./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1743852556

<...>
forked to background, child pid 4653
no interfaces have a carrier
[   20.887243][ T4654] 8021q: adding VLAN 0 to HW filter on device bond0
[   20.897737][ T4654] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.0.245' (ECDSA) to the list of known hosts.
execve("./syz-executor1743852556", ["./syz-executor1743852556"], 0x7ffe9bc68a70 /* 10 vars */) = 0
brk(NULL)                               = 0x555555b3b000
brk(0x555555b3bc40)                     = 0x555555b3bc40
arch_prctl(ARCH_SET_FS, 0x555555b3b300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1743852556", 4096) = 28
brk(0x555555b5cc40)                     = 0x555555b5cc40
brk(0x555555b5d000)                     = 0x555555b5d000
mprotect(0x7fe4e3b1d000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
getpid()                                = 5081
mkdir("./syzkaller.bMa6Km", 0700)       = 0
chmod("./syzkaller.bMa6Km", 0777)       = 0
chdir("./syzkaller.bMa6Km")             = 0
mkdir("./0", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b3b5d0) = 5083
./strace-static-x86_64: Process 5083 attached
[pid  5083] chdir("./0")                = 0
[pid  5083] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5083] setpgid(0, 0)               = 0
[pid  5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5083] write(3, "1000", 4)         = 4
[pid  5083] close(3)                    = 0
[pid  5083] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5083] memfd_create("syzkaller", 0) = 3
[pid  5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4db661000
[pid  5083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5083] munmap(0x7fe4db661000, 1048576) = 0
[pid  5083] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5083] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5083] close(3)                    = 0
[pid  5083] mkdir("./file0", 0777)      = 0
[pid  5083] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME|MS_I_VERSION, "") = 0
[pid  5083] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5083] chdir("./file0")            = 0
[pid  5083] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5083] close(4)                    = 0
syzkaller login: [   39.564586][ T5083] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5083 'syz-executor174'
[   39.583973][ T5083] loop0: detected capacity change from 0 to 2048
[   39.601580][ T5084] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5083] rmdir("./file0")            = 0
[pid  5083] openat(AT_FDCWD, "/proc/sys/vm/compact_memory", O_WRONLY) = 4
[   39.617485][ T5083] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=6
[   39.638873][ T5083] Remounting filesystem read-only
[pid  5083] write(4, NULL, 0)           = 0
[pid  5083] exit_group(0)               = ?
[pid  5083] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5083, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555b3c620 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./0/binderfs")                  = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555b44660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555b44660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./0/file0")                      = 0
getdents64(3, 0x555555b3c620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./0")                            = 0
mkdir("./1", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b3b5d0) = 5085
./strace-static-x86_64: Process 5085 attached
[pid  5085] chdir("./1")                = 0
[pid  5085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5085] setpgid(0, 0)               = 0
[pid  5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5085] write(3, "1000", 4)         = 4
[pid  5085] close(3)                    = 0
[pid  5085] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5085] memfd_create("syzkaller", 0) = 3
[pid  5085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4db661000
[pid  5085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5085] munmap(0x7fe4db661000, 1048576) = 0
[pid  5085] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5085] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5085] close(3)                    = 0
[pid  5085] mkdir("./file0", 0777)      = 0
[pid  5085] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME|MS_I_VERSION, "") = 0
[pid  5085] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5085] chdir("./file0")            = 0
[pid  5085] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5085] close(4)                    = 0
[pid  5085] rmdir("./file0")            = 0
[pid  5085] openat(AT_FDCWD, "/proc/sys/vm/compact_memory", O_WRONLY) = 4
[   39.836755][ T5085] loop0: detected capacity change from 0 to 2048
[   39.850640][ T5086] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   39.854933][ T5085] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=6
[   39.878115][ T5085] Remounting filesystem read-only
[pid  5085] write(4, NULL, 0)           = 0
[pid  5085] exit_group(0)               = ?
[pid  5085] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5085, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} ---
umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555b3c620 /* 4 entries */, 32768) = 112
umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./1/binderfs")                  = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555b44660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555b44660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./1/file0")                      = 0
getdents64(3, 0x555555b3c620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./1")                            = 0
mkdir("./2", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b3b5d0) = 5087
./strace-static-x86_64: Process 5087 attached
[pid  5087] chdir("./2")                = 0
[pid  5087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5087] setpgid(0, 0)               = 0
[pid  5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5087] write(3, "1000", 4)         = 4
[pid  5087] close(3)                    = 0
[pid  5087] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5087] memfd_create("syzkaller", 0) = 3
[pid  5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4db661000
[pid  5087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5087] munmap(0x7fe4db661000, 1048576) = 0
[pid  5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5087] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5087] close(3)                    = 0
[pid  5087] mkdir("./file0", 0777)      = 0
[pid  5087] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME|MS_I_VERSION, "") = 0
[pid  5087] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5087] chdir("./file0")            = 0
[pid  5087] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5087] close(4)                    = 0
[   39.985865][ T5087] loop0: detected capacity change from 0 to 2048
[   40.000316][ T5088] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5087] rmdir("./file0")            = 0
[pid  5087] openat(AT_FDCWD, "/proc/sys/vm/compact_memory", O_WRONLY) = 4
[pid  5087] write(4, NULL, 0)           = 0
[pid  5087] exit_group(0)               = ?
[pid  5087] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5087, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} ---
umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555b3c620 /* 4 entries */, 32768) = 112
umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
[   40.024769][ T5087] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=6
[   40.041953][ T5087] Remounting filesystem read-only
unlink("./2/binderfs")                  = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555b44660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555b44660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./2/file0")                      = 0
getdents64(3, 0x555555b3c620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./2")                            = 0
mkdir("./3", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5089 attached
, child_tidptr=0x555555b3b5d0) = 5089
[pid  5089] chdir("./3")                = 0
[pid  5089] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5089] setpgid(0, 0)               = 0
[pid  5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5089] write(3, "1000", 4)         = 4
[pid  5089] close(3)                    = 0
[pid  5089] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5089] memfd_create("syzkaller", 0) = 3
[pid  5089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4db661000
[pid  5089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5089] munmap(0x7fe4db661000, 1048576) = 0
[pid  5089] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5089] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5089] close(3)                    = 0
[pid  5089] mkdir("./file0", 0777)      = 0
[pid  5089] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME|MS_I_VERSION, "") = 0
[pid  5089] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5089] chdir("./file0")            = 0
[pid  5089] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5089] close(4)                    = 0
[pid  5089] rmdir("./file0")            = 0
[pid  5089] openat(AT_FDCWD, "/proc/sys/vm/compact_memory", O_WRONLY) = 4
[   40.134334][ T5089] loop0: detected capacity change from 0 to 2048
[   40.147890][ T5090] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   40.162860][ T5089] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=6
[   40.179154][ T5089] Remounting filesystem read-only
[pid  5089] write(4, NULL, 0)           = 0
[pid  5089] exit_group(0)               = ?
[pid  5089] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5089, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555b3c620 /* 4 entries */, 32768) = 112
umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./3/binderfs")                  = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555b44660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555b44660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./3/file0")                      = 0
getdents64(3, 0x555555b3c620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./3")                            = 0
mkdir("./4", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5091 attached
 <unfinished ...>
[pid  5091] chdir("./4")                = 0
[pid  5091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5091] setpgid(0, 0)               = 0
[pid  5091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5091] write(3, "1000", 4)         = 4
[pid  5091] close(3)                    = 0
[pid  5091] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5081] <... clone resumed>, child_tidptr=0x555555b3b5d0) = 5091
[pid  5091] memfd_create("syzkaller", 0) = 3
[pid  5091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4db661000
[pid  5091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5091] munmap(0x7fe4db661000, 1048576) = 0
[pid  5091] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5091] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5091] close(3)                    = 0
[pid  5091] mkdir("./file0", 0777)      = 0
[pid  5091] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME|MS_I_VERSION, "") = 0
[pid  5091] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5091] chdir("./file0")            = 0
[pid  5091] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5091] close(4)                    = 0
[   40.282163][ T5091] loop0: detected capacity change from 0 to 2048
[   40.295633][ T5092] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   40.312162][ T5091] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=6
[pid  5091] rmdir("./file0")            = 0
[pid  5091] openat(AT_FDCWD, "/proc/sys/vm/compact_memory", O_WRONLY) = 4
[   40.328731][ T5091] Remounting filesystem read-only
[pid  5091] write(4, NULL, 0)           = 0
[pid  5091] exit_group(0)               = ?
[pid  5091] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5091, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555b3c620 /* 4 entries */, 32768) = 112
umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./4/binderfs")                  = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555b44660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555b44660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./4/file0")                      = 0
getdents64(3, 0x555555b3c620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./4")                            = 0
mkdir("./5", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b3b5d0) = 5093
./strace-static-x86_64: Process 5093 attached
[pid  5093] chdir("./5")                = 0
[pid  5093] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5093] setpgid(0, 0)               = 0
[pid  5093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5093] write(3, "1000", 4)         = 4
[pid  5093] close(3)                    = 0
[pid  5093] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5093] memfd_create("syzkaller", 0) = 3
[pid  5093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4db661000
[pid  5093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5093] munmap(0x7fe4db661000, 1048576) = 0
[pid  5093] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5093] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5093] close(3)                    = 0
[pid  5093] mkdir("./file0", 0777)      = 0
[pid  5093] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME|MS_I_VERSION, "") = 0
[pid  5093] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5093] chdir("./file0")            = 0
[pid  5093] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5093] close(4)                    = 0
[pid  5093] rmdir("./file0")            = 0
[pid  5093] openat(AT_FDCWD, "/proc/sys/vm/compact_memory", O_WRONLY) = 4
[   40.427522][ T5093] loop0: detected capacity change from 0 to 2048
[   40.440735][ T5094] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   40.455758][ T5093] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=6
[   40.472225][ T5093] Remounting filesystem read-only
[pid  5093] write(4, NULL, 0)           = 0
[pid  5093] exit_group(0)               = ?
[pid  5093] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5093, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555b3c620 /* 4 entries */, 32768) = 112
umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./5/binderfs")                  = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555b44660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555b44660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./5/file0")                      = 0
getdents64(3, 0x555555b3c620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./5")                            = 0
mkdir("./6", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b3b5d0) = 5095
./strace-static-x86_64: Process 5095 attached
[pid  5095] chdir("./6")                = 0
[pid  5095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5095] setpgid(0, 0)               = 0
[pid  5095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5095] write(3, "1000", 4)         = 4
[pid  5095] close(3)                    = 0
[pid  5095] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5095] memfd_create("syzkaller", 0) = 3
[pid  5095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4db661000
[pid  5095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5095] munmap(0x7fe4db661000, 1048576) = 0
[pid  5095] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5095] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5095] close(3)                    = 0
[pid  5095] mkdir("./file0", 0777)      = 0
[pid  5095] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME|MS_I_VERSION, "") = 0
[pid  5095] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5095] chdir("./file0")            = 0
[pid  5095] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5095] close(4)                    = 0
[   40.568272][ T5095] loop0: detected capacity change from 0 to 2048
[   40.581091][ T5096] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   40.598032][ T5095] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=6
[pid  5095] rmdir("./file0")            = 0
[pid  5095] openat(AT_FDCWD, "/proc/sys/vm/compact_memory", O_WRONLY) = 4
[   40.614325][ T5095] Remounting filesystem read-only
[pid  5095] write(4, NULL, 0)           = 0
[pid  5095] exit_group(0)               = ?
[pid  5095] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5095, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} ---
umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555b3c620 /* 4 entries */, 32768) = 112
umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./6/binderfs")                  = 0
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555b44660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555b44660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./6/file0")                      = 0
getdents64(3, 0x555555b3c620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./6")                            = 0
mkdir("./7", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b3b5d0) = 5097
./strace-static-x86_64: Process 5097 attached
[pid  5097] chdir("./7")                = 0
[pid  5097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5097] setpgid(0, 0)               = 0
[pid  5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5097] write(3, "1000", 4)         = 4
[pid  5097] close(3)                    = 0
[pid  5097] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5097] memfd_create("syzkaller", 0) = 3
[pid  5097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4db661000
[pid  5097] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5097] munmap(0x7fe4db661000, 1048576) = 0
[pid  5097] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5097] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5097] close(3)                    = 0
[pid  5097] mkdir("./file0", 0777)      = 0
[pid  5097] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME|MS_I_VERSION, "") = 0
[pid  5097] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5097] chdir("./file0")            = 0
[pid  5097] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5097] close(4)                    = 0
[pid  5097] rmdir("./file0")            = 0
[pid  5097] openat(AT_FDCWD, "/proc/sys/vm/compact_memory", O_WRONLY) = 4
[   40.716477][ T5097] loop0: detected capacity change from 0 to 2048
[   40.729816][ T5098] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   40.744011][ T5097] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=6
[   40.760499][ T5097] Remounting filesystem read-only
[pid  5097] write(4, NULL, 0)           = 0
[pid  5097] exit_group(0)               = ?
[pid  5097] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5097, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555b3c620 /* 4 entries */, 32768) = 112
umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./7/binderfs")                  = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555b44660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555b44660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./7/file0")                      = 0
getdents64(3, 0x555555b3c620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./7")                            = 0
mkdir("./8", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b3b5d0) = 5099
./strace-static-x86_64: Process 5099 attached
[pid  5099] chdir("./8")                = 0
[pid  5099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5099] setpgid(0, 0)               = 0
[pid  5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5099] write(3, "1000", 4)         = 4
[pid  5099] close(3)                    = 0
[pid  5099] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5099] memfd_create("syzkaller", 0) = 3
[pid  5099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4db661000
[pid  5099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5099] munmap(0x7fe4db661000, 1048576) = 0
[pid  5099] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5099] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5099] close(3)                    = 0
[pid  5099] mkdir("./file0", 0777)      = 0
[pid  5099] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME|MS_I_VERSION, "") = 0
[pid  5099] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5099] chdir("./file0")            = 0
[pid  5099] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5099] close(4)                    = 0
[   40.842247][ T5099] loop0: detected capacity change from 0 to 2048
[   40.854475][ T5100] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   40.875616][ T5099] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=6
[pid  5099] rmdir("./file0")            = 0
[pid  5099] openat(AT_FDCWD, "/proc/sys/vm/compact_memory", O_WRONLY) = 4
[   40.891898][ T5099] Remounting filesystem read-only
[pid  5099] write(4, NULL, 0)           = 0
[pid  5099] exit_group(0)               = ?
[pid  5099] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5099, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555b3c620 /* 4 entries */, 32768) = 112
umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./8/binderfs")                  = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555b44660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555b44660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./8/file0")                      = 0
getdents64(3, 0x555555b3c620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./8")                            = 0
mkdir("./9", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5101 attached
, child_tidptr=0x555555b3b5d0) = 5101
[pid  5101] chdir("./9")                = 0
[pid  5101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5101] setpgid(0, 0)               = 0
[pid  5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5101] write(3, "1000", 4)         = 4
[pid  5101] close(3)                    = 0
[pid  5101] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5101] memfd_create("syzkaller", 0) = 3
[pid  5101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4db661000
[pid  5101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5101] munmap(0x7fe4db661000, 1048576) = 0
[pid  5101] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5101] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5101] close(3)                    = 0
[pid  5101] mkdir("./file0", 0777)      = 0
[pid  5101] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME|MS_I_VERSION, "") = 0
[pid  5101] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5101] chdir("./file0")            = 0
[pid  5101] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5101] close(4)                    = 0
[pid  5101] rmdir("./file0")            = 0
[pid  5101] openat(AT_FDCWD, "/proc/sys/vm/compact_memory", O_WRONLY) = 4
[   40.988118][ T5101] loop0: detected capacity change from 0 to 2048
[   41.000458][ T5102] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   41.008554][ T5101] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=6
[   41.027082][ T5101] Remounting filesystem read-only
[pid  5101] write(4, NULL, 0)           = 0
[pid  5101] exit_group(0)               = ?
[pid  5101] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5101, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555b3c620 /* 4 entries */, 32768) = 112
umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./9/binderfs")                  = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555b44660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555b44660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./9/file0")                      = 0
getdents64(3, 0x555555b3c620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./9")                            = 0
mkdir("./10", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b3b5d0) = 5103
./strace-static-x86_64: Process 5103 attached
[pid  5103] chdir("./10")               = 0
[pid  5103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5103] setpgid(0, 0)               = 0
[pid  5103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5103] write(3, "1000", 4)         = 4
[pid  5103] close(3)                    = 0
[pid  5103] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5103] memfd_create("syzkaller", 0) = 3
[pid  5103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4db661000
[pid  5103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5103] munmap(0x7fe4db661000, 1048576) = 0
[pid  5103] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5103] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5103] close(3)                    = 0
[pid  5103] mkdir("./file0", 0777)      = 0
[pid  5103] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME|MS_I_VERSION, "") = 0
[pid  5103] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5103] chdir("./file0")            = 0
[pid  5103] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5103] close(4)                    = 0
[   41.135417][ T5103] loop0: detected capacity change from 0 to 2048
[   41.149619][ T5104] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   41.167781][ T5103] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=6
[pid  5103] rmdir("./file0")            = 0
[pid  5103] openat(AT_FDCWD, "/proc/sys/vm/compact_memory", O_WRONLY) = 4
[   41.184466][ T5103] Remounting filesystem read-only
[pid  5103] write(4, NULL, 0)           = 0
[pid  5103] exit_group(0)               = ?
[pid  5103] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5103, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} ---
umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555b3c620 /* 4 entries */, 32768) = 112
umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./10/binderfs")                 = 0
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555b44660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555b44660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./10/file0")                     = 0
getdents64(3, 0x555555b3c620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./10")                           = 0
mkdir("./11", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5105 attached
 <unfinished ...>
[pid  5105] chdir("./11")               = 0
[pid  5105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5105] setpgid(0, 0)               = 0
[pid  5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5105] write(3, "1000", 4)         = 4
[pid  5105] close(3)                    = 0
[pid  5105] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5105] memfd_create("syzkaller", 0) = 3
[pid  5105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4db661000
[pid  5081] <... clone resumed>, child_tidptr=0x555555b3b5d0) = 5105
[pid  5105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5105] munmap(0x7fe4db661000, 1048576) = 0
[pid  5105] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5105] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5105] close(3)                    = 0
[pid  5105] mkdir("./file0", 0777)      = 0
[pid  5105] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME|MS_I_VERSION, "") = 0
[pid  5105] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5105] chdir("./file0")            = 0
[pid  5105] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5105] close(4)                    = 0
[pid  5105] rmdir("./file0")            = 0
[pid  5105] openat(AT_FDCWD, "/proc/sys/vm/compact_memory", O_WRONLY) = 4
[   41.284202][ T5105] loop0: detected capacity change from 0 to 2048
[   41.297509][ T5106] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   41.307637][ T5105] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=6
[   41.325098][ T5105] Remounting filesystem read-only
[pid  5105] write(4, NULL, 0)           = 0
[pid  5105] exit_group(0)               = ?
[pid  5105] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5105, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555b3c620 /* 4 entries */, 32768) = 112
umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./11/binderfs")                 = 0
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555b44660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555b44660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./11/file0")                     = 0
getdents64(3, 0x555555b3c620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./11")                           = 0
mkdir("./12", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b3b5d0) = 5107
./strace-static-x86_64: Process 5107 attached
[pid  5107] chdir("./12")               = 0
[pid  5107] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5107] setpgid(0, 0)               = 0
[pid  5107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5107] write(3, "1000", 4)         = 4
[pid  5107] close(3)                    = 0
[pid  5107] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5107] memfd_create("syzkaller", 0) = 3
[pid  5107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4db661000
[pid  5107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5107] munmap(0x7fe4db661000, 1048576) = 0
[pid  5107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5107] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5107] close(3)                    = 0
[pid  5107] mkdir("./file0", 0777)      = 0
[pid  5107] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME|MS_I_VERSION, "") = 0
[pid  5107] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5107] chdir("./file0")            = 0
[pid  5107] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5107] close(4)                    = 0
[pid  5107] rmdir("./file0")            = 0
[pid  5107] openat(AT_FDCWD, "/proc/sys/vm/compact_memory", O_WRONLY) = 4
[   41.441976][ T5107] loop0: detected capacity change from 0 to 2048
[   41.454562][ T5108] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   41.470127][ T5107] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=6
[   41.486346][ T5107] Remounting filesystem read-only
[pid  5107] write(4, NULL, 0)           = 0
[pid  5107] exit_group(0)               = ?
[pid  5107] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5107, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555b3c620 /* 4 entries */, 32768) = 112
umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./12/binderfs")                 = 0
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555b44660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555b44660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./12/file0")                     = 0
getdents64(3, 0x555555b3c620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./12")                           = 0
mkdir("./13", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b3b5d0) = 5109
./strace-static-x86_64: Process 5109 attached
[pid  5109] chdir("./13")               = 0
[pid  5109] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5109] setpgid(0, 0)               = 0
[pid  5109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5109] write(3, "1000", 4)         = 4
[pid  5109] close(3)                    = 0
[pid  5109] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5109] memfd_create("syzkaller", 0) = 3
[pid  5109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4db661000
[pid  5109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5109] munmap(0x7fe4db661000, 1048576) = 0
[pid  5109] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5109] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5109] close(3)                    = 0
[pid  5109] mkdir("./file0", 0777)      = 0
[pid  5109] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME|MS_I_VERSION, "") = 0
[pid  5109] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5109] chdir("./file0")            = 0
[pid  5109] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5109] close(4)                    = 0
[   41.584694][ T5109] loop0: detected capacity change from 0 to 2048
[   41.598314][ T5110] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5109] rmdir("./file0")            = 0
[pid  5109] openat(AT_FDCWD, "/proc/sys/vm/compact_memory", O_WRONLY) = 4
[pid  5109] write(4, NULL, 0)           = 0
[pid  5109] exit_group(0)               = ?
[pid  5109] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5109, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555b3c620 /* 4 entries */, 32768) = 112
umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./13/binderfs")                 = 0
[   41.620299][ T5109] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=6
[   41.637296][ T5109] Remounting filesystem read-only
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555b44660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555b44660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./13/file0")                     = 0
getdents64(3, 0x555555b3c620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./13")                           = 0
mkdir("./14", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5111 attached
 <unfinished ...>
[pid  5111] chdir("./14")               = 0
[pid  5111] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5111] setpgid(0, 0)               = 0
[pid  5111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5111] write(3, "1000", 4)         = 4
[pid  5111] close(3)                    = 0
[pid  5111] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5081] <... clone resumed>, child_tidptr=0x555555b3b5d0) = 5111
[pid  5111] <... symlink resumed>)      = 0
[pid  5111] memfd_create("syzkaller", 0) = 3
[pid  5111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4db661000
[pid  5111] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5111] munmap(0x7fe4db661000, 1048576) = 0
[pid  5111] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5111] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5111] close(3)                    = 0
[pid  5111] mkdir("./file0", 0777)      = 0
[pid  5111] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME|MS_I_VERSION, "") = 0
[pid  5111] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5111] chdir("./file0")            = 0
[pid  5111] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5111] close(4)                    = 0
[pid  5111] rmdir("./file0")            = 0
[pid  5111] openat(AT_FDCWD, "/proc/sys/vm/compact_memory", O_WRONLY) = 4
[   41.730307][ T5111] loop0: detected capacity change from 0 to 2048
[   41.743378][ T5112] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   41.751690][ T5111] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=6
[   41.770321][ T5111] Remounting filesystem read-only
[pid  5111] write(4, NULL, 0)           = 0
[pid  5111] exit_group(0)               = ?
[pid  5111] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5111, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555b3c620 /* 4 entries */, 32768) = 112
umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./14/binderfs")                 = 0
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555b44660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555b44660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./14/file0")                     = 0
getdents64(3, 0x555555b3c620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./14")                           = 0
mkdir("./15", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b3b5d0) = 5113
./strace-static-x86_64: Process 5113 attached
[pid  5113] chdir("./15")               = 0
[pid  5113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5113] setpgid(0, 0)               = 0
[pid  5113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5113] write(3, "1000", 4)         = 4
[pid  5113] close(3)                    = 0
[pid  5113] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5113] memfd_create("syzkaller", 0) = 3
[pid  5113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4db661000
[pid  5113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5113] munmap(0x7fe4db661000, 1048576) = 0
[pid  5113] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5113] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5113] close(3)                    = 0
[pid  5113] mkdir("./file0", 0777)      = 0
[pid  5113] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME|MS_I_VERSION, "") = 0
[pid  5113] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5113] chdir("./file0")            = 0
[pid  5113] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5113] close(4)                    = 0
[pid  5113] rmdir("./file0")            = 0
[pid  5113] openat(AT_FDCWD, "/proc/sys/vm/compact_memory", O_WRONLY) = 4
[   41.872124][ T5113] loop0: detected capacity change from 0 to 2048
[   41.885540][ T5114] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   41.894930][ T5113] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=6
[   41.915107][ T5113] Remounting filesystem read-only
[pid  5113] write(4, NULL, 0)           = 0
[pid  5113] exit_group(0)               = ?
[pid  5113] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5113, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555b3c620 /* 4 entries */, 32768) = 112
umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./15/binderfs")                 = 0
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555b44660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555b44660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./15/file0")                     = 0
getdents64(3, 0x555555b3c620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./15")                           = 0
mkdir("./16", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b3b5d0) = 5115
./strace-static-x86_64: Process 5115 attached
[pid  5115] chdir("./16")               = 0
[pid  5115] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5115] setpgid(0, 0)               = 0
[pid  5115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5115] write(3, "1000", 4)         = 4
[pid  5115] close(3)                    = 0
[pid  5115] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5115] memfd_create("syzkaller", 0) = 3
[pid  5115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4db661000
[pid  5115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5115] munmap(0x7fe4db661000, 1048576) = 0
[pid  5115] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5115] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5115] close(3)                    = 0
[pid  5115] mkdir("./file0", 0777)      = 0
[pid  5115] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME|MS_I_VERSION, "") = 0
[pid  5115] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5115] chdir("./file0")            = 0
[pid  5115] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5115] close(4)                    = 0
[pid  5115] rmdir("./file0")            = 0
[pid  5115] openat(AT_FDCWD, "/proc/sys/vm/compact_memory", O_WRONLY) = 4
[   42.015721][ T5115] loop0: detected capacity change from 0 to 2048
[   42.028074][ T5116] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   42.030237][ T5115] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=6
[   42.056443][ T5115] Remounting filesystem read-only
[pid  5115] write(4, NULL, 0)           = 0
[pid  5115] exit_group(0)               = ?
[pid  5115] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5115, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555b3c620 /* 4 entries */, 32768) = 112
umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./16/binderfs")                 = 0
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555b44660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555b44660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./16/file0")                     = 0
getdents64(3, 0x555555b3c620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./16")                           = 0
mkdir("./17", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5117 attached
, child_tidptr=0x555555b3b5d0) = 5117
[pid  5117] chdir("./17")               = 0
[pid  5117] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5117] setpgid(0, 0)               = 0
[pid  5117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5117] write(3, "1000", 4)         = 4
[pid  5117] close(3)                    = 0
[pid  5117] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5117] memfd_create("syzkaller", 0) = 3
[pid  5117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4db661000
[pid  5117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5117] munmap(0x7fe4db661000, 1048576) = 0
[pid  5117] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5117] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5117] close(3)                    = 0
[pid  5117] mkdir("./file0", 0777)      = 0
[pid  5117] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME|MS_I_VERSION, "") = 0
[pid  5117] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5117] chdir("./file0")            = 0
[pid  5117] ioctl(4, LOOP_CLR_FD)       = 0
[   42.157099][ T5117] loop0: detected capacity change from 0 to 2048
[   42.169595][ T5118] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5117] close(4)                    = 0
[pid  5117] rmdir("./file0")            = 0
[pid  5117] openat(AT_FDCWD, "/proc/sys/vm/compact_memory", O_WRONLY) = 4
[   42.198366][ T5117] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=6
[   42.215187][ T5117] Remounting filesystem read-only
[pid  5117] write(4, NULL, 0)           = 0
[pid  5117] exit_group(0)               = ?
[pid  5117] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5117, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555b3c620 /* 4 entries */, 32768) = 112
umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./17/binderfs")                 = 0
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555b44660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555b44660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./17/file0")                     = 0
getdents64(3, 0x555555b3c620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./17")                           = 0
mkdir("./18", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b3b5d0) = 5119
./strace-static-x86_64: Process 5119 attached
[pid  5119] chdir("./18")               = 0
[pid  5119] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5119] setpgid(0, 0)               = 0
[pid  5119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5119] write(3, "1000", 4)         = 4
[pid  5119] close(3)                    = 0
[pid  5119] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5119] memfd_create("syzkaller", 0) = 3
[pid  5119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4db661000
[pid  5119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid  5119] munmap(0x7fe4db661000, 1048576) = 0
[pid  5119] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5119] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5119] close(3)                    = 0
[pid  5119] mkdir("./file0", 0777)      = 0
[pid  5119] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME|MS_I_VERSION, "") = 0
[pid  5119] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5119] chdir("./file0")            = 0
[pid  5119] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5119] close(4)                    = 0
[pid  5119] rmdir("./file0")            = 0
[pid  5119] openat(AT_FDCWD, "/proc/sys/vm/compact_memory", O_WRONLY) = 4
[   42.314006][ T5119] loop0: detected capacity change from 0 to 2048
[   42.326628][ T5120] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   42.330545][ T5119] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=6
[   42.356330][ T5119] Remounting filesystem read-only
[pid  5119] write(4, NULL, 0)           = 0
[pid  5119] exit_group(0)               = ?
[pid  5119] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5119, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555b3c620 /* 4 entries */, 32768) = 112
umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./18/binderfs")                 = 0
[   42.395048][ T5119] NILFS (loop0): discard dirty page: offset=0, ino=6
[   42.401878][ T5119] NILFS (loop0): discard dirty block: blocknr=35, size=1024
[   42.409209][ T5119] NILFS (loop0): discard dirty block: blocknr=36, size=1024
[   42.416504][ T5119] NILFS (loop0): discard dirty block: blocknr=37, size=1024
[   42.423839][ T5119] NILFS (loop0): discard dirty block: blocknr=38, size=1024
[   42.476041][ T5081] ------------[ cut here ]------------
[   42.481695][ T5081] WARNING: CPU: 0 PID: 5081 at fs/buffer.c:1124 mark_buffer_dirty+0x376/0x3e0
[   42.490625][ T5081] Modules linked in:
[   42.494514][ T5081] CPU: 0 PID: 5081 Comm: syz-executor174 Not tainted 6.3.0-rc4-syzkaller-00016-g91fe204578ba #0
[   42.504947][ T5081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[   42.515055][ T5081] RIP: 0010:mark_buffer_dirty+0x376/0x3e0
[   42.520807][ T5081] Code: e9 0f 7e 8f ff e8 0a 7e 8f ff 48 89 ef e8 02 4a e8 ff 5b 5d e9 fb 7d 8f ff e8 f6 7d 8f ff 0f 0b e9 10 fe ff ff e8 ea 7d 8f ff <0f> 0b e9 b7 fc ff ff e8 de 7d 8f ff 0f 0b e9 d6 fc ff ff 48 89 df
[   42.540481][ T5081] RSP: 0018:ffffc90003e2f938 EFLAGS: 00010293
[   42.546530][ T5081] RAX: 0000000000000000 RBX: ffff888076a93910 RCX: 0000000000000000
[   42.554581][ T5081] RDX: ffff888026840000 RSI: ffffffff81f35a66 RDI: 0000000000000001
[   42.562682][ T5081] RBP: ffff888073a46100 R08: 0000000000000001 R09: 0000000000000000
[   42.570723][ T5081] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[   42.578697][ T5081] R13: ffff88801e4121f0 R14: ffff888076a93910 R15: ffff888073a46160
[   42.586777][ T5081] FS:  0000555555b3b300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[   42.595842][ T5081] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   42.602520][ T5081] CR2: 00007ffe21e29050 CR3: 000000007cd6c000 CR4: 0000000000350ef0
[   42.610564][ T5081] Call Trace:
[   42.613827][ T5081]  <TASK>
[   42.616738][ T5081]  nilfs_segctor_do_construct+0x480/0x7100
[   42.622607][ T5081]  ? find_held_lock+0x2d/0x110
[   42.627385][ T5081]  ? nilfs_bmap_test_and_clear_dirty+0x62/0x80
[   42.633589][ T5081]  ? find_held_lock+0x2d/0x110
[   42.638366][ T5081]  ? nilfs_segctor_confirm+0x107/0x190
[   42.643890][ T5081]  ? nilfs_segctor_abort_construction+0xe20/0xe20
[   42.650344][ T5081]  ? do_raw_spin_lock+0x124/0x2b0
[   42.655443][ T5081]  ? spin_bug+0x1c0/0x1c0
[   42.659823][ T5081]  ? do_raw_spin_unlock+0x175/0x230
[   42.665035][ T5081]  ? _raw_spin_unlock+0x28/0x40
[   42.669930][ T5081]  nilfs_segctor_construct+0x8e3/0xb30
[   42.675397][ T5081]  ? rcu_is_watching+0x12/0xb0
[   42.680206][ T5081]  ? trace_nilfs2_transaction_transition+0x17d/0x1c0
[   42.686896][ T5081]  nilfs_detach_log_writer+0x3bf/0x9f0
[   42.692600][ T5081]  ? nilfs_clean_segments+0xa80/0xa80
[   42.697964][ T5081]  ? collect_domain_accesses+0x900/0x900
[   42.703646][ T5081]  ? prepare_to_wait_exclusive+0x2c0/0x2c0
[   42.709479][ T5081]  ? dispose_list+0x1e0/0x1e0
[   42.714157][ T5081]  nilfs_put_super+0x43/0x1b0
[   42.718899][ T5081]  ? nilfs_freeze+0xc0/0xc0
[   42.723422][ T5081]  generic_shutdown_super+0x158/0x480
[   42.728806][ T5081]  kill_block_super+0x9b/0xf0
[   42.733561][ T5081]  deactivate_locked_super+0x98/0x160
[   42.739002][ T5081]  deactivate_super+0xb1/0xd0
[   42.743680][ T5081]  cleanup_mnt+0x2ae/0x3d0
[   42.748164][ T5081]  task_work_run+0x16f/0x270
[   42.752829][ T5081]  ? task_work_cancel+0x30/0x30
[   42.757692][ T5081]  ? __x64_sys_umount+0x118/0x190
[   42.762786][ T5081]  ptrace_notify+0x118/0x140
[   42.767375][ T5081]  syscall_exit_to_user_mode_prepare+0x129/0x220
[   42.773772][ T5081]  syscall_exit_to_user_mode+0xd/0x50
[   42.779179][ T5081]  do_syscall_64+0x46/0xb0
[   42.783581][ T5081]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   42.789503][ T5081] RIP: 0033:0x7fe4e3aafd07
[   42.793921][ T5081] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   42.813774][ T5081] RSP: 002b:00007ffe21e28f98 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[   42.822211][ T5081] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe4e3aafd07
[   42.830217][ T5081] RDX: 00007ffe21e2905a RSI: 000000000000000a RDI: 00007ffe21e29050
[   42.838188][ T5081] RBP: 00007ffe21e29050 R08: 00000000ffffffff R09: 00007ffe21e28e30
[   42.846190][ T5081] R10: 0000555555b3c653 R11: 0000000000000202 R12: 00007ffe21e2a0c0
[   42.854238][ T5081] R13: 0000555555b3c5f0 R14: 00007ffe21e28fc0 R15: 0000000000000013
[   42.862265][ T5081]  </TASK>
[   42.865296][ T5081] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   42.872908][ T5081] CPU: 0 PID: 5081 Comm: syz-executor174 Not tainted 6.3.0-rc4-syzkaller-00016-g91fe204578ba #0
[   42.883305][ T5081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[   42.893351][ T5081] Call Trace:
[   42.896620][ T5081]  <TASK>
[   42.899547][ T5081]  dump_stack_lvl+0xd9/0x150
[   42.904164][ T5081]  panic+0x688/0x730
[   42.908059][ T5081]  ? panic_smp_self_stop+0x90/0x90
[   42.913164][ T5081]  ? show_trace_log_lvl+0x285/0x390
[   42.918365][ T5081]  ? mark_buffer_dirty+0x376/0x3e0
[   42.923475][ T5081]  check_panic_on_warn+0xb1/0xc0
[   42.928408][ T5081]  __warn+0xf2/0x390
[   42.932299][ T5081]  ? mark_buffer_dirty+0x376/0x3e0
[   42.937410][ T5081]  report_bug+0x2da/0x500
[   42.941758][ T5081]  handle_bug+0x3c/0x70
[   42.945908][ T5081]  exc_invalid_op+0x18/0x50
[   42.950399][ T5081]  asm_exc_invalid_op+0x1a/0x20
[   42.955250][ T5081] RIP: 0010:mark_buffer_dirty+0x376/0x3e0
[   42.960970][ T5081] Code: e9 0f 7e 8f ff e8 0a 7e 8f ff 48 89 ef e8 02 4a e8 ff 5b 5d e9 fb 7d 8f ff e8 f6 7d 8f ff 0f 0b e9 10 fe ff ff e8 ea 7d 8f ff <0f> 0b e9 b7 fc ff ff e8 de 7d 8f ff 0f 0b e9 d6 fc ff ff 48 89 df
[   42.980581][ T5081] RSP: 0018:ffffc90003e2f938 EFLAGS: 00010293
[   42.986644][ T5081] RAX: 0000000000000000 RBX: ffff888076a93910 RCX: 0000000000000000
[   42.994608][ T5081] RDX: ffff888026840000 RSI: ffffffff81f35a66 RDI: 0000000000000001
[   43.002576][ T5081] RBP: ffff888073a46100 R08: 0000000000000001 R09: 0000000000000000
[   43.010548][ T5081] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[   43.018509][ T5081] R13: ffff88801e4121f0 R14: ffff888076a93910 R15: ffff888073a46160
[   43.026492][ T5081]  ? mark_buffer_dirty+0x376/0x3e0
[   43.031620][ T5081]  ? mark_buffer_dirty+0x376/0x3e0
[   43.036734][ T5081]  nilfs_segctor_do_construct+0x480/0x7100
[   43.042561][ T5081]  ? find_held_lock+0x2d/0x110
[   43.047335][ T5081]  ? nilfs_bmap_test_and_clear_dirty+0x62/0x80
[   43.053485][ T5081]  ? find_held_lock+0x2d/0x110
[   43.058249][ T5081]  ? nilfs_segctor_confirm+0x107/0x190
[   43.063711][ T5081]  ? nilfs_segctor_abort_construction+0xe20/0xe20
[   43.070124][ T5081]  ? do_raw_spin_lock+0x124/0x2b0
[   43.075171][ T5081]  ? spin_bug+0x1c0/0x1c0
[   43.079493][ T5081]  ? do_raw_spin_unlock+0x175/0x230
[   43.084689][ T5081]  ? _raw_spin_unlock+0x28/0x40
[   43.089545][ T5081]  nilfs_segctor_construct+0x8e3/0xb30
[   43.095018][ T5081]  ? rcu_is_watching+0x12/0xb0
[   43.099777][ T5081]  ? trace_nilfs2_transaction_transition+0x17d/0x1c0
[   43.106458][ T5081]  nilfs_detach_log_writer+0x3bf/0x9f0
[   43.111925][ T5081]  ? nilfs_clean_segments+0xa80/0xa80
[   43.117303][ T5081]  ? collect_domain_accesses+0x900/0x900
[   43.122943][ T5081]  ? prepare_to_wait_exclusive+0x2c0/0x2c0
[   43.128748][ T5081]  ? dispose_list+0x1e0/0x1e0
[   43.133426][ T5081]  nilfs_put_super+0x43/0x1b0
[   43.138120][ T5081]  ? nilfs_freeze+0xc0/0xc0
[   43.142623][ T5081]  generic_shutdown_super+0x158/0x480
[   43.147994][ T5081]  kill_block_super+0x9b/0xf0
[   43.152675][ T5081]  deactivate_locked_super+0x98/0x160
[   43.158039][ T5081]  deactivate_super+0xb1/0xd0
[   43.162711][ T5081]  cleanup_mnt+0x2ae/0x3d0
[   43.167118][ T5081]  task_work_run+0x16f/0x270
[   43.171709][ T5081]  ? task_work_cancel+0x30/0x30
[   43.176556][ T5081]  ? __x64_sys_umount+0x118/0x190
[   43.181572][ T5081]  ptrace_notify+0x118/0x140
[   43.186153][ T5081]  syscall_exit_to_user_mode_prepare+0x129/0x220
[   43.192476][ T5081]  syscall_exit_to_user_mode+0xd/0x50
[   43.197840][ T5081]  do_syscall_64+0x46/0xb0
[   43.202425][ T5081]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   43.208308][ T5081] RIP: 0033:0x7fe4e3aafd07
[   43.212714][ T5081] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   43.232408][ T5081] RSP: 002b:00007ffe21e28f98 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[   43.240902][ T5081] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe4e3aafd07
[   43.248865][ T5081] RDX: 00007ffe21e2905a RSI: 000000000000000a RDI: 00007ffe21e29050
[   43.256822][ T5081] RBP: 00007ffe21e29050 R08: 00000000ffffffff R09: 00007ffe21e28e30
[   43.264780][ T5081] R10: 0000555555b3c653 R11: 0000000000000202 R12: 00007ffe21e2a0c0
[   43.272739][ T5081] R13: 0000555555b3c5f0 R14: 00007ffe21e28fc0 R15: 0000000000000013
[   43.280706][ T5081]  </TASK>
[   43.284379][ T5081] Kernel Offset: disabled
[   43.288762][ T5081] Rebooting in 86400 seconds..