./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1349885689 <...> DUID 00:04:7c:7c:42:18:3f:30:8d:b4:e2:57:c6:a5:0a:a4:65:8b forked to background, child pid 4660 [ 29.285802][ T4661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.299343][ T4661] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.118' (ECDSA) to the list of known hosts. execve("./syz-executor1349885689", ["./syz-executor1349885689"], 0x7ffdfd5c9120 /* 10 vars */) = 0 brk(NULL) = 0x555556a02000 brk(0x555556a02c40) = 0x555556a02c40 arch_prctl(ARCH_SET_FS, 0x555556a02300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1349885689", 4096) = 28 brk(0x555556a23c40) = 0x555556a23c40 brk(0x555556a24000) = 0x555556a24000 mprotect(0x7f417007c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4993 attached , child_tidptr=0x555556a025d0) = 4993 [pid 4992] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] getpid() = 4993 [pid 4993] mkdir("./syzkaller.bK59KK", 0700 [pid 4992] <... clone resumed>, child_tidptr=0x555556a025d0) = 4994 [pid 4992] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a025d0) = 4995 [pid 4992] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 4994 attached ./strace-static-x86_64: Process 4995 attached [pid 4993] chmod("./syzkaller.bK59KK", 0777 [pid 4992] <... clone resumed>, child_tidptr=0x555556a025d0) = 4996 [pid 4992] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] <... chmod resumed>) = 0 [pid 4994] getpid( [pid 4995] getpid( [pid 4993] chdir("./syzkaller.bK59KK" [pid 4992] <... clone resumed>, child_tidptr=0x555556a025d0) = 4997 [pid 4992] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] <... getpid resumed>) = 4995 [pid 4994] <... getpid resumed>) = 4994 [pid 4993] <... chdir resumed>) = 0 [pid 4993] mkdir("./0", 0777 [pid 4994] mkdir("./syzkaller.tKVeuO", 0700 [pid 4992] <... clone resumed>, child_tidptr=0x555556a025d0) = 4998 [pid 4993] <... mkdir resumed>) = 0 [pid 4995] mkdir("./syzkaller.1eCL7V", 0700./strace-static-x86_64: Process 4998 attached [pid 4998] getpid( [pid 4994] <... mkdir resumed>) = 0 [pid 4998] <... getpid resumed>) = 4998 [pid 4998] mkdir("./syzkaller.w1U7i6", 0700 [pid 4995] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 4997 attached [pid 4994] chmod("./syzkaller.tKVeuO", 0777 [pid 4995] chmod("./syzkaller.1eCL7V", 0777./strace-static-x86_64: Process 4996 attached [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4997] getpid() = 4997 [pid 4995] <... chmod resumed>) = 0 [pid 4997] mkdir("./syzkaller.l302g1", 0700 [pid 4994] <... chmod resumed>) = 0 [pid 4993] <... openat resumed>) = 3 [pid 4994] chdir("./syzkaller.tKVeuO" [pid 4995] chdir("./syzkaller.1eCL7V" [pid 4993] ioctl(3, LOOP_CLR_FD [pid 4995] <... chdir resumed>) = 0 [pid 4994] <... chdir resumed>) = 0 [pid 4993] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] mkdir("./0", 0777 [pid 4994] mkdir("./0", 0777 [pid 4995] <... mkdir resumed>) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 4994] <... mkdir resumed>) = 0 [pid 4993] close(3 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4997] chmod("./syzkaller.l302g1", 0777 [pid 4998] <... mkdir resumed>) = 0 [pid 4998] chmod("./syzkaller.w1U7i6", 0777 [pid 4997] <... chmod resumed>) = 0 [pid 4996] getpid( [pid 4995] <... openat resumed>) = 3 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4993] <... close resumed>) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] <... openat resumed>) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] <... clone resumed>, child_tidptr=0x555556a025d0) = 4999 [pid 4995] <... clone resumed>, child_tidptr=0x555556a025d0) = 5000 [pid 4994] <... clone resumed>, child_tidptr=0x555556a025d0) = 5001 ./strace-static-x86_64: Process 4999 attached ./strace-static-x86_64: Process 5000 attached [pid 4998] <... chmod resumed>) = 0 [pid 5000] chdir("./0" [pid 4999] chdir("./0" [pid 4998] chdir("./syzkaller.w1U7i6"./strace-static-x86_64: Process 5001 attached [pid 5000] <... chdir resumed>) = 0 [pid 4999] <... chdir resumed>) = 0 [pid 4998] <... chdir resumed>) = 0 [pid 5001] chdir("./0" [pid 4999] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] mkdir("./0", 0777 [pid 4996] <... getpid resumed>) = 4996 [pid 4999] <... prctl resumed>) = 0 [pid 5000] <... prctl resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5001] <... chdir resumed>) = 0 [pid 5000] setpgid(0, 0 [pid 4999] setpgid(0, 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] <... setpgid resumed>) = 0 [pid 4999] <... setpgid resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4996] mkdir("./syzkaller.92784Y", 0700 [pid 5000] <... openat resumed>) = 3 [pid 5001] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] write(3, "1000", 4 [pid 4999] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4997] chdir("./syzkaller.l302g1" [pid 4996] <... mkdir resumed>) = 0 [pid 5001] <... prctl resumed>) = 0 [pid 5000] <... write resumed>) = 4 [pid 4999] write(3, "1000", 4 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] <... chdir resumed>) = 0 [pid 4996] chmod("./syzkaller.92784Y", 0777 [pid 5001] setpgid(0, 0 [pid 5000] close(3 [pid 4999] <... write resumed>) = 4 [pid 4998] close(3 [pid 4997] mkdir("./0", 0777 [pid 4996] <... chmod resumed>) = 0 [pid 5001] <... setpgid resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] close(3 [pid 4998] <... close resumed>) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 4996] chdir("./syzkaller.92784Y" [pid 5001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4996] <... chdir resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5000] <... symlink resumed>) = 0 [pid 4999] symlink("/dev/binderfs", "./binderfs" [pid 4997] <... openat resumed>) = 3 [pid 4996] mkdir("./0", 0777 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4996] <... mkdir resumed>) = 0 [pid 5001] write(3, "1000", 4 [pid 4999] <... symlink resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5001] <... write resumed>) = 4 [pid 5000] memfd_create("syzkaller", 0 [pid 4999] memfd_create("syzkaller", 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556a025d0) = 5003 [pid 4997] close(3 [pid 4996] <... openat resumed>) = 3 [pid 5001] close(3 [pid 4997] <... close resumed>) = 0 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] close(3 [pid 4997] <... clone resumed>, child_tidptr=0x555556a025d0) = 5004 [pid 4996] <... close resumed>) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a025d0) = 5005 ./strace-static-x86_64: Process 5005 attached ./strace-static-x86_64: Process 5004 attached [pid 5001] <... close resumed>) = 0 [pid 4999] <... memfd_create resumed>) = 3 [pid 5001] symlink("/dev/binderfs", "./binderfs" [pid 4999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5003 attached [pid 5005] chdir("./0" [pid 5001] <... symlink resumed>) = 0 [pid 5005] <... chdir resumed>) = 0 [pid 5004] chdir("./0" [pid 5001] memfd_create("syzkaller", 0 [pid 4999] <... mmap resumed>) = 0x7f4167bc0000 [pid 5005] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5004] <... chdir resumed>) = 0 [pid 5003] chdir("./0" [pid 5001] <... memfd_create resumed>) = 3 [pid 5005] <... prctl resumed>) = 0 [pid 5004] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5005] setpgid(0, 0 [pid 5004] <... prctl resumed>) = 0 [pid 5005] <... setpgid resumed>) = 0 [pid 5004] setpgid(0, 0 [pid 5005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5004] <... setpgid resumed>) = 0 [pid 5005] <... openat resumed>) = 3 [pid 5004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5005] write(3, "1000", 4 [pid 5004] <... openat resumed>) = 3 [pid 5003] <... chdir resumed>) = 0 [pid 5001] <... mmap resumed>) = 0x7f4167bc0000 [pid 5005] <... write resumed>) = 4 [pid 5004] write(3, "1000", 4 [pid 5005] close(3 [pid 5004] <... write resumed>) = 4 [pid 5005] <... close resumed>) = 0 [pid 5004] close(3 [pid 5005] symlink("/dev/binderfs", "./binderfs" [pid 5004] <... close resumed>) = 0 [pid 5005] <... symlink resumed>) = 0 [pid 5004] symlink("/dev/binderfs", "./binderfs" [pid 5005] memfd_create("syzkaller", 0 [pid 5004] <... symlink resumed>) = 0 [pid 5003] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5005] <... memfd_create resumed>) = 3 [pid 5004] memfd_create("syzkaller", 0 [pid 5003] <... prctl resumed>) = 0 [pid 5001] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4999] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5004] <... memfd_create resumed>) = 3 [pid 5003] setpgid(0, 0 [pid 5005] <... mmap resumed>) = 0x7f4167bc0000 [pid 5004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5004] <... mmap resumed>) = 0x7f4167bc0000 [pid 5003] <... setpgid resumed>) = 0 [pid 5000] <... memfd_create resumed>) = 3 [pid 5001] <... write resumed>) = 1048576 [pid 5003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... openat resumed>) = 3 [pid 5003] write(3, "1000", 4 [pid 5000] <... mmap resumed>) = 0x7f4167bc0000 [pid 5003] <... write resumed>) = 4 syzkaller login: [ 57.231860][ T5000] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5000 'syz-executor134' [pid 5003] close(3 [pid 5004] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5003] <... close resumed>) = 0 [pid 5005] <... write resumed>) = 1048576 [pid 5003] symlink("/dev/binderfs", "./binderfs" [pid 5001] munmap(0x7f4167bc0000, 1048576 [pid 5000] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4999] <... write resumed>) = 1048576 [pid 5004] <... write resumed>) = 1048576 [pid 5003] <... symlink resumed>) = 0 [pid 5001] <... munmap resumed>) = 0 [pid 4999] munmap(0x7f4167bc0000, 1048576 [pid 5005] munmap(0x7f4167bc0000, 1048576 [pid 5004] munmap(0x7f4167bc0000, 1048576 [pid 5003] memfd_create("syzkaller", 0 [pid 5001] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4999] <... munmap resumed>) = 0 [pid 5003] <... memfd_create resumed>) = 3 [pid 5001] <... openat resumed>) = 4 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... openat resumed>) = 4 [pid 5005] <... munmap resumed>) = 0 [pid 5004] <... munmap resumed>) = 0 [pid 5003] <... mmap resumed>) = 0x7f4167bc0000 [pid 4999] ioctl(4, LOOP_SET_FD, 3 [pid 5005] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4999] <... ioctl resumed>) = 0 [pid 5005] <... openat resumed>) = 4 [pid 5004] <... openat resumed>) = 4 [pid 5005] ioctl(4, LOOP_SET_FD, 3 [pid 5004] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... write resumed>) = 1048576 [pid 4999] close(3) = 0 [pid 4999] mkdir("./file2", 0777 [pid 5001] <... ioctl resumed>) = 0 [pid 5001] close(3) = 0 [pid 5001] mkdir("./file2", 0777) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] mount("/dev/loop0", "./file2", "nilfs2", 0, "" [pid 5001] mount("/dev/loop1", "./file2", "nilfs2", 0, "" [pid 5005] <... ioctl resumed>) = 0 [pid 5004] <... ioctl resumed>) = 0 [pid 5000] <... write resumed>) = 1048576 [pid 5004] close(3 [pid 5000] munmap(0x7f4167bc0000, 1048576 [pid 5005] close(3) = 0 [pid 5004] <... close resumed>) = 0 [pid 5000] <... munmap resumed>) = 0 [pid 5004] mkdir("./file2", 0777 [pid 5005] mkdir("./file2", 0777 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5000] ioctl(4, LOOP_SET_FD, 3 [ 57.319596][ T5001] loop1: detected capacity change from 0 to 2048 [ 57.334614][ T4999] loop0: detected capacity change from 0 to 2048 [ 57.351962][ T5005] loop3: detected capacity change from 0 to 2048 [ 57.358845][ T5004] loop4: detected capacity change from 0 to 2048 [pid 5003] munmap(0x7f4167bc0000, 1048576 [pid 5005] <... mkdir resumed>) = 0 [pid 5004] <... mkdir resumed>) = 0 [pid 5003] <... munmap resumed>) = 0 [pid 5005] mount("/dev/loop3", "./file2", "nilfs2", 0, "" [pid 5004] mount("/dev/loop4", "./file2", "nilfs2", 0, "" [pid 5000] <... ioctl resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5003] ioctl(4, LOOP_SET_FD, 3 [pid 5000] close(3) = 0 [pid 5000] mkdir("./file2", 0777) = 0 [ 57.375706][ T5000] loop2: detected capacity change from 0 to 2048 [ 57.391660][ T5003] loop5: detected capacity change from 0 to 2048 [pid 5000] mount("/dev/loop2", "./file2", "nilfs2", 0, "" [pid 5003] <... ioctl resumed>) = 0 [pid 5003] close(3) = 0 [pid 5003] mkdir("./file2", 0777) = 0 [pid 5001] <... mount resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 57.416910][ T5009] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 57.428588][ T5010] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 57.435850][ T5007] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 57.439432][ T5008] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5005] <... mount resumed>) = 0 [pid 5004] <... mount resumed>) = 0 [pid 5001] chdir("./file2" [pid 5000] <... mount resumed>) = 0 [pid 4999] <... mount resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5003] mount("/dev/loop5", "./file2", "nilfs2", 0, "" [pid 5001] <... chdir resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5001] ioctl(4, LOOP_CLR_FD [pid 4999] chdir("./file2" [pid 5001] <... ioctl resumed>) = 0 [pid 4999] <... chdir resumed>) = 0 [pid 5001] close(4 [pid 4999] ioctl(4, LOOP_CLR_FD [pid 5005] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5004] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5001] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 4999] <... ioctl resumed>) = 0 [pid 5001] open("./file2", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4999] close(4) = 0 [pid 4999] open("./file2", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5005] <... openat resumed>) = 3 [pid 5004] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 4999] <... open resumed>) = 4 [pid 5005] chdir("./file2" [pid 5004] chdir("./file2" [pid 5003] <... mount resumed>) = 0 [pid 5000] chdir("./file2" [pid 4999] ftruncate(4, 0 [pid 5005] <... chdir resumed>) = 0 [pid 5004] <... chdir resumed>) = 0 [pid 5000] <... chdir resumed>) = 0 [pid 5005] ioctl(4, LOOP_CLR_FD [ 57.454477][ T5011] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 57.484374][ T27] audit: type=1800 audit(1686241698.698:2): pid=4999 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor134" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 57.495910][ T5012] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] ioctl(4, LOOP_CLR_FD [pid 5005] <... ioctl resumed>) = 0 [pid 5004] ioctl(4, LOOP_CLR_FD [pid 5003] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5001] <... open resumed>) = 4 [pid 5000] <... ioctl resumed>) = 0 [pid 5001] ftruncate(4, 0 [pid 5005] close(4 [pid 5004] <... ioctl resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5000] close(4 [pid 5005] <... close resumed>) = 0 [pid 5004] close(4 [pid 5003] chdir("./file2" [pid 5000] <... close resumed>) = 0 [pid 5005] open("./file2", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5004] <... close resumed>) = 0 [pid 5003] <... chdir resumed>) = 0 [pid 5000] open("./file2", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5005] <... open resumed>) = 4 [pid 5004] open("./file2", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5003] ioctl(4, LOOP_CLR_FD [pid 5005] ftruncate(4, 0 [pid 5004] <... open resumed>) = 4 [pid 5003] <... ioctl resumed>) = 0 [ 57.518392][ T4999] NILFS (loop0): vblocknr = 10 has abnormal lifetime: start cno (= 3221225474) > current cno (= 3) [ 57.526659][ T27] audit: type=1800 audit(1686241698.738:3): pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor134" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 57.535052][ T4999] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [pid 5000] <... open resumed>) = 4 [pid 5004] ftruncate(4, 0 [pid 5003] close(4 [ 57.559311][ T5001] NILFS (loop1): vblocknr = 10 has abnormal lifetime: start cno (= 3221225474) > current cno (= 3) [ 57.560708][ T5005] NILFS (loop3): vblocknr = 10 has abnormal lifetime: start cno (= 3221225474) > current cno (= 3) [ 57.583856][ T5004] NILFS (loop4): vblocknr = 10 has abnormal lifetime: start cno (= 3221225474) > current cno (= 3) [ 57.589950][ T27] audit: type=1800 audit(1686241698.778:4): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor134" name="file2" dev="loop3" ino=16 res=0 errno=0 [pid 5000] ftruncate(4, 0 [pid 5003] <... close resumed>) = 0 [pid 5003] open("./file2", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4 [ 57.596956][ T5000] NILFS (loop2): vblocknr = 10 has abnormal lifetime: start cno (= 3221225474) > current cno (= 3) [ 57.631705][ T5003] NILFS (loop5): vblocknr = 10 has abnormal lifetime: start cno (= 3221225474) > current cno (= 3) [ 57.644065][ T4999] Remounting filesystem read-only [ 57.645483][ T5001] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16) [ 57.649269][ T4999] NILFS (loop0): error -5 truncating bmap (ino=16) [pid 5003] ftruncate(4, 0 [pid 4999] <... ftruncate resumed>) = 0 [ 57.661686][ T5004] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=16) [ 57.676275][ T5003] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=16) [ 57.679833][ T27] audit: type=1800 audit(1686241698.778:5): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor134" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 57.694940][ T5000] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16) [pid 4999] write(4, "0x0000000000000000", 18 [pid 5000] <... ftruncate resumed>) = 0 [ 57.715491][ T4999] NILFS (loop0): discard dirty page: offset=0, ino=16 [ 57.722432][ T4999] NILFS (loop0): discard dirty block: blocknr=23, size=1024 [ 57.727004][ T5005] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16) [ 57.730770][ T5004] Remounting filesystem read-only [ 57.739663][ T5000] Remounting filesystem read-only [ 57.744155][ T5001] Remounting filesystem read-only [ 57.749350][ T5000] NILFS (loop2): error -5 truncating bmap (ino=16) [ 57.754464][ T5003] Remounting filesystem read-only [pid 5000] write(4, "0x0000000000000000", 18 [pid 5003] <... ftruncate resumed>) = 0 [ 57.766956][ T5005] Remounting filesystem read-only [ 57.767926][ T5001] NILFS (loop1): error -5 truncating bmap (ino=16) [ 57.773192][ T5000] NILFS (loop2): discard dirty page: offset=0, ino=16 [ 57.780311][ T5003] NILFS (loop5): error -5 truncating bmap (ino=16) [ 57.785917][ T27] audit: type=1800 audit(1686241698.778:6): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor134" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 57.793558][ T5004] NILFS (loop4): error -5 truncating bmap (ino=16) [pid 5003] write(4, "0x0000000000000000", 18 [pid 5001] <... ftruncate resumed>) = 0 [pid 5001] write(4, "0x0000000000000000", 18 [pid 5004] <... ftruncate resumed>) = 0 [ 57.812083][ T5005] NILFS (loop3): error -5 truncating bmap (ino=16) [ 57.826109][ T5001] NILFS (loop1): discard dirty page: offset=0, ino=16 [ 57.826161][ T5003] NILFS (loop5): discard dirty page: offset=0, ino=16 [ 57.833956][ T5004] NILFS (loop4): discard dirty page: offset=0, ino=16 [ 57.840035][ T4999] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 57.848123][ T5000] NILFS (loop2): discard dirty block: blocknr=23, size=1024 [ 57.855819][ T5003] NILFS (loop5): discard dirty block: blocknr=23, size=1024 [pid 5004] write(4, "0x0000000000000000", 18 [pid 5005] <... ftruncate resumed>) = 0 [ 57.864362][ T5001] NILFS (loop1): discard dirty block: blocknr=23, size=1024 [ 57.870485][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 57.879352][ T5004] NILFS (loop4): discard dirty block: blocknr=23, size=1024 [ 57.894634][ T4999] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 57.895897][ T5001] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 57.903748][ T5005] NILFS (loop3): discard dirty page: offset=0, ino=16 [ 57.914568][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 57.928021][ T27] audit: type=1800 audit(1686241698.848:7): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor134" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 57.928065][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 57.949518][ T5001] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 57.957162][ T4999] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 57.967302][ T5004] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 57.983626][ T5005] NILFS (loop3): discard dirty block: blocknr=23, size=1024 [ 57.983647][ T5005] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 57.992245][ T5001] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.008728][ T5005] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5005] write(4, "0x0000000000000000", 18 [pid 4999] <... write resumed>) = -1 EROFS (Read-only file system) [pid 4999] fchdir(-1 [pid 5001] <... write resumed>) = -1 EROFS (Read-only file system) [pid 5001] fchdir(-1) = -1 EBADF (Bad file descriptor) [pid 5001] creat(NULL, 000) = -1 EFAULT (Bad address) [pid 5001] ioctl(-1, _IOC(_IOC_WRITE, 0x66, 0x8, 0x28), 0) = -1 EBADF (Bad file descriptor) [pid 5001] openat(-1, NULL, O_WRONLY|O_EXCL|O_NONBLOCK|O_NOFOLLOW|__O_TMPFILE, 0102) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5001] ioctl(-1, BTRFS_IOC_GET_SUBVOL_INFO, 0) = -1 EBADF (Bad file descriptor) [pid 5001] ioctl(-1, BTRFS_IOC_BALANCE_V2, NULL) = -1 EBADF (Bad file descriptor) [pid 5001] write(4, "\x0b\x00\x00\x00\x10\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00", 24 [pid 4999] <... fchdir resumed>) = -1 EBADF (Bad file descriptor) [pid 5005] <... write resumed>) = -1 EROFS (Read-only file system) [pid 4999] creat(NULL, 000 [pid 5004] <... write resumed>) = -1 EROFS (Read-only file system) [pid 5004] fchdir(-1) = -1 EBADF (Bad file descriptor) [pid 5004] creat(NULL, 000) = -1 EFAULT (Bad address) [pid 5004] ioctl(-1, _IOC(_IOC_WRITE, 0x66, 0x8, 0x28), 0) = -1 EBADF (Bad file descriptor) [pid 5004] openat(-1, NULL, O_WRONLY|O_EXCL|O_NONBLOCK|O_NOFOLLOW|__O_TMPFILE, 0102) = -1 EINVAL (Invalid argument) [ 58.008750][ T5005] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.018920][ T5004] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.026865][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.037076][ T5004] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.044688][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5004] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5004] ioctl(-1, BTRFS_IOC_GET_SUBVOL_INFO, 0) = -1 EBADF (Bad file descriptor) [pid 5005] fchdir(-1 [pid 5004] ioctl(-1, BTRFS_IOC_BALANCE_V2, NULL [pid 4999] <... creat resumed>) = -1 EFAULT (Bad address) [pid 5005] <... fchdir resumed>) = -1 EBADF (Bad file descriptor) [pid 5004] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5003] <... write resumed>) = -1 EROFS (Read-only file system) [pid 5000] <... write resumed>) = -1 EROFS (Read-only file system) [pid 4999] ioctl(-1, _IOC(_IOC_WRITE, 0x66, 0x8, 0x28), 0 [pid 5005] creat(NULL, 000 [pid 5003] fchdir(-1 [pid 4999] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5005] <... creat resumed>) = -1 EFAULT (Bad address) [pid 5003] <... fchdir resumed>) = -1 EBADF (Bad file descriptor) [pid 4999] openat(-1, NULL, O_WRONLY|O_EXCL|O_NONBLOCK|O_NOFOLLOW|__O_TMPFILE, 0102 [pid 5005] ioctl(-1, _IOC(_IOC_WRITE, 0x66, 0x8, 0x28), 0 [pid 5003] creat(NULL, 000 [pid 4999] <... openat resumed>) = -1 EINVAL (Invalid argument) [pid 5005] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5003] <... creat resumed>) = -1 EFAULT (Bad address) [pid 4999] openat(AT_FDCWD, NULL, O_RDWR [pid 5005] openat(-1, NULL, O_WRONLY|O_EXCL|O_NONBLOCK|O_NOFOLLOW|__O_TMPFILE, 0102 [pid 5003] ioctl(-1, _IOC(_IOC_WRITE, 0x66, 0x8, 0x28), 0 [pid 4999] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5005] <... openat resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4999] ioctl(-1, BTRFS_IOC_GET_SUBVOL_INFO, 0 [pid 5005] openat(AT_FDCWD, NULL, O_RDWR [pid 5003] openat(-1, NULL, O_WRONLY|O_EXCL|O_NONBLOCK|O_NOFOLLOW|__O_TMPFILE, 0102 [pid 4999] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5005] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5003] <... openat resumed>) = -1 EINVAL (Invalid argument) [pid 4999] ioctl(-1, BTRFS_IOC_BALANCE_V2, NULL [pid 5005] ioctl(-1, BTRFS_IOC_GET_SUBVOL_INFO, 0 [pid 5003] openat(AT_FDCWD, NULL, O_RDWR [pid 4999] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5005] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5003] <... openat resumed>) = -1 EFAULT (Bad address) [pid 4999] write(4, "\x0b\x00\x00\x00\x10\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00", 24 [pid 5005] ioctl(-1, BTRFS_IOC_BALANCE_V2, NULL [pid 5003] ioctl(-1, BTRFS_IOC_GET_SUBVOL_INFO, 0 [pid 5005] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5003] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5005] write(4, "\x0b\x00\x00\x00\x10\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00", 24 [pid 5003] ioctl(-1, BTRFS_IOC_BALANCE_V2, NULL) = -1 EBADF (Bad file descriptor) [pid 5004] write(4, "\x0b\x00\x00\x00\x10\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00", 24 [ 58.064163][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.074651][ T5001] NILFS (loop1): discard dirty page: offset=0, ino=16 [ 58.078600][ T4999] NILFS (loop0): discard dirty page: offset=0, ino=16 [ 58.081950][ T5001] NILFS (loop1): discard dirty block: blocknr=23, size=1024 [ 58.089768][ T5005] NILFS (loop3): discard dirty page: offset=0, ino=16 [ 58.096234][ T5001] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.103764][ T5003] NILFS (loop5): discard dirty page: offset=0, ino=16 [pid 5003] write(4, "\x0b\x00\x00\x00\x10\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00", 24 [pid 5000] fchdir(-1 [pid 5001] <... write resumed>) = -1 EROFS (Read-only file system) [pid 5000] <... fchdir resumed>) = -1 EBADF (Bad file descriptor) [pid 5000] creat(NULL, 000) = -1 EFAULT (Bad address) [pid 5000] ioctl(-1, _IOC(_IOC_WRITE, 0x66, 0x8, 0x28), 0) = -1 EBADF (Bad file descriptor) [pid 5000] openat(-1, NULL, O_WRONLY|O_EXCL|O_NONBLOCK|O_NOFOLLOW|__O_TMPFILE, 0102) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5000] ioctl(-1, BTRFS_IOC_GET_SUBVOL_INFO, 0) = -1 EBADF (Bad file descriptor) [pid 5000] ioctl(-1, BTRFS_IOC_BALANCE_V2, NULL) = -1 EBADF (Bad file descriptor) [ 58.111779][ T5001] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.127011][ T5001] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.127610][ T5005] NILFS (loop3): discard dirty block: blocknr=23, size=1024 [ 58.136681][ T4999] NILFS (loop0): discard dirty block: blocknr=23, size=1024 [ 58.143619][ T5004] NILFS (loop4): discard dirty page: offset=0, ino=16 [ 58.150739][ T4999] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5000] write(4, "\x0b\x00\x00\x00\x10\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00", 24 [pid 5001] exit_group(0) = ? [ 58.166914][ T5000] NILFS (loop2): discard dirty page: offset=0, ino=16 [ 58.167024][ T4999] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.174175][ T5000] NILFS (loop2): discard dirty block: blocknr=23, size=1024 [ 58.183268][ T4999] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.190514][ T5003] NILFS (loop5): discard dirty block: blocknr=23, size=1024 [ 58.201316][ T5005] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5001] +++ exited with 0 +++ [pid 4999] <... write resumed>) = -1 EROFS (Read-only file system) [pid 4999] exit_group(0) = ? [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5001, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5005] <... write resumed>) = -1 EROFS (Read-only file system) [pid 4999] +++ exited with 0 +++ [ 58.206929][ T5004] NILFS (loop4): discard dirty block: blocknr=23, size=1024 [ 58.215712][ T5005] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.223337][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.231759][ T5005] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.241453][ T5004] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.250860][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 4994] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] exit_group(0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] <... exit_group resumed>) = ? [pid 4994] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4999, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5005] +++ exited with 0 +++ [pid 5003] <... write resumed>) = -1 EROFS (Read-only file system) [pid 4994] <... openat resumed>) = 3 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5005, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 4996] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556a03620 /* 4 entries */, 32768) = 112 [pid 4996] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./0/binderfs") = 0 [pid 4996] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] exit_group(0 [pid 5000] <... write resumed>) = -1 EROFS (Read-only file system) [pid 4994] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] exit_group(0 [pid 4994] getdents64(3, [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... exit_group resumed>) = ? [pid 5000] <... exit_group resumed>) = ? [pid 4994] <... getdents64 resumed>0x555556a03620 /* 4 entries */, 32768) = 112 [ 58.259323][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.267645][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.285307][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.286283][ T5004] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.296088][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 4993] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] +++ exited with 0 +++ [pid 5000] +++ exited with 0 +++ [pid 4994] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... openat resumed>) = 3 [pid 5004] <... write resumed>) = -1 EROFS (Read-only file system) [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5000, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] fstat(3, [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5003, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 4994] lstat("./0/binderfs", [pid 4993] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4993] getdents64(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] unlink("./0/binderfs" [pid 4993] <... getdents64 resumed>0x555556a03620 /* 4 entries */, 32768) = 112 [pid 4998] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... unlink resumed>) = 0 [pid 4993] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... openat resumed>) = 3 [pid 4995] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] fstat(3, [pid 4995] <... openat resumed>) = 3 [pid 4993] lstat("./0/binderfs", [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] fstat(3, [pid 4993] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] getdents64(3, [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] unlink("./0/binderfs" [pid 4998] <... getdents64 resumed>0x555556a03620 /* 4 entries */, 32768) = 112 [pid 4995] getdents64(3, [pid 4993] <... unlink resumed>) = 0 [pid 4998] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... getdents64 resumed>0x555556a03620 /* 4 entries */, 32768) = 112 [pid 4993] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] lstat("./0/binderfs", [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] lstat("./0/binderfs", [pid 4998] unlink("./0/binderfs" [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 4995] unlink("./0/binderfs" [pid 5004] exit_group(0 [pid 4998] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... unlink resumed>) = 0 [ 58.314261][ T5004] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.325774][ T4996] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 58.336893][ T4996] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 58.337032][ T4994] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 58.337051][ T4994] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 58.344746][ T4996] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 4995] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... exit_group resumed>) = ? [pid 5004] +++ exited with 0 +++ [ 58.353186][ T4994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.360167][ T4996] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.367659][ T4993] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 58.376702][ T4996] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.385924][ T4994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.395020][ T4996] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5004, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [ 58.402179][ T4998] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 58.413133][ T4996] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 58.419441][ T4993] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 58.426586][ T4996] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.449543][ T4995] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 58.450000][ T4996] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.456883][ T4995] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [pid 4997] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 58.466893][ T4994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.473090][ T4998] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 58.482830][ T4994] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 58.489255][ T4993] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.498736][ T4996] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 58.514115][ T4995] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 4997] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 58.514136][ T4995] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.514150][ T4995] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.514383][ T4995] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 58.525565][ T4994] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 58.540722][ T4998] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... umount2 resumed>) = 0 [pid 4994] <... umount2 resumed>) = 0 [pid 4997] getdents64(3, [ 58.540742][ T4998] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.540757][ T4998] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.540964][ T4998] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 58.550683][ T4996] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.556486][ T4993] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.574121][ T4994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 4994] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... getdents64 resumed>0x555556a03620 /* 4 entries */, 32768) = 112 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] lstat("./0/file2", [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] lstat("./0/binderfs", [pid 4994] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] unlink("./0/binderfs" [pid 4994] openat(AT_FDCWD, "./0/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... unlink resumed>) = 0 [pid 4994] <... openat resumed>) = 4 [pid 4997] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x555556a0b660 /* 2 entries */, 32768) = 48 [pid 4996] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] getdents64(4, [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... getdents64 resumed>0x555556a0b660 /* 0 entries */, 32768) = 0 [pid 4996] lstat("./0/file2", [pid 4994] close(4 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... close resumed>) = 0 [pid 4996] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] rmdir("./0/file2" [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... rmdir resumed>) = 0 [pid 4996] openat(AT_FDCWD, "./0/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] getdents64(3, [pid 4996] <... openat resumed>) = 4 [pid 4994] <... getdents64 resumed>0x555556a03620 /* 0 entries */, 32768) = 0 [pid 4996] fstat(4, [pid 4994] close(3 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... close resumed>) = 0 [pid 4996] getdents64(4, [pid 4994] rmdir("./0" [pid 4996] <... getdents64 resumed>0x555556a0b660 /* 2 entries */, 32768) = 48 [pid 4994] <... rmdir resumed>) = 0 [pid 4996] getdents64(4, [pid 4994] mkdir("./1", 0777 [pid 4996] <... getdents64 resumed>0x555556a0b660 /* 0 entries */, 32768) = 0 [pid 4994] <... mkdir resumed>) = 0 [pid 4996] close(4 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4996] <... close resumed>) = 0 [pid 4994] <... openat resumed>) = 3 [pid 4996] rmdir("./0/file2" [pid 4994] ioctl(3, LOOP_CLR_FD [pid 4996] <... rmdir resumed>) = 0 [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 58.574143][ T4994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.574158][ T4994] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 58.574172][ T4994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.653472][ T4997] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 58.653759][ T4995] NILFS (loop2): discard dirty page: offset=0, ino=3 [pid 4996] getdents64(3, [pid 4994] close(3 [pid 4996] <... getdents64 resumed>0x555556a03620 /* 0 entries */, 32768) = 0 [pid 4994] <... close resumed>) = 0 [pid 4996] close(3 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] <... close resumed>) = 0 [pid 4996] rmdir("./0") = 0 [pid 4996] mkdir("./1", 0777) = 0 [pid 4994] <... clone resumed>, child_tidptr=0x555556a025d0) = 5013 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5014 attached , child_tidptr=0x555556a025d0) = 5014 ./strace-static-x86_64: Process 5013 attached [pid 5014] chdir("./1" [pid 5013] chdir("./1") = 0 [pid 5014] <... chdir resumed>) = 0 [pid 5014] prctl(PR_SET_PDEATHSIG, SIGKILL [ 58.660424][ T4997] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 58.668315][ T4998] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 58.681414][ T4995] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.691364][ T4998] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.701348][ T4995] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.710539][ T4998] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5013] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5014] <... prctl resumed>) = 0 [pid 5013] <... prctl resumed>) = 0 [pid 5014] setpgid(0, 0 [pid 5013] setpgid(0, 0 [pid 5014] <... setpgid resumed>) = 0 [pid 5013] <... setpgid resumed>) = 0 [ 58.718645][ T4997] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.719583][ T4995] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 58.731304][ T4997] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.736142][ T4998] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 58.746599][ T4997] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.752112][ T4995] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] <... openat resumed>) = 3 [pid 5013] <... openat resumed>) = 3 [pid 5013] write(3, "1000", 4 [pid 5014] write(3, "1000", 4 [pid 5013] <... write resumed>) = 4 [pid 5014] <... write resumed>) = 4 [pid 5013] close(3 [pid 5014] close(3 [pid 5013] <... close resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5013] symlink("/dev/binderfs", "./binderfs" [pid 5014] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5013] <... symlink resumed>) = 0 [pid 5014] memfd_create("syzkaller", 0 [pid 5013] memfd_create("syzkaller", 0 [pid 5014] <... memfd_create resumed>) = 3 [pid 5014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] <... memfd_create resumed>) = 3 [pid 5014] <... mmap resumed>) = 0x7f4167bc0000 [pid 5013] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... umount2 resumed>) = 0 [pid 4995] <... umount2 resumed>) = 0 [pid 5013] <... mmap resumed>) = 0x7f4167bc0000 [pid 4998] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./0/file2", [pid 4995] lstat("./0/file2", [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4998] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./0/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] openat(AT_FDCWD, "./0/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... openat resumed>) = 4 [pid 4995] <... openat resumed>) = 4 [pid 4998] fstat(4, [pid 4995] fstat(4, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 4995] getdents64(4, [pid 4998] <... getdents64 resumed>0x555556a0b660 /* 2 entries */, 32768) = 48 [pid 4995] <... getdents64 resumed>0x555556a0b660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, [pid 4995] getdents64(4, [pid 4998] <... getdents64 resumed>0x555556a0b660 /* 0 entries */, 32768) = 0 [pid 4995] <... getdents64 resumed>0x555556a0b660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4995] close(4 [ 58.762814][ T4997] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 58.778651][ T4998] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.801180][ T4993] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 4998] rmdir("./0/file2" [pid 4995] <... close resumed>) = 0 [pid 5014] <... write resumed>) = 1048576 [pid 5013] <... write resumed>) = 1048576 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 4995] rmdir("./0/file2" [pid 5014] munmap(0x7f4167bc0000, 1048576 [pid 5013] munmap(0x7f4167bc0000, 1048576 [pid 4998] <... getdents64 resumed>0x555556a03620 /* 0 entries */, 32768) = 0 [pid 5014] <... munmap resumed>) = 0 [pid 5013] <... munmap resumed>) = 0 [pid 4998] close(3 [pid 4995] <... rmdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] <... close resumed>) = 0 [pid 4995] getdents64(3, [pid 5014] <... openat resumed>) = 4 [pid 5013] <... openat resumed>) = 4 [pid 4998] rmdir("./0" [pid 4995] <... getdents64 resumed>0x555556a03620 /* 0 entries */, 32768) = 0 [pid 5014] ioctl(4, LOOP_SET_FD, 3 [pid 5013] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... rmdir resumed>) = 0 [ 58.842439][ T4993] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 58.857388][ T4993] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 58.865494][ T4997] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 58.873363][ T5014] loop3: detected capacity change from 0 to 2048 [ 58.877041][ T4993] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 4995] close(3 [pid 4998] mkdir("./1", 0777 [pid 4995] <... close resumed>) = 0 [pid 5014] <... ioctl resumed>) = 0 [pid 5013] <... ioctl resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 4995] rmdir("./0" [pid 5014] close(3 [pid 5013] close(3 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4995] <... rmdir resumed>) = 0 [ 58.879875][ T5013] loop1: detected capacity change from 0 to 2048 [ 58.889547][ T4993] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.895705][ T4997] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.905580][ T4993] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 58.914290][ T4997] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.921771][ T4993] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5014] <... close resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5014] mkdir("./file2", 0777 [pid 5013] mkdir("./file2", 0777 [pid 4998] <... openat resumed>) = 3 [pid 4995] mkdir("./1", 0777 [pid 5014] <... mkdir resumed>) = 0 [pid 5013] <... mkdir resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] <... mkdir resumed>) = 0 [pid 5013] mount("/dev/loop1", "./file2", "nilfs2", 0, "" [pid 5014] mount("/dev/loop3", "./file2", "nilfs2", 0, "" [pid 4998] close(3 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] <... close resumed>) = 0 [pid 4995] <... openat resumed>) = 3 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556a025d0) = 5015 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a025d0) = 5016 [pid 4997] <... umount2 resumed>) = 0 [pid 5013] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5016 attached [pid 5016] chdir("./1") = 0 [pid 5016] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 5015 attached [pid 5013] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [ 58.930121][ T4997] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 58.946189][ T4997] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.978411][ T5017] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4997] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] setpgid(0, 0 [pid 5015] chdir("./1" [pid 5014] <... mount resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... setpgid resumed>) = 0 [pid 5015] <... chdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5013] chdir("./file2" [pid 4997] lstat("./0/file2", [pid 4993] <... umount2 resumed>) = 0 [pid 5016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5015] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5014] <... openat resumed>) = 3 [pid 5013] <... chdir resumed>) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] <... prctl resumed>) = 0 [pid 5014] chdir("./file2" [pid 5013] ioctl(4, LOOP_CLR_FD [pid 5016] <... openat resumed>) = 3 [pid 5015] setpgid(0, 0 [pid 5014] <... chdir resumed>) = 0 [pid 5013] <... ioctl resumed>) = 0 [pid 4997] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] write(3, "1000", 4 [pid 5015] <... setpgid resumed>) = 0 [pid 5014] ioctl(4, LOOP_CLR_FD [pid 5013] close(4 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... write resumed>) = 4 [pid 5015] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] <... ioctl resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./0/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] close(3 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... close resumed>) = 0 [ 59.000120][ T5018] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5015] <... openat resumed>) = 3 [pid 5014] close(4 [pid 5013] open("./file2", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4997] <... openat resumed>) = 4 [pid 5016] symlink("/dev/binderfs", "./binderfs" [pid 5015] write(3, "1000", 4 [pid 5014] <... close resumed>) = 0 [pid 4993] lstat("./0/file2", [pid 5016] <... symlink resumed>) = 0 [pid 5015] <... write resumed>) = 4 [pid 5014] open("./file2", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5013] <... open resumed>) = 4 [pid 4997] fstat(4, [pid 4993] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5016] memfd_create("syzkaller", 0 [pid 5015] close(3 [pid 5014] <... open resumed>) = 4 [pid 5013] ftruncate(4, 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... memfd_create resumed>) = 3 [pid 5015] <... close resumed>) = 0 [pid 5014] ftruncate(4, 0 [pid 4997] getdents64(4, [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4993] openat(AT_FDCWD, "./0/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] <... mmap resumed>) = 0x7f4167bc0000 [pid 4993] <... openat resumed>) = 4 [pid 4993] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(4, 0x555556a0b660 /* 2 entries */, 32768) = 48 [pid 5015] symlink("/dev/binderfs", "./binderfs" [pid 4997] <... getdents64 resumed>0x555556a0b660 /* 2 entries */, 32768) = 48 [pid 4993] getdents64(4, [pid 5015] <... symlink resumed>) = 0 [pid 4997] getdents64(4, [pid 4993] <... getdents64 resumed>0x555556a0b660 /* 0 entries */, 32768) = 0 [pid 4993] close(4) = 0 [pid 5016] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4993] rmdir("./0/file2") = 0 [pid 4993] getdents64(3, [pid 5016] <... write resumed>) = 1048576 [pid 5015] memfd_create("syzkaller", 0 [pid 4997] <... getdents64 resumed>0x555556a0b660 /* 0 entries */, 32768) = 0 [pid 4993] <... getdents64 resumed>0x555556a03620 /* 0 entries */, 32768) = 0 [pid 5015] <... memfd_create resumed>) = 3 [pid 4997] close(4 [pid 4993] close(3 [pid 5015] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4997] <... close resumed>) = 0 [pid 4993] <... close resumed>) = 0 [pid 5015] <... mmap resumed>) = 0x7f4167bc0000 [pid 4997] rmdir("./0/file2" [pid 4993] rmdir("./0") = 0 [pid 4993] mkdir("./1", 0777) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4993] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4993] close(3 [pid 5015] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4993] <... close resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4997] getdents64(3, [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... getdents64 resumed>0x555556a03620 /* 0 entries */, 32768) = 0 [pid 4997] close(3 [pid 4993] <... clone resumed>, child_tidptr=0x555556a025d0) = 5021 [pid 4997] <... close resumed>) = 0 [ 59.035722][ T27] audit: type=1800 audit(1686241700.258:8): pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor134" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 59.065090][ T5013] NILFS (loop1): vblocknr = 10 has abnormal lifetime: start cno (= 3221225474) > current cno (= 3) [ 59.078273][ T5014] NILFS (loop3): vblocknr = 10 has abnormal lifetime: start cno (= 3221225474) > current cno (= 3) [pid 4997] rmdir("./0") = 0 [pid 4997] mkdir("./1", 0777./strace-static-x86_64: Process 5021 attached [pid 5021] chdir("./1") = 0 [pid 5021] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5021] setpgid(0, 0) = 0 [pid 5021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5021] write(3, "1000", 4) = 4 [pid 5016] munmap(0x7f4167bc0000, 1048576 [pid 5021] close(3) = 0 [pid 5021] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 5021] memfd_create("syzkaller", 0 [pid 5016] <... munmap resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5021] <... memfd_create resumed>) = 3 [pid 5016] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4997] <... openat resumed>) = 3 [pid 5021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] <... openat resumed>) = 4 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5021] <... mmap resumed>) = 0x7f4167bc0000 [pid 5016] ioctl(4, LOOP_SET_FD, 3 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5015] <... write resumed>) = 1048576 [pid 4997] close(3 [pid 5016] <... ioctl resumed>) = 0 [pid 5016] close(3) = 0 [pid 5016] mkdir("./file2", 0777) = 0 [ 59.106558][ T5013] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16) [ 59.115907][ T5014] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16) [ 59.132932][ T5016] loop2: detected capacity change from 0 to 2048 [pid 5016] mount("/dev/loop2", "./file2", "nilfs2", 0, "" [pid 5015] munmap(0x7f4167bc0000, 1048576 [pid 4997] <... close resumed>) = 0 [pid 5015] <... munmap resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 4997] <... clone resumed>, child_tidptr=0x555556a025d0) = 5022 [pid 5015] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5022 attached ) = 0 [ 59.142664][ T27] audit: type=1800 audit(1686241700.278:9): pid=5014 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor134" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 59.161699][ T5013] Remounting filesystem read-only [ 59.174666][ T5014] Remounting filesystem read-only [ 59.182529][ T5015] loop5: detected capacity change from 0 to 2048 [ 59.183386][ T5013] NILFS (loop1): error -5 truncating bmap (ino=16) [ 59.193594][ T5014] NILFS (loop3): error -5 truncating bmap (ino=16) [pid 5022] chdir("./1" [pid 5021] <... write resumed>) = 1048576 [pid 5015] close(3 [pid 5014] <... ftruncate resumed>) = 0 [pid 5013] <... ftruncate resumed>) = 0 [pid 5022] <... chdir resumed>) = 0 [pid 5021] munmap(0x7f4167bc0000, 1048576 [pid 5015] <... close resumed>) = 0 [pid 5014] write(4, "0x0000000000000000", 18 [pid 5022] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5021] <... munmap resumed>) = 0 [pid 5015] mkdir("./file2", 0777 [pid 5022] <... prctl resumed>) = 0 [pid 5021] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5015] <... mkdir resumed>) = 0 [pid 5022] setpgid(0, 0