, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./188/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./188/binderfs")                = 0
umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./188/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./188/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./188/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./188")                          = 0
mkdir("./189", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5453 attached
, child_tidptr=0x5555557e4650) = 5453
[pid  5453] set_robust_list(0x5555557e4660, 24) = 0
[pid  5453] chdir("./189")              = 0
[pid  5453] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5453] setpgid(0, 0)               = 0
[pid  5453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5453] write(3, "1000", 4)         = 4
[pid  5453] close(3)                    = 0
[pid  5453] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5453] memfd_create("syzkaller", 0) = 3
[pid  5453] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5453] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5453] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5453] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5453] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5453] close(3)                    = 0
[pid  5453] mkdir("./file0", 0777)      = 0
[pid  5453] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5453] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5453] chdir("./file0")            = 0
[pid  5453] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5453] close(4)                    = 0
[pid  5453] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5453] exit_group(0)               = ?
[pid  5453] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5453, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[  103.529056][ T5453] loop0: detected capacity change from 0 to 2048
[  103.557711][ T5454] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./189/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./189/binderfs")                = 0
umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./189/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./189/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./189/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./189")                          = 0
mkdir("./190", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5455 attached
, child_tidptr=0x5555557e4650) = 5455
[pid  5455] set_robust_list(0x5555557e4660, 24) = 0
[pid  5455] chdir("./190")              = 0
[pid  5455] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5455] setpgid(0, 0)               = 0
[pid  5455] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5455] write(3, "1000", 4)         = 4
[pid  5455] close(3)                    = 0
[pid  5455] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5455] memfd_create("syzkaller", 0) = 3
[pid  5455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5455] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5455] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5455] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5455] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5455] close(3)                    = 0
[pid  5455] mkdir("./file0", 0777)      = 0
[pid  5455] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5455] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5455] chdir("./file0")            = 0
[pid  5455] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5455] close(4)                    = 0
[pid  5455] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5455] exit_group(0)               = ?
[  103.785716][ T5455] loop0: detected capacity change from 0 to 2048
[  103.805257][ T5456] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5455] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5455, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./190/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./190/binderfs")                = 0
umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./190/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./190/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./190/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./190")                          = 0
mkdir("./191", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5457 attached
, child_tidptr=0x5555557e4650) = 5457
[pid  5457] set_robust_list(0x5555557e4660, 24) = 0
[pid  5457] chdir("./191")              = 0
[pid  5457] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5457] setpgid(0, 0)               = 0
[pid  5457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5457] write(3, "1000", 4)         = 4
[pid  5457] close(3)                    = 0
[pid  5457] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5457] memfd_create("syzkaller", 0) = 3
[pid  5457] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5457] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5457] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5457] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5457] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5457] close(3)                    = 0
[pid  5457] mkdir("./file0", 0777)      = 0
[pid  5457] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5457] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5457] chdir("./file0")            = 0
[pid  5457] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5457] close(4)                    = 0
[pid  5457] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5457] exit_group(0)               = ?
[pid  5457] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5457, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./191/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./191/binderfs")                = 0
[  104.042339][ T5457] loop0: detected capacity change from 0 to 2048
[  104.061723][ T5458] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./191/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./191/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./191/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./191")                          = 0
mkdir("./192", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5459 attached
, child_tidptr=0x5555557e4650) = 5459
[pid  5459] set_robust_list(0x5555557e4660, 24) = 0
[pid  5459] chdir("./192")              = 0
[pid  5459] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5459] setpgid(0, 0)               = 0
[pid  5459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5459] write(3, "1000", 4)         = 4
[pid  5459] close(3)                    = 0
[pid  5459] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5459] memfd_create("syzkaller", 0) = 3
[pid  5459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5459] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5459] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5459] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5459] close(3)                    = 0
[pid  5459] mkdir("./file0", 0777)      = 0
[pid  5459] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5459] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5459] chdir("./file0")            = 0
[pid  5459] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5459] close(4)                    = 0
[pid  5459] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5459] exit_group(0)               = ?
[pid  5459] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5459, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[  104.262128][ T5459] loop0: detected capacity change from 0 to 2048
[  104.281095][ T5460] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(AT_FDCWD, "./192/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./192/binderfs")                = 0
umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./192/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./192/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./192/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./192")                          = 0
mkdir("./193", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5461 attached
 <unfinished ...>
[pid  5461] set_robust_list(0x5555557e4660, 24) = 0
[pid  5461] chdir("./193")              = 0
[pid  5461] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5461] setpgid(0, 0 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5461
[pid  5461] <... setpgid resumed>)      = 0
[pid  5461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5461] write(3, "1000", 4)         = 4
[pid  5461] close(3)                    = 0
[pid  5461] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5461] memfd_create("syzkaller", 0) = 3
[pid  5461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5461] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5461] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5461] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5461] close(3)                    = 0
[pid  5461] mkdir("./file0", 0777)      = 0
[pid  5461] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5461] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5461] chdir("./file0")            = 0
[pid  5461] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5461] close(4)                    = 0
[pid  5461] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5461] exit_group(0)               = ?
[pid  5461] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5461, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./193/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./193/binderfs")                = 0
umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[  104.492798][ T5461] loop0: detected capacity change from 0 to 2048
[  104.512421][ T5462] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(AT_FDCWD, "./193/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./193/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./193/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./193")                          = 0
mkdir("./194", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5463 attached
 <unfinished ...>
[pid  5463] set_robust_list(0x5555557e4660, 24) = 0
[pid  5463] chdir("./194")              = 0
[pid  5463] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5463
[pid  5463] setpgid(0, 0)               = 0
[pid  5463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5463] write(3, "1000", 4)         = 4
[pid  5463] close(3)                    = 0
[pid  5463] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5463] memfd_create("syzkaller", 0) = 3
[pid  5463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5463] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5463] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5463] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5463] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5463] close(3)                    = 0
[pid  5463] mkdir("./file0", 0777)      = 0
[pid  5463] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5463] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5463] chdir("./file0")            = 0
[pid  5463] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5463] close(4)                    = 0
[pid  5463] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5463] exit_group(0)               = ?
[pid  5463] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5463, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  104.664077][ T5463] loop0: detected capacity change from 0 to 2048
[  104.683248][ T5464] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./194/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./194/binderfs")                = 0
umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./194/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./194/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./194/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./194")                          = 0
mkdir("./195", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5465 attached
, child_tidptr=0x5555557e4650) = 5465
[pid  5465] set_robust_list(0x5555557e4660, 24) = 0
[pid  5465] chdir("./195")              = 0
[pid  5465] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5465] setpgid(0, 0)               = 0
[pid  5465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5465] write(3, "1000", 4)         = 4
[pid  5465] close(3)                    = 0
[pid  5465] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5465] memfd_create("syzkaller", 0) = 3
[pid  5465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5465] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5465] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5465] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5465] close(3)                    = 0
[pid  5465] mkdir("./file0", 0777)      = 0
[pid  5465] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5465] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5465] chdir("./file0")            = 0
[pid  5465] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5465] close(4)                    = 0
[  104.915811][ T5465] loop0: detected capacity change from 0 to 2048
[  104.936593][ T5466] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5465] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5465] exit_group(0)               = ?
[pid  5465] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5465, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./195/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./195/binderfs")                = 0
[  104.965980][ T5465] bio_check_eod: 34 callbacks suppressed
[  104.965998][ T5465] syz-executor276: attempt to access beyond end of device
[  104.965998][ T5465] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[  104.987938][ T5465] syz-executor276: attempt to access beyond end of device
[  104.987938][ T5465] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./195/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./195/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./195/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./195")                          = 0
mkdir("./196", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5467 attached
, child_tidptr=0x5555557e4650) = 5467
[pid  5467] set_robust_list(0x5555557e4660, 24) = 0
[pid  5467] chdir("./196")              = 0
[pid  5467] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5467] setpgid(0, 0)               = 0
[pid  5467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5467] write(3, "1000", 4)         = 4
[pid  5467] close(3)                    = 0
[pid  5467] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5467] memfd_create("syzkaller", 0) = 3
[pid  5467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5467] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5467] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5467] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5467] close(3)                    = 0
[pid  5467] mkdir("./file0", 0777)      = 0
[pid  5467] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5467] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5467] chdir("./file0")            = 0
[pid  5467] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5467] close(4)                    = 0
[  105.222248][ T5467] loop0: detected capacity change from 0 to 2048
[  105.241626][ T5468] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5467] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5467] exit_group(0)               = ?
[pid  5467] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5467, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./196/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[  105.281901][ T5467] syz-executor276: attempt to access beyond end of device
[  105.281901][ T5467] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[  105.297852][ T5467] syz-executor276: attempt to access beyond end of device
[  105.297852][ T5467] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
unlink("./196/binderfs")                = 0
umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./196/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./196/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./196/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./196")                          = 0
mkdir("./197", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5469 attached
, child_tidptr=0x5555557e4650) = 5469
[pid  5469] set_robust_list(0x5555557e4660, 24) = 0
[pid  5469] chdir("./197")              = 0
[pid  5469] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5469] setpgid(0, 0)               = 0
[pid  5469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5469] write(3, "1000", 4)         = 4
[pid  5469] close(3)                    = 0
[pid  5469] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5469] memfd_create("syzkaller", 0) = 3
[pid  5469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5469] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5469] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5469] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5469] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5469] close(3)                    = 0
[pid  5469] mkdir("./file0", 0777)      = 0
[pid  5469] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5469] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5469] chdir("./file0")            = 0
[pid  5469] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5469] close(4)                    = 0
[  105.507829][ T5469] loop0: detected capacity change from 0 to 2048
[  105.537168][ T5470] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5469] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5469] exit_group(0)               = ?
[pid  5469] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5469, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[  105.567504][ T5469] syz-executor276: attempt to access beyond end of device
[  105.567504][ T5469] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[  105.584042][ T5469] syz-executor276: attempt to access beyond end of device
[  105.584042][ T5469] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
newfstatat(AT_FDCWD, "./197/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./197/binderfs")                = 0
umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./197/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./197/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./197/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./197")                          = 0
mkdir("./198", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5471 attached
 <unfinished ...>
[pid  5471] set_robust_list(0x5555557e4660, 24) = 0
[pid  5471] chdir("./198")              = 0
[pid  5471] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5471
[pid  5471] setpgid(0, 0)               = 0
[pid  5471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5471] write(3, "1000", 4)         = 4
[pid  5471] close(3)                    = 0
[pid  5471] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5471] memfd_create("syzkaller", 0) = 3
[pid  5471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5471] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5471] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5471] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5471] close(3)                    = 0
[pid  5471] mkdir("./file0", 0777)      = 0
[pid  5471] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5471] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5471] chdir("./file0")            = 0
[pid  5471] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5471] close(4)                    = 0
[  105.827650][ T5471] loop0: detected capacity change from 0 to 2048
[  105.847987][ T5472] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5471] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5471] exit_group(0)               = ?
[pid  5471] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5471, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./198/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./198/binderfs")                = 0
umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./198/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./198/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
[  105.877115][ T5471] syz-executor276: attempt to access beyond end of device
[  105.877115][ T5471] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[  105.894054][ T5471] syz-executor276: attempt to access beyond end of device
[  105.894054][ T5471] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
rmdir("./198/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./198")                          = 0
mkdir("./199", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5473 attached
, child_tidptr=0x5555557e4650) = 5473
[pid  5473] set_robust_list(0x5555557e4660, 24) = 0
[pid  5473] chdir("./199")              = 0
[pid  5473] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5473] setpgid(0, 0)               = 0
[pid  5473] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5473] write(3, "1000", 4)         = 4
[pid  5473] close(3)                    = 0
[pid  5473] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5473] memfd_create("syzkaller", 0) = 3
[pid  5473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5473] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5473] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5473] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5473] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5473] close(3)                    = 0
[pid  5473] mkdir("./file0", 0777)      = 0
[pid  5473] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5473] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5473] chdir("./file0")            = 0
[pid  5473] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5473] close(4)                    = 0
[  106.076097][ T5473] loop0: detected capacity change from 0 to 2048
[  106.095701][ T5474] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5473] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5473] exit_group(0)               = ?
[pid  5473] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5473, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./199/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./199/binderfs")                = 0
umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[  106.127307][ T5473] syz-executor276: attempt to access beyond end of device
[  106.127307][ T5473] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[  106.143353][ T5473] syz-executor276: attempt to access beyond end of device
[  106.143353][ T5473] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
newfstatat(AT_FDCWD, "./199/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./199/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./199/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./199")                          = 0
mkdir("./200", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5475 attached
, child_tidptr=0x5555557e4650) = 5475
[pid  5475] set_robust_list(0x5555557e4660, 24) = 0
[pid  5475] chdir("./200")              = 0
[pid  5475] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5475] setpgid(0, 0)               = 0
[pid  5475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5475] write(3, "1000", 4)         = 4
[pid  5475] close(3)                    = 0
[pid  5475] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5475] memfd_create("syzkaller", 0) = 3
[pid  5475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5475] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5475] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5475] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5475] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5475] close(3)                    = 0
[pid  5475] mkdir("./file0", 0777)      = 0
[pid  5475] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5475] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5475] chdir("./file0")            = 0
[pid  5475] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5475] close(4)                    = 0
[pid  5475] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5475] exit_group(0)               = ?
[pid  5475] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5475, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
[  106.322311][ T5475] loop0: detected capacity change from 0 to 2048
[  106.341101][ T5476] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./200/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./200/binderfs")                = 0
umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./200/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./200/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./200/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./200")                          = 0
mkdir("./201", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5477 attached
, child_tidptr=0x5555557e4650) = 5477
[pid  5477] set_robust_list(0x5555557e4660, 24) = 0
[pid  5477] chdir("./201")              = 0
[pid  5477] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5477] setpgid(0, 0)               = 0
[pid  5477] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5477] write(3, "1000", 4)         = 4
[pid  5477] close(3)                    = 0
[pid  5477] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5477] memfd_create("syzkaller", 0) = 3
[pid  5477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5477] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5477] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5477] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5477] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5477] close(3)                    = 0
[pid  5477] mkdir("./file0", 0777)      = 0
[pid  5477] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5477] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5477] chdir("./file0")            = 0
[pid  5477] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5477] close(4)                    = 0
[pid  5477] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5477] exit_group(0)               = ?
[pid  5477] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5477, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./201/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./201/binderfs")                = 0
umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
[  106.609575][ T5477] loop0: detected capacity change from 0 to 2048
[  106.629516][ T5478] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./201/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./201/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./201/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./201")                          = 0
mkdir("./202", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5479 attached
, child_tidptr=0x5555557e4650) = 5479
[pid  5479] set_robust_list(0x5555557e4660, 24) = 0
[pid  5479] chdir("./202")              = 0
[pid  5479] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5479] setpgid(0, 0)               = 0
[pid  5479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5479] write(3, "1000", 4)         = 4
[pid  5479] close(3)                    = 0
[pid  5479] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5479] memfd_create("syzkaller", 0) = 3
[pid  5479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5479] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5479] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5479] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5479] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5479] close(3)                    = 0
[pid  5479] mkdir("./file0", 0777)      = 0
[pid  5479] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5479] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5479] chdir("./file0")            = 0
[pid  5479] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5479] close(4)                    = 0
[pid  5479] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5479] exit_group(0)               = ?
[pid  5479] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5479, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./202/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./202/binderfs")                = 0
[  106.823725][ T5479] loop0: detected capacity change from 0 to 2048
[  106.842849][ T5480] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./202/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./202/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./202/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./202")                          = 0
mkdir("./203", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5481 attached
, child_tidptr=0x5555557e4650) = 5481
[pid  5481] set_robust_list(0x5555557e4660, 24) = 0
[pid  5481] chdir("./203")              = 0
[pid  5481] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5481] setpgid(0, 0)               = 0
[pid  5481] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5481] write(3, "1000", 4)         = 4
[pid  5481] close(3)                    = 0
[pid  5481] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5481] memfd_create("syzkaller", 0) = 3
[pid  5481] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5481] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5481] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5481] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5481] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5481] close(3)                    = 0
[pid  5481] mkdir("./file0", 0777)      = 0
[pid  5481] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5481] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5481] chdir("./file0")            = 0
[pid  5481] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5481] close(4)                    = 0
[pid  5481] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[  107.007298][ T5481] loop0: detected capacity change from 0 to 2048
[  107.036702][ T5482] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5481] exit_group(0)               = ?
[pid  5481] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5481, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./203/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./203/binderfs")                = 0
umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./203/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./203/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./203/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./203")                          = 0
mkdir("./204", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5483 attached
, child_tidptr=0x5555557e4650) = 5483
[pid  5483] set_robust_list(0x5555557e4660, 24) = 0
[pid  5483] chdir("./204")              = 0
[pid  5483] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5483] setpgid(0, 0)               = 0
[pid  5483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5483] write(3, "1000", 4)         = 4
[pid  5483] close(3)                    = 0
[pid  5483] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5483] memfd_create("syzkaller", 0) = 3
[pid  5483] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5483] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5483] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5483] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5483] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5483] close(3)                    = 0
[pid  5483] mkdir("./file0", 0777)      = 0
[pid  5483] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5483] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5483] chdir("./file0")            = 0
[pid  5483] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5483] close(4)                    = 0
[pid  5483] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5483] exit_group(0)               = ?
[pid  5483] +++ exited with 0 +++
[  107.234211][ T5483] loop0: detected capacity change from 0 to 2048
[  107.255030][ T5484] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5483, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./204/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./204/binderfs")                = 0
umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./204/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./204/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./204/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./204")                          = 0
mkdir("./205", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5485 attached
, child_tidptr=0x5555557e4650) = 5485
[pid  5485] set_robust_list(0x5555557e4660, 24) = 0
[pid  5485] chdir("./205")              = 0
[pid  5485] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5485] setpgid(0, 0)               = 0
[pid  5485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5485] write(3, "1000", 4)         = 4
[pid  5485] close(3)                    = 0
[pid  5485] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5485] memfd_create("syzkaller", 0) = 3
[pid  5485] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5485] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5485] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5485] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5485] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5485] close(3)                    = 0
[pid  5485] mkdir("./file0", 0777)      = 0
[pid  5485] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5485] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5485] chdir("./file0")            = 0
[pid  5485] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5485] close(4)                    = 0
[pid  5485] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5485] exit_group(0)               = ?
[pid  5485] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5485, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[  107.514332][ T5485] loop0: detected capacity change from 0 to 2048
[  107.534485][ T5486] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./205/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./205/binderfs")                = 0
umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./205/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./205/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./205/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./205")                          = 0
mkdir("./206", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5487 attached
, child_tidptr=0x5555557e4650) = 5487
[pid  5487] set_robust_list(0x5555557e4660, 24) = 0
[pid  5487] chdir("./206")              = 0
[pid  5487] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5487] setpgid(0, 0)               = 0
[pid  5487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5487] write(3, "1000", 4)         = 4
[pid  5487] close(3)                    = 0
[pid  5487] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5487] memfd_create("syzkaller", 0) = 3
[pid  5487] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5487] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5487] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5487] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5487] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5487] close(3)                    = 0
[pid  5487] mkdir("./file0", 0777)      = 0
[pid  5487] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5487] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5487] chdir("./file0")            = 0
[pid  5487] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5487] close(4)                    = 0
[pid  5487] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5487] exit_group(0)               = ?
[pid  5487] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5487, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  107.797070][ T5487] loop0: detected capacity change from 0 to 2048
[  107.816562][ T5488] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./206/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./206/binderfs")                = 0
umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./206/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./206/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./206/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./206")                          = 0
mkdir("./207", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5489 attached
, child_tidptr=0x5555557e4650) = 5489
[pid  5489] set_robust_list(0x5555557e4660, 24) = 0
[pid  5489] chdir("./207")              = 0
[pid  5489] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5489] setpgid(0, 0)               = 0
[pid  5489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5489] write(3, "1000", 4)         = 4
[pid  5489] close(3)                    = 0
[pid  5489] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5489] memfd_create("syzkaller", 0) = 3
[pid  5489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5489] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5489] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5489] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5489] close(3)                    = 0
[pid  5489] mkdir("./file0", 0777)      = 0
[pid  5489] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5489] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5489] chdir("./file0")            = 0
[pid  5489] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5489] close(4)                    = 0
[pid  5489] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5489] exit_group(0)               = ?
[pid  5489] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5489, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./207", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[  108.093188][ T5489] loop0: detected capacity change from 0 to 2048
[  108.124448][ T5490] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./207/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./207/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./207/binderfs")                = 0
umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./207/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./207/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./207/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./207")                          = 0
mkdir("./208", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5491 attached
 <unfinished ...>
[pid  5491] set_robust_list(0x5555557e4660, 24 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5491
[pid  5491] <... set_robust_list resumed>) = 0
[pid  5491] chdir("./208")              = 0
[pid  5491] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5491] setpgid(0, 0)               = 0
[pid  5491] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5491] write(3, "1000", 4)         = 4
[pid  5491] close(3)                    = 0
[pid  5491] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5491] memfd_create("syzkaller", 0) = 3
[pid  5491] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5491] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5491] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5491] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5491] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5491] close(3)                    = 0
[pid  5491] mkdir("./file0", 0777)      = 0
[pid  5491] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5491] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5491] chdir("./file0")            = 0
[pid  5491] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5491] close(4)                    = 0
[pid  5491] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5491] exit_group(0)               = ?
[pid  5491] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5491, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./208", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./208/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./208/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[  108.384219][ T5491] loop0: detected capacity change from 0 to 2048
[  108.403724][ T5492] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
unlink("./208/binderfs")                = 0
umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./208/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./208/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./208/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./208")                          = 0
mkdir("./209", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5493 attached
 <unfinished ...>
[pid  5493] set_robust_list(0x5555557e4660, 24) = 0
[pid  5493] chdir("./209")              = 0
[pid  5493] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5493] setpgid(0, 0 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5493
[pid  5493] <... setpgid resumed>)      = 0
[pid  5493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5493] write(3, "1000", 4)         = 4
[pid  5493] close(3)                    = 0
[pid  5493] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5493] memfd_create("syzkaller", 0) = 3
[pid  5493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5493] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5493] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5493] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5493] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5493] close(3)                    = 0
[pid  5493] mkdir("./file0", 0777)      = 0
[pid  5493] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5493] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5493] chdir("./file0")            = 0
[pid  5493] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5493] close(4)                    = 0
[pid  5493] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5493] exit_group(0)               = ?
[pid  5493] +++ exited with 0 +++
[  108.605738][ T5493] loop0: detected capacity change from 0 to 2048
[  108.625785][ T5494] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5493, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./209", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./209/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./209/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./209/binderfs")                = 0
umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./209/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./209/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./209/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./209")                          = 0
mkdir("./210", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5495 attached
, child_tidptr=0x5555557e4650) = 5495
[pid  5495] set_robust_list(0x5555557e4660, 24) = 0
[pid  5495] chdir("./210")              = 0
[pid  5495] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5495] setpgid(0, 0)               = 0
[pid  5495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5495] write(3, "1000", 4)         = 4
[pid  5495] close(3)                    = 0
[pid  5495] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5495] memfd_create("syzkaller", 0) = 3
[pid  5495] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5495] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5495] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5495] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5495] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5495] close(3)                    = 0
[pid  5495] mkdir("./file0", 0777)      = 0
[pid  5495] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5495] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5495] chdir("./file0")            = 0
[pid  5495] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5495] close(4)                    = 0
[pid  5495] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5495] exit_group(0)               = ?
[pid  5495] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5495, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
umount2("./210", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
[  108.833702][ T5495] loop0: detected capacity change from 0 to 2048
[  108.853384][ T5496] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./210/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./210/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./210/binderfs")                = 0
umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./210/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./210/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./210/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./210")                          = 0
mkdir("./211", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5497 attached
, child_tidptr=0x5555557e4650) = 5497
[pid  5497] set_robust_list(0x5555557e4660, 24) = 0
[pid  5497] chdir("./211")              = 0
[pid  5497] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5497] setpgid(0, 0)               = 0
[pid  5497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5497] write(3, "1000", 4)         = 4
[pid  5497] close(3)                    = 0
[pid  5497] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5497] memfd_create("syzkaller", 0) = 3
[pid  5497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5497] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5497] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5497] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5497] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5497] close(3)                    = 0
[pid  5497] mkdir("./file0", 0777)      = 0
[pid  5497] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5497] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5497] chdir("./file0")            = 0
[pid  5497] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5497] close(4)                    = 0
[pid  5497] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5497] exit_group(0)               = ?
[pid  5497] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5497, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./211", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
[  109.088009][ T5497] loop0: detected capacity change from 0 to 2048
[  109.117484][ T5498] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./211/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./211/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./211/binderfs")                = 0
umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./211/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./211/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./211/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./211")                          = 0
mkdir("./212", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5499 attached
 <unfinished ...>
[pid  5499] set_robust_list(0x5555557e4660, 24) = 0
[pid  5499] chdir("./212")              = 0
[pid  5499] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5499
[pid  5499] setpgid(0, 0)               = 0
[pid  5499] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5499] write(3, "1000", 4)         = 4
[pid  5499] close(3)                    = 0
[pid  5499] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5499] memfd_create("syzkaller", 0) = 3
[pid  5499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5499] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5499] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5499] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5499] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5499] close(3)                    = 0
[pid  5499] mkdir("./file0", 0777)      = 0
[pid  5499] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5499] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5499] chdir("./file0")            = 0
[pid  5499] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5499] close(4)                    = 0
[pid  5499] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5499] exit_group(0)               = ?
[pid  5499] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5499, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./212", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./212/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./212/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[  109.366438][ T5499] loop0: detected capacity change from 0 to 2048
[  109.385843][ T5500] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
unlink("./212/binderfs")                = 0
umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./212/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./212/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./212/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./212")                          = 0
mkdir("./213", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5501 attached
, child_tidptr=0x5555557e4650) = 5501
[pid  5501] set_robust_list(0x5555557e4660, 24) = 0
[pid  5501] chdir("./213")              = 0
[pid  5501] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5501] setpgid(0, 0)               = 0
[pid  5501] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5501] write(3, "1000", 4)         = 4
[pid  5501] close(3)                    = 0
[pid  5501] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5501] memfd_create("syzkaller", 0) = 3
[pid  5501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5501] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5501] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5501] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5501] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5501] close(3)                    = 0
[pid  5501] mkdir("./file0", 0777)      = 0
[pid  5501] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5501] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5501] chdir("./file0")            = 0
[pid  5501] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5501] close(4)                    = 0
[pid  5501] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5501] exit_group(0)               = ?
[pid  5501] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5501, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./213", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[  109.579976][ T5501] loop0: detected capacity change from 0 to 2048
[  109.601534][ T5502] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./213/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./213/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./213/binderfs")                = 0
umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./213/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./213/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./213/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./213")                          = 0
mkdir("./214", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5503 attached
, child_tidptr=0x5555557e4650) = 5503
[pid  5503] set_robust_list(0x5555557e4660, 24) = 0
[pid  5503] chdir("./214")              = 0
[pid  5503] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5503] setpgid(0, 0)               = 0
[pid  5503] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5503] write(3, "1000", 4)         = 4
[pid  5503] close(3)                    = 0
[pid  5503] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5503] memfd_create("syzkaller", 0) = 3
[pid  5503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5503] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5503] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5503] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5503] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5503] close(3)                    = 0
[pid  5503] mkdir("./file0", 0777)      = 0
[pid  5503] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5503] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5503] chdir("./file0")            = 0
[pid  5503] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5503] close(4)                    = 0
[pid  5503] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[  109.789297][ T5503] loop0: detected capacity change from 0 to 2048
[  109.803226][ T5504] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5503] exit_group(0)               = ?
[pid  5503] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5503, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./214", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./214/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./214/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./214/binderfs")                = 0
umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./214/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./214/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./214/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./214")                          = 0
mkdir("./215", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5505 attached
, child_tidptr=0x5555557e4650) = 5505
[pid  5505] set_robust_list(0x5555557e4660, 24) = 0
[pid  5505] chdir("./215")              = 0
[pid  5505] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5505] setpgid(0, 0)               = 0
[pid  5505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5505] write(3, "1000", 4)         = 4
[pid  5505] close(3)                    = 0
[pid  5505] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5505] memfd_create("syzkaller", 0) = 3
[pid  5505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5505] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5505] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5505] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5505] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5505] close(3)                    = 0
[pid  5505] mkdir("./file0", 0777)      = 0
[pid  5505] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5505] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5505] chdir("./file0")            = 0
[pid  5505] ioctl(4, LOOP_CLR_FD)       = 0
[  110.055609][ T5505] loop0: detected capacity change from 0 to 2048
[  110.085659][ T5506] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5505] close(4)                    = 0
[pid  5505] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5505] exit_group(0)               = ?
[pid  5505] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5505, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} ---
umount2("./215", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  110.110549][ T5505] bio_check_eod: 30 callbacks suppressed
[  110.110560][ T5505] syz-executor276: attempt to access beyond end of device
[  110.110560][ T5505] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[  110.132540][ T5505] syz-executor276: attempt to access beyond end of device
[  110.132540][ T5505] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./215/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./215/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./215/binderfs")                = 0
umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./215/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./215/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./215/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./215")                          = 0
mkdir("./216", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5507 attached
, child_tidptr=0x5555557e4650) = 5507
[pid  5507] set_robust_list(0x5555557e4660, 24) = 0
[pid  5507] chdir("./216")              = 0
[pid  5507] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5507] setpgid(0, 0)               = 0
[pid  5507] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5507] write(3, "1000", 4)         = 4
[pid  5507] close(3)                    = 0
[pid  5507] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5507] memfd_create("syzkaller", 0) = 3
[pid  5507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5507] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5507] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5507] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5507] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5507] close(3)                    = 0
[pid  5507] mkdir("./file0", 0777)      = 0
[pid  5507] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5507] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5507] chdir("./file0")            = 0
[pid  5507] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5507] close(4)                    = 0
[  110.356542][ T5507] loop0: detected capacity change from 0 to 2048
[  110.376410][ T5508] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5507] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5507] exit_group(0)               = ?
[pid  5507] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5507, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./216", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./216/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./216/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./216/binderfs")                = 0
[  110.418854][ T5507] syz-executor276: attempt to access beyond end of device
[  110.418854][ T5507] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[  110.435041][ T5507] syz-executor276: attempt to access beyond end of device
[  110.435041][ T5507] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./216/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./216/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./216/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./216")                          = 0
mkdir("./217", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5509 attached
, child_tidptr=0x5555557e4650) = 5509
[pid  5509] set_robust_list(0x5555557e4660, 24) = 0
[pid  5509] chdir("./217")              = 0
[pid  5509] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5509] setpgid(0, 0)               = 0
[pid  5509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5509] write(3, "1000", 4)         = 4
[pid  5509] close(3)                    = 0
[pid  5509] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5509] memfd_create("syzkaller", 0) = 3
[pid  5509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5509] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5509] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5509] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5509] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5509] close(3)                    = 0
[pid  5509] mkdir("./file0", 0777)      = 0
[pid  5509] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5509] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5509] chdir("./file0")            = 0
[pid  5509] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5509] close(4)                    = 0
[  110.617371][ T5509] loop0: detected capacity change from 0 to 2048
[  110.642213][ T5510] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5509] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5509] exit_group(0)               = ?
[pid  5509] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5509, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
umount2("./217", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./217/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./217/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./217/binderfs")                = 0
umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[  110.676882][ T5509] syz-executor276: attempt to access beyond end of device
[  110.676882][ T5509] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[  110.693556][ T5509] syz-executor276: attempt to access beyond end of device
[  110.693556][ T5509] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
newfstatat(AT_FDCWD, "./217/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./217/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./217/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./217")                          = 0
mkdir("./218", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5511 attached
, child_tidptr=0x5555557e4650) = 5511
[pid  5511] set_robust_list(0x5555557e4660, 24) = 0
[pid  5511] chdir("./218")              = 0
[pid  5511] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5511] setpgid(0, 0)               = 0
[pid  5511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5511] write(3, "1000", 4)         = 4
[pid  5511] close(3)                    = 0
[pid  5511] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5511] memfd_create("syzkaller", 0) = 3
[pid  5511] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5511] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5511] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5511] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5511] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5511] close(3)                    = 0
[pid  5511] mkdir("./file0", 0777)      = 0
[pid  5511] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5511] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5511] chdir("./file0")            = 0
[pid  5511] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5511] close(4)                    = 0
[  110.877714][ T5511] loop0: detected capacity change from 0 to 2048
[  110.906686][ T5512] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5511] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5511] exit_group(0)               = ?
[pid  5511] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5511, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./218", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./218/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[  110.936910][ T5511] syz-executor276: attempt to access beyond end of device
[  110.936910][ T5511] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[  110.954236][ T5511] syz-executor276: attempt to access beyond end of device
[  110.954236][ T5511] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
newfstatat(AT_FDCWD, "./218/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./218/binderfs")                = 0
umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./218/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./218/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./218/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./218")                          = 0
mkdir("./219", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5513 attached
, child_tidptr=0x5555557e4650) = 5513
[pid  5513] set_robust_list(0x5555557e4660, 24) = 0
[pid  5513] chdir("./219")              = 0
[pid  5513] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5513] setpgid(0, 0)               = 0
[pid  5513] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5513] write(3, "1000", 4)         = 4
[pid  5513] close(3)                    = 0
[pid  5513] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5513] memfd_create("syzkaller", 0) = 3
[pid  5513] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5513] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5513] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5513] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5513] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5513] close(3)                    = 0
[pid  5513] mkdir("./file0", 0777)      = 0
[pid  5513] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5513] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5513] chdir("./file0")            = 0
[pid  5513] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5513] close(4)                    = 0
[  111.152069][ T5513] loop0: detected capacity change from 0 to 2048
[  111.171085][ T5514] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5513] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5513] exit_group(0)               = ?
[pid  5513] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5513, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./219", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./219/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./219/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./219/binderfs")                = 0
[  111.212474][ T5513] syz-executor276: attempt to access beyond end of device
[  111.212474][ T5513] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
[  111.228636][ T5513] syz-executor276: attempt to access beyond end of device
[  111.228636][ T5513] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048
umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./219/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./219/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./219/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./219")                          = 0
mkdir("./220", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5515 attached
 <unfinished ...>
[pid  5515] set_robust_list(0x5555557e4660, 24) = 0
[pid  5515] chdir("./220")              = 0
[pid  5515] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5515] setpgid(0, 0)               = 0
[pid  5515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5515
[pid  5515] <... openat resumed>)       = 3
[pid  5515] write(3, "1000", 4)         = 4
[pid  5515] close(3)                    = 0
[pid  5515] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5515] memfd_create("syzkaller", 0) = 3
[pid  5515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5515] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5515] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5515] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5515] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5515] close(3)                    = 0
[pid  5515] mkdir("./file0", 0777)      = 0
[pid  5515] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5515] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5515] chdir("./file0")            = 0
[pid  5515] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5515] close(4)                    = 0
[pid  5515] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5515] exit_group(0)               = ?
[pid  5515] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5515, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./220", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./220", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./220/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./220/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[  111.438787][ T5515] loop0: detected capacity change from 0 to 2048
[  111.463091][ T5516] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
unlink("./220/binderfs")                = 0
umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./220/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./220/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./220/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./220")                          = 0
mkdir("./221", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5517 attached
 <unfinished ...>
[pid  5517] set_robust_list(0x5555557e4660, 24) = 0
[pid  5517] chdir("./221")              = 0
[pid  5517] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5517
[pid  5517] <... prctl resumed>)        = 0
[pid  5517] setpgid(0, 0)               = 0
[pid  5517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5517] write(3, "1000", 4)         = 4
[pid  5517] close(3)                    = 0
[pid  5517] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5517] memfd_create("syzkaller", 0) = 3
[pid  5517] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5517] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5517] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5517] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5517] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5517] close(3)                    = 0
[pid  5517] mkdir("./file0", 0777)      = 0
[pid  5517] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5517] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5517] chdir("./file0")            = 0
[pid  5517] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5517] close(4)                    = 0
[pid  5517] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5517] exit_group(0)               = ?
[pid  5517] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5517, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
[  111.650802][ T5517] loop0: detected capacity change from 0 to 2048
[  111.670732][ T5518] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./221", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./221", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./221/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./221/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./221/binderfs")                = 0
umount2("./221/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./221/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./221/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./221/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./221/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./221/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./221")                          = 0
mkdir("./222", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5519 attached
, child_tidptr=0x5555557e4650) = 5519
[pid  5519] set_robust_list(0x5555557e4660, 24) = 0
[pid  5519] chdir("./222")              = 0
[pid  5519] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5519] setpgid(0, 0)               = 0
[pid  5519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5519] write(3, "1000", 4)         = 4
[pid  5519] close(3)                    = 0
[pid  5519] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5519] memfd_create("syzkaller", 0) = 3
[pid  5519] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5519] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5519] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5519] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5519] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5519] close(3)                    = 0
[pid  5519] mkdir("./file0", 0777)      = 0
[pid  5519] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5519] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5519] chdir("./file0")            = 0
[pid  5519] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5519] close(4)                    = 0
[pid  5519] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5519] exit_group(0)               = ?
[pid  5519] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5519, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./222", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[  111.962574][ T5519] loop0: detected capacity change from 0 to 2048
[  111.983466][ T5520] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
openat(AT_FDCWD, "./222", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./222/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./222/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./222/binderfs")                = 0
umount2("./222/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./222/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./222/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./222/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./222/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./222/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./222")                          = 0
mkdir("./223", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5521 attached
, child_tidptr=0x5555557e4650) = 5521
[pid  5521] set_robust_list(0x5555557e4660, 24) = 0
[pid  5521] chdir("./223")              = 0
[pid  5521] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5521] setpgid(0, 0)               = 0
[pid  5521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5521] write(3, "1000", 4)         = 4
[pid  5521] close(3)                    = 0
[pid  5521] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5521] memfd_create("syzkaller", 0) = 3
[pid  5521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5521] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5521] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5521] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5521] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5521] close(3)                    = 0
[pid  5521] mkdir("./file0", 0777)      = 0
[pid  5521] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5521] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5521] chdir("./file0")            = 0
[pid  5521] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5521] close(4)                    = 0
[pid  5521] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5521] exit_group(0)               = ?
[pid  5521] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5521, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
umount2("./223", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./223", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  112.185124][ T5521] loop0: detected capacity change from 0 to 2048
[  112.204443][ T5522] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./223/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./223/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./223/binderfs")                = 0
umount2("./223/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./223/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./223/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./223/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./223/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./223/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./223")                          = 0
mkdir("./224", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5523 attached
, child_tidptr=0x5555557e4650) = 5523
[pid  5523] set_robust_list(0x5555557e4660, 24) = 0
[pid  5523] chdir("./224")              = 0
[pid  5523] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5523] setpgid(0, 0)               = 0
[pid  5523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5523] write(3, "1000", 4)         = 4
[pid  5523] close(3)                    = 0
[pid  5523] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5523] memfd_create("syzkaller", 0) = 3
[pid  5523] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5523] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5523] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5523] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5523] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5523] close(3)                    = 0
[pid  5523] mkdir("./file0", 0777)      = 0
[pid  5523] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5523] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5523] chdir("./file0")            = 0
[pid  5523] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5523] close(4)                    = 0
[  112.436806][ T5523] loop0: detected capacity change from 0 to 2048
[  112.465858][ T5524] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5523] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5523] exit_group(0)               = ?
[pid  5523] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5523, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
umount2("./224", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./224", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./224/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./224/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./224/binderfs")                = 0
umount2("./224/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./224/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./224/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./224/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./224/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./224/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./224")                          = 0
mkdir("./225", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5525 attached
, child_tidptr=0x5555557e4650) = 5525
[pid  5525] set_robust_list(0x5555557e4660, 24) = 0
[pid  5525] chdir("./225")              = 0
[pid  5525] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5525] setpgid(0, 0)               = 0
[pid  5525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5525] write(3, "1000", 4)         = 4
[pid  5525] close(3)                    = 0
[pid  5525] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5525] memfd_create("syzkaller", 0) = 3
[pid  5525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5525] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5525] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5525] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5525] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5525] close(3)                    = 0
[pid  5525] mkdir("./file0", 0777)      = 0
[pid  5525] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5525] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5525] chdir("./file0")            = 0
[pid  5525] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5525] close(4)                    = 0
[pid  5525] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5525] exit_group(0)               = ?
[pid  5525] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5525, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./225", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./225", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
[  112.686905][ T5525] loop0: detected capacity change from 0 to 2048
[  112.708039][ T5526] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./225/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./225/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./225/binderfs")                = 0
umount2("./225/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./225/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./225/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./225/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./225/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./225/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./225")                          = 0
mkdir("./226", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5527 attached
 <unfinished ...>
[pid  5527] set_robust_list(0x5555557e4660, 24) = 0
[pid  5527] chdir("./226")              = 0
[pid  5527] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5527] setpgid(0, 0 <unfinished ...>
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5527
[pid  5527] <... setpgid resumed>)      = 0
[pid  5527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5527] write(3, "1000", 4)         = 4
[pid  5527] close(3)                    = 0
[pid  5527] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5527] memfd_create("syzkaller", 0) = 3
[pid  5527] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5527] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5527] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5527] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5527] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5527] close(3)                    = 0
[pid  5527] mkdir("./file0", 0777)      = 0
[pid  5527] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5527] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5527] chdir("./file0")            = 0
[pid  5527] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5527] close(4)                    = 0
[pid  5527] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5527] exit_group(0)               = ?
[pid  5527] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5527, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./226", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./226", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./226/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./226/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./226/binderfs")                = 0
[  112.920569][ T5527] loop0: detected capacity change from 0 to 2048
[  112.938854][ T5528] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./226/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./226/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./226/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./226/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./226/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555557ed730 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555557ed730 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./226/file0")                    = 0
getdents64(3, 0x5555557e56f0 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./226")                          = 0
mkdir("./227", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5529 attached
 <unfinished ...>
[pid  5529] set_robust_list(0x5555557e4660, 24) = 0
[pid  5065] <... clone resumed>, child_tidptr=0x5555557e4650) = 5529
[pid  5529] chdir("./227")              = 0
[pid  5529] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5529] setpgid(0, 0)               = 0
[pid  5529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5529] write(3, "1000", 4)         = 4
[pid  5529] close(3)                    = 0
[pid  5529] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5529] memfd_create("syzkaller", 0) = 3
[pid  5529] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc47ef6000
[pid  5529] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5529] munmap(0x7fcc47ef6000, 138412032) = 0
[pid  5529] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5529] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5529] close(3)                    = 0
[pid  5529] mkdir("./file0", 0777)      = 0
[pid  5529] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid  5529] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5529] chdir("./file0")            = 0
[pid  5529] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5529] close(4)                    = 0
[pid  5529] mkdirat(AT_FDCWD, "./file0", 0404) = -1 EIO (Input/output error)
[pid  5529] exit_group(0)               = ?
[pid  5529] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5529, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
umount2("./227", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./227", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555557e56f0 /* 4 entries */, 32768) = 112
umount2("./227/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./227/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./227/binderfs")                = 0
[  113.099724][ T5529] loop0: detected capacity change from 0 to 2048
[  113.125317][ T5530] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.190005][    C0] ==================================================================
[  118.198095][    C0] BUG: KASAN: slab-use-after-free in __lock_acquire+0x2d85/0x3b20
[  118.205900][    C0] Read of size 8 at addr ffff8880260fc578 by task swapper/0/0
[  118.213324][    C0] 
[  118.215620][    C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0
[  118.225218][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[  118.235242][    C0] Call Trace:
[  118.238497][    C0]  <IRQ>
[  118.241316][    C0]  dump_stack_lvl+0xd9/0x1b0
[  118.245889][    C0]  print_report+0xc4/0x620
[  118.250283][    C0]  ? __virt_addr_valid+0x5e/0x2d0
[  118.255281][    C0]  ? __phys_addr+0xc6/0x140
[  118.259780][    C0]  kasan_report+0xda/0x110
[  118.264179][    C0]  ? __lock_acquire+0x2d85/0x3b20
[  118.269180][    C0]  ? __lock_acquire+0x2d85/0x3b20
[  118.274192][    C0]  __lock_acquire+0x2d85/0x3b20
[  118.279029][    C0]  ? lockdep_lock+0xc6/0x200
[  118.283598][    C0]  ? hlock_class+0x130/0x130
[  118.288167][    C0]  ? lockdep_hardirqs_on_prepare+0x420/0x420
[  118.294125][    C0]  ? lockdep_unlock+0x11b/0x290
[  118.298954][    C0]  ? __lock_acquire+0x1fc1/0x3b20
[  118.303957][    C0]  lock_acquire+0x1ae/0x520
[  118.308448][    C0]  ? try_to_wake_up+0xb0/0x13d0
[  118.313282][    C0]  ? lock_sync+0x190/0x190
[  118.317676][    C0]  ? lockdep_hardirqs_on_prepare+0x420/0x420
[  118.323641][    C0]  _raw_spin_lock_irqsave+0x3a/0x50
[  118.328817][    C0]  ? try_to_wake_up+0xb0/0x13d0
[  118.333644][    C0]  try_to_wake_up+0xb0/0x13d0
[  118.338298][    C0]  ? sched_ttwu_pending+0x560/0x560
[  118.343470][    C0]  ? do_raw_spin_unlock+0x173/0x230
[  118.348641][    C0]  ? nilfs_segctor_zeropad_segsum+0x170/0x170
[  118.354709][    C0]  call_timer_fn+0x193/0x590
[  118.359294][    C0]  ? timer_fixup_assert_init+0x210/0x210
[  118.364905][    C0]  ? reacquire_held_locks+0x4c0/0x4c0
[  118.370254][    C0]  ? nilfs_segctor_zeropad_segsum+0x170/0x170
[  118.376298][    C0]  __run_timers+0x764/0xb20
[  118.380780][    C0]  ? call_timer_fn+0x590/0x590
[  118.385518][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  118.390706][    C0]  ? sched_clock_cpu+0x6d/0x4c0
[  118.395551][    C0]  run_timer_softirq+0x58/0xd0
[  118.400293][    C0]  __do_softirq+0x21a/0x8de
[  118.404777][    C0]  ? __lock_text_end+0x3/0x3
[  118.409345][    C0]  irq_exit_rcu+0xb7/0x120
[  118.413739][    C0]  sysvec_apic_timer_interrupt+0x95/0xb0
[  118.419357][    C0]  </IRQ>
[  118.422264][    C0]  <TASK>
[  118.425172][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  118.431129][    C0] RIP: 0010:acpi_safe_halt+0x1b/0x20
[  118.436389][    C0] Code: ed c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 65 48 8b 04 25 c0 bc 03 00 48 8b 00 a8 08 75 0c eb 07 0f 00 2d e7 21 ba 00 fb f4 <fa> c3 0f 1f 00 0f b6 47 08 3c 01 74 0b 3c 02 74 05 8b 7f 04 eb 9f
[  118.455970][    C0] RSP: 0018:ffffffff8cc07d68 EFLAGS: 00000246
[  118.462009][    C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8a7fe9c7
[  118.469956][    C0] RDX: 0000000000000001 RSI: ffff888014e9e800 RDI: ffff888014e9e864
[  118.477905][    C0] RBP: ffff888014e9e864 R08: 0000000000000001 R09: ffffed1017306dbd
[  118.485850][    C0] R10: ffff8880b9836deb R11: 0000000000000001 R12: ffff888016ac2800
[  118.493796][    C0] R13: ffffffff8db1c180 R14: 0000000000000000 R15: 0000000000000000
[  118.501747][    C0]  ? ct_kernel_exit+0x137/0x190
[  118.506573][    C0]  acpi_idle_enter+0xc5/0x160
[  118.511225][    C0]  cpuidle_enter_state+0x83/0x500
[  118.516223][    C0]  ? tick_nohz_idle_stop_tick+0x51a/0xb80
[  118.522025][    C0]  cpuidle_enter+0x4e/0xa0
[  118.526427][    C0]  do_idle+0x319/0x400
[  118.530472][    C0]  ? arch_cpu_idle_exit+0x30/0x30
[  118.535472][    C0]  cpu_startup_entry+0x50/0x60
[  118.540211][    C0]  rest_init+0x16f/0x2b0
[  118.544425][    C0]  ? regulator_has_full_constraints+0x9/0x20
[  118.550381][    C0]  ? trace_init_perf_perm_irq_work_exit+0x20/0x20
[  118.556766][    C0]  arch_call_rest_init+0x13/0x30
[  118.561680][    C0]  start_kernel+0x39f/0x480
[  118.566158][    C0]  x86_64_start_reservations+0x18/0x30
[  118.571592][    C0]  x86_64_start_kernel+0xb2/0xc0
[  118.576508][    C0]  secondary_startup_64_no_verify+0x178/0x17b
[  118.582555][    C0]  </TASK>
[  118.585545][    C0] 
[  118.587842][    C0] Allocated by task 2:
[  118.591878][    C0]  kasan_save_stack+0x33/0x50
[  118.596530][    C0]  kasan_set_track+0x25/0x30
[  118.601095][    C0]  __kasan_slab_alloc+0x81/0x90
[  118.605918][    C0]  kmem_cache_alloc_node+0x180/0x330
[  118.611175][    C0]  copy_process+0x41c/0x73f0
[  118.615740][    C0]  kernel_clone+0xfd/0x930
[  118.620128][    C0]  kernel_thread+0xc0/0x100
[  118.624604][    C0]  kthreadd+0x4fb/0x7d0
[  118.628733][    C0]  ret_from_fork+0x45/0x80
[  118.633120][    C0]  ret_from_fork_asm+0x11/0x20
[  118.637858][    C0] 
[  118.640152][    C0] Freed by task 16:
[  118.643925][    C0]  kasan_save_stack+0x33/0x50
[  118.648575][    C0]  kasan_set_track+0x25/0x30
[  118.653139][    C0]  kasan_save_free_info+0x2b/0x40
[  118.658133][    C0]  ____kasan_slab_free+0x15b/0x1b0
[  118.663217][    C0]  slab_free_freelist_hook+0x114/0x1e0
[  118.668651][    C0]  kmem_cache_free+0xf8/0x350
[  118.673300][    C0]  delayed_put_task_struct+0x21b/0x2c0
[  118.678730][    C0]  rcu_core+0x819/0x1680
[  118.682947][    C0]  __do_softirq+0x21a/0x8de
[  118.687425][    C0] 
[  118.689719][    C0] Last potentially related work creation:
[  118.695402][    C0]  kasan_save_stack+0x33/0x50
[  118.700138][    C0]  __kasan_record_aux_stack+0xbc/0xd0
[  118.705485][    C0]  __call_rcu_common.constprop.0+0x9a/0x7a0
[  118.711351][    C0]  put_task_struct_rcu_user+0x87/0xc0
[  118.716695][    C0]  __schedule+0xee3/0x5af0
[  118.721090][    C0]  schedule+0xe9/0x270
[  118.725134][    C0]  worker_thread+0x2e1/0x1290
[  118.729793][    C0]  kthread+0x2c6/0x3a0
[  118.733832][    C0]  ret_from_fork+0x45/0x80
[  118.738309][    C0]  ret_from_fork_asm+0x11/0x20
[  118.743047][    C0] 
[  118.745341][    C0] Second to last potentially related work creation:
[  118.751891][    C0]  kasan_save_stack+0x33/0x50
[  118.756544][    C0]  __kasan_record_aux_stack+0xbc/0xd0
[  118.761971][    C0]  __call_rcu_common.constprop.0+0x9a/0x7a0
[  118.767838][    C0]  put_task_struct_rcu_user+0x87/0xc0
[  118.773181][    C0]  release_task+0xe7d/0x1b10
[  118.777748][    C0]  wait_consider_task+0x17c4/0x40a0
[  118.782932][    C0]  __do_wait+0x1e3/0x890
[  118.787145][    C0]  do_wait+0x212/0x530
[  118.791185][    C0]  kernel_wait4+0x16d/0x280
[  118.795656][    C0]  __do_sys_wait4+0x15b/0x170
[  118.800305][    C0]  do_syscall_64+0x40/0x110
[  118.804789][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  118.810654][    C0] 
[  118.812952][    C0] The buggy address belongs to the object at ffff8880260fbb80
[  118.812952][    C0]  which belongs to the cache task_struct of size 7360
[  118.827080][    C0] The buggy address is located 2552 bytes inside of
[  118.827080][    C0]  freed 7360-byte region [ffff8880260fbb80, ffff8880260fd840)
[  118.841019][    C0] 
[  118.843318][    C0] The buggy address belongs to the physical page:
[  118.849695][    C0] page:ffffea0000983e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x260f8
[  118.859811][    C0] head:ffffea0000983e00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  118.868710][    C0] ksm flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  118.877003][    C0] page_type: 0xffffffff()
[  118.881302][    C0] raw: 00fff00000000840 ffff888015251500 ffffea0000936e00 dead000000000003
[  118.889856][    C0] raw: 0000000000000000 0000000080040004 00000001ffffffff 0000000000000000
[  118.898407][    C0] page dumped because: kasan: bad access detected
[  118.904792][    C0] page_owner tracks the page as allocated
[  118.910485][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 9936606140, free_ts 0
[  118.929992][    C0]  post_alloc_hook+0x2d0/0x350
[  118.934737][    C0]  get_page_from_freelist+0xa25/0x36d0
[  118.940180][    C0]  __alloc_pages+0x22e/0x2420
[  118.944837][    C0]  alloc_pages_mpol+0x258/0x5f0
[  118.949665][    C0]  new_slab+0x283/0x3c0
[  118.953802][    C0]  ___slab_alloc+0x979/0x1500
[  118.958717][    C0]  __slab_alloc.constprop.0+0x56/0xa0
[  118.964066][    C0]  kmem_cache_alloc_node+0x132/0x330
[  118.969326][    C0]  copy_process+0x41c/0x73f0
[  118.973892][    C0]  kernel_clone+0xfd/0x930
[  118.978286][    C0]  kernel_thread+0xc0/0x100
[  118.982763][    C0]  kthreadd+0x4fb/0x7d0
[  118.986895][    C0]  ret_from_fork+0x45/0x80
[  118.991284][    C0]  ret_from_fork_asm+0x11/0x20
[  118.996024][    C0] page_owner free stack trace missing
[  119.001358][    C0] 
[  119.003654][    C0] Memory state around the buggy address:
[  119.009250][    C0]  ffff8880260fc400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  119.017281][    C0]  ffff8880260fc480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  119.025333][    C0] >ffff8880260fc500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  119.033367][    C0]                                                                 ^
[  119.041313][    C0]  ffff8880260fc580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  119.049345][    C0]  ffff8880260fc600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  119.057374][    C0] ==================================================================
[  119.065412][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  119.072587][    C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0
[  119.082377][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[  119.092402][    C0] Call Trace:
[  119.095657][    C0]  <IRQ>
[  119.098479][    C0]  dump_stack_lvl+0xd9/0x1b0
[  119.103049][    C0]  panic+0x6dc/0x790
[  119.106921][    C0]  ? panic_smp_self_stop+0xa0/0xa0
[  119.112006][    C0]  ? rcu_is_watching+0x12/0xb0
[  119.116748][    C0]  ? reacquire_held_locks+0x4c0/0x4c0
[  119.122102][    C0]  ? dump_page+0x700/0x14c0
[  119.126578][    C0]  ? check_panic_on_warn+0x1f/0xb0
[  119.131663][    C0]  check_panic_on_warn+0xab/0xb0
[  119.136577][    C0]  end_report+0x108/0x150
[  119.140883][    C0]  kasan_report+0xea/0x110
[  119.145274][    C0]  ? __lock_acquire+0x2d85/0x3b20
[  119.150274][    C0]  ? __lock_acquire+0x2d85/0x3b20
[  119.155275][    C0]  __lock_acquire+0x2d85/0x3b20
[  119.160148][    C0]  ? lockdep_lock+0xc6/0x200
[  119.164729][    C0]  ? hlock_class+0x130/0x130
[  119.169301][    C0]  ? lockdep_hardirqs_on_prepare+0x420/0x420
[  119.175257][    C0]  ? lockdep_unlock+0x11b/0x290
[  119.180082][    C0]  ? __lock_acquire+0x1fc1/0x3b20
[  119.185084][    C0]  lock_acquire+0x1ae/0x520
[  119.189568][    C0]  ? try_to_wake_up+0xb0/0x13d0
[  119.194392][    C0]  ? lock_sync+0x190/0x190
[  119.198784][    C0]  ? lockdep_hardirqs_on_prepare+0x420/0x420
[  119.204747][    C0]  _raw_spin_lock_irqsave+0x3a/0x50
[  119.209921][    C0]  ? try_to_wake_up+0xb0/0x13d0
[  119.214745][    C0]  try_to_wake_up+0xb0/0x13d0
[  119.219399][    C0]  ? sched_ttwu_pending+0x560/0x560
[  119.224569][    C0]  ? do_raw_spin_unlock+0x173/0x230
[  119.229739][    C0]  ? nilfs_segctor_zeropad_segsum+0x170/0x170
[  119.235780][    C0]  call_timer_fn+0x193/0x590
[  119.240345][    C0]  ? timer_fixup_assert_init+0x210/0x210
[  119.245951][    C0]  ? reacquire_held_locks+0x4c0/0x4c0
[  119.251300][    C0]  ? nilfs_segctor_zeropad_segsum+0x170/0x170
[  119.257348][    C0]  __run_timers+0x764/0xb20
[  119.261831][    C0]  ? call_timer_fn+0x590/0x590
[  119.266569][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  119.271746][    C0]  ? sched_clock_cpu+0x6d/0x4c0
[  119.276579][    C0]  run_timer_softirq+0x58/0xd0
[  119.281322][    C0]  __do_softirq+0x21a/0x8de
[  119.285802][    C0]  ? __lock_text_end+0x3/0x3
[  119.290367][    C0]  irq_exit_rcu+0xb7/0x120
[  119.294758][    C0]  sysvec_apic_timer_interrupt+0x95/0xb0
[  119.300370][    C0]  </IRQ>
[  119.303276][    C0]  <TASK>
[  119.306187][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  119.312148][    C0] RIP: 0010:acpi_safe_halt+0x1b/0x20
[  119.317415][    C0] Code: ed c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 65 48 8b 04 25 c0 bc 03 00 48 8b 00 a8 08 75 0c eb 07 0f 00 2d e7 21 ba 00 fb f4 <fa> c3 0f 1f 00 0f b6 47 08 3c 01 74 0b 3c 02 74 05 8b 7f 04 eb 9f
[  119.336996][    C0] RSP: 0018:ffffffff8cc07d68 EFLAGS: 00000246
[  119.343039][    C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8a7fe9c7
[  119.350985][    C0] RDX: 0000000000000001 RSI: ffff888014e9e800 RDI: ffff888014e9e864
[  119.358930][    C0] RBP: ffff888014e9e864 R08: 0000000000000001 R09: ffffed1017306dbd
[  119.366874][    C0] R10: ffff8880b9836deb R11: 0000000000000001 R12: ffff888016ac2800
[  119.374818][    C0] R13: ffffffff8db1c180 R14: 0000000000000000 R15: 0000000000000000
[  119.382765][    C0]  ? ct_kernel_exit+0x137/0x190
[  119.387594][    C0]  acpi_idle_enter+0xc5/0x160
[  119.392245][    C0]  cpuidle_enter_state+0x83/0x500
[  119.397246][    C0]  ? tick_nohz_idle_stop_tick+0x51a/0xb80
[  119.402942][    C0]  cpuidle_enter+0x4e/0xa0
[  119.407337][    C0]  do_idle+0x319/0x400
[  119.411386][    C0]  ? arch_cpu_idle_exit+0x30/0x30
[  119.416390][    C0]  cpu_startup_entry+0x50/0x60
[  119.421129][    C0]  rest_init+0x16f/0x2b0
[  119.425345][    C0]  ? regulator_has_full_constraints+0x9/0x20
[  119.431303][    C0]  ? trace_init_perf_perm_irq_work_exit+0x20/0x20
[  119.437692][    C0]  arch_call_rest_init+0x13/0x30
[  119.442607][    C0]  start_kernel+0x39f/0x480
[  119.447085][    C0]  x86_64_start_reservations+0x18/0x30
[  119.452523][    C0]  x86_64_start_kernel+0xb2/0xc0
[  119.457441][    C0]  secondary_startup_64_no_verify+0x178/0x17b
[  119.463487][    C0]  </TASK>
[  119.466760][    C0] Kernel Offset: disabled
[  119.471065][    C0] Rebooting in 86400 seconds..