./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1123147684 <...> Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. execve("./syz-executor1123147684", ["./syz-executor1123147684"], 0x7ffd0a7386d0 /* 10 vars */) = 0 brk(NULL) = 0x555556b87000 brk(0x555556b87d00) = 0x555556b87d00 arch_prctl(ARCH_SET_FS, 0x555556b87380) = 0 set_tid_address(0x555556b87650) = 5011 set_robust_list(0x555556b87660, 24) = 0 rseq(0x555556b87ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1123147684", 4096) = 28 getrandom("\x67\x4d\x7d\x7e\x47\xce\x9a\x1a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556b87d00 brk(0x555556ba8d00) = 0x555556ba8d00 brk(0x555556ba9000) = 0x555556ba9000 mprotect(0x7f771473a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5012 attached , child_tidptr=0x555556b87650) = 5012 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] set_robust_list(0x555556b87660, 24) = 0 ./strace-static-x86_64: Process 5013 attached [pid 5011] <... clone resumed>, child_tidptr=0x555556b87650) = 5013 [pid 5012] mkdir("./syzkaller.hZmuDq", 0700 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5014 [pid 5013] set_robust_list(0x555556b87660, 24./strace-static-x86_64: Process 5014 attached [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... set_robust_list resumed>) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5012] chmod("./syzkaller.hZmuDq", 0777) = 0 [pid 5012] chdir("./syzkaller.hZmuDq") = 0 [pid 5012] mkdir("./0", 0777 [pid 5011] <... clone resumed>, child_tidptr=0x555556b87650) = 5015 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... mkdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3 [pid 5011] <... clone resumed>, child_tidptr=0x555556b87650) = 5016 ./strace-static-x86_64: Process 5016 attached ./strace-static-x86_64: Process 5015 attached [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] set_robust_list(0x555556b87660, 24 [pid 5013] mkdir("./syzkaller.22t5qZ", 0700) = 0 [pid 5011] <... clone resumed>, child_tidptr=0x555556b87650) = 5017 [pid 5013] chmod("./syzkaller.22t5qZ", 0777 [pid 5015] set_robust_list(0x555556b87660, 24 [pid 5014] <... set_robust_list resumed>) = 0 [pid 5013] <... chmod resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] chdir("./syzkaller.22t5qZ") = 0 [pid 5015] <... set_robust_list resumed>) = 0 [pid 5014] mkdir("./syzkaller.gLSGT5", 0700 [pid 5013] mkdir("./0", 0777 [pid 5015] mkdir("./syzkaller.5j7VNu", 0700 [pid 5013] <... mkdir resumed>) = 0 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5018 ./strace-static-x86_64: Process 5017 attached [pid 5017] set_robust_list(0x555556b87660, 24) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5017] mkdir("./syzkaller.jzTKKh", 0700 [pid 5015] <... mkdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5014] chmod("./syzkaller.gLSGT5", 0777 [pid 5016] set_robust_list(0x555556b87660, 24 [pid 5015] chmod("./syzkaller.5j7VNu", 0777 [pid 5013] <... openat resumed>) = 3 [pid 5014] <... chmod resumed>) = 0 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5015] <... chmod resumed>) = 0 ./strace-static-x86_64: Process 5018 attached [pid 5017] <... mkdir resumed>) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5018] set_robust_list(0x555556b87660, 24 [pid 5013] close(3 [pid 5015] chdir("./syzkaller.5j7VNu" [pid 5016] <... set_robust_list resumed>) = 0 [pid 5014] chdir("./syzkaller.gLSGT5" [pid 5018] <... set_robust_list resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5015] <... chdir resumed>) = 0 [pid 5017] chmod("./syzkaller.jzTKKh", 0777 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] <... chmod resumed>) = 0 [pid 5018] chdir("./0" [pid 5017] chdir("./syzkaller.jzTKKh") = 0 [pid 5015] mkdir("./0", 0777 [pid 5018] <... chdir resumed>) = 0 [pid 5017] mkdir("./0", 0777 [pid 5016] mkdir("./syzkaller.r7LCR2", 0700 [pid 5014] <... chdir resumed>) = 0 [pid 5018] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5014] mkdir("./0", 0777 [pid 5018] setpgid(0, 0) = 0 [pid 5015] <... mkdir resumed>) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5016] <... mkdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5019 [pid 5016] chmod("./syzkaller.r7LCR2", 0777 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5015] <... openat resumed>) = 3 [pid 5017] <... mkdir resumed>) = 0 [pid 5018] write(3, "1000", 4) = 4 [pid 5014] <... openat resumed>) = 3 [pid 5018] close(3) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5016] <... chmod resumed>) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5018] symlink("/dev/binderfs", "./binderfs" [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] chdir("./syzkaller.r7LCR2" [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] close(3 [pid 5016] <... chdir resumed>) = 0 [pid 5015] <... close resumed>) = 0 ./strace-static-x86_64: Process 5019 attached [pid 5018] <... symlink resumed>) = 0 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5016] mkdir("./0", 0777 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] close(3 [pid 5019] set_robust_list(0x555556b87660, 24 [pid 5018] memfd_create("syzkaller", 0 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] <... mkdir resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5020 attached [pid 5020] set_robust_list(0x555556b87660, 24 [pid 5019] <... set_robust_list resumed>) = 0 [pid 5020] <... set_robust_list resumed>) = 0 [pid 5019] chdir("./0") = 0 [pid 5020] chdir("./0" [pid 5019] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5022 attached [pid 5020] <... chdir resumed>) = 0 [pid 5019] <... prctl resumed>) = 0 [pid 5017] close(3 [pid 5016] <... openat resumed>) = 3 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5020 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5022 [pid 5022] set_robust_list(0x555556b87660, 24 [pid 5020] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5019] setpgid(0, 0 [pid 5017] <... close resumed>) = 0 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5022] <... set_robust_list resumed>) = 0 [pid 5020] <... prctl resumed>) = 0 [pid 5019] <... setpgid resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5022] chdir("./0" [pid 5020] setpgid(0, 0 [pid 5019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5016] close(3 [pid 5022] <... chdir resumed>) = 0 [pid 5020] <... setpgid resumed>) = 0 [pid 5019] <... openat resumed>) = 3 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5023 [pid 5016] <... close resumed>) = 0 [pid 5022] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5019] write(3, "1000", 4 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5022] <... prctl resumed>) = 0 [pid 5019] <... write resumed>) = 4 [pid 5022] setpgid(0, 0 [pid 5020] <... openat resumed>) = 3 [pid 5019] close(3 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5024 [pid 5022] <... setpgid resumed>) = 0 [pid 5020] write(3, "1000", 4 [pid 5019] <... close resumed>) = 0 [pid 5022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5020] <... write resumed>) = 4 [pid 5019] symlink("/dev/binderfs", "./binderfs" [pid 5022] <... openat resumed>) = 3 [pid 5020] close(3 [pid 5019] <... symlink resumed>) = 0 [pid 5022] write(3, "1000", 4 [pid 5020] <... close resumed>) = 0 [pid 5019] memfd_create("syzkaller", 0 [pid 5022] <... write resumed>) = 4 [pid 5020] symlink("/dev/binderfs", "./binderfs" [pid 5019] <... memfd_create resumed>) = 3 [pid 5022] close(3 [pid 5019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5023 attached [pid 5022] <... close resumed>) = 0 [pid 5020] <... symlink resumed>) = 0 [pid 5019] <... mmap resumed>) = 0x7f770c286000 ./strace-static-x86_64: Process 5024 attached [pid 5023] set_robust_list(0x555556b87660, 24 [pid 5022] symlink("/dev/binderfs", "./binderfs" [pid 5020] memfd_create("syzkaller", 0 [pid 5018] <... memfd_create resumed>) = 3 [pid 5024] set_robust_list(0x555556b87660, 24 [pid 5023] <... set_robust_list resumed>) = 0 [pid 5024] <... set_robust_list resumed>) = 0 [pid 5023] chdir("./0" [pid 5022] <... symlink resumed>) = 0 [pid 5020] <... memfd_create resumed>) = 3 [ 57.821233][ T5018] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5018 'syz-executor112' [pid 5018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5023] <... chdir resumed>) = 0 [pid 5023] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5018] <... mmap resumed>) = 0x7f770c286000 [pid 5024] chdir("./0" [pid 5023] <... prctl resumed>) = 0 [pid 5020] <... mmap resumed>) = 0x7f770c286000 [pid 5023] setpgid(0, 0) = 0 [pid 5023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5023] write(3, "1000", 4) = 4 [pid 5023] close(3) = 0 [pid 5023] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5023] memfd_create("syzkaller", 0) = 3 [pid 5023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5024] <... chdir resumed>) = 0 [pid 5022] memfd_create("syzkaller", 0 [pid 5024] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5022] <... memfd_create resumed>) = 3 [pid 5024] <... prctl resumed>) = 0 [pid 5022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5024] setpgid(0, 0 [pid 5022] <... mmap resumed>) = 0x7f770c286000 [pid 5024] <... setpgid resumed>) = 0 [pid 5019] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5023] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5024] <... openat resumed>) = 3 [pid 5024] write(3, "1000", 4) = 4 [pid 5024] close(3) = 0 [pid 5024] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5024] memfd_create("syzkaller", 0) = 3 [pid 5024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5019] <... write resumed>) = 2097152 [pid 5022] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5019] munmap(0x7f770c286000, 2097152 [pid 5024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5019] <... munmap resumed>) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5019] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5019] close(3) = 0 [pid 5019] mkdir("./file1", 0777 [pid 5023] <... write resumed>) = 2097152 [pid 5019] <... mkdir resumed>) = 0 [pid 5020] <... write resumed>) = 2097152 [pid 5019] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5018] <... write resumed>) = 2097152 [ 57.986934][ T5019] loop1: detected capacity change from 0 to 4096 [ 58.024121][ T5019] ======================================================= [pid 5024] <... write resumed>) = 2097152 [pid 5023] munmap(0x7f770c286000, 2097152 [pid 5022] <... write resumed>) = 2097152 [pid 5018] munmap(0x7f770c286000, 2097152 [pid 5024] munmap(0x7f770c286000, 2097152 [pid 5023] <... munmap resumed>) = 0 [pid 5022] munmap(0x7f770c286000, 2097152 [pid 5020] munmap(0x7f770c286000, 2097152 [pid 5018] <... munmap resumed>) = 0 [pid 5024] <... munmap resumed>) = 0 [pid 5023] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5020] <... munmap resumed>) = 0 [pid 5023] <... openat resumed>) = 4 [pid 5023] ioctl(4, LOOP_SET_FD, 3 [pid 5022] <... munmap resumed>) = 0 [pid 5024] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5022] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5020] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5018] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5024] <... openat resumed>) = 4 [pid 5022] <... openat resumed>) = 4 [pid 5020] <... openat resumed>) = 4 [pid 5018] <... openat resumed>) = 4 [pid 5024] ioctl(4, LOOP_SET_FD, 3 [pid 5022] ioctl(4, LOOP_SET_FD, 3 [pid 5020] ioctl(4, LOOP_SET_FD, 3 [ 58.024121][ T5019] WARNING: The mand mount option has been deprecated and [ 58.024121][ T5019] and is ignored by this kernel. Remove the mand [ 58.024121][ T5019] option from the mount to silence this warning. [ 58.024121][ T5019] ======================================================= [ 58.068178][ T5023] loop5: detected capacity change from 0 to 4096 [ 58.078341][ T5020] loop3: detected capacity change from 0 to 4096 [pid 5018] ioctl(4, LOOP_SET_FD, 3 [pid 5020] <... ioctl resumed>) = 0 [pid 5023] <... ioctl resumed>) = 0 [pid 5023] close(3) = 0 [pid 5023] mkdir("./file1", 0777 [pid 5020] close(3) = 0 [pid 5020] mkdir("./file1", 0777 [pid 5023] <... mkdir resumed>) = 0 [pid 5023] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5020] <... mkdir resumed>) = 0 [pid 5020] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5022] <... ioctl resumed>) = 0 [pid 5022] close(3 [pid 5018] <... ioctl resumed>) = 0 [pid 5024] <... ioctl resumed>) = 0 [pid 5022] <... close resumed>) = 0 [pid 5018] close(3 [pid 5024] close(3 [pid 5022] mkdir("./file1", 0777 [pid 5018] <... close resumed>) = 0 [pid 5024] <... close resumed>) = 0 [pid 5022] <... mkdir resumed>) = 0 [ 58.078657][ T5024] loop4: detected capacity change from 0 to 4096 [ 58.092908][ T5022] loop2: detected capacity change from 0 to 4096 [ 58.100405][ T5018] loop0: detected capacity change from 0 to 4096 [ 58.110831][ T5020] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 58.123487][ T5023] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5018] mkdir("./file1", 0777 [pid 5024] mkdir("./file1", 0777 [pid 5022] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5018] <... mkdir resumed>) = 0 [pid 5024] <... mkdir resumed>) = 0 [pid 5018] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 58.124164][ T5019] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 58.146140][ T5020] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 58.156101][ T5018] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 58.156359][ T5022] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 58.176810][ T5024] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5024] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5020] <... mount resumed>) = 0 [ 58.177819][ T5018] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 58.199035][ T5023] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 58.212214][ T5019] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 58.221248][ T5022] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5020] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5020] chdir("./file1") = 0 [pid 5020] ioctl(4, LOOP_CLR_FD) = 0 [pid 5020] close(4) = 0 [ 58.229809][ T5027] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.235364][ T5024] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 58.268496][ T5028] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.271746][ T5026] udevd[5026]: incorrect nilfs2 checksum on /dev/loop4 [pid 5023] <... mount resumed>) = 0 [pid 5020] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5019] <... mount resumed>) = 0 [pid 5023] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5023] chdir("./file1") = 0 [pid 5023] ioctl(4, LOOP_CLR_FD) = 0 [pid 5023] close(4) = 0 [pid 5023] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 58.283600][ T5029] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.298526][ T5020] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 58.300026][ T5023] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5019] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5024] <... mount resumed>) = 0 [pid 5019] chdir("./file1" [pid 5018] <... mount resumed>) = 0 [pid 5022] <... mount resumed>) = 0 [ 58.336278][ T5030] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.348946][ T5020] Remounting filesystem read-only [ 58.356040][ T5031] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.357119][ T5032] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.378224][ T5020] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5022] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5024] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5022] <... openat resumed>) = 3 [pid 5019] <... chdir resumed>) = 0 [pid 5018] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5022] chdir("./file1") = 0 [pid 5022] ioctl(4, LOOP_CLR_FD) = 0 [pid 5022] close(4) = 0 [pid 5022] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5024] <... openat resumed>) = 3 [pid 5019] ioctl(4, LOOP_CLR_FD [pid 5018] <... openat resumed>) = 3 [pid 5024] chdir("./file1" [pid 5019] <... ioctl resumed>) = 0 [pid 5018] chdir("./file1" [pid 5024] <... chdir resumed>) = 0 [pid 5019] close(4 [pid 5018] <... chdir resumed>) = 0 [ 58.384480][ T5023] Remounting filesystem read-only [ 58.398290][ T5022] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 58.404420][ T5023] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 58.419971][ T5020] NILFS (loop3): repaired inode bitmap for reserved inodes [ 58.424483][ T5023] NILFS (loop5): repaired inode bitmap for reserved inodes [pid 5024] ioctl(4, LOOP_CLR_FD [pid 5019] <... close resumed>) = 0 [pid 5018] ioctl(4, LOOP_CLR_FD [pid 5024] <... ioctl resumed>) = 0 [pid 5018] <... ioctl resumed>) = 0 [pid 5019] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5020] <... openat resumed>) = -1 EIO (Input/output error) [pid 5020] exit_group(0) = ? [pid 5024] close(4 [pid 5018] close(4) = 0 [pid 5024] <... close resumed>) = 0 [ 58.432825][ T5020] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 58.455449][ T5022] Remounting filesystem read-only [ 58.463594][ T5019] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5018] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5024] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5020] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5020, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5015] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./0/binderfs") = 0 [ 58.463703][ T5018] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 58.495398][ T5024] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 58.497325][ T5019] Remounting filesystem read-only [ 58.518094][ T5022] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 58.523089][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 58.526995][ T5024] Remounting filesystem read-only [ 58.537527][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 58.538913][ T5022] NILFS (loop2): repaired inode bitmap for reserved inodes [ 58.554928][ T5022] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 58.572180][ T5024] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 58.580864][ T5019] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 58.581285][ T5018] Remounting filesystem read-only [ 58.589926][ T5023] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 58.594618][ T5024] NILFS (loop4): repaired inode bitmap for reserved inodes [ 58.618428][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 58.628293][ T5018] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [pid 5015] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5022] <... openat resumed>) = -1 EIO (Input/output error) [ 58.630605][ T5019] NILFS (loop1): repaired inode bitmap for reserved inodes [ 58.637382][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 58.652521][ T5018] NILFS (loop0): repaired inode bitmap for reserved inodes [ 58.653612][ T5019] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5022] exit_group(0 [pid 5023] <... openat resumed>) = -1 EIO (Input/output error) [pid 5022] <... exit_group resumed>) = ? [pid 5023] exit_group(0 [pid 5022] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5022, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5014] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./0/binderfs") = 0 [pid 5014] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5023] <... exit_group resumed>) = ? [pid 5023] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5023, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5017] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5017] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 58.661598][ T5018] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 58.706098][ T5024] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 58.725483][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 58.726045][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5017] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./0/binderfs") = 0 [pid 5017] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5024] <... openat resumed>) = -1 EIO (Input/output error) [pid 5024] exit_group(0) = ? [pid 5018] <... openat resumed>) = -1 EIO (Input/output error) [pid 5019] <... openat resumed>) = -1 EIO (Input/output error) [pid 5019] exit_group(0) = ? [pid 5024] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5024, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5016] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./0/binderfs") = 0 [pid 5016] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 58.733099][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 58.742528][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 58.758967][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 58.774476][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [pid 5018] exit_group(0) = ? [pid 5015] <... umount2 resumed>) = 0 [pid 5019] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5019, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5018] +++ exited with 0 +++ [pid 5013] unlink("./0/binderfs" [pid 5015] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... unlink resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] newfstatat(AT_FDCWD, "./0/file1", [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5018, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [ 58.786556][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 58.793709][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 58.794950][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 58.812731][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 58.813501][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 58.820682][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... openat resumed>) = 3 [pid 5015] <... openat resumed>) = 4 [pid 5012] newfstatat(3, "", [pid 5015] newfstatat(4, "", [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] close(4 [pid 5014] <... umount2 resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 58.835193][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 58.835884][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 58.855717][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 58.866028][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 58.873452][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 58.877056][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [pid 5015] <... close resumed>) = 0 [pid 5014] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5015] rmdir("./0/file1" [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5014] newfstatat(AT_FDCWD, "./0/file1", [pid 5012] unlink("./0/binderfs" [pid 5015] getdents64(3, [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 58.882713][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 58.891445][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 58.902196][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 58.903987][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 58.910395][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 58.919275][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 58.931783][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... unlink resumed>) = 0 [pid 5015] close(3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... close resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] rmdir("./0") = 0 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] mkdir("./1", 0777 [pid 5014] getdents64(4, [pid 5016] <... umount2 resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] <... mkdir resumed>) = 0 [pid 5014] getdents64(4, [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5014] close(4 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5014] <... close resumed>) = 0 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] rmdir("./0/file1" [pid 5016] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5015] close(3 [pid 5016] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] getdents64(3, [pid 5015] <... close resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5033 [pid 5014] <... close resumed>) = 0 [pid 5014] rmdir("./0" [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4 [pid 5014] <... rmdir resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./0/file1" [pid 5014] mkdir("./1", 0777) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./0" [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 ./strace-static-x86_64: Process 5033 attached [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5033] set_robust_list(0x555556b87660, 24 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5033] <... set_robust_list resumed>) = 0 [pid 5014] close(3 [pid 5033] chdir("./1" [pid 5014] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5033] <... chdir resumed>) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5033] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5034 [pid 5033] <... prctl resumed>) = 0 [pid 5033] setpgid(0, 0./strace-static-x86_64: Process 5034 attached [pid 5017] <... umount2 resumed>) = 0 [pid 5016] mkdir("./1", 0777 [pid 5013] <... umount2 resumed>) = 0 [pid 5034] set_robust_list(0x555556b87660, 24 [pid 5033] <... setpgid resumed>) = 0 [pid 5016] <... mkdir resumed>) = 0 [pid 5013] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... set_robust_list resumed>) = 0 [pid 5034] chdir("./1" [pid 5033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] <... chdir resumed>) = 0 [pid 5033] <... openat resumed>) = 3 [pid 5016] <... openat resumed>) = 3 [pid 5013] newfstatat(AT_FDCWD, "./0/file1", [pid 5034] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5033] write(3, "1000", 4 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5034] <... prctl resumed>) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] setpgid(0, 0) = 0 [pid 5033] <... write resumed>) = 4 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] close(3 [pid 5016] close(3 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5033] <... close resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5033] symlink("/dev/binderfs", "./binderfs" [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5034] <... openat resumed>) = 3 [pid 5033] <... symlink resumed>) = 0 [pid 5013] <... openat resumed>) = 4 [pid 5034] write(3, "1000", 4 [pid 5013] newfstatat(4, "", [pid 5034] <... write resumed>) = 4 [pid 5034] close(3 [pid 5033] memfd_create("syzkaller", 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 58.940853][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 58.968125][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [pid 5034] <... close resumed>) = 0 [pid 5033] <... memfd_create resumed>) = 3 [pid 5013] getdents64(4, [pid 5034] symlink("/dev/binderfs", "./binderfs" [pid 5033] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5035 [pid 5034] <... symlink resumed>) = 0 [pid 5033] <... mmap resumed>) = 0x7f770c286000 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5034] memfd_create("syzkaller", 0 [pid 5017] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] <... memfd_create resumed>) = 3 [pid 5013] getdents64(4, [pid 5034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] close(4 [pid 5034] <... mmap resumed>) = 0x7f770c286000 [pid 5017] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] <... close resumed>) = 0 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./0/file1") = 0 ./strace-static-x86_64: Process 5035 attached [pid 5017] getdents64(3, [pid 5035] set_robust_list(0x555556b87660, 24 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5035] <... set_robust_list resumed>) = 0 [pid 5017] close(3 [pid 5035] chdir("./1" [pid 5017] <... close resumed>) = 0 [pid 5035] <... chdir resumed>) = 0 [pid 5017] rmdir("./0" [pid 5035] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5017] <... rmdir resumed>) = 0 [pid 5035] <... prctl resumed>) = 0 [pid 5017] mkdir("./1", 0777 [pid 5035] setpgid(0, 0 [pid 5017] <... mkdir resumed>) = 0 [pid 5035] <... setpgid resumed>) = 0 [pid 5035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] rmdir("./0/file1" [pid 5035] <... openat resumed>) = 3 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5013] <... rmdir resumed>) = 0 [pid 5035] write(3, "1000", 4 [pid 5017] <... openat resumed>) = 3 [pid 5035] <... write resumed>) = 4 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5013] getdents64(3, [pid 5035] close(3 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5035] <... close resumed>) = 0 [pid 5017] close(3 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3 [pid 5035] symlink("/dev/binderfs", "./binderfs" [pid 5017] <... close resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5035] <... symlink resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] rmdir("./0" [pid 5035] memfd_create("syzkaller", 0) = 3 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5036 [pid 5035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5035] <... mmap resumed>) = 0x7f770c286000 [pid 5013] mkdir("./1", 0777 [pid 5034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... mkdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5036 attached [pid 5013] close(3 [pid 5036] set_robust_list(0x555556b87660, 24 [pid 5013] <... close resumed>) = 0 [pid 5036] <... set_robust_list resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5036] chdir("./1") = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5037 [pid 5036] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5036] setpgid(0, 0) = 0 [pid 5036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5033] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5037 attached [pid 5036] <... openat resumed>) = 3 [pid 5036] write(3, "1000", 4) = 4 [pid 5037] set_robust_list(0x555556b87660, 24 [pid 5036] close(3) = 0 [pid 5037] <... set_robust_list resumed>) = 0 [ 59.039590][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 59.079626][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5036] symlink("/dev/binderfs", "./binderfs" [pid 5037] chdir("./1" [pid 5036] <... symlink resumed>) = 0 [pid 5036] memfd_create("syzkaller", 0 [pid 5037] <... chdir resumed>) = 0 [pid 5037] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5036] <... memfd_create resumed>) = 3 [pid 5037] <... prctl resumed>) = 0 [pid 5036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5037] setpgid(0, 0 [pid 5036] <... mmap resumed>) = 0x7f770c286000 [pid 5035] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5037] <... setpgid resumed>) = 0 [pid 5037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5037] write(3, "1000", 4) = 4 [pid 5037] close(3) = 0 [pid 5037] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5037] memfd_create("syzkaller", 0) = 3 [pid 5037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5033] <... write resumed>) = 2097152 [pid 5033] munmap(0x7f770c286000, 2097152) = 0 [ 59.108067][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 59.143802][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [pid 5036] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5033] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5033] ioctl(4, LOOP_SET_FD, 3 [pid 5037] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5035] <... write resumed>) = 2097152 [pid 5034] <... write resumed>) = 2097152 [pid 5035] munmap(0x7f770c286000, 2097152 [pid 5033] <... ioctl resumed>) = 0 [pid 5033] close(3) = 0 [pid 5033] mkdir("./file1", 0777 [pid 5034] munmap(0x7f770c286000, 2097152 [pid 5033] <... mkdir resumed>) = 0 [pid 5034] <... munmap resumed>) = 0 [pid 5034] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5035] <... munmap resumed>) = 0 [pid 5034] ioctl(4, LOOP_SET_FD, 3 [pid 5033] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5035] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 59.181008][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 59.191121][ T5033] loop3: detected capacity change from 0 to 4096 [pid 5035] ioctl(4, LOOP_SET_FD, 3 [pid 5034] <... ioctl resumed>) = 0 [pid 5034] close(3) = 0 [pid 5034] mkdir("./file1", 0777) = 0 [pid 5034] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5035] <... ioctl resumed>) = 0 [pid 5035] close(3) = 0 [pid 5035] mkdir("./file1", 0777) = 0 [ 59.221809][ T5034] loop2: detected capacity change from 0 to 4096 [ 59.228865][ T5035] loop4: detected capacity change from 0 to 4096 [ 59.240348][ T5033] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 59.256661][ T5034] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5035] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5036] <... write resumed>) = 2097152 [pid 5036] munmap(0x7f770c286000, 2097152 [pid 5037] <... write resumed>) = 2097152 [pid 5036] <... munmap resumed>) = 0 [pid 5037] munmap(0x7f770c286000, 2097152 [pid 5036] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5037] <... munmap resumed>) = 0 [pid 5036] <... openat resumed>) = 4 [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5037] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5036] ioctl(4, LOOP_SET_FD, 3 [pid 5037] <... openat resumed>) = 4 [ 59.263123][ T5035] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 59.287303][ T5033] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 59.297807][ T5034] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 59.310174][ T5035] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5037] ioctl(4, LOOP_SET_FD, 3 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./0/file1") = 0 [pid 5012] getdents64(3, [pid 5037] <... ioctl resumed>) = 0 [pid 5036] <... ioctl resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./0") = 0 [pid 5012] mkdir("./1", 0777) = 0 [pid 5037] close(3 [pid 5036] close(3 [pid 5034] <... mount resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5037] <... close resumed>) = 0 [pid 5035] <... mount resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5035] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5035] <... openat resumed>) = 3 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5035] chdir("./file1" [pid 5012] close(3 [pid 5035] <... chdir resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5036] <... close resumed>) = 0 [pid 5035] ioctl(4, LOOP_CLR_FD [pid 5034] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5037] mkdir("./file1", 0777 [pid 5036] mkdir("./file1", 0777 [pid 5035] <... ioctl resumed>) = 0 [pid 5034] <... openat resumed>) = 3 [pid 5037] <... mkdir resumed>) = 0 [pid 5035] close(4 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5040 [pid 5037] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5036] <... mkdir resumed>) = 0 [pid 5035] <... close resumed>) = 0 [ 59.324185][ T5036] loop5: detected capacity change from 0 to 4096 [ 59.331900][ T5037] loop1: detected capacity change from 0 to 4096 [ 59.343771][ T5038] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.360562][ T5039] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5034] chdir("./file1" [pid 5036] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5035] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5034] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5040 attached [pid 5040] set_robust_list(0x555556b87660, 24) = 0 [pid 5040] chdir("./1") = 0 [pid 5040] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5040] setpgid(0, 0) = 0 [ 59.379462][ T5037] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 59.380596][ T5035] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 59.405938][ T5036] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 59.416123][ T5041] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5034] ioctl(4, LOOP_CLR_FD) = 0 [pid 5034] close(4) = 0 [pid 5034] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5040] write(3, "1000", 4) = 4 [pid 5040] close(3) = 0 [pid 5040] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5040] memfd_create("syzkaller", 0) = 3 [pid 5040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5033] <... mount resumed>) = 0 [pid 5033] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5033] chdir("./file1") = 0 [pid 5033] ioctl(4, LOOP_CLR_FD) = 0 [pid 5033] close(4) = 0 [ 59.428136][ T5036] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 59.428288][ T5037] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 59.452693][ T5035] Remounting filesystem read-only [ 59.458200][ T5034] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 59.475249][ T5034] Remounting filesystem read-only [ 59.485894][ T5033] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 59.501415][ T5035] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 59.513001][ T5034] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 59.514026][ T5033] Remounting filesystem read-only [ 59.527230][ T5033] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5033] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EIO (Input/output error) [pid 5033] exit_group(0) = ? [pid 5033] +++ exited with 0 +++ [ 59.535706][ T5033] NILFS (loop3): repaired inode bitmap for reserved inodes [ 59.536562][ T5035] NILFS (loop4): repaired inode bitmap for reserved inodes [ 59.543261][ T5033] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 59.550939][ T5042] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.570171][ T5034] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5040] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5035] <... openat resumed>) = -1 EIO (Input/output error) [pid 5035] exit_group(0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5033, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5035] <... exit_group resumed>) = ? [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5035] +++ exited with 0 +++ [pid 5015] <... restart_syscall resumed>) = 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5035, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...> [pid 5015] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] <... restart_syscall resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", [pid 5016] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] getdents64(3, [pid 5016] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] <... openat resumed>) = 3 [pid 5015] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] newfstatat(3, "", [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5016] getdents64(3, [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] unlink("./1/binderfs" [pid 5016] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... unlink resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./1/binderfs") = 0 [pid 5016] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5037] <... mount resumed>) = 0 [ 59.583073][ T5035] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 59.598918][ T5043] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.611296][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 59.612843][ T5034] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5040] <... write resumed>) = 2097152 [pid 5037] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5036] <... mount resumed>) = 0 [pid 5034] <... openat resumed>) = -1 EIO (Input/output error) [pid 5037] <... openat resumed>) = 3 [pid 5036] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5034] exit_group(0 [pid 5040] munmap(0x7f770c286000, 2097152 [pid 5037] chdir("./file1" [pid 5036] <... openat resumed>) = 3 [pid 5034] <... exit_group resumed>) = ? [pid 5040] <... munmap resumed>) = 0 [pid 5037] <... chdir resumed>) = 0 [pid 5036] chdir("./file1" [pid 5034] +++ exited with 0 +++ [pid 5040] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5037] ioctl(4, LOOP_CLR_FD [ 59.624258][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 59.643217][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 59.653415][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 59.661498][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 59.669827][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 59.669826][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [pid 5036] <... chdir resumed>) = 0 [pid 5040] <... openat resumed>) = 4 [pid 5037] <... ioctl resumed>) = 0 [pid 5040] ioctl(4, LOOP_SET_FD, 3 [pid 5037] close(4 [pid 5036] ioctl(4, LOOP_CLR_FD [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5034, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5037] <... close resumed>) = 0 [pid 5036] <... ioctl resumed>) = 0 [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5037] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5036] close(4 [pid 5014] <... restart_syscall resumed>) = 0 [ 59.669849][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 59.677760][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 59.684956][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 59.694478][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 59.701651][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 59.708956][ T5040] loop0: detected capacity change from 0 to 4096 [pid 5040] <... ioctl resumed>) = 0 [pid 5036] <... close resumed>) = 0 [pid 5016] <... umount2 resumed>) = 0 [pid 5040] close(3 [pid 5036] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5040] <... close resumed>) = 0 [pid 5040] mkdir("./file1", 0777) = 0 [pid 5040] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 59.745715][ T5037] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 59.763646][ T5037] Remounting filesystem read-only [ 59.769703][ T5037] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 59.780335][ T5036] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5016] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./1/file1", [pid 5014] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./1/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./1") = 0 [pid 5015] mkdir("./2", 0777 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... mkdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5044 [pid 5016] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(3, "", [pid 5016] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] <... openat resumed>) = 4 [pid 5014] getdents64(3, [pid 5016] newfstatat(4, "", [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 59.789670][ T5037] NILFS (loop1): repaired inode bitmap for reserved inodes [ 59.796093][ T5040] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 59.804284][ T5037] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] getdents64(4, [pid 5014] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] close(4 [pid 5014] unlink("./1/binderfs" [pid 5016] <... close resumed>) = 0 [pid 5014] <... unlink resumed>) = 0 [pid 5016] rmdir("./1/file1" [pid 5014] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5037] <... openat resumed>) = -1 EIO (Input/output error) [pid 5016] <... rmdir resumed>) = 0 [pid 5037] exit_group(0 [pid 5016] getdents64(3, ./strace-static-x86_64: Process 5044 attached [pid 5044] set_robust_list(0x555556b87660, 24) = 0 [pid 5044] chdir("./2") = 0 [pid 5044] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5044] setpgid(0, 0) = 0 [pid 5044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5037] <... exit_group resumed>) = ? [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5044] <... openat resumed>) = 3 [pid 5037] +++ exited with 0 +++ [pid 5016] close(3 [pid 5044] write(3, "1000", 4) = 4 [pid 5044] close(3) = 0 [pid 5044] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5044] memfd_create("syzkaller", 0) = 3 [pid 5044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./1" [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5037, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5016] <... rmdir resumed>) = 0 [pid 5013] <... restart_syscall resumed>) = 0 [pid 5013] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] mkdir("./2", 0777 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... mkdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] getdents64(3, [pid 5016] <... openat resumed>) = 3 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5016] close(3) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 59.847218][ T5036] Remounting filesystem read-only [ 59.854348][ T5040] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 59.864377][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 59.873422][ T5036] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 59.876491][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] unlink("./1/binderfs" [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5045 [pid 5013] <... unlink resumed>) = 0 [pid 5013] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5045 attached [pid 5045] set_robust_list(0x555556b87660, 24) = 0 [pid 5045] chdir("./2") = 0 [ 59.905801][ T5036] NILFS (loop5): repaired inode bitmap for reserved inodes [ 59.921206][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 59.931597][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 59.941758][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [pid 5045] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5040] <... mount resumed>) = 0 [pid 5040] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5040] chdir("./file1") = 0 [pid 5040] ioctl(4, LOOP_CLR_FD) = 0 [pid 5040] close(4) = 0 [pid 5040] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5045] <... prctl resumed>) = 0 [ 59.945432][ T5046] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.950163][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 59.964442][ T5040] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 59.976033][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 59.982999][ T5036] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5045] setpgid(0, 0 [pid 5044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5045] <... setpgid resumed>) = 0 [pid 5045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5045] write(3, "1000", 4) = 4 [pid 5045] close(3) = 0 [pid 5045] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5045] memfd_create("syzkaller", 0) = 3 [pid 5045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 59.995245][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [pid 5044] <... write resumed>) = 2097152 [pid 5044] munmap(0x7f770c286000, 2097152) = 0 [pid 5044] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5044] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5044] close(3) = 0 [pid 5044] mkdir("./file1", 0777) = 0 [pid 5036] <... openat resumed>) = -1 EIO (Input/output error) [pid 5036] exit_group(0) = ? [pid 5036] +++ exited with 0 +++ [ 60.036049][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 60.040377][ T5040] Remounting filesystem read-only [ 60.056621][ T5044] loop3: detected capacity change from 0 to 4096 [ 60.064002][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 60.069408][ T5044] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5044] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5036, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5017] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 60.076163][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 60.083703][ T5040] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 60.095615][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 60.106774][ T5044] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 60.117772][ T5040] NILFS (loop0): repaired inode bitmap for reserved inodes [pid 5045] <... write resumed>) = 2097152 [pid 5017] unlink("./1/binderfs") = 0 [pid 5017] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5045] munmap(0x7f770c286000, 2097152) = 0 [pid 5045] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5045] ioctl(4, LOOP_SET_FD, 3 [pid 5040] <... openat resumed>) = -1 EIO (Input/output error) [pid 5040] exit_group(0) = ? [pid 5040] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5040, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5044] <... mount resumed>) = 0 [pid 5044] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5044] chdir("./file1") = 0 [pid 5044] ioctl(4, LOOP_CLR_FD) = 0 [pid 5044] close(4) = 0 [pid 5044] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 60.125978][ T5040] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 60.154805][ T5045] loop4: detected capacity change from 0 to 4096 [ 60.162388][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [pid 5012] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5045] <... ioctl resumed>) = 0 [pid 5014] <... umount2 resumed>) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5045] close(3 [pid 5014] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5045] <... close resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... openat resumed>) = 3 [pid 5045] mkdir("./file1", 0777 [pid 5014] newfstatat(AT_FDCWD, "./1/file1", [pid 5013] newfstatat(AT_FDCWD, "./1/file1", [pid 5012] newfstatat(3, "", [pid 5045] <... mkdir resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] getdents64(3, [pid 5013] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5045] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] <... openat resumed>) = 4 [pid 5013] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 60.177671][ T5044] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 60.191905][ T5048] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.195095][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 60.221022][ T5044] Remounting filesystem read-only [ 60.226087][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [pid 5014] newfstatat(4, "", [pid 5017] <... umount2 resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... openat resumed>) = 4 [pid 5012] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5014] getdents64(4, [pid 5013] newfstatat(4, "", [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] unlink("./1/binderfs" [pid 5017] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] getdents64(4, [pid 5013] getdents64(4, [pid 5012] <... unlink resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] newfstatat(AT_FDCWD, "./1/file1", [pid 5014] close(4 [pid 5013] getdents64(4, [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... close resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 60.226110][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 60.226130][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 60.226144][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 60.259017][ T5045] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 60.270382][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 60.276421][ T5044] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5014] rmdir("./1/file1" [pid 5013] close(4 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... rmdir resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5017] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] getdents64(3, [pid 5013] rmdir("./1/file1" [pid 5017] <... openat resumed>) = 4 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5017] newfstatat(4, "", [pid 5014] close(3 [pid 5013] getdents64(3, [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... close resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] getdents64(4, [pid 5014] rmdir("./1" [pid 5013] close(3 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] <... rmdir resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5017] getdents64(4, [pid 5014] mkdir("./2", 0777 [pid 5013] rmdir("./1" [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5017] close(4 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5013] mkdir("./2", 0777 [pid 5017] <... close resumed>) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5013] <... mkdir resumed>) = 0 [pid 5017] rmdir("./1/file1" [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5017] <... rmdir resumed>) = 0 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] <... openat resumed>) = 3 [pid 5017] getdents64(3, [pid 5014] close(3 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] <... close resumed>) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] close(3 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] close(3./strace-static-x86_64: Process 5049 attached [pid 5017] <... close resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5049] set_robust_list(0x555556b87660, 24 [pid 5017] rmdir("./1" [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5049 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5049] <... set_robust_list resumed>) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5049] chdir("./2" [pid 5017] mkdir("./2", 0777 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5050 [ 60.286181][ T5044] NILFS (loop3): repaired inode bitmap for reserved inodes [ 60.291401][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 60.293885][ T5044] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 60.318899][ T5045] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) ./strace-static-x86_64: Process 5050 attached [pid 5049] <... chdir resumed>) = 0 [pid 5044] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] <... mkdir resumed>) = 0 [pid 5050] set_robust_list(0x555556b87660, 24 [pid 5049] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5044] exit_group(0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5050] <... set_robust_list resumed>) = 0 [pid 5049] <... prctl resumed>) = 0 [pid 5044] <... exit_group resumed>) = ? [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] close(3 [pid 5050] chdir("./2" [pid 5049] setpgid(0, 0 [pid 5044] +++ exited with 0 +++ [pid 5017] <... close resumed>) = 0 [pid 5050] <... chdir resumed>) = 0 [pid 5049] <... setpgid resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5044, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5050] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5050] <... prctl resumed>) = 0 [pid 5049] <... openat resumed>) = 3 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5051 [ 60.339648][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 60.347949][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 60.356262][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 60.365210][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5050] setpgid(0, 0 [pid 5049] write(3, "1000", 4 [pid 5045] <... mount resumed>) = 0 [pid 5012] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5051 attached [pid 5050] <... setpgid resumed>) = 0 [pid 5049] <... write resumed>) = 4 [pid 5045] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5051] set_robust_list(0x555556b87660, 24 [pid 5050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5049] close(3 [pid 5045] <... openat resumed>) = 3 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5051] <... set_robust_list resumed>) = 0 [pid 5050] <... openat resumed>) = 3 [pid 5049] <... close resumed>) = 0 [pid 5045] chdir("./file1" [pid 5015] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] newfstatat(AT_FDCWD, "./1/file1", [pid 5051] chdir("./2" [pid 5050] write(3, "1000", 4 [pid 5049] symlink("/dev/binderfs", "./binderfs" [pid 5045] <... chdir resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5051] <... chdir resumed>) = 0 [pid 5050] <... write resumed>) = 4 [pid 5049] <... symlink resumed>) = 0 [pid 5045] ioctl(4, LOOP_CLR_FD [pid 5015] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5051] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5050] close(3 [pid 5049] memfd_create("syzkaller", 0 [pid 5045] <... ioctl resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5050] <... close resumed>) = 0 [pid 5049] <... memfd_create resumed>) = 3 [pid 5045] close(4 [pid 5015] newfstatat(3, "", [pid 5012] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5051] <... prctl resumed>) = 0 [pid 5050] symlink("/dev/binderfs", "./binderfs" [pid 5049] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5045] <... close resumed>) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... openat resumed>) = 4 [pid 5051] setpgid(0, 0 [pid 5050] <... symlink resumed>) = 0 [pid 5049] <... mmap resumed>) = 0x7f770c286000 [pid 5045] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] getdents64(3, [pid 5012] newfstatat(4, "", [pid 5051] <... setpgid resumed>) = 0 [pid 5050] memfd_create("syzkaller", 0 [pid 5051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5050] <... memfd_create resumed>) = 3 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5051] <... openat resumed>) = 3 [pid 5051] write(3, "1000", 4) = 4 [pid 5051] close(3) = 0 [pid 5051] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5051] memfd_create("syzkaller", 0) = 3 [pid 5051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5049] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] getdents64(4, [pid 5050] <... mmap resumed>) = 0x7f770c286000 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5051] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5012] getdents64(4, [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] unlink("./2/binderfs" [pid 5012] close(4 [pid 5015] <... unlink resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5015] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] rmdir("./1/file1") = 0 [ 60.392730][ T5052] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.425394][ T5045] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./1") = 0 [pid 5012] mkdir("./2", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5012] close(3) = 0 [pid 5051] <... write resumed>) = 2097152 [ 60.470273][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 60.485852][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 60.494147][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5051] munmap(0x7f770c286000, 2097152) = 0 [pid 5051] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5053 ./strace-static-x86_64: Process 5053 attached [pid 5053] set_robust_list(0x555556b87660, 24 [pid 5051] ioctl(4, LOOP_SET_FD, 3 [pid 5053] <... set_robust_list resumed>) = 0 [pid 5053] chdir("./2") = 0 [pid 5053] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 60.534037][ T5045] Remounting filesystem read-only [ 60.542884][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 60.556031][ T5045] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 60.557843][ T5051] loop5: detected capacity change from 0 to 4096 [ 60.563991][ T5045] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5053] setpgid(0, 0) = 0 [pid 5053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5053] write(3, "1000", 4) = 4 [pid 5053] close(3) = 0 [pid 5053] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5053] memfd_create("syzkaller", 0) = 3 [pid 5053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5049] <... write resumed>) = 2097152 [pid 5015] <... umount2 resumed>) = 0 [pid 5050] <... write resumed>) = 2097152 [pid 5049] munmap(0x7f770c286000, 2097152 [pid 5051] <... ioctl resumed>) = 0 [pid 5051] close(3) = 0 [ 60.586773][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 60.595635][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5051] mkdir("./file1", 0777) = 0 [pid 5049] <... munmap resumed>) = 0 [pid 5050] munmap(0x7f770c286000, 2097152 [pid 5049] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5045] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5050] <... munmap resumed>) = 0 [pid 5049] <... openat resumed>) = 4 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5045] exit_group(0 [pid 5050] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5049] ioctl(4, LOOP_SET_FD, 3 [pid 5045] <... exit_group resumed>) = ? [pid 5015] newfstatat(AT_FDCWD, "./2/file1", [pid 5051] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5050] <... openat resumed>) = 4 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5050] ioctl(4, LOOP_SET_FD, 3 [pid 5045] +++ exited with 0 +++ [pid 5015] <... openat resumed>) = 4 [pid 5049] <... ioctl resumed>) = 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5045, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=9 /* 0.09 s */} --- [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, [pid 5016] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] getdents64(4, [pid 5016] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] <... openat resumed>) = 3 [pid 5015] close(4 [pid 5016] newfstatat(3, "", [pid 5015] <... close resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] rmdir("./2/file1" [pid 5016] getdents64(3, [pid 5015] <... rmdir resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] getdents64(3, [pid 5016] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] close(3 [pid 5049] close(3 [pid 5016] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5015] <... close resumed>) = 0 [ 60.625311][ T5045] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 60.651926][ T5049] loop2: detected capacity change from 0 to 4096 [ 60.662007][ T5050] loop1: detected capacity change from 0 to 4096 [ 60.669089][ T5051] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5050] <... ioctl resumed>) = 0 [pid 5049] <... close resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5050] close(3 [pid 5049] mkdir("./file1", 0777 [pid 5015] rmdir("./2" [pid 5050] <... close resumed>) = 0 [pid 5049] <... mkdir resumed>) = 0 [pid 5016] unlink("./2/binderfs" [pid 5050] mkdir("./file1", 0777 [pid 5049] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5051] <... mount resumed>) = 0 [pid 5050] <... mkdir resumed>) = 0 [pid 5016] <... unlink resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5050] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] mkdir("./3", 0777) = 0 [ 60.682033][ T5051] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 60.697603][ T5049] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 60.705381][ T5054] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.720309][ T5050] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5051] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5053] <... write resumed>) = 2097152 [pid 5053] munmap(0x7f770c286000, 2097152) = 0 [pid 5053] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5053] ioctl(4, LOOP_SET_FD, 3 [pid 5051] <... openat resumed>) = 3 [pid 5015] <... openat resumed>) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5051] chdir("./file1" [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5053] <... ioctl resumed>) = 0 [pid 5053] close(3) = 0 [pid 5053] mkdir("./file1", 0777) = 0 [ 60.721870][ T5049] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 60.737256][ T5053] loop0: detected capacity change from 0 to 4096 [ 60.748301][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 60.749036][ T5050] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 60.755775][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 60.769798][ T5053] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5053] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5051] <... chdir resumed>) = 0 [pid 5015] close(3 [pid 5051] ioctl(4, LOOP_CLR_FD) = 0 [pid 5051] close(4) = 0 [pid 5051] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... close resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5055 attached [ 60.781885][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 60.793626][ T5051] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 60.805708][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 60.816021][ T5053] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5055] set_robust_list(0x555556b87660, 24 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5055 [pid 5055] <... set_robust_list resumed>) = 0 [pid 5050] <... mount resumed>) = 0 [pid 5055] chdir("./3" [pid 5050] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5055] <... chdir resumed>) = 0 [pid 5050] <... openat resumed>) = 3 [pid 5050] chdir("./file1") = 0 [pid 5050] ioctl(4, LOOP_CLR_FD) = 0 [pid 5050] close(4) = 0 [pid 5050] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5055] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 60.834577][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 60.843202][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 60.852830][ T5051] Remounting filesystem read-only [ 60.859003][ T5050] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5055] setpgid(0, 0) = 0 [pid 5055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5055] write(3, "1000", 4) = 4 [pid 5055] close(3) = 0 [pid 5055] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5055] memfd_create("syzkaller", 0) = 3 [ 60.880954][ T5056] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.909055][ T5051] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 60.923263][ T5050] Remounting filesystem read-only [pid 5055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5049] <... mount resumed>) = 0 [pid 5049] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5049] chdir("./file1") = 0 [pid 5049] ioctl(4, LOOP_CLR_FD) = 0 [ 60.932869][ T5050] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 60.948789][ T5057] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.969492][ T5058] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.969577][ T5050] NILFS (loop1): repaired inode bitmap for reserved inodes [pid 5049] close(4 [pid 5055] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5053] <... mount resumed>) = 0 [pid 5049] <... close resumed>) = 0 [pid 5053] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5049] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5053] <... openat resumed>) = 3 [pid 5053] chdir("./file1") = 0 [pid 5053] ioctl(4, LOOP_CLR_FD) = 0 [pid 5053] close(4) = 0 [ 60.991554][ T5051] NILFS (loop5): repaired inode bitmap for reserved inodes [ 61.003547][ T5049] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 61.018462][ T5053] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5053] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./2/file1" [pid 5055] <... write resumed>) = 2097152 [pid 5016] <... rmdir resumed>) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./2") = 0 [pid 5016] mkdir("./3", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5055] munmap(0x7f770c286000, 2097152 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5059 ./strace-static-x86_64: Process 5059 attached [pid 5059] set_robust_list(0x555556b87660, 24) = 0 [pid 5059] chdir("./3") = 0 [pid 5059] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] setpgid(0, 0) = 0 [ 61.025700][ T5051] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 61.059194][ T5050] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 61.078323][ T5049] Remounting filesystem read-only [pid 5059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5055] <... munmap resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5051] <... openat resumed>) = -1 EIO (Input/output error) [pid 5050] <... openat resumed>) = -1 EIO (Input/output error) [pid 5059] write(3, "1000", 4) = 4 [pid 5059] close(3) = 0 [pid 5059] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5059] memfd_create("syzkaller", 0) = 3 [pid 5059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5055] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5051] exit_group(0 [pid 5050] exit_group(0 [pid 5055] <... openat resumed>) = 4 [pid 5055] ioctl(4, LOOP_SET_FD, 3 [pid 5051] <... exit_group resumed>) = ? [pid 5050] <... exit_group resumed>) = ? [pid 5051] +++ exited with 0 +++ [pid 5050] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5051, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5050, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [ 61.089388][ T5049] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 61.089721][ T5053] Remounting filesystem read-only [ 61.098367][ T5049] NILFS (loop2): repaired inode bitmap for reserved inodes [ 61.111339][ T5049] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 61.131679][ T5055] loop3: detected capacity change from 0 to 4096 [pid 5055] <... ioctl resumed>) = 0 [pid 5049] <... openat resumed>) = -1 EIO (Input/output error) [pid 5055] close(3 [pid 5049] exit_group(0 [pid 5055] <... close resumed>) = 0 [pid 5049] <... exit_group resumed>) = ? [pid 5017] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5055] mkdir("./file1", 0777 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... openat resumed>) = 3 [pid 5013] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] newfstatat(3, "", [pid 5013] <... openat resumed>) = 3 [pid 5055] <... mkdir resumed>) = 0 [pid 5049] +++ exited with 0 +++ [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] newfstatat(3, "", [pid 5055] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] getdents64(3, [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5049, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] getdents64(3, [pid 5017] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] newfstatat(AT_FDCWD, "./2/binderfs", [ 61.143994][ T5053] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 61.164249][ T5055] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 61.164670][ T5053] NILFS (loop0): repaired inode bitmap for reserved inodes [pid 5013] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5053] <... openat resumed>) = -1 EIO (Input/output error) [pid 5053] exit_group(0) = ? [pid 5013] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5017] unlink("./2/binderfs" [pid 5014] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... unlink resumed>) = 0 [pid 5013] unlink("./2/binderfs" [pid 5017] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... unlink resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5053] +++ exited with 0 +++ [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./2/binderfs" [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5053, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...> [pid 5014] <... unlink resumed>) = 0 [pid 5012] <... restart_syscall resumed>) = 0 [pid 5012] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... openat resumed>) = 3 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 61.183057][ T5053] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 61.209017][ T5055] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 61.209945][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 61.228841][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 61.236505][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./2/binderfs") = 0 [pid 5012] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5055] <... mount resumed>) = 0 [pid 5055] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5055] chdir("./file1") = 0 [pid 5055] ioctl(4, LOOP_CLR_FD) = 0 [pid 5055] close(4) = 0 [ 61.236895][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 61.243280][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 61.251591][ T5055] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 61.265611][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 61.277017][ T5060] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5055] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5059] <... write resumed>) = 2097152 [pid 5059] munmap(0x7f770c286000, 2097152) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5059] ioctl(4, LOOP_SET_FD, 3) = 0 [ 61.283076][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 61.302237][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 61.314071][ T5059] loop4: detected capacity change from 0 to 4096 [ 61.321186][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 61.329044][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 61.337406][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [pid 5059] close(3) = 0 [pid 5059] mkdir("./file1", 0777) = 0 [ 61.345401][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 61.347165][ T5055] Remounting filesystem read-only [ 61.353984][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 61.359371][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 61.367124][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 61.374297][ T5055] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 61.381848][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 61.389173][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 61.396318][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 61.403511][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 61.410330][ T5059] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 61.417737][ T5055] NILFS (loop3): repaired inode bitmap for reserved inodes [ 61.428227][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 61.435457][ T5055] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 61.459315][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 61.475913][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 61.483070][ T5059] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5059] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./2/file1") = 0 [pid 5014] getdents64(3, [pid 5013] <... umount2 resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] close(3 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5055] <... openat resumed>) = -1 EIO (Input/output error) [ 61.486051][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 61.493755][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5014] <... close resumed>) = 0 [pid 5013] newfstatat(AT_FDCWD, "./2/file1", [pid 5012] <... umount2 resumed>) = 0 [pid 5055] exit_group(0) = ? [pid 5017] <... umount2 resumed>) = 0 [pid 5014] rmdir("./2" [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... mount resumed>) = 0 [pid 5055] +++ exited with 0 +++ [pid 5017] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... rmdir resumed>) = 0 [pid 5013] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5055, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5059] <... openat resumed>) = 3 [pid 5017] newfstatat(AT_FDCWD, "./2/file1", [pid 5014] mkdir("./3", 0777 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./2/file1", [pid 5059] chdir("./file1" [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... openat resumed>) = 4 [pid 5012] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(4, "", [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... chdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... mkdir resumed>) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] ioctl(4, LOOP_CLR_FD [pid 5017] <... openat resumed>) = 4 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5013] getdents64(4, [pid 5012] <... openat resumed>) = 4 [pid 5059] <... ioctl resumed>) = 0 [pid 5017] newfstatat(4, "", [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [ 61.564625][ T5061] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 61.593373][ T5059] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5012] newfstatat(4, "", [pid 5059] close(4 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... openat resumed>) = 3 [pid 5013] getdents64(4, [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... close resumed>) = 0 [pid 5017] getdents64(4, [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] getdents64(4, [pid 5059] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5013] close(4 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, [pid 5015] <... openat resumed>) = 3 [pid 5013] <... close resumed>) = 0 [pid 5012] getdents64(4, [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] newfstatat(3, "", [pid 5013] rmdir("./2/file1" [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5012] close(4 [pid 5017] <... close resumed>) = 0 [pid 5015] getdents64(3, [pid 5013] getdents64(3, [pid 5012] <... close resumed>) = 0 [pid 5017] rmdir("./2/file1" [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] rmdir("./2/file1" [pid 5017] <... rmdir resumed>) = 0 [pid 5015] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] close(3 [pid 5012] <... rmdir resumed>) = 0 [pid 5017] getdents64(3, [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... close resumed>) = 0 [pid 5012] getdents64(3, [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5013] rmdir("./2" [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5012] close(3 [pid 5017] <... close resumed>) = 0 [pid 5015] unlink("./3/binderfs" [pid 5013] mkdir("./3", 0777 [pid 5012] <... close resumed>) = 0 [pid 5017] rmdir("./2" [pid 5015] <... unlink resumed>) = 0 [pid 5013] <... mkdir resumed>) = 0 [pid 5012] rmdir("./2" [pid 5017] <... rmdir resumed>) = 0 [pid 5015] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5012] <... rmdir resumed>) = 0 [pid 5017] mkdir("./3", 0777 [pid 5013] <... openat resumed>) = 3 [pid 5012] mkdir("./3", 0777 [pid 5017] <... mkdir resumed>) = 0 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5012] <... mkdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5017] <... openat resumed>) = 3 [pid 5013] close(3 [pid 5012] <... openat resumed>) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] <... close resumed>) = 0 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] close(3 [pid 5014] close(3 [pid 5012] close(3 [pid 5017] <... close resumed>) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5062 [pid 5012] <... close resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] <... close resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5063 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5064 ./strace-static-x86_64: Process 5062 attached [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5065 [pid 5062] set_robust_list(0x555556b87660, 24./strace-static-x86_64: Process 5064 attached ) = 0 [pid 5064] set_robust_list(0x555556b87660, 24 [pid 5062] chdir("./3" [pid 5064] <... set_robust_list resumed>) = 0 [pid 5062] <... chdir resumed>) = 0 [pid 5064] chdir("./3" [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... chdir resumed>) = 0 [pid 5062] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5065 attached [pid 5064] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] setpgid(0, 0 [pid 5064] <... prctl resumed>) = 0 [pid 5062] <... setpgid resumed>) = 0 [pid 5064] setpgid(0, 0 [pid 5065] set_robust_list(0x555556b87660, 24 [pid 5064] <... setpgid resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... set_robust_list resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... openat resumed>) = 3 [pid 5064] <... openat resumed>) = 3 [pid 5062] write(3, "1000", 4./strace-static-x86_64: Process 5063 attached [pid 5065] chdir("./3" [pid 5064] write(3, "1000", 4 [pid 5062] <... write resumed>) = 4 [pid 5064] <... write resumed>) = 4 [pid 5062] close(3 [pid 5065] <... chdir resumed>) = 0 [pid 5064] close(3 [pid 5063] set_robust_list(0x555556b87660, 24 [pid 5062] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5062] symlink("/dev/binderfs", "./binderfs" [pid 5065] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... set_robust_list resumed>) = 0 [pid 5064] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... symlink resumed>) = 0 [pid 5065] <... prctl resumed>) = 0 [pid 5064] <... symlink resumed>) = 0 [pid 5063] chdir("./3" [ 61.610237][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 61.624016][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 61.653127][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [pid 5062] memfd_create("syzkaller", 0 [pid 5065] setpgid(0, 0 [pid 5064] memfd_create("syzkaller", 0 [pid 5063] <... chdir resumed>) = 0 [pid 5062] <... memfd_create resumed>) = 3 [pid 5064] <... memfd_create resumed>) = 3 [pid 5062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... mmap resumed>) = 0x7f770c286000 [pid 5064] <... mmap resumed>) = 0x7f770c286000 [pid 5065] <... setpgid resumed>) = 0 [pid 5063] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... prctl resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5063] setpgid(0, 0) = 0 [pid 5065] write(3, "1000", 4 [pid 5063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... write resumed>) = 4 [pid 5065] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 5063] write(3, "1000", 4 [pid 5065] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... write resumed>) = 4 [pid 5065] <... symlink resumed>) = 0 [pid 5063] close(3 [pid 5065] memfd_create("syzkaller", 0 [pid 5063] <... close resumed>) = 0 [pid 5065] <... memfd_create resumed>) = 3 [pid 5063] symlink("/dev/binderfs", "./binderfs" [pid 5065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... symlink resumed>) = 0 [pid 5065] <... mmap resumed>) = 0x7f770c286000 [pid 5063] memfd_create("syzkaller", 0 [pid 5062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... memfd_create resumed>) = 3 [ 61.653223][ T5059] Remounting filesystem read-only [ 61.668353][ T5059] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 61.685633][ T5059] NILFS (loop4): repaired inode bitmap for reserved inodes [ 61.693814][ T5059] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5059] <... openat resumed>) = -1 EIO (Input/output error) [pid 5059] exit_group(0) = ? [ 61.731309][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [pid 5065] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... write resumed>) = 2097152 [pid 5059] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5059, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5016] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./3/binderfs") = 0 [pid 5016] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] munmap(0x7f770c286000, 2097152 [pid 5064] <... write resumed>) = 2097152 [pid 5064] munmap(0x7f770c286000, 2097152) = 0 [pid 5062] <... munmap resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5064] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 61.775759][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 61.796597][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [pid 5062] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... openat resumed>) = 4 [pid 5064] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] mkdir("./file1", 0777) = 0 [pid 5062] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5065] <... write resumed>) = 2097152 [pid 5065] munmap(0x7f770c286000, 2097152) = 0 [pid 5063] <... write resumed>) = 2097152 [ 61.821965][ T5062] loop1: detected capacity change from 0 to 4096 [ 61.829972][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 61.835615][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 61.838981][ T5064] loop0: detected capacity change from 0 to 4096 [ 61.845662][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 61.867989][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] munmap(0x7f770c286000, 2097152 [pid 5064] <... ioctl resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5064] close(3) = 0 [pid 5064] mkdir("./file1", 0777 [pid 5063] <... munmap resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 61.868944][ T5062] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 61.876244][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 61.904854][ T5065] loop2: detected capacity change from 0 to 4096 [ 61.906102][ T5064] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5065] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5065] close(3 [pid 5063] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... close resumed>) = 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./3/file1" [pid 5065] mkdir("./file1", 0777) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5065] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] rmdir("./3") = 0 [pid 5015] mkdir("./4", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5066 ./strace-static-x86_64: Process 5066 attached [pid 5066] set_robust_list(0x555556b87660, 24) = 0 [pid 5066] chdir("./4") = 0 [pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] setpgid(0, 0) = 0 [pid 5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5066] write(3, "1000", 4) = 4 [pid 5066] close(3) = 0 [pid 5066] symlink("/dev/binderfs", "./binderfs") = 0 [ 61.920278][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 61.931631][ T5063] loop5: detected capacity change from 0 to 4096 [ 61.943858][ T5065] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 61.966974][ T5062] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5066] memfd_create("syzkaller", 0) = 3 [pid 5063] <... ioctl resumed>) = 0 [pid 5066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5063] close(3) = 0 [pid 5063] mkdir("./file1", 0777) = 0 [pid 5063] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 61.977083][ T5064] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 61.980644][ T5065] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 62.010122][ T5063] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5066] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... mount resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] chdir("./file1") = 0 [pid 5062] ioctl(4, LOOP_CLR_FD) = 0 [pid 5062] close(4) = 0 [ 62.035161][ T5067] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.055893][ T5062] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 62.073433][ T5063] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5062] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... umount2 resumed>) = 0 [pid 5064] <... mount resumed>) = 0 [pid 5016] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... write resumed>) = 2097152 [pid 5064] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5063] <... mount resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 3 [pid 5064] chdir("./file1") = 0 [pid 5064] ioctl(4, LOOP_CLR_FD) = 0 [pid 5064] close(4) = 0 [pid 5064] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5066] munmap(0x7f770c286000, 2097152 [pid 5063] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] newfstatat(AT_FDCWD, "./3/file1", [pid 5066] <... munmap resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5066] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... openat resumed>) = 3 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] chdir("./file1" [pid 5016] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... chdir resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] ioctl(4, LOOP_CLR_FD [pid 5016] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... ioctl resumed>) = 0 [pid 5016] <... openat resumed>) = 4 [ 62.077285][ T5068] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.102388][ T5069] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.115993][ T5064] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5063] close(4) = 0 [pid 5016] newfstatat(4, "", [pid 5063] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5065] <... mount resumed>) = 0 [pid 5016] close(4 [pid 5065] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5016] rmdir("./3/file1" [pid 5065] chdir("./file1" [pid 5016] <... rmdir resumed>) = 0 [pid 5065] <... chdir resumed>) = 0 [pid 5016] getdents64(3, [pid 5065] ioctl(4, LOOP_CLR_FD [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5016] close(3 [pid 5066] <... ioctl resumed>) = 0 [ 62.139153][ T5062] Remounting filesystem read-only [ 62.139503][ T5063] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 62.145348][ T5066] loop3: detected capacity change from 0 to 4096 [ 62.170142][ T5070] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] close(4 [pid 5016] <... close resumed>) = 0 [pid 5066] close(3) = 0 [pid 5066] mkdir("./file1", 0777 [pid 5065] <... close resumed>) = 0 [pid 5016] rmdir("./3" [pid 5065] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... rmdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5066] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] mkdir("./4", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 62.187356][ T5062] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 62.198461][ T5064] Remounting filesystem read-only [ 62.199196][ T5065] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 62.209066][ T5062] NILFS (loop1): repaired inode bitmap for reserved inodes [ 62.228929][ T5063] Remounting filesystem read-only [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5071 ./strace-static-x86_64: Process 5071 attached [ 62.234334][ T5064] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 62.239644][ T5063] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 62.244457][ T5064] NILFS (loop0): repaired inode bitmap for reserved inodes [ 62.259132][ T5066] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 62.273333][ T5062] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5071] set_robust_list(0x555556b87660, 24) = 0 [pid 5071] chdir("./4" [pid 5062] <... openat resumed>) = -1 EIO (Input/output error) [pid 5071] <... chdir resumed>) = 0 [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] exit_group(0) = ? [pid 5062] +++ exited with 0 +++ [ 62.284153][ T5063] NILFS (loop5): repaired inode bitmap for reserved inodes [ 62.290226][ T5064] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 62.311348][ T5066] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 62.312605][ T5065] Remounting filesystem read-only [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5062, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] setpgid(0, 0 [pid 5013] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... setpgid resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5071] write(3, "1000", 4 [pid 5013] getdents64(3, [pid 5071] <... write resumed>) = 4 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5071] close(3 [pid 5013] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./3/binderfs") = 0 [pid 5013] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... openat resumed>) = -1 EIO (Input/output error) [pid 5064] <... openat resumed>) = -1 EIO (Input/output error) [pid 5064] exit_group(0) = ? [pid 5064] +++ exited with 0 +++ [ 62.329100][ T5063] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 62.356677][ T5065] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 62.363860][ T5072] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.370157][ T5065] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5071] <... symlink resumed>) = 0 [pid 5066] <... mount resumed>) = 0 [pid 5065] <... openat resumed>) = -1 EIO (Input/output error) [pid 5063] exit_group(0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5064, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5071] memfd_create("syzkaller", 0 [pid 5066] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5065] exit_group(0 [pid 5063] <... exit_group resumed>) = ? [pid 5012] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... memfd_create resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 5012] <... restart_syscall resumed>) = 0 [pid 5071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] chdir("./file1" [pid 5065] <... exit_group resumed>) = ? [pid 5063] +++ exited with 0 +++ [pid 5071] <... mmap resumed>) = 0x7f770c286000 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5063, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5065] +++ exited with 0 +++ [pid 5017] restart_syscall(<... resuming interrupted clone ...> [pid 5012] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... chdir resumed>) = 0 [pid 5017] <... restart_syscall resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] ioctl(4, LOOP_CLR_FD [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5065, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5012] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... ioctl resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5066] close(4 [pid 5017] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] newfstatat(3, "", [pid 5066] <... close resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] getdents64(3, [pid 5017] <... openat resumed>) = 3 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] newfstatat(3, "", [pid 5066] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] getdents64(3, [pid 5012] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 62.388447][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 62.389623][ T5065] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 62.395332][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [pid 5017] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] unlink("./3/binderfs" [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... unlink resumed>) = 0 [pid 5017] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5012] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./3/binderfs") = 0 [pid 5017] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./3/binderfs") = 0 [ 62.437823][ T5066] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 62.445209][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 62.462106][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 62.470296][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 62.483088][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [pid 5014] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 62.491932][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 62.491943][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 62.491961][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 62.499800][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 62.507568][ T5066] Remounting filesystem read-only [ 62.514331][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 62.533659][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5071] munmap(0x7f770c286000, 2097152) = 0 [ 62.533700][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 62.544519][ T5066] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 62.548998][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 62.556815][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 62.563914][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 62.572684][ T5066] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5071] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 62.578771][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 62.593506][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 62.594544][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 62.608563][ T5066] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 62.609650][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 62.630499][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [pid 5071] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5066] <... openat resumed>) = -1 EIO (Input/output error) [pid 5071] close(3) = 0 [pid 5071] mkdir("./file1", 0777) = 0 [pid 5071] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5013] <... umount2 resumed>) = 0 [pid 5013] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5066] exit_group(0) = ? [pid 5013] close(4) = 0 [pid 5013] rmdir("./3/file1") = 0 [pid 5013] getdents64(3, [pid 5066] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5066, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3 [pid 5015] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 62.638296][ T5071] loop4: detected capacity change from 0 to 4096 [ 62.638381][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 62.655784][ T5071] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5015] unlink("./4/binderfs") = 0 [pid 5015] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... umount2 resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5013] rmdir("./3") = 0 [pid 5013] mkdir("./4", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5073 [pid 5014] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, ./strace-static-x86_64: Process 5073 attached 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./3/file1" [pid 5073] set_robust_list(0x555556b87660, 24 [pid 5014] <... rmdir resumed>) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./3" [pid 5073] <... set_robust_list resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5014] mkdir("./4", 0777 [pid 5073] chdir("./4" [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] <... chdir resumed>) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5073] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5073] <... prctl resumed>) = 0 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] close(3 [pid 5073] setpgid(0, 0 [pid 5014] <... close resumed>) = 0 [pid 5073] <... setpgid resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1000", 4) = 4 [pid 5073] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] memfd_create("syzkaller", 0 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5074 [pid 5073] <... memfd_create resumed>) = 3 [ 62.694053][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 62.702291][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 62.703411][ T5071] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 62.719031][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 62.728378][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 ./strace-static-x86_64: Process 5074 attached [pid 5073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5074] set_robust_list(0x555556b87660, 24) = 0 [pid 5074] chdir("./4" [pid 5071] <... mount resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... chdir resumed>) = 0 [pid 5074] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... openat resumed>) = 3 [pid 5074] <... prctl resumed>) = 0 [pid 5071] chdir("./file1" [pid 5074] setpgid(0, 0 [pid 5071] <... chdir resumed>) = 0 [pid 5074] <... setpgid resumed>) = 0 [pid 5071] ioctl(4, LOOP_CLR_FD [pid 5074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... ioctl resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5071] close(4) = 0 [pid 5074] write(3, "1000", 4 [pid 5071] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5074] <... write resumed>) = 4 [ 62.757831][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 62.776791][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 62.784791][ T5075] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.796696][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... umount2 resumed>) = 0 [pid 5074] close(3) = 0 [pid 5074] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5074] memfd_create("syzkaller", 0) = 3 [pid 5074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5017] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./3/file1") = 0 [ 62.815708][ T5071] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./3") = 0 [pid 5017] mkdir("./4", 0777 [pid 5012] <... umount2 resumed>) = 0 [pid 5017] <... mkdir resumed>) = 0 [pid 5012] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... openat resumed>) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5012] newfstatat(AT_FDCWD, "./3/file1", [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] close(3 [pid 5012] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... close resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5076 [pid 5012] <... openat resumed>) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, ./strace-static-x86_64: Process 5076 attached 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5076] set_robust_list(0x555556b87660, 24 [pid 5012] close(4 [pid 5076] <... set_robust_list resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5076] chdir("./4" [pid 5012] rmdir("./3/file1" [pid 5076] <... chdir resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5076] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5012] getdents64(3, [pid 5076] <... prctl resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5076] setpgid(0, 0 [pid 5012] close(3 [pid 5076] <... setpgid resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] rmdir("./3" [pid 5076] <... openat resumed>) = 3 [pid 5012] <... rmdir resumed>) = 0 [pid 5076] write(3, "1000", 4 [pid 5012] mkdir("./4", 0777 [pid 5076] <... write resumed>) = 4 [pid 5012] <... mkdir resumed>) = 0 [pid 5076] close(3 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5076] symlink("/dev/binderfs", "./binderfs" [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5076] <... symlink resumed>) = 0 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] memfd_create("syzkaller", 0 [pid 5012] close(3 [pid 5076] <... memfd_create resumed>) = 3 [pid 5012] <... close resumed>) = 0 [pid 5076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... mmap resumed>) = 0x7f770c286000 [pid 5073] <... write resumed>) = 2097152 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5077 [ 62.865997][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 62.889807][ T5071] Remounting filesystem read-only [pid 5074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5077 attached [pid 5073] munmap(0x7f770c286000, 2097152 [pid 5077] set_robust_list(0x555556b87660, 24 [pid 5073] <... munmap resumed>) = 0 [pid 5077] <... set_robust_list resumed>) = 0 [pid 5077] chdir("./4") = 0 [pid 5077] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] setpgid(0, 0 [pid 5073] <... openat resumed>) = 4 [pid 5077] <... setpgid resumed>) = 0 [pid 5073] ioctl(4, LOOP_SET_FD, 3 [pid 5077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... ioctl resumed>) = 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5073] close(3 [pid 5077] write(3, "1000", 4 [pid 5073] <... close resumed>) = 0 [pid 5077] <... write resumed>) = 4 [pid 5073] mkdir("./file1", 0777 [pid 5077] close(3 [pid 5073] <... mkdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5073] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5077] symlink("/dev/binderfs", "./binderfs" [pid 5076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... symlink resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] memfd_create("syzkaller", 0) = 3 [pid 5015] newfstatat(AT_FDCWD, "./4/file1", [pid 5077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 62.929388][ T5071] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 62.945996][ T5073] loop1: detected capacity change from 0 to 4096 [ 62.964173][ T5073] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... write resumed>) = 2097152 [pid 5074] munmap(0x7f770c286000, 2097152 [pid 5015] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, [pid 5074] <... munmap resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5074] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] getdents64(4, [pid 5074] <... openat resumed>) = 4 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5076] <... write resumed>) = 2097152 [pid 5074] ioctl(4, LOOP_SET_FD, 3 [pid 5071] exit_group(0 [pid 5015] close(4 [pid 5071] <... exit_group resumed>) = ? [pid 5074] <... ioctl resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5015] rmdir("./4/file1" [pid 5074] close(3) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5074] mkdir("./file1", 0777 [pid 5071] +++ exited with 0 +++ [pid 5015] getdents64(3, [pid 5074] <... mkdir resumed>) = 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5071, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5074] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] restart_syscall(<... resuming interrupted clone ...> [pid 5015] close(3 [pid 5016] <... restart_syscall resumed>) = 0 [pid 5015] <... close resumed>) = 0 [ 62.985704][ T5071] NILFS (loop4): repaired inode bitmap for reserved inodes [ 62.993570][ T5071] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 63.020269][ T5074] loop2: detected capacity change from 0 to 4096 [pid 5015] rmdir("./4") = 0 [pid 5076] munmap(0x7f770c286000, 2097152 [pid 5015] mkdir("./5", 0777 [pid 5076] <... munmap resumed>) = 0 [pid 5016] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... mkdir resumed>) = 0 [pid 5077] <... write resumed>) = 2097152 [pid 5077] munmap(0x7f770c286000, 2097152 [pid 5076] <... openat resumed>) = 4 [pid 5016] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] ioctl(4, LOOP_SET_FD, 3 [pid 5016] <... openat resumed>) = 3 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... munmap resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5077] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... ioctl resumed>) = 0 [pid 5016] newfstatat(3, "", [pid 5015] <... openat resumed>) = 3 [pid 5076] close(3) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5076] mkdir("./file1", 0777 [pid 5016] getdents64(3, [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... mkdir resumed>) = 0 [pid 5076] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] close(3) = 0 [ 63.037776][ T5074] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 63.052181][ T5074] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 63.063298][ T5076] loop5: detected capacity change from 0 to 4096 [ 63.069242][ T5077] loop0: detected capacity change from 0 to 4096 [pid 5016] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... ioctl resumed>) = 0 [pid 5077] close(3) = 0 [pid 5077] mkdir("./file1", 0777) = 0 [pid 5077] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5079 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./4/binderfs") = 0 [pid 5016] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... mount resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5074] chdir("./file1") = 0 [pid 5074] ioctl(4, LOOP_CLR_FD) = 0 [pid 5074] close(4) = 0 [pid 5074] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 5079 attached [pid 5079] set_robust_list(0x555556b87660, 24) = 0 [pid 5079] chdir("./5") = 0 [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 63.081481][ T5073] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 63.086441][ T5076] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 63.106089][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 63.112884][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 63.120765][ T5074] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5079] setpgid(0, 0) = 0 [pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] write(3, "1000", 4) = 4 [pid 5079] close(3) = 0 [pid 5079] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5079] memfd_create("syzkaller", 0) = 3 [pid 5079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 63.130055][ T5078] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.146698][ T5077] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 63.155816][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 63.166007][ T5076] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 63.178243][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [pid 5073] <... mount resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 63.187901][ T5077] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 63.199898][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 63.200088][ T5074] Remounting filesystem read-only [ 63.222538][ T5080] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5073] chdir("./file1") = 0 [pid 5073] ioctl(4, LOOP_CLR_FD) = 0 [pid 5073] close(4) = 0 [pid 5076] <... mount resumed>) = 0 [pid 5073] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 63.235300][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 63.256251][ T5074] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 63.257154][ T5081] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.273714][ T5074] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5076] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5076] chdir("./file1") = 0 [pid 5076] ioctl(4, LOOP_CLR_FD) = 0 [pid 5076] close(4) = 0 [pid 5079] <... write resumed>) = 2097152 [pid 5076] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5079] munmap(0x7f770c286000, 2097152) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5079] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... openat resumed>) = -1 EIO (Input/output error) [pid 5074] exit_group(0) = ? [ 63.276169][ T5073] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 63.300740][ T5073] Remounting filesystem read-only [ 63.304789][ T5074] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 63.324319][ T5076] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5074] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5074, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=9 /* 0.09 s */} --- [pid 5014] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, [pid 5016] <... umount2 resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./4/file1", [pid 5014] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] <... ioctl resumed>) = 0 [pid 5079] close(3) = 0 [ 63.340413][ T5079] loop3: detected capacity change from 0 to 4096 [ 63.357336][ T5073] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 63.365331][ T5073] NILFS (loop1): repaired inode bitmap for reserved inodes [ 63.380489][ T5082] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5079] mkdir("./file1", 0777 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./4/binderfs" [pid 5077] <... mount resumed>) = 0 [pid 5016] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... unlink resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 3 [pid 5016] <... openat resumed>) = 4 [pid 5014] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] chdir("./file1" [pid 5016] getdents64(4, [pid 5079] <... mkdir resumed>) = 0 [pid 5079] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5077] <... chdir resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5077] ioctl(4, LOOP_CLR_FD [pid 5016] getdents64(4, [pid 5077] <... ioctl resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 5016] close(4) = 0 [pid 5073] <... openat resumed>) = -1 EIO (Input/output error) [pid 5073] exit_group(0) = ? [ 63.397137][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 63.399446][ T5079] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 63.405135][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 63.414928][ T5073] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 63.427175][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5073] +++ exited with 0 +++ [pid 5077] <... close resumed>) = 0 [pid 5016] rmdir("./4/file1" [pid 5077] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... rmdir resumed>) = 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5073, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5016] getdents64(3, [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5079] <... mount resumed>) = 0 [ 63.443541][ T5076] Remounting filesystem read-only [ 63.450369][ T5076] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 63.456089][ T5079] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 63.467886][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 63.467923][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [pid 5079] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5079] chdir("./file1" [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] <... restart_syscall resumed>) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./4" [pid 5013] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... rmdir resumed>) = 0 [pid 5016] mkdir("./5", 0777 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... chdir resumed>) = 0 [pid 5016] <... mkdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5079] ioctl(4, LOOP_CLR_FD [pid 5016] <... openat resumed>) = 3 [pid 5013] <... openat resumed>) = 3 [pid 5079] <... ioctl resumed>) = 0 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5013] newfstatat(3, "", [pid 5079] close(4 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5079] <... close resumed>) = 0 [pid 5016] close(3 [pid 5013] getdents64(3, [pid 5079] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... close resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [ 63.482970][ T5077] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 63.517541][ T5079] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 63.525958][ T5076] NILFS (loop5): repaired inode bitmap for reserved inodes [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5084 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./4/binderfs") = 0 [ 63.534265][ T5083] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.542796][ T5076] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 63.565324][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 63.571976][ T5077] Remounting filesystem read-only [ 63.583703][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [pid 5013] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5084 attached [pid 5084] set_robust_list(0x555556b87660, 24) = 0 [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./4/file1" [pid 5084] chdir("./5" [pid 5014] <... rmdir resumed>) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./4") = 0 [pid 5014] mkdir("./5", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5084] <... chdir resumed>) = 0 [pid 5084] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5084] setpgid(0, 0) = 0 [ 63.603145][ T5079] Remounting filesystem read-only [ 63.613215][ T5079] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 63.621765][ T5077] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 63.625440][ T5079] NILFS (loop3): repaired inode bitmap for reserved inodes [ 63.635572][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 63.645354][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5014] <... openat resumed>) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3 [pid 5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... openat resumed>) = 3 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5085 ./strace-static-x86_64: Process 5085 attached [pid 5084] write(3, "1000", 4 [pid 5085] set_robust_list(0x555556b87660, 24) = 0 [pid 5085] chdir("./5") = 0 [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5085] setpgid(0, 0) = 0 [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "1000", 4) = 4 [pid 5085] close(3) = 0 [pid 5085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5085] memfd_create("syzkaller", 0) = 3 [pid 5085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 63.655152][ T5077] NILFS (loop0): repaired inode bitmap for reserved inodes [ 63.664506][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 63.672474][ T5077] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 63.687162][ T5079] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5084] <... write resumed>) = 4 [pid 5084] close(3) = 0 [pid 5084] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5084] memfd_create("syzkaller", 0) = 3 [pid 5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... openat resumed>) = -1 EIO (Input/output error) [pid 5084] <... mmap resumed>) = 0x7f770c286000 [pid 5076] exit_group(0 [pid 5085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5079] <... openat resumed>) = -1 EIO (Input/output error) [pid 5076] <... exit_group resumed>) = ? [pid 5076] +++ exited with 0 +++ [pid 5079] exit_group(0) = ? [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5076, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5017] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, [pid 5084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5079] +++ exited with 0 +++ [pid 5017] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5079, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5017] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5015] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] unlink("./4/binderfs" [pid 5015] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] <... unlink resumed>) = 0 [ 63.695056][ T2828] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 63.725134][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 63.732370][ T2828] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [pid 5015] <... openat resumed>) = 3 [pid 5017] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] exit_group(0 [pid 5015] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5077] <... exit_group resumed>) = ? [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./5/binderfs") = 0 [pid 5015] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] <... write resumed>) = 2097152 [pid 5085] munmap(0x7f770c286000, 2097152 [pid 5077] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5077, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5012] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [ 63.756470][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 63.761690][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 63.763376][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 63.763410][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 63.790569][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [pid 5012] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./4/binderfs") = 0 [pid 5012] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... write resumed>) = 2097152 [pid 5085] <... munmap resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5085] ioctl(4, LOOP_SET_FD, 3 [pid 5084] munmap(0x7f770c286000, 2097152) = 0 [pid 5085] <... ioctl resumed>) = 0 [pid 5085] close(3) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5084] ioctl(4, LOOP_SET_FD, 3 [pid 5085] mkdir("./file1", 0777) = 0 [ 63.802954][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 63.813063][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 63.818728][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 63.824753][ T5085] loop2: detected capacity change from 0 to 4096 [ 63.827846][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 63.848096][ T5084] loop4: detected capacity change from 0 to 4096 [pid 5085] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5084] <... ioctl resumed>) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5084] close(3) = 0 [pid 5084] mkdir("./file1", 0777) = 0 [ 63.851265][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 63.862110][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 63.862145][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 63.862160][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 63.880926][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 63.886733][ T5085] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5084] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... umount2 resumed>) = 0 [pid 5013] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, [pid 5017] <... openat resumed>) = 4 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./4/file1" [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./4" [pid 5013] close(4) = 0 [pid 5013] rmdir("./4/file1" [pid 5017] <... rmdir resumed>) = 0 [pid 5017] mkdir("./5", 0777) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./4") = 0 [pid 5013] mkdir("./5", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [ 63.906236][ T5084] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 63.919302][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5086 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5087 ./strace-static-x86_64: Process 5087 attached ./strace-static-x86_64: Process 5086 attached [pid 5087] set_robust_list(0x555556b87660, 24 [pid 5086] set_robust_list(0x555556b87660, 24) = 0 [pid 5087] <... set_robust_list resumed>) = 0 [pid 5086] chdir("./5" [pid 5087] chdir("./5" [pid 5086] <... chdir resumed>) = 0 [pid 5087] <... chdir resumed>) = 0 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5086] <... prctl resumed>) = 0 [pid 5087] <... prctl resumed>) = 0 [pid 5086] setpgid(0, 0 [pid 5087] setpgid(0, 0 [pid 5086] <... setpgid resumed>) = 0 [pid 5087] <... setpgid resumed>) = 0 [pid 5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5087] write(3, "1000", 4 [pid 5086] <... openat resumed>) = 3 [pid 5087] <... write resumed>) = 4 [pid 5086] write(3, "1000", 4 [pid 5087] close(3 [pid 5086] <... write resumed>) = 4 [pid 5087] <... close resumed>) = 0 [pid 5086] close(3 [pid 5087] symlink("/dev/binderfs", "./binderfs" [pid 5086] <... close resumed>) = 0 [pid 5086] symlink("/dev/binderfs", "./binderfs" [pid 5087] <... symlink resumed>) = 0 [pid 5086] <... symlink resumed>) = 0 [pid 5087] memfd_create("syzkaller", 0 [pid 5086] memfd_create("syzkaller", 0 [pid 5087] <... memfd_create resumed>) = 3 [pid 5086] <... memfd_create resumed>) = 3 [pid 5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5087] <... mmap resumed>) = 0x7f770c286000 [ 63.948485][ T5084] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 63.963747][ T5085] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] <... mount resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5015] <... openat resumed>) = 4 [pid 5084] chdir("./file1" [pid 5015] newfstatat(4, "", [pid 5084] <... chdir resumed>) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] ioctl(4, LOOP_CLR_FD [pid 5015] getdents64(4, [pid 5084] <... ioctl resumed>) = 0 [pid 5084] close(4 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5084] <... close resumed>) = 0 [ 64.002885][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 64.021431][ T5088] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5084] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] getdents64(4, [pid 5087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4 [pid 5085] <... mount resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5015] rmdir("./5/file1") = 0 [pid 5085] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./5") = 0 [pid 5085] <... openat resumed>) = 3 [pid 5015] mkdir("./6", 0777 [pid 5085] chdir("./file1" [pid 5015] <... mkdir resumed>) = 0 [pid 5085] <... chdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5085] ioctl(4, LOOP_CLR_FD [pid 5015] <... openat resumed>) = 3 [pid 5085] <... ioctl resumed>) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5085] close(4 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5087] <... write resumed>) = 2097152 [pid 5085] <... close resumed>) = 0 [pid 5015] close(3 [pid 5085] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5087] munmap(0x7f770c286000, 2097152) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 64.046747][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 64.055683][ T5089] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.055921][ T5084] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5015] <... close resumed>) = 0 [pid 5012] <... umount2 resumed>) = 0 [pid 5086] <... write resumed>) = 2097152 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] munmap(0x7f770c286000, 2097152 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 64.115805][ T5085] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 64.131180][ T5084] Remounting filesystem read-only [ 64.154295][ T5084] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [pid 5087] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5090 attached [pid 5086] <... munmap resumed>) = 0 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5090 [pid 5012] newfstatat(AT_FDCWD, "./4/file1", [pid 5090] set_robust_list(0x555556b87660, 24 [pid 5086] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5086] <... openat resumed>) = 4 [pid 5090] <... set_robust_list resumed>) = 0 [pid 5087] <... ioctl resumed>) = 0 [pid 5086] ioctl(4, LOOP_SET_FD, 3 [pid 5012] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] chdir("./6" [pid 5087] close(3) = 0 [pid 5087] mkdir("./file1", 0777) = 0 [pid 5087] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5090] <... chdir resumed>) = 0 [pid 5086] <... ioctl resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5086] close(3 [pid 5012] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5090] <... prctl resumed>) = 0 [pid 5086] <... close resumed>) = 0 [pid 5090] setpgid(0, 0 [pid 5086] mkdir("./file1", 0777 [pid 5012] <... openat resumed>) = 4 [pid 5090] <... setpgid resumed>) = 0 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5090] <... openat resumed>) = 3 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5090] write(3, "1000", 4 [pid 5012] close(4 [pid 5090] <... write resumed>) = 4 [pid 5012] <... close resumed>) = 0 [pid 5086] <... mkdir resumed>) = 0 [pid 5090] close(3 [pid 5012] rmdir("./4/file1" [pid 5090] <... close resumed>) = 0 [pid 5086] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... rmdir resumed>) = 0 [pid 5090] symlink("/dev/binderfs", "./binderfs" [pid 5012] getdents64(3, [pid 5090] <... symlink resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [ 64.166788][ T5087] loop5: detected capacity change from 0 to 4096 [ 64.176359][ T5086] loop1: detected capacity change from 0 to 4096 [ 64.181517][ T5084] NILFS (loop4): repaired inode bitmap for reserved inodes [ 64.192392][ T5087] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5090] memfd_create("syzkaller", 0 [pid 5012] close(3 [pid 5084] <... openat resumed>) = -1 EIO (Input/output error) [pid 5084] exit_group(0) = ? [pid 5084] +++ exited with 0 +++ [pid 5090] <... memfd_create resumed>) = 3 [pid 5090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5012] <... close resumed>) = 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5084, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5012] rmdir("./4" [pid 5016] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... rmdir resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] mkdir("./5", 0777 [pid 5016] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... mkdir resumed>) = 0 [pid 5016] <... openat resumed>) = 3 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5016] newfstatat(3, "", [pid 5012] <... openat resumed>) = 3 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] close(3 [ 64.208702][ T5086] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 64.219158][ T5084] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 64.220796][ T5086] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 64.244566][ T5085] Remounting filesystem read-only [ 64.249942][ T5087] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5016] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... close resumed>) = 0 [pid 5016] unlink("./5/binderfs") = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5093 ./strace-static-x86_64: Process 5093 attached [pid 5093] set_robust_list(0x555556b87660, 24) = 0 [pid 5093] chdir("./5") = 0 [pid 5093] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5093] setpgid(0, 0) = 0 [pid 5093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5093] write(3, "1000", 4) = 4 [pid 5093] close(3) = 0 [pid 5093] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5087] <... mount resumed>) = 0 [pid 5087] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5086] <... mount resumed>) = 0 [pid 5093] memfd_create("syzkaller", 0 [pid 5087] <... openat resumed>) = 3 [pid 5086] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5093] <... memfd_create resumed>) = 3 [pid 5086] <... openat resumed>) = 3 [pid 5093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5087] chdir("./file1" [ 64.273442][ T5085] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 64.283318][ T5092] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.295100][ T5091] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.306649][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 64.308234][ T5085] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5086] chdir("./file1" [pid 5093] <... mmap resumed>) = 0x7f770c286000 [pid 5087] <... chdir resumed>) = 0 [pid 5086] <... chdir resumed>) = 0 [pid 5086] ioctl(4, LOOP_CLR_FD) = 0 [pid 5086] close(4 [pid 5090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5087] ioctl(4, LOOP_CLR_FD [pid 5086] <... close resumed>) = 0 [pid 5085] <... openat resumed>) = -1 EIO (Input/output error) [ 64.324097][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 64.324448][ T5085] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 64.348275][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 64.355268][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [pid 5086] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5087] <... ioctl resumed>) = 0 [pid 5085] exit_group(0 [pid 5087] close(4 [pid 5085] <... exit_group resumed>) = ? [pid 5090] <... write resumed>) = 2097152 [pid 5087] <... close resumed>) = 0 [pid 5085] +++ exited with 0 +++ [pid 5090] munmap(0x7f770c286000, 2097152 [pid 5087] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5085, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5090] <... munmap resumed>) = 0 [pid 5014] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./5/binderfs") = 0 [ 64.363273][ T5086] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 64.378985][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 64.389215][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 64.401875][ T5087] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5014] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5090] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5016] <... umount2 resumed>) = 0 [pid 5090] close(3 [pid 5016] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] <... close resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5090] mkdir("./file1", 0777 [pid 5016] newfstatat(AT_FDCWD, "./5/file1", [pid 5090] <... mkdir resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 64.420989][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 64.432467][ T5090] loop3: detected capacity change from 0 to 4096 [ 64.434712][ T5086] Remounting filesystem read-only [ 64.441132][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 64.452378][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 64.461733][ T5087] Remounting filesystem read-only [pid 5016] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5090] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./5/file1") = 0 [ 64.473154][ T5087] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 64.484001][ T5090] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 64.484607][ T5086] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 64.494333][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 64.511838][ T5090] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./5") = 0 [pid 5016] mkdir("./6", 0777 [pid 5093] <... write resumed>) = 2097152 [pid 5016] <... mkdir resumed>) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5094 [pid 5093] munmap(0x7f770c286000, 2097152./strace-static-x86_64: Process 5094 attached [pid 5094] set_robust_list(0x555556b87660, 24) = 0 [ 64.524427][ T5087] NILFS (loop5): repaired inode bitmap for reserved inodes [ 64.545682][ T5087] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 64.565788][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [pid 5094] chdir("./6" [pid 5093] <... munmap resumed>) = 0 [pid 5087] <... openat resumed>) = -1 EIO (Input/output error) [pid 5087] exit_group(0 [pid 5094] <... chdir resumed>) = 0 [pid 5094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5094] setpgid(0, 0 [pid 5087] <... exit_group resumed>) = ? [pid 5094] <... setpgid resumed>) = 0 [pid 5094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5093] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5094] write(3, "1000", 4 [pid 5093] <... openat resumed>) = 4 [pid 5094] <... write resumed>) = 4 [pid 5093] ioctl(4, LOOP_SET_FD, 3 [pid 5087] +++ exited with 0 +++ [ 64.573357][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 64.587218][ T5086] NILFS (loop1): repaired inode bitmap for reserved inodes [ 64.594594][ T5086] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 64.611441][ T5093] loop0: detected capacity change from 0 to 4096 [pid 5094] close(3 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5087, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5094] <... close resumed>) = 0 [pid 5094] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5017] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5094] memfd_create("syzkaller", 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5094] <... memfd_create resumed>) = 3 [pid 5017] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] <... openat resumed>) = 3 [pid 5094] <... mmap resumed>) = 0x7f770c286000 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./5/binderfs") = 0 [pid 5017] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] <... mount resumed>) = 0 [pid 5093] <... ioctl resumed>) = 0 [pid 5093] close(3 [pid 5090] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5093] <... close resumed>) = 0 [pid 5093] mkdir("./file1", 0777) = 0 [pid 5093] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5090] <... openat resumed>) = 3 [pid 5090] chdir("./file1") = 0 [ 64.611850][ T5095] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.629997][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 64.645952][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 64.656856][ T5093] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 64.665647][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [pid 5090] ioctl(4, LOOP_CLR_FD [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, [pid 5090] <... ioctl resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5090] close(4 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./5/file1" [pid 5090] <... close resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./5") = 0 [pid 5014] mkdir("./6", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5094] <... write resumed>) = 2097152 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5096 [pid 5086] <... openat resumed>) = -1 EIO (Input/output error) [pid 5086] exit_group(0) = ? [pid 5090] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5086] +++ exited with 0 +++ ./strace-static-x86_64: Process 5096 attached [pid 5096] set_robust_list(0x555556b87660, 24) = 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5086, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5094] munmap(0x7f770c286000, 2097152 [pid 5013] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5096] chdir("./6") = 0 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5096] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5013] getdents64(3, [pid 5096] setpgid(0, 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./5/binderfs") = 0 [pid 5013] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5096] <... setpgid resumed>) = 0 [pid 5096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 64.674587][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 64.697145][ T5090] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 64.697408][ T5093] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5096] write(3, "1000", 4 [pid 5094] <... munmap resumed>) = 0 [pid 5096] <... write resumed>) = 4 [pid 5096] close(3) = 0 [pid 5096] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5094] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5094] ioctl(4, LOOP_SET_FD, 3 [pid 5096] memfd_create("syzkaller", 0) = 3 [pid 5096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5094] <... ioctl resumed>) = 0 [pid 5094] close(3) = 0 [pid 5094] mkdir("./file1", 0777) = 0 [ 64.737667][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 64.739962][ T5094] loop4: detected capacity change from 0 to 4096 [ 64.744504][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 64.756839][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 64.766645][ T5090] Remounting filesystem read-only [pid 5094] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 64.790767][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 64.795124][ T5090] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 64.807775][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 64.815364][ T5094] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 64.816267][ T5090] NILFS (loop3): repaired inode bitmap for reserved inodes [ 64.832824][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [pid 5096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5093] <... mount resumed>) = 0 [pid 5093] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5093] chdir("./file1") = 0 [pid 5093] ioctl(4, LOOP_CLR_FD) = 0 [pid 5093] close(4) = 0 [ 64.848618][ T5094] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 64.858654][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 64.867610][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 64.872685][ T5093] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5093] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5096] <... write resumed>) = 2097152 [pid 5096] munmap(0x7f770c286000, 2097152 [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./5/file1", [pid 5096] <... munmap resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5096] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5017] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5096] <... openat resumed>) = 4 [pid 5017] <... openat resumed>) = 4 [pid 5096] ioctl(4, LOOP_SET_FD, 3 [ 64.885919][ T5090] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 64.908014][ T5097] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./5/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./5") = 0 [pid 5017] mkdir("./6", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5099 ./strace-static-x86_64: Process 5099 attached [pid 5099] set_robust_list(0x555556b87660, 24) = 0 [pid 5099] chdir("./6" [pid 5094] <... mount resumed>) = 0 [pid 5094] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5099] <... chdir resumed>) = 0 [pid 5094] <... openat resumed>) = 3 [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5099] setpgid(0, 0) = 0 [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5096] <... ioctl resumed>) = 0 [pid 5094] chdir("./file1" [pid 5099] write(3, "1000", 4 [pid 5096] close(3 [pid 5094] <... chdir resumed>) = 0 [pid 5099] <... write resumed>) = 4 [pid 5096] <... close resumed>) = 0 [pid 5094] ioctl(4, LOOP_CLR_FD [pid 5099] close(3 [pid 5096] mkdir("./file1", 0777 [pid 5094] <... ioctl resumed>) = 0 [pid 5099] <... close resumed>) = 0 [pid 5096] <... mkdir resumed>) = 0 [pid 5094] close(4 [pid 5099] symlink("/dev/binderfs", "./binderfs" [ 64.940812][ T5096] loop2: detected capacity change from 0 to 4096 [ 64.956653][ T5098] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5096] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5099] <... symlink resumed>) = 0 [pid 5094] <... close resumed>) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5099] memfd_create("syzkaller", 0 [pid 5094] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5099] <... memfd_create resumed>) = 3 [pid 5099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5090] <... openat resumed>) = -1 EIO (Input/output error) [pid 5090] exit_group(0) = ? [pid 5090] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5090, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5015] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./6/binderfs") = 0 [pid 5015] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [ 64.993842][ T5096] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 65.006130][ T5094] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 65.022733][ T5093] Remounting filesystem read-only [ 65.028623][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./5/file1") = 0 [pid 5099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 65.043856][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 65.044291][ T5093] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 65.052527][ T5096] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 65.070225][ T5094] Remounting filesystem read-only [ 65.078374][ T5094] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 65.083577][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [ 65.089046][ T5094] NILFS (loop4): repaired inode bitmap for reserved inodes [ 65.100426][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 65.101589][ T5093] NILFS (loop0): repaired inode bitmap for reserved inodes [ 65.116054][ T5093] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 65.128001][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5013] rmdir("./5" [pid 5099] <... write resumed>) = 2097152 [pid 5099] munmap(0x7f770c286000, 2097152) = 0 [pid 5099] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5099] ioctl(4, LOOP_SET_FD, 3 [pid 5094] <... openat resumed>) = -1 EIO (Input/output error) [pid 5093] <... openat resumed>) = -1 EIO (Input/output error) [pid 5013] <... rmdir resumed>) = 0 [pid 5093] exit_group(0 [pid 5013] mkdir("./6", 0777 [pid 5093] <... exit_group resumed>) = ? [pid 5094] exit_group(0 [pid 5093] +++ exited with 0 +++ [pid 5013] <... mkdir resumed>) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5093, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] close(3 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... close resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... openat resumed>) = 3 [pid 5012] newfstatat(3, "", [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5101 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./5/binderfs") = 0 [pid 5012] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5101 attached [pid 5094] <... exit_group resumed>) = ? [pid 5101] set_robust_list(0x555556b87660, 24 [pid 5096] <... mount resumed>) = 0 [ 65.132394][ T5094] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 65.148080][ T5099] loop5: detected capacity change from 0 to 4096 [ 65.161674][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 65.181262][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [pid 5094] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5094, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5016] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./6/binderfs") = 0 [pid 5016] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5101] <... set_robust_list resumed>) = 0 [pid 5099] <... ioctl resumed>) = 0 [pid 5096] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] <... umount2 resumed>) = 0 [ 65.195901][ T5100] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.206713][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 65.218681][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 65.220347][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 65.225388][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5101] chdir("./6" [pid 5099] close(3 [pid 5096] <... openat resumed>) = 3 [pid 5015] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5101] <... chdir resumed>) = 0 [pid 5101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5101] setpgid(0, 0) = 0 [pid 5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5101] write(3, "1000", 4) = 4 [pid 5101] close(3) = 0 [pid 5101] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5099] <... close resumed>) = 0 [pid 5096] chdir("./file1" [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5101] memfd_create("syzkaller", 0) = 3 [pid 5101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5096] <... chdir resumed>) = 0 [pid 5015] newfstatat(AT_FDCWD, "./6/file1", [pid 5096] ioctl(4, LOOP_CLR_FD [pid 5099] mkdir("./file1", 0777 [pid 5096] <... ioctl resumed>) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5099] <... mkdir resumed>) = 0 [pid 5096] close(4 [pid 5015] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5099] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5096] <... close resumed>) = 0 [ 65.232614][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 65.244119][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 65.249364][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 65.263462][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5096] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./6/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [ 65.286647][ T5099] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 65.297469][ T5096] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 65.303904][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 65.320866][ T5099] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5015] rmdir("./6") = 0 [pid 5015] mkdir("./7", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5012] <... umount2 resumed>) = 0 [ 65.353451][ T5096] Remounting filesystem read-only [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5102 attached ) = -1 EINVAL (Invalid argument) [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5102 [pid 5012] newfstatat(AT_FDCWD, "./5/file1", [pid 5102] set_robust_list(0x555556b87660, 24 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5102] <... set_robust_list resumed>) = 0 [pid 5102] chdir("./7" [pid 5101] <... write resumed>) = 2097152 [pid 5096] <... openat resumed>) = -1 EIO (Input/output error) [pid 5012] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5102] <... chdir resumed>) = 0 [pid 5096] exit_group(0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5102] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5096] <... exit_group resumed>) = ? [ 65.374722][ T5096] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 65.385924][ T5096] NILFS (loop2): repaired inode bitmap for reserved inodes [ 65.396404][ T5096] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 65.405300][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [pid 5012] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5102] <... prctl resumed>) = 0 [pid 5099] <... mount resumed>) = 0 [pid 5096] +++ exited with 0 +++ [pid 5012] <... openat resumed>) = 4 [pid 5102] setpgid(0, 0 [pid 5099] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5096, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5012] newfstatat(4, "", [pid 5102] <... setpgid resumed>) = 0 [pid 5099] <... openat resumed>) = 3 [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5101] munmap(0x7f770c286000, 2097152 [pid 5099] chdir("./file1" [pid 5014] <... restart_syscall resumed>) = 0 [pid 5012] getdents64(4, [pid 5102] <... openat resumed>) = 3 [pid 5101] <... munmap resumed>) = 0 [pid 5099] <... chdir resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5102] write(3, "1000", 4 [pid 5099] ioctl(4, LOOP_CLR_FD [pid 5012] getdents64(4, [pid 5102] <... write resumed>) = 4 [pid 5099] <... ioctl resumed>) = 0 [pid 5014] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5102] close(3 [pid 5101] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5099] close(4 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] close(4 [pid 5102] <... close resumed>) = 0 [pid 5101] <... openat resumed>) = 4 [pid 5099] <... close resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... close resumed>) = 0 [pid 5102] symlink("/dev/binderfs", "./binderfs" [pid 5101] ioctl(4, LOOP_SET_FD, 3 [pid 5099] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] <... openat resumed>) = 3 [pid 5012] rmdir("./5/file1" [pid 5102] <... symlink resumed>) = 0 [pid 5014] newfstatat(3, "", [pid 5012] <... rmdir resumed>) = 0 [pid 5102] memfd_create("syzkaller", 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, [pid 5102] <... memfd_create resumed>) = 3 [pid 5014] getdents64(3, [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] close(3 [pid 5102] <... mmap resumed>) = 0x7f770c286000 [pid 5014] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... close resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] rmdir("./5" [pid 5014] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5012] <... rmdir resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] mkdir("./6", 0777 [pid 5014] unlink("./6/binderfs" [pid 5012] <... mkdir resumed>) = 0 [pid 5014] <... unlink resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5014] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... openat resumed>) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5104 [ 65.419389][ T5103] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.432367][ T5099] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 65.444639][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 65.448345][ T5101] loop1: detected capacity change from 0 to 4096 [pid 5016] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5104 attached [pid 5104] set_robust_list(0x555556b87660, 24) = 0 [pid 5104] chdir("./6") = 0 [pid 5016] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5104] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5104] <... prctl resumed>) = 0 [pid 5102] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] newfstatat(AT_FDCWD, "./6/file1", [pid 5104] setpgid(0, 0 [pid 5101] <... ioctl resumed>) = 0 [pid 5101] close(3 [pid 5104] <... setpgid resumed>) = 0 [pid 5101] <... close resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5101] mkdir("./file1", 0777 [pid 5016] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5104] <... openat resumed>) = 3 [pid 5101] <... mkdir resumed>) = 0 [pid 5104] write(3, "1000", 4 [ 65.496637][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 65.507088][ T5099] Remounting filesystem read-only [ 65.516222][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 65.535871][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5101] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5104] <... write resumed>) = 4 [pid 5102] <... write resumed>) = 2097152 [pid 5102] munmap(0x7f770c286000, 2097152) = 0 [pid 5102] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5104] close(3 [pid 5016] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5102] ioctl(4, LOOP_SET_FD, 3 [pid 5104] <... close resumed>) = 0 [pid 5016] <... openat resumed>) = 4 [pid 5104] symlink("/dev/binderfs", "./binderfs" [pid 5016] newfstatat(4, "", [pid 5104] <... symlink resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5104] memfd_create("syzkaller", 0 [pid 5016] getdents64(4, [pid 5104] <... memfd_create resumed>) = 3 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5104] <... mmap resumed>) = 0x7f770c286000 [pid 5016] close(4 [pid 5102] <... ioctl resumed>) = 0 [pid 5102] close(3) = 0 [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./6/file1" [pid 5102] mkdir("./file1", 0777 [pid 5016] <... rmdir resumed>) = 0 [ 65.543058][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 65.550787][ T5101] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 65.551540][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 65.561698][ T5102] loop3: detected capacity change from 0 to 4096 [ 65.569132][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 65.574555][ T5099] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5102] <... mkdir resumed>) = 0 [pid 5102] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] close(3) = 0 [pid 5016] rmdir("./6") = 0 [pid 5016] mkdir("./7", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5105 [ 65.599040][ T5101] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 65.614294][ T5099] NILFS (loop5): repaired inode bitmap for reserved inodes [ 65.624766][ T5102] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) ./strace-static-x86_64: Process 5105 attached [pid 5105] set_robust_list(0x555556b87660, 24) = 0 [pid 5105] chdir("./7") = 0 [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5105] setpgid(0, 0) = 0 [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5105] write(3, "1000", 4) = 4 [pid 5105] close(3) = 0 [pid 5105] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5105] memfd_create("syzkaller", 0) = 3 [pid 5105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5101] <... mount resumed>) = 0 [pid 5101] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5101] chdir("./file1" [pid 5014] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5101] <... chdir resumed>) = 0 [pid 5101] ioctl(4, LOOP_CLR_FD [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5101] <... ioctl resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5101] close(4) = 0 [ 65.652482][ T5102] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 65.670363][ T5099] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 65.689492][ T5106] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5101] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] <... openat resumed>) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./6/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./6") = 0 [pid 5014] mkdir("./7", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 65.705258][ T5101] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5014] close(3 [pid 5104] <... write resumed>) = 2097152 [pid 5102] <... mount resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5102] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5102] <... openat resumed>) = 3 [pid 5099] <... openat resumed>) = -1 EIO (Input/output error) [pid 5102] chdir("./file1") = 0 ./strace-static-x86_64: Process 5108 attached [pid 5104] munmap(0x7f770c286000, 2097152 [pid 5102] ioctl(4, LOOP_CLR_FD [pid 5099] exit_group(0 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5108 [pid 5108] set_robust_list(0x555556b87660, 24 [pid 5104] <... munmap resumed>) = 0 [pid 5102] <... ioctl resumed>) = 0 [pid 5099] <... exit_group resumed>) = ? [pid 5108] <... set_robust_list resumed>) = 0 [pid 5102] close(4 [pid 5104] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5102] <... close resumed>) = 0 [ 65.750553][ T5107] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.766523][ T5101] Remounting filesystem read-only [ 65.776818][ T5101] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5102] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5108] chdir("./7" [pid 5099] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5099, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5017] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5108] <... chdir resumed>) = 0 [pid 5104] <... openat resumed>) = 4 [pid 5017] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./6/binderfs") = 0 [pid 5017] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5108] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5104] ioctl(4, LOOP_SET_FD, 3 [pid 5101] <... openat resumed>) = -1 EIO (Input/output error) [pid 5108] <... prctl resumed>) = 0 [pid 5104] <... ioctl resumed>) = 0 [pid 5101] exit_group(0 [pid 5108] setpgid(0, 0) = 0 [pid 5108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5108] write(3, "1000", 4 [pid 5104] close(3 [pid 5101] <... exit_group resumed>) = ? [pid 5108] <... write resumed>) = 4 [pid 5108] close(3) = 0 [pid 5108] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5108] memfd_create("syzkaller", 0) = 3 [ 65.786913][ T5102] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 65.787906][ T5101] NILFS (loop1): repaired inode bitmap for reserved inodes [ 65.810329][ T5101] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 65.821823][ T5102] Remounting filesystem read-only [ 65.832661][ T5104] loop0: detected capacity change from 0 to 4096 [ 65.832675][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [pid 5108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5105] <... write resumed>) = 2097152 [pid 5105] munmap(0x7f770c286000, 2097152) = 0 [pid 5105] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5105] ioctl(4, LOOP_SET_FD, 3 [pid 5104] <... close resumed>) = 0 [pid 5101] +++ exited with 0 +++ [pid 5104] mkdir("./file1", 0777 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5101, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5104] <... mkdir resumed>) = 0 [pid 5013] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5104] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5013] <... openat resumed>) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./6/binderfs") = 0 [pid 5013] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5105] <... ioctl resumed>) = 0 [pid 5105] close(3) = 0 [pid 5105] mkdir("./file1", 0777) = 0 [ 65.861373][ T5105] loop4: detected capacity change from 0 to 4096 [ 65.876226][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 65.884037][ T5104] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 65.884862][ T5102] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 65.894300][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [pid 5105] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 65.905680][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 65.917052][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 65.918259][ T5105] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 65.935875][ T5104] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 65.935953][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 65.935989][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5108] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5108] munmap(0x7f770c286000, 2097152) = 0 [pid 5108] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5108] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5108] close(3) = 0 [pid 5108] mkdir("./file1", 0777) = 0 [ 65.953835][ T5102] NILFS (loop3): repaired inode bitmap for reserved inodes [ 65.965294][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 65.976367][ T5105] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 65.981954][ T5108] loop2: detected capacity change from 0 to 4096 [ 65.986619][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [pid 5108] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5105] <... mount resumed>) = 0 [pid 5102] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] <... umount2 resumed>) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5105] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5102] exit_group(0 [pid 5013] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5105] <... openat resumed>) = 3 [pid 5102] <... exit_group resumed>) = ? [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5105] chdir("./file1" [pid 5102] +++ exited with 0 +++ [pid 5013] newfstatat(AT_FDCWD, "./6/file1", [pid 5105] <... chdir resumed>) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5102, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=13 /* 0.13 s */} --- [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5105] ioctl(4, LOOP_CLR_FD [pid 5013] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5105] <... ioctl resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 66.003729][ T5102] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 66.007826][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 66.025441][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 66.033360][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 66.034333][ T5108] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 66.050558][ T5109] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5105] close(4 [pid 5015] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5105] <... close resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... openat resumed>) = 4 [pid 5105] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] newfstatat(4, "", [pid 5017] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] <... openat resumed>) = 3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5104] <... mount resumed>) = 0 [pid 5015] newfstatat(3, "", [pid 5013] getdents64(4, [pid 5017] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5104] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] newfstatat(4, "", [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5104] <... openat resumed>) = 3 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, [pid 5013] getdents64(4, [pid 5104] chdir("./file1" [pid 5017] getdents64(4, [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5104] <... chdir resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] close(4 [pid 5104] ioctl(4, LOOP_CLR_FD [pid 5017] getdents64(4, [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... close resumed>) = 0 [pid 5104] <... ioctl resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5108] <... mount resumed>) = 0 [pid 5104] close(4 [pid 5017] close(4 [pid 5015] newfstatat(AT_FDCWD, "./7/binderfs", [ 66.083242][ T5110] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.084645][ T5105] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 66.113224][ T5108] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5013] rmdir("./6/file1" [pid 5017] <... close resumed>) = 0 [pid 5017] rmdir("./6/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./6") = 0 [pid 5017] mkdir("./7", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5108] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5104] <... close resumed>) = 0 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5108] <... openat resumed>) = 3 [pid 5104] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] unlink("./7/binderfs" [pid 5013] getdents64(3, [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5112 ./strace-static-x86_64: Process 5112 attached [pid 5112] set_robust_list(0x555556b87660, 24) = 0 [pid 5112] chdir("./7") = 0 [pid 5112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5112] setpgid(0, 0) = 0 [pid 5112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5112] write(3, "1000", 4) = 4 [pid 5112] close(3) = 0 [pid 5112] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5108] chdir("./file1" [pid 5015] <... unlink resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5112] memfd_create("syzkaller", 0 [pid 5108] <... chdir resumed>) = 0 [pid 5015] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] close(3 [pid 5112] <... memfd_create resumed>) = 3 [pid 5108] ioctl(4, LOOP_CLR_FD [pid 5013] <... close resumed>) = 0 [pid 5112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5108] <... ioctl resumed>) = 0 [pid 5013] rmdir("./6" [pid 5112] <... mmap resumed>) = 0x7f770c286000 [pid 5108] close(4) = 0 [pid 5013] <... rmdir resumed>) = 0 [ 66.135995][ T5111] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.149634][ T5105] Remounting filesystem read-only [ 66.159707][ T5104] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5013] mkdir("./7", 0777 [pid 5108] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... mkdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... openat resumed>) = 3 [ 66.195423][ T5105] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 66.204519][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 66.213234][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 66.221904][ T5108] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 66.238168][ T5104] Remounting filesystem read-only [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5113 attached [pid 5113] set_robust_list(0x555556b87660, 24) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5113 [ 66.243689][ T5105] NILFS (loop4): repaired inode bitmap for reserved inodes [ 66.252177][ T5104] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 66.260909][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 66.261365][ T5108] Remounting filesystem read-only [ 66.274640][ T5105] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5113] chdir("./7") = 0 [pid 5113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5113] setpgid(0, 0) = 0 [pid 5113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5113] write(3, "1000", 4) = 4 [pid 5113] close(3) = 0 [pid 5113] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5113] memfd_create("syzkaller", 0) = 3 [pid 5113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5105] <... openat resumed>) = -1 EIO (Input/output error) [ 66.289976][ T5104] NILFS (loop0): repaired inode bitmap for reserved inodes [ 66.298348][ T5108] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 66.306699][ T5104] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 66.322534][ T5108] NILFS (loop2): repaired inode bitmap for reserved inodes [ 66.327512][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [pid 5108] <... openat resumed>) = -1 EIO (Input/output error) [pid 5105] exit_group(0 [pid 5104] <... openat resumed>) = -1 EIO (Input/output error) [pid 5105] <... exit_group resumed>) = ? [pid 5104] exit_group(0 [pid 5105] +++ exited with 0 +++ [pid 5108] exit_group(0 [pid 5104] <... exit_group resumed>) = ? [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5105, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=11 /* 0.11 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5016] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5108] <... exit_group resumed>) = ? [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5112] <... write resumed>) = 2097152 [pid 5104] +++ exited with 0 +++ [pid 5016] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5112] munmap(0x7f770c286000, 2097152 [pid 5108] +++ exited with 0 +++ [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5112] <... munmap resumed>) = 0 [pid 5016] unlink("./7/binderfs" [pid 5015] <... umount2 resumed>) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5104, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5016] <... unlink resumed>) = 0 [pid 5015] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5108, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5112] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5015] newfstatat(AT_FDCWD, "./7/file1", [pid 5014] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [ 66.338209][ T5108] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 66.354543][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 66.364448][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5012] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5112] <... openat resumed>) = 4 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... openat resumed>) = 3 [pid 5112] ioctl(4, LOOP_SET_FD, 3 [pid 5012] newfstatat(3, "", [pid 5015] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... openat resumed>) = 3 [pid 5012] getdents64(3, [pid 5015] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] newfstatat(3, "", [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] <... openat resumed>) = 4 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] newfstatat(4, "", [pid 5014] getdents64(3, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5015] getdents64(4, [pid 5014] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] unlink("./6/binderfs" [pid 5015] getdents64(4, [pid 5014] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5012] <... unlink resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] close(4 [pid 5014] unlink("./7/binderfs" [pid 5015] <... close resumed>) = 0 [pid 5014] <... unlink resumed>) = 0 [pid 5015] rmdir("./7/file1" [pid 5014] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... rmdir resumed>) = 0 [pid 5112] <... ioctl resumed>) = 0 [pid 5112] close(3) = 0 [pid 5112] mkdir("./file1", 0777) = 0 [pid 5112] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./7") = 0 [pid 5015] mkdir("./8", 0777) = 0 [ 66.404964][ T5112] loop5: detected capacity change from 0 to 4096 [ 66.422779][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 66.422964][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 66.430475][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5113] <... write resumed>) = 2097152 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5113] munmap(0x7f770c286000, 2097152 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5113] <... munmap resumed>) = 0 [ 66.450102][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 66.450587][ T5112] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 66.455660][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 66.469591][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 66.483711][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 66.484791][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 66.492301][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [pid 5015] close(3 [pid 5113] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5015] <... close resumed>) = 0 [pid 5113] <... openat resumed>) = 4 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 66.498211][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 66.512829][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 66.513313][ T5112] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 66.520601][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 66.530805][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 66.538954][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [pid 5113] ioctl(4, LOOP_SET_FD, 3 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5114 ./strace-static-x86_64: Process 5114 attached [pid 5114] set_robust_list(0x555556b87660, 24 [pid 5113] <... ioctl resumed>) = 0 [pid 5114] <... set_robust_list resumed>) = 0 [pid 5113] close(3) = 0 [pid 5114] chdir("./8" [pid 5113] mkdir("./file1", 0777 [pid 5114] <... chdir resumed>) = 0 [pid 5113] <... mkdir resumed>) = 0 [pid 5114] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5113] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5114] <... prctl resumed>) = 0 [pid 5112] <... mount resumed>) = 0 [ 66.551845][ T5113] loop1: detected capacity change from 0 to 4096 [ 66.554137][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 66.566317][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 66.575405][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 66.579277][ T5115] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.587341][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5112] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5114] setpgid(0, 0 [pid 5112] <... openat resumed>) = 3 [pid 5112] chdir("./file1") = 0 [pid 5112] ioctl(4, LOOP_CLR_FD) = 0 [pid 5112] close(4) = 0 [pid 5112] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5114] <... setpgid resumed>) = 0 [pid 5016] <... umount2 resumed>) = 0 [pid 5014] <... umount2 resumed>) = 0 [pid 5114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5114] <... openat resumed>) = 3 [pid 5014] newfstatat(AT_FDCWD, "./7/file1", [pid 5114] write(3, "1000", 4 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5114] <... write resumed>) = 4 [pid 5014] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5114] close(3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5114] <... close resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5114] symlink("/dev/binderfs", "./binderfs" [pid 5014] <... openat resumed>) = 4 [pid 5114] <... symlink resumed>) = 0 [pid 5014] newfstatat(4, "", [pid 5114] memfd_create("syzkaller", 0) = 3 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5114] <... mmap resumed>) = 0x7f770c286000 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./7/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./7" [pid 5016] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... rmdir resumed>) = 0 [pid 5014] mkdir("./8", 0777 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5016] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5016] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] close(3) = 0 [pid 5016] <... openat resumed>) = 4 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] newfstatat(4, "", [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5116 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 66.605140][ T5113] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 66.622652][ T5113] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 66.625899][ T5112] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 ./strace-static-x86_64: Process 5116 attached [pid 5116] set_robust_list(0x555556b87660, 24 [pid 5012] rmdir("./6/file1") = 0 [pid 5116] <... set_robust_list resumed>) = 0 [pid 5116] chdir("./8") = 0 [pid 5116] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5116] setpgid(0, 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5116] <... setpgid resumed>) = 0 [pid 5116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] close(3) = 0 [pid 5012] rmdir("./6") = 0 [pid 5116] <... openat resumed>) = 3 [pid 5116] write(3, "1000", 4) = 4 [pid 5116] close(3) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5113] <... mount resumed>) = 0 [pid 5016] close(4 [pid 5113] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./7/file1" [pid 5113] <... openat resumed>) = 3 [pid 5012] mkdir("./7", 0777 [pid 5113] chdir("./file1" [pid 5016] <... rmdir resumed>) = 0 [pid 5113] <... chdir resumed>) = 0 [pid 5016] getdents64(3, [pid 5113] ioctl(4, LOOP_CLR_FD [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5113] <... ioctl resumed>) = 0 [pid 5016] close(3 [pid 5113] close(4 [pid 5016] <... close resumed>) = 0 [pid 5113] <... close resumed>) = 0 [pid 5016] rmdir("./7" [pid 5113] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5116] symlink("/dev/binderfs", "./binderfs" [pid 5016] <... rmdir resumed>) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5116] <... symlink resumed>) = 0 [pid 5116] memfd_create("syzkaller", 0) = 3 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] <... openat resumed>) = 3 [ 66.683798][ T5117] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.712703][ T5113] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5116] <... mmap resumed>) = 0x7f770c286000 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5016] mkdir("./8", 0777 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] <... mkdir resumed>) = 0 [pid 5012] close(3 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5012] <... close resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5118 [pid 5016] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5118 attached [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5114] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5118] set_robust_list(0x555556b87660, 24 [pid 5116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5113] <... openat resumed>) = -1 EIO (Input/output error) [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5118] <... set_robust_list resumed>) = 0 [pid 5113] exit_group(0 [pid 5016] close(3 [pid 5118] chdir("./7" [pid 5113] <... exit_group resumed>) = ? [pid 5016] <... close resumed>) = 0 [pid 5118] <... chdir resumed>) = 0 [pid 5113] +++ exited with 0 +++ [ 66.734043][ T5113] Remounting filesystem read-only [ 66.742187][ T5113] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 66.752254][ T5113] NILFS (loop1): repaired inode bitmap for reserved inodes [ 66.761496][ T5113] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 66.761602][ T5112] Remounting filesystem read-only [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5119 [pid 5118] setpgid(0, 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5113, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5118] <... setpgid resumed>) = 0 [pid 5013] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5118] <... openat resumed>) = 3 [pid 5013] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5118] write(3, "1000", 4) = 4 [pid 5013] <... openat resumed>) = 3 [pid 5118] close(3 [pid 5013] newfstatat(3, "", [pid 5118] <... close resumed>) = 0 ./strace-static-x86_64: Process 5119 attached [pid 5118] symlink("/dev/binderfs", "./binderfs" [pid 5116] <... write resumed>) = 2097152 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5119] set_robust_list(0x555556b87660, 24) = 0 [pid 5118] <... symlink resumed>) = 0 [pid 5116] munmap(0x7f770c286000, 2097152 [pid 5013] getdents64(3, [pid 5116] <... munmap resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5118] memfd_create("syzkaller", 0 [pid 5013] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5119] chdir("./8") = 0 [pid 5118] <... memfd_create resumed>) = 3 [pid 5116] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5119] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5013] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5116] <... openat resumed>) = 4 [pid 5119] <... prctl resumed>) = 0 [pid 5118] <... mmap resumed>) = 0x7f770c286000 [pid 5116] ioctl(4, LOOP_SET_FD, 3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5114] <... write resumed>) = 2097152 [pid 5114] munmap(0x7f770c286000, 2097152 [pid 5119] setpgid(0, 0 [pid 5114] <... munmap resumed>) = 0 [pid 5114] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 66.824604][ T5112] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 66.833388][ T5112] NILFS (loop5): repaired inode bitmap for reserved inodes [ 66.841854][ T5112] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 66.864512][ T5114] loop3: detected capacity change from 0 to 4096 [pid 5114] ioctl(4, LOOP_SET_FD, 3 [pid 5013] unlink("./7/binderfs" [pid 5119] <... setpgid resumed>) = 0 [pid 5013] <... unlink resumed>) = 0 [pid 5119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5119] <... openat resumed>) = 3 [pid 5118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5116] <... ioctl resumed>) = 0 [pid 5114] <... ioctl resumed>) = 0 [pid 5112] <... openat resumed>) = -1 EIO (Input/output error) [pid 5119] write(3, "1000", 4 [pid 5116] close(3 [pid 5114] close(3 [pid 5112] exit_group(0 [pid 5119] <... write resumed>) = 4 [pid 5116] <... close resumed>) = 0 [pid 5114] <... close resumed>) = 0 [pid 5112] <... exit_group resumed>) = ? [pid 5119] close(3 [pid 5116] mkdir("./file1", 0777 [pid 5114] mkdir("./file1", 0777 [pid 5119] <... close resumed>) = 0 [pid 5112] +++ exited with 0 +++ [pid 5116] <... mkdir resumed>) = 0 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5112, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5119] symlink("/dev/binderfs", "./binderfs" [pid 5116] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5114] <... mkdir resumed>) = 0 [pid 5119] <... symlink resumed>) = 0 [pid 5118] <... write resumed>) = 2097152 [pid 5114] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5119] memfd_create("syzkaller", 0 [pid 5118] munmap(0x7f770c286000, 2097152 [pid 5119] <... memfd_create resumed>) = 3 [ 66.865883][ T5116] loop2: detected capacity change from 0 to 4096 [ 66.882602][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 66.890541][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 66.908373][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5118] <... munmap resumed>) = 0 [pid 5118] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5118] ioctl(4, LOOP_SET_FD, 3 [pid 5017] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", [pid 5119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5118] <... ioctl resumed>) = 0 [ 66.916156][ T5114] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 66.917301][ T5116] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 66.936670][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 66.937105][ T5118] loop0: detected capacity change from 0 to 4096 [ 66.944728][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 66.958724][ T5114] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5118] close(3) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5118] mkdir("./file1", 0777) = 0 [pid 5118] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./7/binderfs") = 0 [pid 5017] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5114] <... mount resumed>) = 0 [pid 5114] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5114] chdir("./file1") = 0 [pid 5114] ioctl(4, LOOP_CLR_FD) = 0 [pid 5114] close(4) = 0 [ 66.968544][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 66.978986][ T5116] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 66.991340][ T5118] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 67.002643][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 67.012953][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [pid 5114] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... umount2 resumed>) = 0 [pid 5116] <... mount resumed>) = 0 [pid 5013] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5116] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5119] <... write resumed>) = 2097152 [pid 5119] munmap(0x7f770c286000, 2097152) = 0 [pid 5119] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5119] ioctl(4, LOOP_SET_FD, 3 [pid 5116] <... openat resumed>) = 3 [pid 5116] chdir("./file1" [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5116] <... chdir resumed>) = 0 [pid 5116] ioctl(4, LOOP_CLR_FD [pid 5013] newfstatat(AT_FDCWD, "./7/file1", [pid 5116] <... ioctl resumed>) = 0 [pid 5116] close(4) = 0 [ 67.018794][ T5114] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 67.040645][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 67.047835][ T5120] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.060973][ T5121] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5116] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5119] <... ioctl resumed>) = 0 [pid 5119] close(3) = 0 [pid 5119] mkdir("./file1", 0777) = 0 [pid 5119] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 67.076716][ T5116] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 67.076889][ T5119] loop4: detected capacity change from 0 to 4096 [ 67.106847][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 67.115435][ T5119] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./7/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./7") = 0 [ 67.117437][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 67.126157][ T5118] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 67.132695][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 67.150300][ T5114] Remounting filesystem read-only [ 67.155701][ T5116] Remounting filesystem read-only [ 67.161442][ T5119] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5013] mkdir("./8", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5124 [ 67.176501][ T5116] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 67.206592][ T5114] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 67.207348][ T5123] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5119] <... mount resumed>) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5119] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5119] <... openat resumed>) = 3 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./7/file1", [pid 5119] chdir("./file1") = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5119] ioctl(4, LOOP_CLR_FD [pid 5017] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5119] <... ioctl resumed>) = 0 [pid 5119] close(4 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5119] <... close resumed>) = 0 [pid 5017] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5119] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... openat resumed>) = 4 [pid 5017] newfstatat(4, "", ./strace-static-x86_64: Process 5124 attached [pid 5124] set_robust_list(0x555556b87660, 24) = 0 [pid 5124] chdir("./8") = 0 [pid 5124] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5124] setpgid(0, 0) = 0 [pid 5124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5118] <... mount resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5124] write(3, "1000", 4) = 4 [pid 5124] close(3) = 0 [pid 5124] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5118] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] getdents64(4, [pid 5118] <... openat resumed>) = 3 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5118] chdir("./file1" [pid 5124] memfd_create("syzkaller", 0 [pid 5118] <... chdir resumed>) = 0 [pid 5017] getdents64(4, [pid 5124] <... memfd_create resumed>) = 3 [pid 5124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5118] ioctl(4, LOOP_CLR_FD [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5118] <... ioctl resumed>) = 0 [pid 5118] close(4 [pid 5017] close(4 [pid 5118] <... close resumed>) = 0 [pid 5017] <... close resumed>) = 0 [pid 5017] rmdir("./7/file1" [ 67.214536][ T5114] NILFS (loop3): repaired inode bitmap for reserved inodes [ 67.237006][ T5119] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 67.252423][ T5122] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.256467][ T5116] NILFS (loop2): repaired inode bitmap for reserved inodes [ 67.272363][ T5119] Remounting filesystem read-only [pid 5118] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... rmdir resumed>) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./7") = 0 [ 67.279673][ T5118] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 67.299263][ T5119] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 67.308875][ T5116] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5017] mkdir("./8", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5119] <... openat resumed>) = -1 EIO (Input/output error) [pid 5116] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5119] exit_group(0 [pid 5116] exit_group(0 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5119] <... exit_group resumed>) = ? [pid 5116] <... exit_group resumed>) = ? [pid 5017] close(3 [pid 5124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5116] +++ exited with 0 +++ [pid 5017] <... close resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5116, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5125 [pid 5014] <... restart_syscall resumed>) = 0 [pid 5014] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 5125 attached [pid 5119] +++ exited with 0 +++ [pid 5014] newfstatat(3, "", [pid 5125] set_robust_list(0x555556b87660, 24 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5125] <... set_robust_list resumed>) = 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5119, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5014] getdents64(3, [pid 5016] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5125] chdir("./8" [pid 5014] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5125] <... chdir resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 67.324281][ T5119] NILFS (loop4): repaired inode bitmap for reserved inodes [ 67.333277][ T5119] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 67.334378][ T5118] Remounting filesystem read-only [pid 5125] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5124] <... write resumed>) = 2097152 [pid 5016] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5125] <... prctl resumed>) = 0 [pid 5125] setpgid(0, 0 [pid 5016] <... openat resumed>) = 3 [pid 5014] unlink("./8/binderfs" [pid 5114] <... openat resumed>) = -1 EIO (Input/output error) [pid 5125] <... setpgid resumed>) = 0 [pid 5016] newfstatat(3, "", [pid 5014] <... unlink resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5016] getdents64(3, [pid 5014] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5125] <... openat resumed>) = 3 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5125] write(3, "1000", 4 [pid 5114] exit_group(0 [pid 5124] munmap(0x7f770c286000, 2097152 [pid 5125] <... write resumed>) = 4 [pid 5114] <... exit_group resumed>) = ? [pid 5016] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5124] <... munmap resumed>) = 0 [pid 5124] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5124] ioctl(4, LOOP_SET_FD, 3 [pid 5125] close(3 [pid 5114] +++ exited with 0 +++ [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 67.375913][ T5114] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 67.395064][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 67.402804][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 67.408327][ T5124] loop1: detected capacity change from 0 to 4096 [ 67.412041][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5125] <... close resumed>) = 0 [pid 5016] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5125] symlink("/dev/binderfs", "./binderfs" [pid 5124] <... ioctl resumed>) = 0 [pid 5124] close(3) = 0 [pid 5124] mkdir("./file1", 0777) = 0 [pid 5124] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5125] <... symlink resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5114, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5125] memfd_create("syzkaller", 0 [pid 5016] unlink("./8/binderfs" [ 67.418085][ T5118] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 67.432327][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 67.438228][ T5118] NILFS (loop0): repaired inode bitmap for reserved inodes [ 67.440644][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 67.448403][ T5124] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 67.454636][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5125] <... memfd_create resumed>) = 3 [pid 5016] <... unlink resumed>) = 0 [pid 5015] <... restart_syscall resumed>) = 0 [pid 5125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5125] <... mmap resumed>) = 0x7f770c286000 [pid 5015] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./8/binderfs") = 0 [ 67.465322][ T5118] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 67.489502][ T5124] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 67.495935][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 67.518567][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5015] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5118] <... openat resumed>) = -1 EIO (Input/output error) [pid 5125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5014] <... umount2 resumed>) = 0 [pid 5118] exit_group(0) = ? [pid 5118] +++ exited with 0 +++ [pid 5014] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5118, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5124] <... mount resumed>) = 0 [pid 5124] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5124] chdir("./file1") = 0 [pid 5124] ioctl(4, LOOP_CLR_FD) = 0 [ 67.528726][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 67.541282][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 67.552605][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 67.559969][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [pid 5124] close(4) = 0 [pid 5014] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5124] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] newfstatat(3, "", [pid 5014] <... openat resumed>) = 4 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5125] <... write resumed>) = 2097152 [ 67.569254][ T5126] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.585556][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 67.587419][ T5124] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 67.593365][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 67.617626][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5125] munmap(0x7f770c286000, 2097152 [pid 5014] newfstatat(4, "", [pid 5012] getdents64(3, [pid 5125] <... munmap resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5125] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5014] getdents64(4, [pid 5012] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5125] <... openat resumed>) = 4 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5125] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5125] <... ioctl resumed>) = 0 [pid 5014] close(4 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... close resumed>) = 0 [pid 5012] unlink("./7/binderfs" [pid 5125] close(3 [pid 5014] rmdir("./8/file1" [pid 5125] <... close resumed>) = 0 [pid 5016] <... umount2 resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5012] <... unlink resumed>) = 0 [pid 5125] mkdir("./file1", 0777 [pid 5014] getdents64(3, [pid 5012] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5125] <... mkdir resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5125] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] close(3) = 0 [pid 5014] rmdir("./8") = 0 [pid 5014] mkdir("./9", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5127 [pid 5016] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./8/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./8") = 0 [pid 5016] mkdir("./9", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [ 67.624246][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 67.636487][ T5125] loop5: detected capacity change from 0 to 4096 [ 67.637332][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 67.658465][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 67.667813][ T5125] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5128 ./strace-static-x86_64: Process 5128 attached [pid 5128] set_robust_list(0x555556b87660, 24) = 0 [pid 5128] chdir("./9") = 0 ./strace-static-x86_64: Process 5127 attached [pid 5128] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5127] set_robust_list(0x555556b87660, 24 [pid 5128] setpgid(0, 0 [pid 5127] <... set_robust_list resumed>) = 0 [pid 5128] <... setpgid resumed>) = 0 [pid 5128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5128] write(3, "1000", 4) = 4 [pid 5128] close(3) = 0 [pid 5128] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5128] memfd_create("syzkaller", 0) = 3 [pid 5128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 67.686596][ T5124] Remounting filesystem read-only [ 67.690717][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 67.701298][ T5124] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 67.709328][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 67.719179][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5127] chdir("./9") = 0 [pid 5127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5127] setpgid(0, 0) = 0 [pid 5127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5127] write(3, "1000", 4) = 4 [pid 5127] close(3) = 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5127] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5127] memfd_create("syzkaller", 0) = 3 [ 67.730024][ T5125] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 67.736630][ T5124] NILFS (loop1): repaired inode bitmap for reserved inodes [ 67.739952][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 67.760813][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [pid 5128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5125] <... mount resumed>) = 0 [pid 5127] <... mmap resumed>) = 0x7f770c286000 [pid 5125] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5125] <... openat resumed>) = 3 [pid 5015] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5125] chdir("./file1") = 0 [pid 5125] ioctl(4, LOOP_CLR_FD [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5125] <... ioctl resumed>) = 0 [pid 5125] close(4 [pid 5015] newfstatat(AT_FDCWD, "./8/file1", [pid 5125] <... close resumed>) = 0 [pid 5125] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 67.790827][ T5129] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.795590][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 67.810322][ T5124] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5124] <... openat resumed>) = -1 EIO (Input/output error) [pid 5124] exit_group(0 [pid 5128] <... write resumed>) = 2097152 [pid 5015] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5128] munmap(0x7f770c286000, 2097152 [pid 5015] <... openat resumed>) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, [pid 5124] <... exit_group resumed>) = ? [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5124] +++ exited with 0 +++ [pid 5015] rmdir("./8/file1" [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5124, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=10 /* 0.10 s */} --- [pid 5015] <... rmdir resumed>) = 0 [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5128] <... munmap resumed>) = 0 [pid 5015] getdents64(3, [pid 5013] <... restart_syscall resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3 [pid 5128] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5015] <... close resumed>) = 0 [pid 5013] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5128] <... openat resumed>) = 4 [pid 5015] rmdir("./8" [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5128] ioctl(4, LOOP_SET_FD, 3 [pid 5013] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... rmdir resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [ 67.848907][ T5125] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 67.885205][ T5128] loop4: detected capacity change from 0 to 4096 [pid 5015] mkdir("./9", 0777 [pid 5013] newfstatat(3, "", [pid 5015] <... mkdir resumed>) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5013] getdents64(3, [pid 5015] <... openat resumed>) = 3 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./8/binderfs") = 0 [pid 5013] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5128] <... ioctl resumed>) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5128] close(3) = 0 [pid 5128] mkdir("./file1", 0777) = 0 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5128] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5130 ./strace-static-x86_64: Process 5130 attached [pid 5127] <... write resumed>) = 2097152 [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5130] set_robust_list(0x555556b87660, 24 [pid 5127] munmap(0x7f770c286000, 2097152 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5130] <... set_robust_list resumed>) = 0 [pid 5130] chdir("./9") = 0 [pid 5130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5130] setpgid(0, 0) = 0 [pid 5130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5012] newfstatat(AT_FDCWD, "./7/file1", [pid 5130] write(3, "1000", 4) = 4 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5130] close(3 [pid 5012] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5130] <... close resumed>) = 0 [pid 5130] symlink("/dev/binderfs", "./binderfs" [pid 5127] <... munmap resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5130] <... symlink resumed>) = 0 [ 67.901681][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 67.914828][ T5125] Remounting filesystem read-only [ 67.924707][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 67.934245][ T5128] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5127] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5130] memfd_create("syzkaller", 0) = 3 [pid 5130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5127] <... openat resumed>) = 4 [pid 5012] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5127] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... openat resumed>) = 4 [pid 5012] newfstatat(4, "", [pid 5127] <... ioctl resumed>) = 0 [ 67.957756][ T5125] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 67.966258][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 67.967412][ T5125] NILFS (loop5): repaired inode bitmap for reserved inodes [ 67.981758][ T5127] loop2: detected capacity change from 0 to 4096 [ 67.988870][ T5125] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5130] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5127] close(3 [pid 5125] <... openat resumed>) = -1 EIO (Input/output error) [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5127] <... close resumed>) = 0 [pid 5125] exit_group(0 [pid 5012] getdents64(4, [pid 5127] mkdir("./file1", 0777 [pid 5125] <... exit_group resumed>) = ? [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5127] <... mkdir resumed>) = 0 [pid 5125] +++ exited with 0 +++ [pid 5012] getdents64(4, [pid 5127] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5125, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5012] close(4 [pid 5017] restart_syscall(<... resuming interrupted clone ...> [pid 5012] <... close resumed>) = 0 [pid 5017] <... restart_syscall resumed>) = 0 [pid 5012] rmdir("./7/file1") = 0 [pid 5012] getdents64(3, [pid 5017] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] close(3 [pid 5017] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... close resumed>) = 0 [pid 5017] <... openat resumed>) = 3 [pid 5012] rmdir("./7" [pid 5017] newfstatat(3, "", [pid 5012] <... rmdir resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] mkdir("./8", 0777 [pid 5017] getdents64(3, [pid 5012] <... mkdir resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5017] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... openat resumed>) = 3 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5017] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 67.994108][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 68.011476][ T5128] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 68.027273][ T5127] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 68.036376][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [pid 5012] close(3 [pid 5130] <... write resumed>) = 2097152 [pid 5017] unlink("./8/binderfs" [pid 5012] <... close resumed>) = 0 [pid 5130] munmap(0x7f770c286000, 2097152 [pid 5017] <... unlink resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5130] <... munmap resumed>) = 0 [pid 5128] <... mount resumed>) = 0 [pid 5017] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5132 ./strace-static-x86_64: Process 5132 attached [pid 5132] set_robust_list(0x555556b87660, 24) = 0 [pid 5132] chdir("./8") = 0 [pid 5132] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5130] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5128] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5132] setpgid(0, 0 [pid 5130] <... openat resumed>) = 4 [pid 5128] <... openat resumed>) = 3 [pid 5132] <... setpgid resumed>) = 0 [pid 5130] ioctl(4, LOOP_SET_FD, 3 [pid 5128] chdir("./file1" [pid 5013] <... umount2 resumed>) = 0 [pid 5132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5132] write(3, "1000", 4) = 4 [pid 5132] close(3) = 0 [pid 5132] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5132] memfd_create("syzkaller", 0) = 3 [pid 5132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 68.054287][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 68.070587][ T5131] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.082263][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 68.091126][ T5127] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 68.096366][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [pid 5130] <... ioctl resumed>) = 0 [pid 5128] <... chdir resumed>) = 0 [pid 5013] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5128] ioctl(4, LOOP_CLR_FD [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5130] close(3 [pid 5128] <... ioctl resumed>) = 0 [pid 5130] <... close resumed>) = 0 [pid 5013] newfstatat(AT_FDCWD, "./8/file1", [pid 5130] mkdir("./file1", 0777 [pid 5128] close(4 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5130] <... mkdir resumed>) = 0 [pid 5128] <... close resumed>) = 0 [pid 5013] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5130] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5128] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 68.108803][ T5130] loop3: detected capacity change from 0 to 4096 [ 68.118238][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 68.126878][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 68.134223][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 68.144027][ T5128] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5013] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... openat resumed>) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5127] <... mount resumed>) = 0 [pid 5013] close(4 [pid 5127] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5013] <... close resumed>) = 0 [ 68.159861][ T5130] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 68.187339][ T5133] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.199786][ T5130] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5127] chdir("./file1") = 0 [pid 5127] ioctl(4, LOOP_CLR_FD) = 0 [pid 5127] close(4) = 0 [pid 5013] rmdir("./8/file1" [pid 5127] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... rmdir resumed>) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./8") = 0 [pid 5013] mkdir("./9", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5134 ./strace-static-x86_64: Process 5134 attached [pid 5134] set_robust_list(0x555556b87660, 24) = 0 [ 68.210370][ T5128] Remounting filesystem read-only [ 68.216029][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 68.226189][ T5127] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 68.230011][ T5128] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [pid 5134] chdir("./9") = 0 [pid 5134] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5132] <... write resumed>) = 2097152 [pid 5130] <... mount resumed>) = 0 [pid 5134] <... prctl resumed>) = 0 [pid 5130] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5134] setpgid(0, 0 [pid 5130] <... openat resumed>) = 3 [pid 5134] <... setpgid resumed>) = 0 [pid 5132] munmap(0x7f770c286000, 2097152 [pid 5130] chdir("./file1" [pid 5134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5130] <... chdir resumed>) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5132] <... munmap resumed>) = 0 [pid 5132] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5132] ioctl(4, LOOP_SET_FD, 3 [pid 5134] <... openat resumed>) = 3 [pid 5130] ioctl(4, LOOP_CLR_FD [pid 5134] write(3, "1000", 4 [ 68.269352][ T5135] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.283596][ T5127] Remounting filesystem read-only [ 68.297443][ T5128] NILFS (loop4): repaired inode bitmap for reserved inodes [ 68.303117][ T5132] loop0: detected capacity change from 0 to 4096 [pid 5017] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5134] <... write resumed>) = 4 [pid 5130] <... ioctl resumed>) = 0 [pid 5128] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5134] close(3 [pid 5132] <... ioctl resumed>) = 0 [pid 5130] close(4 [pid 5017] newfstatat(AT_FDCWD, "./8/file1", [pid 5134] <... close resumed>) = 0 [pid 5132] close(3 [pid 5130] <... close resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5134] symlink("/dev/binderfs", "./binderfs" [pid 5130] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5132] <... close resumed>) = 0 [pid 5017] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5134] <... symlink resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5134] memfd_create("syzkaller", 0 [pid 5017] <... openat resumed>) = 4 [pid 5132] mkdir("./file1", 0777 [pid 5134] <... memfd_create resumed>) = 3 [pid 5134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] newfstatat(4, "", [pid 5134] <... mmap resumed>) = 0x7f770c286000 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./8/file1") = 0 [pid 5128] exit_group(0 [pid 5017] getdents64(3, [pid 5128] <... exit_group resumed>) = ? [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./8") = 0 [pid 5017] mkdir("./9", 0777 [pid 5132] <... mkdir resumed>) = 0 [pid 5017] <... mkdir resumed>) = 0 [pid 5132] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5128] +++ exited with 0 +++ [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5128, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [ 68.313109][ T5128] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 68.317092][ T5127] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 68.338240][ T5130] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5016] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./9/binderfs") = 0 [pid 5016] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] close(3 [pid 5134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... close resumed>) = 0 [ 68.372229][ T5132] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 68.380843][ T5127] NILFS (loop2): repaired inode bitmap for reserved inodes [ 68.391868][ T5130] Remounting filesystem read-only [ 68.396892][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 68.403732][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 68.411899][ T5130] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5136 attached , child_tidptr=0x555556b87650) = 5136 [pid 5136] set_robust_list(0x555556b87660, 24) = 0 [pid 5136] chdir("./9") = 0 [pid 5134] <... write resumed>) = 2097152 [ 68.418587][ T5127] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 68.441070][ T5132] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 68.452163][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 68.456206][ T5130] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5136] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5134] munmap(0x7f770c286000, 2097152 [pid 5132] <... mount resumed>) = 0 [pid 5130] <... openat resumed>) = -1 EIO (Input/output error) [pid 5127] <... openat resumed>) = -1 EIO (Input/output error) [pid 5127] exit_group(0) = ? [pid 5127] +++ exited with 0 +++ [pid 5136] <... prctl resumed>) = 0 [pid 5136] setpgid(0, 0 [pid 5134] <... munmap resumed>) = 0 [pid 5132] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5130] exit_group(0 [pid 5136] <... setpgid resumed>) = 0 [pid 5134] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5132] <... openat resumed>) = 3 [pid 5130] <... exit_group resumed>) = ? [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5127, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5130] +++ exited with 0 +++ [pid 5136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5134] <... openat resumed>) = 4 [pid 5132] chdir("./file1" [pid 5136] <... openat resumed>) = 3 [pid 5134] ioctl(4, LOOP_SET_FD, 3 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5130, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5132] <... chdir resumed>) = 0 [ 68.463946][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 68.473788][ T5130] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 68.474960][ T5137] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.494930][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 68.507853][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5014] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] <... restart_syscall resumed>) = 0 [pid 5132] ioctl(4, LOOP_CLR_FD [pid 5136] write(3, "1000", 4 [pid 5014] newfstatat(3, "", [pid 5132] <... ioctl resumed>) = 0 [pid 5132] close(4 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5136] <... write resumed>) = 4 [pid 5132] <... close resumed>) = 0 [pid 5015] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5132] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] getdents64(3, [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5136] close(3 [pid 5015] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5136] <... close resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5014] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] symlink("/dev/binderfs", "./binderfs" [pid 5015] newfstatat(3, "", [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5136] <... symlink resumed>) = 0 [pid 5014] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5015] getdents64(3, [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] unlink("./9/binderfs" [pid 5136] memfd_create("syzkaller", 0 [pid 5014] <... unlink resumed>) = 0 [pid 5015] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5136] <... memfd_create resumed>) = 3 [pid 5015] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./9/binderfs" [pid 5136] <... mmap resumed>) = 0x7f770c286000 [pid 5015] <... unlink resumed>) = 0 [pid 5015] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5134] <... ioctl resumed>) = 0 [pid 5134] close(3) = 0 [ 68.519632][ T5134] loop1: detected capacity change from 0 to 4096 [ 68.530077][ T5132] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 68.555147][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5134] mkdir("./file1", 0777) = 0 [pid 5134] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./9/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./9") = 0 [pid 5016] mkdir("./10", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 68.570383][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 68.580193][ T5134] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 68.585700][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 68.597684][ T5132] Remounting filesystem read-only [ 68.603151][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 68.612091][ T5132] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [pid 5016] close(3 [pid 5136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... close resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5138 [ 68.630580][ T5132] NILFS (loop0): repaired inode bitmap for reserved inodes [ 68.637970][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 68.645036][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 68.654367][ T5134] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 68.664968][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 ./strace-static-x86_64: Process 5138 attached [pid 5138] set_robust_list(0x555556b87660, 24) = 0 [pid 5136] <... write resumed>) = 2097152 [pid 5132] <... openat resumed>) = -1 EIO (Input/output error) [pid 5134] <... mount resumed>) = 0 [pid 5134] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5134] chdir("./file1") = 0 [pid 5134] ioctl(4, LOOP_CLR_FD) = 0 [pid 5134] close(4 [pid 5138] chdir("./10" [pid 5136] munmap(0x7f770c286000, 2097152 [pid 5134] <... close resumed>) = 0 [pid 5132] exit_group(0 [pid 5138] <... chdir resumed>) = 0 [pid 5138] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5136] <... munmap resumed>) = 0 [pid 5134] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5132] <... exit_group resumed>) = ? [ 68.672297][ T5132] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 68.681397][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 68.687275][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 68.695774][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 68.704530][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 68.716744][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [pid 5138] <... prctl resumed>) = 0 [pid 5136] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5132] +++ exited with 0 +++ [pid 5014] <... umount2 resumed>) = 0 [pid 5138] setpgid(0, 0) = 0 [pid 5136] <... openat resumed>) = 4 [pid 5014] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5136] ioctl(4, LOOP_SET_FD, 3 [pid 5138] <... openat resumed>) = 3 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5132, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5012] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] <... ioctl resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5138] write(3, "1000", 4) = 4 [pid 5138] close(3) = 0 [pid 5138] symlink("/dev/binderfs", "./binderfs" [pid 5012] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5138] <... symlink resumed>) = 0 [pid 5138] memfd_create("syzkaller", 0) = 3 [pid 5012] <... openat resumed>) = 3 [pid 5138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5136] close(3 [pid 5015] <... umount2 resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./8/binderfs") = 0 [ 68.729076][ T5134] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 68.748314][ T5136] loop5: detected capacity change from 0 to 4096 [ 68.759241][ T5139] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5012] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] <... close resumed>) = 0 [pid 5014] newfstatat(AT_FDCWD, "./9/file1", [pid 5136] mkdir("./file1", 0777 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5136] <... mkdir resumed>) = 0 [pid 5014] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./9/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] rmdir("./9" [pid 5015] newfstatat(AT_FDCWD, "./9/file1", [pid 5014] <... rmdir resumed>) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] mkdir("./10", 0777 [pid 5015] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... mkdir resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5015] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] <... openat resumed>) = 3 [ 68.782820][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 68.798995][ T5136] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 68.800458][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 68.821035][ T5134] Remounting filesystem read-only [pid 5015] newfstatat(4, "", [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] getdents64(4, [pid 5014] close(3 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] <... close resumed>) = 0 [pid 5138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] getdents64(4, [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5140 ./strace-static-x86_64: Process 5140 attached [ 68.833090][ T5136] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 68.849707][ T5134] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 68.863917][ T5134] NILFS (loop1): repaired inode bitmap for reserved inodes [ 68.872477][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5015] rmdir("./9/file1" [pid 5140] set_robust_list(0x555556b87660, 24 [pid 5138] <... write resumed>) = 2097152 [pid 5015] <... rmdir resumed>) = 0 [pid 5140] <... set_robust_list resumed>) = 0 [pid 5015] getdents64(3, [pid 5140] chdir("./10" [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5140] <... chdir resumed>) = 0 [pid 5015] close(3 [pid 5140] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] <... close resumed>) = 0 [pid 5140] <... prctl resumed>) = 0 [pid 5015] rmdir("./9" [pid 5140] setpgid(0, 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5140] <... setpgid resumed>) = 0 [pid 5015] mkdir("./10", 0777 [pid 5140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5015] <... mkdir resumed>) = 0 [pid 5140] <... openat resumed>) = 3 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5140] write(3, "1000", 4 [pid 5015] <... openat resumed>) = 3 [pid 5140] <... write resumed>) = 4 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5140] close(3 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5140] <... close resumed>) = 0 [pid 5015] close(3 [pid 5140] symlink("/dev/binderfs", "./binderfs" [pid 5015] <... close resumed>) = 0 [pid 5140] <... symlink resumed>) = 0 [pid 5138] munmap(0x7f770c286000, 2097152 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5140] memfd_create("syzkaller", 0) = 3 [pid 5140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5142 attached ) = 0x7f770c286000 [pid 5138] <... munmap resumed>) = 0 [pid 5134] <... openat resumed>) = -1 EIO (Input/output error) [pid 5142] set_robust_list(0x555556b87660, 24) = 0 [pid 5138] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5134] exit_group(0 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5142 [ 68.881953][ T5134] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 68.898458][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 68.911387][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 68.919678][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5142] chdir("./10" [pid 5140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5138] <... openat resumed>) = 4 [pid 5136] <... mount resumed>) = 0 [pid 5134] <... exit_group resumed>) = ? [pid 5136] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5142] <... chdir resumed>) = 0 [pid 5138] ioctl(4, LOOP_SET_FD, 3 [pid 5136] <... openat resumed>) = 3 [pid 5136] chdir("./file1") = 0 [pid 5136] ioctl(4, LOOP_CLR_FD) = 0 [pid 5136] close(4 [pid 5134] +++ exited with 0 +++ [pid 5136] <... close resumed>) = 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5134, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5136] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5142] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5142] setpgid(0, 0 [pid 5013] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5142] <... setpgid resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5142] <... openat resumed>) = 3 [pid 5013] <... openat resumed>) = 3 [pid 5142] write(3, "1000", 4 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5142] <... write resumed>) = 4 [pid 5013] getdents64(3, [pid 5142] close(3) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5142] symlink("/dev/binderfs", "./binderfs" [pid 5013] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5142] <... symlink resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5142] memfd_create("syzkaller", 0 [pid 5013] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5142] <... memfd_create resumed>) = 3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] unlink("./9/binderfs" [pid 5142] <... mmap resumed>) = 0x7f770c286000 [pid 5013] <... unlink resumed>) = 0 [ 68.927754][ T5141] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.943126][ T5136] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 68.945978][ T5138] loop4: detected capacity change from 0 to 4096 [ 68.973940][ T5136] Remounting filesystem read-only [pid 5013] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", [pid 5138] <... ioctl resumed>) = 0 [pid 5138] close(3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5138] <... close resumed>) = 0 [pid 5012] getdents64(4, [pid 5138] mkdir("./file1", 0777 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [ 68.986779][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 68.994341][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 68.994416][ T5136] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [pid 5138] <... mkdir resumed>) = 0 [pid 5012] getdents64(4, [pid 5138] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5140] <... write resumed>) = 2097152 [pid 5012] close(4) = 0 [pid 5012] rmdir("./8/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./8") = 0 [pid 5012] mkdir("./9", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5143 ./strace-static-x86_64: Process 5143 attached [pid 5143] set_robust_list(0x555556b87660, 24) = 0 [pid 5143] chdir("./9") = 0 [pid 5143] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5143] setpgid(0, 0) = 0 [pid 5143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5143] write(3, "1000", 4) = 4 [pid 5143] close(3) = 0 [pid 5143] symlink("/dev/binderfs", "./binderfs" [pid 5140] munmap(0x7f770c286000, 2097152 [pid 5143] <... symlink resumed>) = 0 [pid 5143] memfd_create("syzkaller", 0) = 3 [pid 5140] <... munmap resumed>) = 0 [ 69.033879][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 69.036262][ T5138] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 69.048111][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 69.059230][ T5136] NILFS (loop5): repaired inode bitmap for reserved inodes [pid 5140] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5142] <... write resumed>) = 2097152 [pid 5140] <... openat resumed>) = 4 [pid 5142] munmap(0x7f770c286000, 2097152 [pid 5140] ioctl(4, LOOP_SET_FD, 3 [pid 5142] <... munmap resumed>) = 0 [pid 5142] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 69.082243][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 69.089983][ T5136] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 69.092256][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 69.116077][ T5140] loop2: detected capacity change from 0 to 4096 [ 69.117061][ T5138] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5142] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5140] <... ioctl resumed>) = 0 [pid 5142] close(3 [pid 5140] close(3 [pid 5142] <... close resumed>) = 0 [pid 5140] <... close resumed>) = 0 [pid 5142] mkdir("./file1", 0777 [pid 5140] mkdir("./file1", 0777 [pid 5142] <... mkdir resumed>) = 0 [pid 5140] <... mkdir resumed>) = 0 [pid 5140] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5142] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5143] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5136] <... openat resumed>) = -1 EIO (Input/output error) [pid 5136] exit_group(0) = ? [pid 5136] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5136, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [ 69.134862][ T5142] loop3: detected capacity change from 0 to 4096 [ 69.148509][ T5140] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 69.158645][ T5142] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5017] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./9/binderfs" [pid 5013] <... umount2 resumed>) = 0 [pid 5017] <... unlink resumed>) = 0 [pid 5013] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5143] <... write resumed>) = 2097152 [pid 5013] newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 69.176964][ T5140] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 69.188308][ T5142] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 69.208266][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 69.215040][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [pid 5138] <... mount resumed>) = 0 [pid 5013] newfstatat(4, "", [pid 5138] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5138] chdir("./file1") = 0 [pid 5138] ioctl(4, LOOP_CLR_FD) = 0 [pid 5143] munmap(0x7f770c286000, 2097152 [pid 5138] close(4) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5138] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] getdents64(4, [pid 5143] <... munmap resumed>) = 0 [pid 5143] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5143] ioctl(4, LOOP_SET_FD, 3 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [ 69.229741][ T5144] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.230310][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 69.253142][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 69.253357][ T5138] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 69.260609][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [pid 5013] getdents64(4, [pid 5142] <... mount resumed>) = 0 [pid 5140] <... mount resumed>) = 0 [pid 5143] <... ioctl resumed>) = 0 [pid 5143] close(3) = 0 [pid 5143] mkdir("./file1", 0777 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5142] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5140] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5142] <... openat resumed>) = 3 [pid 5140] <... openat resumed>) = 3 [pid 5142] chdir("./file1" [pid 5013] close(4 [pid 5142] <... chdir resumed>) = 0 [pid 5140] chdir("./file1" [pid 5013] <... close resumed>) = 0 [pid 5013] rmdir("./9/file1" [pid 5142] ioctl(4, LOOP_CLR_FD [pid 5140] <... chdir resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5140] ioctl(4, LOOP_CLR_FD [pid 5142] <... ioctl resumed>) = 0 [pid 5140] <... ioctl resumed>) = 0 [pid 5142] close(4 [ 69.278046][ T5143] loop0: detected capacity change from 0 to 4096 [ 69.290390][ T5146] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.290865][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 69.308654][ T5145] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5013] getdents64(3, [pid 5142] <... close resumed>) = 0 [pid 5140] close(4 [pid 5143] <... mkdir resumed>) = 0 [pid 5143] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5142] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5140] <... close resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5140] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] close(3) = 0 [pid 5013] rmdir("./9") = 0 [pid 5013] mkdir("./10", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5147 ./strace-static-x86_64: Process 5147 attached [ 69.327893][ T5143] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 69.338573][ T5142] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 69.340022][ T5138] Remounting filesystem read-only [ 69.359611][ T5140] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5147] set_robust_list(0x555556b87660, 24) = 0 [pid 5147] chdir("./10") = 0 [pid 5147] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5147] setpgid(0, 0) = 0 [pid 5147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5147] write(3, "1000", 4) = 4 [pid 5147] close(3) = 0 [pid 5147] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5147] memfd_create("syzkaller", 0) = 3 [pid 5147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 69.388525][ T5142] Remounting filesystem read-only [ 69.393449][ T5143] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 69.404087][ T5142] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 69.413453][ T5138] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 69.419285][ T5142] NILFS (loop3): repaired inode bitmap for reserved inodes [ 69.429519][ T5140] Remounting filesystem read-only [ 69.453002][ T5140] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 69.482065][ T5142] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5143] <... mount resumed>) = 0 [pid 5143] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5143] chdir("./file1") = 0 [pid 5143] ioctl(4, LOOP_CLR_FD) = 0 [pid 5143] close(4) = 0 [pid 5143] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./9/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./9") = 0 [pid 5017] mkdir("./10", 0777) = 0 [pid 5142] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3 [pid 5142] exit_group(0 [pid 5017] <... close resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5149 ./strace-static-x86_64: Process 5149 attached [pid 5142] <... exit_group resumed>) = ? [pid 5149] set_robust_list(0x555556b87660, 24) = 0 [pid 5149] chdir("./10") = 0 [pid 5149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 69.484619][ T5138] NILFS (loop4): repaired inode bitmap for reserved inodes [ 69.504251][ T5140] NILFS (loop2): repaired inode bitmap for reserved inodes [ 69.507448][ T5148] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.522909][ T5140] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 69.527148][ T5143] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5149] setpgid(0, 0) = 0 [pid 5149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5147] <... write resumed>) = 2097152 [pid 5142] +++ exited with 0 +++ [pid 5149] write(3, "1000", 4 [pid 5147] munmap(0x7f770c286000, 2097152 [pid 5149] <... write resumed>) = 4 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5142, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5149] close(3 [pid 5015] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5149] <... close resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5149] symlink("/dev/binderfs", "./binderfs" [pid 5015] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5149] <... symlink resumed>) = 0 [pid 5147] <... munmap resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5149] memfd_create("syzkaller", 0 [pid 5147] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5140] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] newfstatat(3, "", [pid 5149] <... memfd_create resumed>) = 3 [pid 5147] <... openat resumed>) = 4 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5147] ioctl(4, LOOP_SET_FD, 3 [pid 5140] exit_group(0 [pid 5015] getdents64(3, [pid 5149] <... mmap resumed>) = 0x7f770c286000 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5140] <... exit_group resumed>) = ? [pid 5015] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./10/binderfs") = 0 [ 69.579175][ T5138] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 69.604005][ T5147] loop1: detected capacity change from 0 to 4096 [ 69.615681][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [pid 5015] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5147] <... ioctl resumed>) = 0 [pid 5140] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5140, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5147] close(3 [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5147] <... close resumed>) = 0 [pid 5014] <... restart_syscall resumed>) = 0 [pid 5014] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5147] mkdir("./file1", 0777 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5147] <... mkdir resumed>) = 0 [pid 5147] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./10/binderfs" [pid 5138] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] <... unlink resumed>) = 0 [pid 5014] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5138] exit_group(0) = ? [pid 5138] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5138, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=14 /* 0.14 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5016] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./10/binderfs") = 0 [ 69.622503][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 69.638871][ T5143] Remounting filesystem read-only [ 69.648820][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 69.656926][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 69.657457][ T5147] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5016] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5149] <... write resumed>) = 2097152 [pid 5149] munmap(0x7f770c286000, 2097152) = 0 [pid 5149] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 69.663615][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 69.673898][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 69.681231][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 69.688453][ T5143] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 69.703744][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 69.710795][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 69.718859][ T5147] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5149] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5149] close(3) = 0 [pid 5149] mkdir("./file1", 0777) = 0 [ 69.727459][ T5149] loop5: detected capacity change from 0 to 4096 [ 69.729160][ T5143] NILFS (loop0): repaired inode bitmap for reserved inodes [ 69.735883][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 69.749489][ T5143] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 69.751551][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [pid 5149] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5147] <... mount resumed>) = 0 [pid 5147] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5143] <... openat resumed>) = -1 EIO (Input/output error) [pid 5147] <... openat resumed>) = 3 [pid 5143] exit_group(0 [pid 5147] chdir("./file1" [pid 5143] <... exit_group resumed>) = ? [pid 5147] <... chdir resumed>) = 0 [pid 5143] +++ exited with 0 +++ [pid 5147] ioctl(4, LOOP_CLR_FD) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5143, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5147] close(4 [pid 5012] restart_syscall(<... resuming interrupted clone ...> [pid 5147] <... close resumed>) = 0 [pid 5012] <... restart_syscall resumed>) = 0 [ 69.766505][ T5150] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.772696][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 69.790489][ T5149] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 69.795659][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 69.808385][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 69.817621][ T5149] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5147] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./9/binderfs") = 0 [ 69.828373][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 69.836201][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 69.847021][ T5147] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 69.853517][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [pid 5012] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] <... umount2 resumed>) = 0 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 69.875912][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 69.882721][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 69.902142][ T5147] Remounting filesystem read-only [ 69.905090][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 69.915480][ T5151] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5015] getdents64(4, [pid 5149] <... mount resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5149] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] getdents64(4, [pid 5149] <... openat resumed>) = 3 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5149] chdir("./file1" [pid 5014] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] close(4 [pid 5149] <... chdir resumed>) = 0 [pid 5014] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./10/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./10") = 0 [pid 5014] mkdir("./11", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5152 ./strace-static-x86_64: Process 5152 attached [pid 5152] set_robust_list(0x555556b87660, 24) = 0 [pid 5152] chdir("./11") = 0 [pid 5152] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5152] setpgid(0, 0) = 0 [pid 5152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5015] <... close resumed>) = 0 [pid 5149] ioctl(4, LOOP_CLR_FD [pid 5015] rmdir("./10/file1" [pid 5152] <... openat resumed>) = 3 [pid 5152] write(3, "1000", 4) = 4 [pid 5152] close(3) = 0 [pid 5152] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5152] memfd_create("syzkaller", 0) = 3 [pid 5149] <... ioctl resumed>) = 0 [pid 5152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5015] <... rmdir resumed>) = 0 [pid 5149] close(4) = 0 [ 69.917707][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 69.932030][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 69.944585][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 69.956185][ T5147] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 69.964505][ T5147] NILFS (loop1): repaired inode bitmap for reserved inodes [ 69.969237][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5149] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [ 69.985595][ T5149] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 69.995972][ T5147] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 70.026433][ T5149] Remounting filesystem read-only [pid 5015] rmdir("./10" [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5016] close(4 [pid 5015] mkdir("./11", 0777 [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./10/file1" [pid 5015] <... mkdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5153 [pid 5016] <... rmdir resumed>) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./10" [pid 5152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... rmdir resumed>) = 0 [pid 5016] mkdir("./11", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5153 attached ) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5153] set_robust_list(0x555556b87660, 24 [pid 5016] close(3) = 0 [pid 5153] <... set_robust_list resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5153] chdir("./11" [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5154 [pid 5153] <... chdir resumed>) = 0 [pid 5153] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 5154 attached [pid 5153] setpgid(0, 0 [pid 5154] set_robust_list(0x555556b87660, 24 [pid 5153] <... setpgid resumed>) = 0 [pid 5154] <... set_robust_list resumed>) = 0 [pid 5154] chdir("./11" [ 70.034808][ T5149] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [pid 5153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5154] <... chdir resumed>) = 0 [pid 5153] <... openat resumed>) = 3 [pid 5154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5154] setpgid(0, 0) = 0 [pid 5154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5154] write(3, "1000", 4) = 4 [pid 5154] close(3) = 0 [pid 5154] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5154] memfd_create("syzkaller", 0) = 3 [pid 5154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5153] write(3, "1000", 4) = 4 [pid 5153] close(3) = 0 [pid 5153] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5012] <... umount2 resumed>) = 0 [pid 5153] memfd_create("syzkaller", 0 [pid 5012] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5153] <... memfd_create resumed>) = 3 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] newfstatat(AT_FDCWD, "./9/file1", [pid 5153] <... mmap resumed>) = 0x7f770c286000 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5147] <... openat resumed>) = -1 EIO (Input/output error) [pid 5147] exit_group(0) = ? [pid 5012] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5147] +++ exited with 0 +++ [pid 5012] <... openat resumed>) = 4 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5147, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5012] newfstatat(4, "", [pid 5152] <... write resumed>) = 2097152 [pid 5152] munmap(0x7f770c286000, 2097152 [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... restart_syscall resumed>) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, [pid 5013] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5152] <... munmap resumed>) = 0 [pid 5152] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5013] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] close(4 [ 70.094786][ T5149] NILFS (loop5): repaired inode bitmap for reserved inodes [ 70.129785][ T5149] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5152] ioctl(4, LOOP_SET_FD, 3 [pid 5013] <... openat resumed>) = 3 [pid 5012] <... close resumed>) = 0 [pid 5154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] newfstatat(3, "", [pid 5012] rmdir("./9/file1" [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5013] getdents64(3, [pid 5012] getdents64(3, [pid 5153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] close(3 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... close resumed>) = 0 [pid 5013] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5012] rmdir("./9" [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./10/binderfs" [pid 5012] <... rmdir resumed>) = 0 [pid 5152] <... ioctl resumed>) = 0 [pid 5152] close(3 [pid 5013] <... unlink resumed>) = 0 [pid 5012] mkdir("./10", 0777 [pid 5013] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... mkdir resumed>) = 0 [pid 5149] <... openat resumed>) = -1 EIO (Input/output error) [pid 5149] exit_group(0) = ? [pid 5149] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5149, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5152] <... close resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5152] mkdir("./file1", 0777 [pid 5017] restart_syscall(<... resuming interrupted clone ...> [pid 5012] <... openat resumed>) = 3 [pid 5017] <... restart_syscall resumed>) = 0 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 70.151887][ T5152] loop2: detected capacity change from 0 to 4096 [ 70.186926][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 70.193669][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [pid 5012] close(3 [pid 5017] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... close resumed>) = 0 [pid 5154] <... write resumed>) = 2097152 [pid 5154] munmap(0x7f770c286000, 2097152) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5154] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5154] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5155 attached [pid 5152] <... mkdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5155 [pid 5152] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./10/binderfs") = 0 [pid 5017] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5154] <... ioctl resumed>) = 0 [pid 5154] close(3) = 0 [pid 5154] mkdir("./file1", 0777) = 0 [pid 5154] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 70.218304][ T5154] loop4: detected capacity change from 0 to 4096 [ 70.231938][ T5152] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 70.244152][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 70.247479][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 70.252002][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [pid 5155] set_robust_list(0x555556b87660, 24) = 0 [pid 5153] <... write resumed>) = 2097152 [pid 5153] munmap(0x7f770c286000, 2097152 [pid 5155] chdir("./10") = 0 [pid 5153] <... munmap resumed>) = 0 [pid 5153] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5153] ioctl(4, LOOP_SET_FD, 3 [ 70.259286][ T5154] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 70.275097][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 70.283413][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 70.284982][ T5153] loop3: detected capacity change from 0 to 4096 [ 70.291538][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 70.298656][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [pid 5155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5155] setpgid(0, 0) = 0 [pid 5153] <... ioctl resumed>) = 0 [pid 5153] close(3) = 0 [pid 5155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5153] mkdir("./file1", 0777 [pid 5155] <... openat resumed>) = 3 [pid 5153] <... mkdir resumed>) = 0 [pid 5153] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5155] write(3, "1000", 4) = 4 [pid 5155] close(3) = 0 [pid 5155] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5155] memfd_create("syzkaller", 0) = 3 [pid 5155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 70.304811][ T5152] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 70.321883][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 70.322722][ T5154] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 70.345749][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 70.354330][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [pid 5152] <... mount resumed>) = 0 [pid 5152] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5152] chdir("./file1") = 0 [pid 5152] ioctl(4, LOOP_CLR_FD) = 0 [pid 5152] close(4) = 0 [ 70.362214][ T5153] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 70.386708][ T5153] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5152] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... umount2 resumed>) = 0 [pid 5154] <... mount resumed>) = 0 [pid 5013] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5154] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5154] <... openat resumed>) = 3 [pid 5013] newfstatat(AT_FDCWD, "./10/file1", [pid 5154] chdir("./file1" [pid 5155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5154] <... chdir resumed>) = 0 [pid 5153] <... mount resumed>) = 0 [pid 5017] <... umount2 resumed>) = 0 [ 70.406257][ T5152] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 70.408064][ T5156] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.425025][ T5157] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.451563][ T5152] Remounting filesystem read-only [pid 5013] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5154] ioctl(4, LOOP_CLR_FD [pid 5153] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5154] <... ioctl resumed>) = 0 [pid 5153] <... openat resumed>) = 3 [pid 5013] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5154] close(4 [pid 5153] chdir("./file1" [pid 5017] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./10/file1", [pid 5154] <... close resumed>) = 0 [pid 5153] <... chdir resumed>) = 0 [pid 5152] <... openat resumed>) = -1 EIO (Input/output error) [pid 5013] <... openat resumed>) = 4 [pid 5154] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5153] ioctl(4, LOOP_CLR_FD) = 0 [pid 5152] exit_group(0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] newfstatat(4, "", [pid 5153] close(4 [pid 5152] <... exit_group resumed>) = ? [pid 5017] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, [pid 5013] getdents64(4, [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [ 70.461998][ T5158] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.475668][ T5152] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 70.483542][ T5152] NILFS (loop2): repaired inode bitmap for reserved inodes [ 70.491526][ T5152] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5017] close(4 [pid 5013] getdents64(4, [pid 5017] <... close resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5153] <... close resumed>) = 0 [pid 5017] rmdir("./10/file1" [pid 5013] close(4 [pid 5017] <... rmdir resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5153] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5152] +++ exited with 0 +++ [pid 5017] getdents64(3, [pid 5013] rmdir("./10/file1" [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5017] close(3 [pid 5013] getdents64(3, [pid 5017] <... close resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] rmdir("./10" [pid 5013] close(3 [pid 5017] <... rmdir resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5017] mkdir("./11", 0777 [pid 5013] rmdir("./10" [pid 5017] <... mkdir resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5155] <... write resumed>) = 2097152 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5013] mkdir("./11", 0777 [pid 5017] <... openat resumed>) = 3 [pid 5013] <... mkdir resumed>) = 0 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] <... openat resumed>) = 3 [pid 5017] close(3 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5155] munmap(0x7f770c286000, 2097152 [pid 5017] <... close resumed>) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5155] <... munmap resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] close(3) = 0 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5159 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5152, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5160 [pid 5155] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5155] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5159 attached [ 70.511773][ T5154] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 70.530338][ T5153] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 70.547231][ T5154] Remounting filesystem read-only [ 70.553568][ T5154] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 70.557218][ T5155] loop0: detected capacity change from 0 to 4096 [pid 5014] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5160 attached [pid 5160] set_robust_list(0x555556b87660, 24) = 0 [pid 5160] chdir("./11" [pid 5159] set_robust_list(0x555556b87660, 24 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5160] <... chdir resumed>) = 0 [pid 5160] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5160] setpgid(0, 0) = 0 [pid 5160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5159] <... set_robust_list resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5160] write(3, "1000", 4) = 4 [pid 5160] close(3) = 0 [pid 5159] chdir("./11" [pid 5014] <... openat resumed>) = 3 [pid 5160] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5160] memfd_create("syzkaller", 0) = 3 [pid 5160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5159] <... chdir resumed>) = 0 [pid 5014] newfstatat(3, "", [pid 5159] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5155] <... ioctl resumed>) = 0 [pid 5159] <... prctl resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5155] close(3) = 0 [ 70.562291][ T5154] NILFS (loop4): repaired inode bitmap for reserved inodes [ 70.576975][ T5153] Remounting filesystem read-only [ 70.583261][ T5153] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 70.592234][ T5154] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 70.607747][ T5153] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5155] mkdir("./file1", 0777 [pid 5159] setpgid(0, 0 [pid 5155] <... mkdir resumed>) = 0 [pid 5154] <... openat resumed>) = -1 EIO (Input/output error) [pid 5153] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] getdents64(3, [pid 5160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5159] <... setpgid resumed>) = 0 [pid 5155] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5154] exit_group(0 [pid 5153] exit_group(0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5154] <... exit_group resumed>) = ? [pid 5153] <... exit_group resumed>) = ? [pid 5014] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5159] write(3, "1000", 4 [pid 5154] +++ exited with 0 +++ [pid 5153] +++ exited with 0 +++ [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5159] <... write resumed>) = 4 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5154, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5153, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5014] newfstatat(AT_FDCWD, "./11/binderfs", [ 70.615756][ T5153] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 70.647242][ T5155] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5159] close(3 [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5160] <... write resumed>) = 2097152 [pid 5159] <... close resumed>) = 0 [pid 5016] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] <... openat resumed>) = 3 [pid 5015] <... openat resumed>) = 3 [pid 5160] munmap(0x7f770c286000, 2097152 [pid 5159] symlink("/dev/binderfs", "./binderfs" [pid 5016] newfstatat(3, "", [pid 5015] newfstatat(3, "", [pid 5014] unlink("./11/binderfs" [pid 5159] <... symlink resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5160] <... munmap resumed>) = 0 [pid 5016] getdents64(3, [pid 5015] getdents64(3, [pid 5014] <... unlink resumed>) = 0 [pid 5160] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5159] memfd_create("syzkaller", 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] <... openat resumed>) = 4 [pid 5159] <... memfd_create resumed>) = 3 [pid 5016] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] ioctl(4, LOOP_SET_FD, 3 [pid 5159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5015] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./11/binderfs" [pid 5015] unlink("./11/binderfs" [pid 5016] <... unlink resumed>) = 0 [pid 5015] <... unlink resumed>) = 0 [pid 5016] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 70.669028][ T5155] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 70.691794][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 70.699764][ T5160] loop1: detected capacity change from 0 to 4096 [ 70.706976][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [pid 5015] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] <... ioctl resumed>) = 0 [pid 5159] <... mmap resumed>) = 0x7f770c286000 [pid 5160] close(3) = 0 [pid 5160] mkdir("./file1", 0777) = 0 [pid 5155] <... mount resumed>) = 0 [ 70.708989][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 70.713887][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 70.721155][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 70.730379][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 70.744005][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 70.745349][ T5161] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5160] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5155] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5155] chdir("./file1") = 0 [pid 5155] ioctl(4, LOOP_CLR_FD) = 0 [pid 5155] close(4) = 0 [ 70.747117][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 70.771153][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 70.780654][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 70.786698][ T5160] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 70.788695][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 70.807421][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [pid 5155] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5159] <... write resumed>) = 2097152 [pid 5159] munmap(0x7f770c286000, 2097152) = 0 [ 70.814911][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 70.815961][ T5160] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 70.823418][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 70.832561][ T5155] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 70.839927][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 70.861474][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5159] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5159] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5159] close(3) = 0 [pid 5159] mkdir("./file1", 0777) = 0 [ 70.872695][ T5155] Remounting filesystem read-only [ 70.880275][ T5159] loop5: detected capacity change from 0 to 4096 [ 70.901004][ T5159] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 70.911398][ T5155] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [pid 5159] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5160] <... mount resumed>) = 0 [pid 5160] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5160] chdir("./file1") = 0 [pid 5160] ioctl(4, LOOP_CLR_FD) = 0 [pid 5160] close(4) = 0 [pid 5160] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 70.915122][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 70.920645][ T5162] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.927927][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 70.937640][ T5155] NILFS (loop0): repaired inode bitmap for reserved inodes [ 70.954663][ T5159] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5014] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./11/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./11") = 0 [pid 5014] mkdir("./12", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5155] <... openat resumed>) = -1 EIO (Input/output error) [pid 5155] exit_group(0) = ? [pid 5155] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5155, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 70.965406][ T5160] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 70.983081][ T5160] Remounting filesystem read-only [ 70.993748][ T5155] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 71.012208][ T5160] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5159] <... mount resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5159] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5159] <... openat resumed>) = 3 [pid 5012] <... openat resumed>) = 3 [pid 5159] chdir("./file1" [pid 5012] newfstatat(3, "", [pid 5159] <... chdir resumed>) = 0 [pid 5159] ioctl(4, LOOP_CLR_FD [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5159] <... ioctl resumed>) = 0 [pid 5012] getdents64(3, [pid 5159] close(4) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5159] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5012] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5164 [pid 5015] <... umount2 resumed>) = 0 [pid 5012] newfstatat(AT_FDCWD, "./10/binderfs", ./strace-static-x86_64: Process 5164 attached [pid 5164] set_robust_list(0x555556b87660, 24) = 0 [pid 5164] chdir("./12") = 0 [pid 5164] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] newfstatat(AT_FDCWD, "./11/file1", [pid 5012] unlink("./10/binderfs" [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... unlink resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5164] <... prctl resumed>) = 0 [pid 5015] <... openat resumed>) = 4 [pid 5164] setpgid(0, 0 [pid 5015] newfstatat(4, "", [pid 5164] <... setpgid resumed>) = 0 [ 71.029661][ T5163] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.049779][ T5159] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 71.051132][ T5160] NILFS (loop1): repaired inode bitmap for reserved inodes [ 71.072906][ T5159] Remounting filesystem read-only [pid 5164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5164] write(3, "1000", 4) = 4 [pid 5164] close(3) = 0 [pid 5164] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5164] memfd_create("syzkaller", 0) = 3 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] getdents64(4, [ 71.081536][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 71.102228][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 71.110376][ T5159] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [pid 5015] close(4 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] <... close resumed>) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./11/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./11") = 0 [pid 5015] rmdir("./11/file1" [pid 5016] mkdir("./12", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5165 [pid 5015] <... rmdir resumed>) = 0 [pid 5015] getdents64(3, ./strace-static-x86_64: Process 5165 attached [pid 5165] set_robust_list(0x555556b87660, 24) = 0 [pid 5165] chdir("./12") = 0 [pid 5165] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5165] setpgid(0, 0) = 0 [pid 5165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./11" [pid 5165] write(3, "1000", 4) = 4 [pid 5165] close(3 [pid 5015] <... rmdir resumed>) = 0 [pid 5165] <... close resumed>) = 0 [pid 5164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] mkdir("./12", 0777 [pid 5165] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5015] <... mkdir resumed>) = 0 [pid 5165] memfd_create("syzkaller", 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5165] <... memfd_create resumed>) = 3 [pid 5015] <... openat resumed>) = 3 [pid 5165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5165] <... mmap resumed>) = 0x7f770c286000 [ 71.128345][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 71.136171][ T5159] NILFS (loop5): repaired inode bitmap for reserved inodes [ 71.145168][ T5159] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] close(3 [pid 5159] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] <... close resumed>) = 0 [pid 5159] exit_group(0) = ? [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5159] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5159, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5166 [pid 5017] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./11/binderfs" [pid 5164] <... write resumed>) = 2097152 [ 71.184604][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 71.193260][ T5160] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 71.193843][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 71.215345][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 ./strace-static-x86_64: Process 5166 attached [pid 5017] <... unlink resumed>) = 0 [pid 5166] set_robust_list(0x555556b87660, 24 [pid 5017] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5166] <... set_robust_list resumed>) = 0 [pid 5166] chdir("./12") = 0 [pid 5166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5164] munmap(0x7f770c286000, 2097152 [pid 5166] setpgid(0, 0) = 0 [pid 5166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5166] write(3, "1000", 4) = 4 [pid 5166] close(3) = 0 [pid 5166] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5166] memfd_create("syzkaller", 0) = 3 [pid 5166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5160] <... openat resumed>) = -1 EIO (Input/output error) [pid 5160] exit_group(0) = ? [pid 5166] <... mmap resumed>) = 0x7f770c286000 [pid 5164] <... munmap resumed>) = 0 [pid 5012] <... umount2 resumed>) = 0 [pid 5164] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5012] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5164] <... openat resumed>) = 4 [pid 5160] +++ exited with 0 +++ [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5164] ioctl(4, LOOP_SET_FD, 3 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5160, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5012] newfstatat(AT_FDCWD, "./10/file1", [pid 5164] <... ioctl resumed>) = 0 [ 71.272789][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 71.288022][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 71.310371][ T5164] loop2: detected capacity change from 0 to 4096 [pid 5164] close(3) = 0 [pid 5164] mkdir("./file1", 0777 [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... restart_syscall resumed>) = 0 [pid 5012] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5164] <... mkdir resumed>) = 0 [pid 5164] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] newfstatat(4, "", [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5166] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... openat resumed>) = 3 [pid 5013] newfstatat(3, "", [pid 5012] getdents64(4, [pid 5165] <... write resumed>) = 2097152 [pid 5165] munmap(0x7f770c286000, 2097152) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] getdents64(4, [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5012] close(4 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... close resumed>) = 0 [pid 5013] unlink("./11/binderfs" [pid 5012] rmdir("./10/file1" [pid 5013] <... unlink resumed>) = 0 [pid 5165] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... rmdir resumed>) = 0 [pid 5012] getdents64(3, [pid 5165] <... openat resumed>) = 4 [ 71.317502][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 71.325598][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 71.335954][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 71.339069][ T5164] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 71.353290][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5165] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./10" [pid 5165] <... ioctl resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5012] mkdir("./11", 0777 [pid 5165] close(3 [pid 5012] <... mkdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5165] <... close resumed>) = 0 [pid 5165] mkdir("./file1", 0777) = 0 [pid 5165] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5167 [ 71.367336][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 71.369226][ T5165] loop4: detected capacity change from 0 to 4096 [ 71.374659][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 71.400618][ T5165] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 71.413820][ T5164] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5166] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 5167 attached [pid 5167] set_robust_list(0x555556b87660, 24) = 0 [pid 5167] chdir("./11") = 0 [pid 5166] munmap(0x7f770c286000, 2097152 [pid 5167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5167] setpgid(0, 0) = 0 [pid 5167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5166] <... munmap resumed>) = 0 [pid 5166] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5167] <... openat resumed>) = 3 [pid 5166] ioctl(4, LOOP_SET_FD, 3 [pid 5167] write(3, "1000", 4) = 4 [pid 5167] close(3) = 0 [pid 5167] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5167] memfd_create("syzkaller", 0) = 3 [pid 5167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5166] <... ioctl resumed>) = 0 [pid 5166] close(3) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5166] mkdir("./file1", 0777 [pid 5017] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5166] <... mkdir resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5166] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 71.438997][ T5166] loop3: detected capacity change from 0 to 4096 [ 71.460446][ T5165] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 71.460836][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5017] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5167] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5164] <... mount resumed>) = 0 [pid 5164] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5164] chdir("./file1") = 0 [pid 5164] ioctl(4, LOOP_CLR_FD) = 0 [pid 5164] close(4) = 0 [ 71.481229][ T5166] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 71.494261][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 71.502456][ T5166] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 71.517420][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [pid 5164] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] rmdir("./11/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3 [pid 5166] <... mount resumed>) = 0 [pid 5017] <... close resumed>) = 0 [pid 5017] rmdir("./11") = 0 [pid 5166] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] mkdir("./12", 0777 [pid 5166] <... openat resumed>) = 3 [pid 5017] <... mkdir resumed>) = 0 [pid 5166] chdir("./file1" [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5166] <... chdir resumed>) = 0 [pid 5166] ioctl(4, LOOP_CLR_FD [pid 5017] <... openat resumed>) = 3 [pid 5166] <... ioctl resumed>) = 0 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5166] close(4 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5166] <... close resumed>) = 0 [pid 5017] close(3 [pid 5166] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... close resumed>) = 0 [ 71.525426][ T5164] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 71.542084][ T5168] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.556219][ T5169] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.568692][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5165] <... mount resumed>) = 0 [pid 5165] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5171 [pid 5165] <... openat resumed>) = 3 [pid 5165] chdir("./file1") = 0 [pid 5165] ioctl(4, LOOP_CLR_FD) = 0 [pid 5165] close(4) = 0 [pid 5165] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... umount2 resumed>) = 0 [ 71.583709][ T5166] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 71.586529][ T5170] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.617104][ T5165] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 71.632867][ T5164] Remounting filesystem read-only [pid 5167] <... write resumed>) = 2097152 [pid 5167] munmap(0x7f770c286000, 2097152./strace-static-x86_64: Process 5171 attached [pid 5171] set_robust_list(0x555556b87660, 24) = 0 [pid 5167] <... munmap resumed>) = 0 [pid 5171] chdir("./12" [pid 5167] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5171] <... chdir resumed>) = 0 [pid 5167] <... openat resumed>) = 4 [pid 5171] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5167] ioctl(4, LOOP_SET_FD, 3 [pid 5171] <... prctl resumed>) = 0 [pid 5013] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] setpgid(0, 0) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./11/file1", [pid 5171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5171] write(3, "1000", 4 [pid 5013] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] <... write resumed>) = 4 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5171] close(3 [pid 5013] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5171] <... close resumed>) = 0 [pid 5171] symlink("/dev/binderfs", "./binderfs" [pid 5013] <... openat resumed>) = 4 [pid 5171] <... symlink resumed>) = 0 [pid 5171] memfd_create("syzkaller", 0) = 3 [pid 5171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 71.638642][ T5166] Remounting filesystem read-only [ 71.647188][ T5164] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 71.655083][ T5164] NILFS (loop2): repaired inode bitmap for reserved inodes [ 71.657058][ T5166] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 71.665983][ T5167] loop0: detected capacity change from 0 to 4096 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./11/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5167] <... ioctl resumed>) = 0 [pid 5167] close(3) = 0 [pid 5167] mkdir("./file1", 0777) = 0 [pid 5167] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5013] close(3 [pid 5166] <... openat resumed>) = -1 EIO (Input/output error) [ 71.696804][ T5165] Remounting filesystem read-only [ 71.710394][ T5166] NILFS (loop3): repaired inode bitmap for reserved inodes [ 71.722748][ T5165] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 71.723284][ T5166] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5164] <... openat resumed>) = -1 EIO (Input/output error) [pid 5013] <... close resumed>) = 0 [pid 5171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5166] exit_group(0) = ? [pid 5164] exit_group(0 [pid 5013] rmdir("./11" [pid 5166] +++ exited with 0 +++ [pid 5164] <... exit_group resumed>) = ? [pid 5013] <... rmdir resumed>) = 0 [pid 5164] +++ exited with 0 +++ [pid 5165] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5166, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5013] mkdir("./12", 0777 [pid 5165] exit_group(0 [pid 5015] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5164, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5165] <... exit_group resumed>) = ? [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... restart_syscall resumed>) = 0 [pid 5013] <... mkdir resumed>) = 0 [pid 5014] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5165] +++ exited with 0 +++ [pid 5015] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5165, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [ 71.747898][ T5164] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 71.748818][ T5167] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 71.764200][ T5165] NILFS (loop4): repaired inode bitmap for reserved inodes [ 71.781518][ T5165] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5015] <... openat resumed>) = 3 [pid 5014] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... openat resumed>) = 3 [pid 5016] restart_syscall(<... resuming interrupted clone ...> [pid 5014] <... openat resumed>) = 3 [pid 5016] <... restart_syscall resumed>) = 0 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, [pid 5016] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... openat resumed>) = 3 [pid 5014] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5016] newfstatat(3, "", [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] unlink("./12/binderfs" [pid 5016] getdents64(3, [pid 5014] <... unlink resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] <... write resumed>) = 2097152 [pid 5015] newfstatat(3, "", [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./12/binderfs") = 0 [ 71.807693][ T5167] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 71.818541][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 71.828043][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 71.836515][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 71.836649][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 71.843557][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5016] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] munmap(0x7f770c286000, 2097152 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] getdents64(3, [pid 5013] close(3 [pid 5171] <... munmap resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] <... close resumed>) = 0 [pid 5015] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5173 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./12/binderfs") = 0 [pid 5015] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 71.850604][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 71.859831][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 71.875739][ T5172] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.884258][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 71.886971][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 71.894862][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [pid 5171] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5167] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5173 attached [pid 5173] set_robust_list(0x555556b87660, 24) = 0 [pid 5173] chdir("./12") = 0 [pid 5173] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5173] setpgid(0, 0) = 0 [pid 5173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5171] ioctl(4, LOOP_SET_FD, 3 [pid 5167] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5173] <... openat resumed>) = 3 [pid 5173] write(3, "1000", 4) = 4 [pid 5173] close(3) = 0 [pid 5173] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5173] memfd_create("syzkaller", 0) = 3 [pid 5173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5171] <... ioctl resumed>) = 0 [pid 5167] <... openat resumed>) = 3 [pid 5171] close(3 [pid 5167] chdir("./file1" [pid 5171] <... close resumed>) = 0 [pid 5167] <... chdir resumed>) = 0 [pid 5171] mkdir("./file1", 0777 [pid 5167] ioctl(4, LOOP_CLR_FD [pid 5171] <... mkdir resumed>) = 0 [pid 5167] <... ioctl resumed>) = 0 [pid 5171] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5167] close(4) = 0 [ 71.901719][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 71.911304][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 71.922551][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 71.930693][ T5171] loop5: detected capacity change from 0 to 4096 [ 71.931742][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [pid 5167] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./12/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [ 71.950875][ T5167] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 71.972460][ T5171] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 71.978948][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 71.989024][ T5171] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5016] rmdir("./12/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./12") = 0 [pid 5016] mkdir("./13", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 72.012766][ T5167] Remounting filesystem read-only [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] close(3) = 0 [pid 5171] <... mount resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./12/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5171] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5014] <... openat resumed>) = 4 [pid 5014] newfstatat(4, "", [pid 5171] <... openat resumed>) = 3 [ 72.043925][ T5167] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 72.061743][ T5167] NILFS (loop0): repaired inode bitmap for reserved inodes [ 72.062371][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 72.070604][ T5174] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5171] chdir("./file1" [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5175 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./12/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./12") = 0 [pid 5014] mkdir("./13", 0777 [pid 5171] <... chdir resumed>) = 0 [pid 5171] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 5175 attached ) = 0 [pid 5167] <... openat resumed>) = -1 EIO (Input/output error) [pid 5175] set_robust_list(0x555556b87660, 24 [pid 5171] close(4 [pid 5175] <... set_robust_list resumed>) = 0 [pid 5171] <... close resumed>) = 0 [pid 5167] exit_group(0 [pid 5014] <... mkdir resumed>) = 0 [pid 5175] chdir("./13" [pid 5171] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5175] <... chdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5176 [pid 5175] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5167] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5176 attached [pid 5176] set_robust_list(0x555556b87660, 24) = 0 [pid 5176] chdir("./13") = 0 [pid 5176] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5176] setpgid(0, 0) = 0 [pid 5176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5175] <... prctl resumed>) = 0 [pid 5175] setpgid(0, 0 [pid 5167] +++ exited with 0 +++ [pid 5176] write(3, "1000", 4 [pid 5175] <... setpgid resumed>) = 0 [pid 5176] <... write resumed>) = 4 [ 72.090305][ T5167] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 72.119253][ T5171] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 72.135391][ T5171] Remounting filesystem read-only [pid 5176] close(3 [pid 5175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5176] <... close resumed>) = 0 [pid 5176] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5176] memfd_create("syzkaller", 0) = 3 [pid 5176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5173] <... write resumed>) = 2097152 [pid 5173] munmap(0x7f770c286000, 2097152 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5167, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5175] <... openat resumed>) = 3 [pid 5012] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5173] <... munmap resumed>) = 0 [pid 5173] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5173] ioctl(4, LOOP_SET_FD, 3 [pid 5175] write(3, "1000", 4 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 72.145256][ T5171] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 72.153640][ T5171] NILFS (loop5): repaired inode bitmap for reserved inodes [ 72.162397][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 72.167419][ T5173] loop1: detected capacity change from 0 to 4096 [ 72.170763][ T5171] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5175] <... write resumed>) = 4 [pid 5012] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5175] close(3 [pid 5012] <... openat resumed>) = 3 [pid 5175] <... close resumed>) = 0 [pid 5012] newfstatat(3, "", [pid 5175] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, [pid 5175] memfd_create("syzkaller", 0) = 3 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5175] <... mmap resumed>) = 0x7f770c286000 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5173] <... ioctl resumed>) = 0 [pid 5173] close(3) = 0 [pid 5173] mkdir("./file1", 0777) = 0 [pid 5012] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5173] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 72.191783][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5012] unlink("./11/binderfs" [pid 5176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5171] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] <... umount2 resumed>) = 0 [pid 5012] <... unlink resumed>) = 0 [pid 5171] exit_group(0 [pid 5012] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] <... exit_group resumed>) = ? [pid 5015] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] +++ exited with 0 +++ [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./12/file1", [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5171, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5017] restart_syscall(<... resuming interrupted clone ...> [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... restart_syscall resumed>) = 0 [pid 5015] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... openat resumed>) = 4 [pid 5017] <... openat resumed>) = 3 [ 72.229549][ T5173] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 72.242131][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 72.255300][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [pid 5017] newfstatat(3, "", [pid 5015] newfstatat(4, "", [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, [pid 5015] getdents64(4, [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] getdents64(4, [pid 5176] <... write resumed>) = 2097152 [pid 5175] <... write resumed>) = 2097152 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5175] munmap(0x7f770c286000, 2097152 [pid 5017] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5176] munmap(0x7f770c286000, 2097152) = 0 [pid 5176] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5176] ioctl(4, LOOP_SET_FD, 3 [pid 5175] <... munmap resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] close(4 [pid 5175] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5017] unlink("./12/binderfs" [pid 5015] <... close resumed>) = 0 [pid 5017] <... unlink resumed>) = 0 [pid 5175] <... openat resumed>) = 4 [pid 5015] rmdir("./12/file1") = 0 [pid 5175] ioctl(4, LOOP_SET_FD, 3 [ 72.274757][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 72.290393][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 72.295220][ T5173] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 72.298587][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 72.312298][ T5176] loop2: detected capacity change from 0 to 4096 [ 72.317136][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5017] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5176] <... ioctl resumed>) = 0 [pid 5176] close(3) = 0 [pid 5176] mkdir("./file1", 0777 [pid 5015] getdents64(3, [pid 5176] <... mkdir resumed>) = 0 [pid 5176] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5175] <... ioctl resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3 [pid 5175] close(3 [pid 5015] <... close resumed>) = 0 [pid 5175] <... close resumed>) = 0 [pid 5173] <... mount resumed>) = 0 [pid 5173] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5173] chdir("./file1") = 0 [pid 5173] ioctl(4, LOOP_CLR_FD) = 0 [pid 5173] close(4 [pid 5175] mkdir("./file1", 0777 [pid 5173] <... close resumed>) = 0 [ 72.332250][ T5175] loop4: detected capacity change from 0 to 4096 [ 72.339719][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 72.342892][ T5176] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 72.347390][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 72.365257][ T5177] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5015] rmdir("./12" [pid 5173] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5175] <... mkdir resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5175] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] mkdir("./13", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5012] <... umount2 resumed>) = 0 [ 72.379593][ T5173] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 72.385715][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 72.404039][ T5175] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 72.406654][ T5176] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5012] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] newfstatat(AT_FDCWD, "./11/file1", [pid 5015] close(3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... close resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5178 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5178 attached [ 72.426086][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 72.433850][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 72.441232][ T5175] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 72.454897][ T5173] Remounting filesystem read-only [ 72.460563][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 72.472479][ T5173] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5012] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5178] set_robust_list(0x555556b87660, 24) = 0 [pid 5012] newfstatat(4, "", [pid 5178] chdir("./13") = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5178] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5012] getdents64(4, [pid 5178] <... prctl resumed>) = 0 [pid 5175] <... mount resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5178] setpgid(0, 0 [pid 5175] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] getdents64(4, [pid 5178] <... setpgid resumed>) = 0 [pid 5173] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] <... umount2 resumed>) = 0 [pid 5178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5175] <... openat resumed>) = 3 [pid 5173] exit_group(0 [pid 5017] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4 [pid 5175] chdir("./file1" [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5178] <... openat resumed>) = 3 [pid 5175] <... chdir resumed>) = 0 [pid 5017] newfstatat(AT_FDCWD, "./12/file1", [pid 5012] <... close resumed>) = 0 [pid 5178] write(3, "1000", 4 [pid 5175] ioctl(4, LOOP_CLR_FD [pid 5173] <... exit_group resumed>) = ? [pid 5178] <... write resumed>) = 4 [pid 5175] <... ioctl resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] rmdir("./11/file1" [pid 5178] close(3 [pid 5175] close(4 [pid 5017] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5178] <... close resumed>) = 0 [pid 5175] <... close resumed>) = 0 [pid 5173] +++ exited with 0 +++ [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... rmdir resumed>) = 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5173, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5178] symlink("/dev/binderfs", "./binderfs" [pid 5175] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] restart_syscall(<... resuming interrupted clone ...> [ 72.481103][ T5173] NILFS (loop1): repaired inode bitmap for reserved inodes [ 72.489175][ T5173] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 72.504473][ T5179] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5012] getdents64(3, [pid 5013] <... restart_syscall resumed>) = 0 [pid 5017] <... openat resumed>) = 4 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5178] <... symlink resumed>) = 0 [pid 5013] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] newfstatat(4, "", [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] close(3 [pid 5013] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./12/binderfs") = 0 [pid 5013] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5178] memfd_create("syzkaller", 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... close resumed>) = 0 [pid 5178] <... memfd_create resumed>) = 3 [pid 5017] getdents64(4, [pid 5012] rmdir("./11" [pid 5178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] <... rmdir resumed>) = 0 [pid 5178] <... mmap resumed>) = 0x7f770c286000 [pid 5017] getdents64(4, [pid 5012] mkdir("./12", 0777 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4 [pid 5012] <... mkdir resumed>) = 0 [pid 5017] <... close resumed>) = 0 [ 72.544026][ T5175] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 72.559903][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 72.567734][ T5175] Remounting filesystem read-only [ 72.576088][ T5175] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 72.585360][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5017] rmdir("./12/file1" [pid 5012] <... openat resumed>) = 3 [pid 5176] <... mount resumed>) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5176] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5176] chdir("./file1") = 0 [pid 5176] ioctl(4, LOOP_CLR_FD) = 0 [pid 5176] close(4) = 0 [pid 5176] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] getdents64(3, [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5017] close(3 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] <... close resumed>) = 0 [pid 5017] rmdir("./12") = 0 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5181 [ 72.598662][ T5180] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.606350][ T5176] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 72.615578][ T5175] NILFS (loop4): repaired inode bitmap for reserved inodes [ 72.636823][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] mkdir("./13", 0777./strace-static-x86_64: Process 5181 attached [pid 5181] set_robust_list(0x555556b87660, 24) = 0 [pid 5181] chdir("./12") = 0 [pid 5181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5181] setpgid(0, 0) = 0 [pid 5181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5181] write(3, "1000", 4) = 4 [pid 5181] close(3) = 0 [pid 5181] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5017] <... mkdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3 [pid 5181] memfd_create("syzkaller", 0) = 3 [pid 5181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] <... close resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5181] <... mmap resumed>) = 0x7f770c286000 ./strace-static-x86_64: Process 5182 attached [pid 5178] <... write resumed>) = 2097152 [pid 5175] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5182 [pid 5182] set_robust_list(0x555556b87660, 24 [pid 5178] munmap(0x7f770c286000, 2097152 [pid 5182] <... set_robust_list resumed>) = 0 [pid 5178] <... munmap resumed>) = 0 [pid 5175] exit_group(0 [pid 5182] chdir("./13" [pid 5178] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5175] <... exit_group resumed>) = ? [pid 5182] <... chdir resumed>) = 0 [pid 5182] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5178] <... openat resumed>) = 4 [pid 5182] <... prctl resumed>) = 0 [ 72.637797][ T5175] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5178] ioctl(4, LOOP_SET_FD, 3 [pid 5182] setpgid(0, 0) = 0 [pid 5178] <... ioctl resumed>) = 0 [pid 5175] +++ exited with 0 +++ [pid 5182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5178] close(3 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5175, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5182] <... openat resumed>) = 3 [pid 5178] <... close resumed>) = 0 [pid 5182] write(3, "1000", 4) = 4 [pid 5016] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5182] close(3 [pid 5178] mkdir("./file1", 0777 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5182] <... close resumed>) = 0 [pid 5016] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5182] symlink("/dev/binderfs", "./binderfs" [pid 5016] <... openat resumed>) = 3 [pid 5182] <... symlink resumed>) = 0 [pid 5016] newfstatat(3, "", [pid 5182] memfd_create("syzkaller", 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5182] <... memfd_create resumed>) = 3 [pid 5178] <... mkdir resumed>) = 0 [pid 5016] getdents64(3, [pid 5182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5178] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5182] <... mmap resumed>) = 0x7f770c286000 [ 72.694306][ T5178] loop3: detected capacity change from 0 to 4096 [ 72.695336][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 72.717310][ T5176] Remounting filesystem read-only [ 72.725945][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [pid 5181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 72.745837][ T5178] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 72.746882][ T5176] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 72.755869][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 72.764776][ T5176] NILFS (loop2): repaired inode bitmap for reserved inodes [ 72.786263][ T5178] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5016] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5016] unlink("./13/binderfs") = 0 [pid 5016] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5182] <... write resumed>) = 2097152 [pid 5182] munmap(0x7f770c286000, 2097152 [pid 5013] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./12/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5182] <... munmap resumed>) = 0 [pid 5181] <... write resumed>) = 2097152 [pid 5181] munmap(0x7f770c286000, 2097152) = 0 [pid 5181] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5182] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 72.794523][ T5176] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 72.820225][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 72.837440][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5013] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5182] <... openat resumed>) = 4 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5181] <... openat resumed>) = 4 [pid 5181] ioctl(4, LOOP_SET_FD, 3 [pid 5182] ioctl(4, LOOP_SET_FD, 3 [pid 5013] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5176] <... openat resumed>) = -1 EIO (Input/output error) [pid 5176] exit_group(0) = ? [pid 5176] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5176, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5181] <... ioctl resumed>) = 0 [pid 5181] close(3) = 0 [pid 5181] mkdir("./file1", 0777 [pid 5014] <... restart_syscall resumed>) = 0 [pid 5014] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./13/binderfs" [pid 5182] <... ioctl resumed>) = 0 [pid 5013] <... openat resumed>) = 4 [pid 5178] <... mount resumed>) = 0 [pid 5013] newfstatat(4, "", [pid 5178] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5178] <... openat resumed>) = 3 [pid 5178] chdir("./file1" [pid 5014] <... unlink resumed>) = 0 [pid 5013] getdents64(4, [pid 5178] <... chdir resumed>) = 0 [pid 5014] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5182] close(3 [pid 5178] ioctl(4, LOOP_CLR_FD [pid 5013] getdents64(4, [pid 5181] <... mkdir resumed>) = 0 [ 72.846486][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 72.846819][ T5183] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.857771][ T5181] loop0: detected capacity change from 0 to 4096 [ 72.865809][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 72.878879][ T5182] loop5: detected capacity change from 0 to 4096 [ 72.889225][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [pid 5181] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5182] <... close resumed>) = 0 [pid 5178] <... ioctl resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5182] mkdir("./file1", 0777 [pid 5178] close(4 [pid 5013] close(4 [pid 5182] <... mkdir resumed>) = 0 [pid 5178] <... close resumed>) = 0 [pid 5016] <... umount2 resumed>) = 0 [pid 5013] <... close resumed>) = 0 [ 72.891530][ T5181] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 72.897435][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 72.914963][ T5181] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 72.925323][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5182] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5178] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] rmdir("./12/file1") = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] getdents64(3, [pid 5016] newfstatat(AT_FDCWD, "./13/file1", [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] close(3) = 0 [pid 5016] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] rmdir("./12" [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... rmdir resumed>) = 0 [pid 5016] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] mkdir("./13", 0777 [pid 5016] <... openat resumed>) = 4 [pid 5013] <... mkdir resumed>) = 0 [pid 5016] newfstatat(4, "", [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... openat resumed>) = 3 [pid 5016] getdents64(4, [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(3 [pid 5016] close(4 [pid 5013] <... close resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] rmdir("./13/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./13") = 0 [pid 5016] mkdir("./14", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5184 [pid 5016] <... openat resumed>) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5184 attached [ 72.943911][ T5178] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 72.955863][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 72.967349][ T5182] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 72.990412][ T5178] Remounting filesystem read-only [pid 5184] set_robust_list(0x555556b87660, 24 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5184] <... set_robust_list resumed>) = 0 [pid 5016] close(3) = 0 [pid 5184] chdir("./13" [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5184] <... chdir resumed>) = 0 [pid 5184] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5185 [ 72.996623][ T5178] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 73.004637][ T5178] NILFS (loop3): repaired inode bitmap for reserved inodes [ 73.015053][ T5182] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 73.018650][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5184] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5185 attached [pid 5185] set_robust_list(0x555556b87660, 24) = 0 [pid 5185] chdir("./14") = 0 [pid 5185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5185] setpgid(0, 0) = 0 [pid 5185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5185] write(3, "1000", 4) = 4 [pid 5185] close(3) = 0 [pid 5185] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5185] memfd_create("syzkaller", 0) = 3 [pid 5185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5184] write(3, "1000", 4) = 4 [pid 5181] <... mount resumed>) = 0 [pid 5184] close(3 [pid 5181] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5184] <... close resumed>) = 0 [pid 5181] chdir("./file1" [pid 5184] symlink("/dev/binderfs", "./binderfs" [pid 5181] <... chdir resumed>) = 0 [pid 5184] <... symlink resumed>) = 0 [pid 5181] ioctl(4, LOOP_CLR_FD [pid 5184] memfd_create("syzkaller", 0 [pid 5181] <... ioctl resumed>) = 0 [pid 5184] <... memfd_create resumed>) = 3 [pid 5184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5181] close(4 [pid 5184] <... mmap resumed>) = 0x7f770c286000 [pid 5181] <... close resumed>) = 0 [ 73.044090][ T5186] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.076560][ T5181] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5181] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5182] <... mount resumed>) = 0 [pid 5182] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5182] chdir("./file1") = 0 [pid 5182] ioctl(4, LOOP_CLR_FD) = 0 [pid 5182] close(4) = 0 [ 73.085844][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 73.102314][ T5178] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 73.106450][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 73.124673][ T5187] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5182] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5184] <... write resumed>) = 2097152 [pid 5184] munmap(0x7f770c286000, 2097152) = 0 [pid 5184] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 73.143401][ T5182] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 73.155213][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 73.169821][ T5181] Remounting filesystem read-only [ 73.176839][ T5181] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 73.185412][ T5184] loop1: detected capacity change from 0 to 4096 [pid 5184] ioctl(4, LOOP_SET_FD, 3 [pid 5185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5184] <... ioctl resumed>) = 0 [pid 5184] close(3) = 0 [pid 5184] mkdir("./file1", 0777 [pid 5185] <... write resumed>) = 2097152 [pid 5178] <... openat resumed>) = -1 EIO (Input/output error) [pid 5178] exit_group(0) = ? [pid 5178] +++ exited with 0 +++ [pid 5184] <... mkdir resumed>) = 0 [pid 5184] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5178, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5015] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5185] munmap(0x7f770c286000, 2097152) = 0 [pid 5185] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 73.192540][ T5181] NILFS (loop0): repaired inode bitmap for reserved inodes [ 73.200796][ T5182] Remounting filesystem read-only [ 73.207335][ T5181] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 73.217528][ T5182] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 73.236938][ T5184] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5185] ioctl(4, LOOP_SET_FD, 3 [pid 5181] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = 0 [pid 5185] <... ioctl resumed>) = 0 [pid 5185] close(3 [pid 5015] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5185] <... close resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5181] exit_group(0 [pid 5015] newfstatat(3, "", [pid 5014] newfstatat(AT_FDCWD, "./13/file1", [pid 5185] mkdir("./file1", 0777) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5185] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] getdents64(3, [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./13/binderfs", [pid 5014] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./13/binderfs" [pid 5014] <... openat resumed>) = 4 [pid 5015] <... unlink resumed>) = 0 [pid 5015] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5181] <... exit_group resumed>) = ? [ 73.244878][ T5185] loop4: detected capacity change from 0 to 4096 [ 73.256635][ T5184] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 73.271096][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 73.276478][ T5185] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 73.279109][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [pid 5014] getdents64(4, [pid 5181] +++ exited with 0 +++ [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5181, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5014] close(4 [ 73.295200][ T5182] NILFS (loop5): repaired inode bitmap for reserved inodes [ 73.298404][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 73.310513][ T5185] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 73.312277][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 73.321685][ T5182] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 73.328356][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5012] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... close resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] rmdir("./13/file1" [pid 5012] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... rmdir resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5012] newfstatat(3, "", [pid 5185] <... mount resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, [pid 5185] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] getdents64(3, [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5185] <... openat resumed>) = 3 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] close(3 [pid 5012] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... close resumed>) = 0 [pid 5185] chdir("./file1" [pid 5014] rmdir("./13" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5185] <... chdir resumed>) = 0 [pid 5185] ioctl(4, LOOP_CLR_FD) = 0 [pid 5185] close(4 [pid 5014] <... rmdir resumed>) = 0 [pid 5012] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5185] <... close resumed>) = 0 [pid 5185] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] mkdir("./14", 0777 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5184] <... mount resumed>) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5012] unlink("./12/binderfs" [pid 5184] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5012] <... unlink resumed>) = 0 [ 73.357569][ T5189] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.367039][ T5185] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 73.369120][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 73.383863][ T5188] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5184] <... openat resumed>) = 3 [pid 5182] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] <... openat resumed>) = 3 [pid 5012] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5184] chdir("./file1" [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5182] exit_group(0 [pid 5184] <... chdir resumed>) = 0 [pid 5182] <... exit_group resumed>) = ? [pid 5184] ioctl(4, LOOP_CLR_FD [pid 5014] close(3 [pid 5182] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5182, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=12 /* 0.12 s */} --- [pid 5184] <... ioctl resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5184] close(4 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5184] <... close resumed>) = 0 ./strace-static-x86_64: Process 5190 attached [pid 5190] set_robust_list(0x555556b87660, 24) = 0 [pid 5190] chdir("./14") = 0 [pid 5190] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5190] setpgid(0, 0) = 0 [pid 5190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] <... umount2 resumed>) = 0 [pid 5190] write(3, "1000", 4) = 4 [pid 5190] close(3) = 0 [pid 5190] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5017] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5184] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5190 [ 73.408672][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 73.416901][ T5185] Remounting filesystem read-only [ 73.422566][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 73.431145][ T5185] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 73.441508][ T5184] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5015] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", [pid 5190] memfd_create("syzkaller", 0) = 3 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./13/file1", [pid 5190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5190] <... mmap resumed>) = 0x7f770c286000 [pid 5015] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./13/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./13") = 0 [pid 5015] mkdir("./14", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./13/binderfs") = 0 [pid 5017] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5191 ./strace-static-x86_64: Process 5191 attached [pid 5191] set_robust_list(0x555556b87660, 24) = 0 [pid 5191] chdir("./14") = 0 [pid 5191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5191] setpgid(0, 0) = 0 [pid 5191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5191] write(3, "1000", 4) = 4 [pid 5191] close(3) = 0 [pid 5191] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5191] memfd_create("syzkaller", 0) = 3 [pid 5191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 73.457450][ T5185] NILFS (loop4): repaired inode bitmap for reserved inodes [ 73.464751][ T5185] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 73.482253][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 73.495223][ T5184] Remounting filesystem read-only [ 73.525818][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 73.538907][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 73.560058][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 73.560103][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [pid 5190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 73.576161][ T5184] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 73.584094][ T5184] NILFS (loop1): repaired inode bitmap for reserved inodes [ 73.602268][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 73.602891][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5185] <... openat resumed>) = -1 EIO (Input/output error) [pid 5185] exit_group(0) = ? [pid 5190] <... write resumed>) = 2097152 [pid 5185] +++ exited with 0 +++ [pid 5190] munmap(0x7f770c286000, 2097152 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5185, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5016] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./14/binderfs") = 0 [pid 5190] <... munmap resumed>) = 0 [pid 5190] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5016] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5190] <... openat resumed>) = 4 [pid 5190] ioctl(4, LOOP_SET_FD, 3 [pid 5191] <... write resumed>) = 2097152 [ 73.609561][ T5184] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 73.643622][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 73.644550][ T5190] loop2: detected capacity change from 0 to 4096 [ 73.655987][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 73.664748][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [pid 5191] munmap(0x7f770c286000, 2097152) = 0 [pid 5191] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5191] ioctl(4, LOOP_SET_FD, 3 [pid 5190] <... ioctl resumed>) = 0 [pid 5190] close(3) = 0 [pid 5190] mkdir("./file1", 0777) = 0 [pid 5190] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5191] <... ioctl resumed>) = 0 [pid 5191] close(3) = 0 [pid 5191] mkdir("./file1", 0777) = 0 [pid 5191] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./12/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 73.674261][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 73.678431][ T5191] loop3: detected capacity change from 0 to 4096 [ 73.689659][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 73.707754][ T5190] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 73.711145][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [pid 5012] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./12/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5184] <... openat resumed>) = -1 EIO (Input/output error) [pid 5012] rmdir("./12" [pid 5184] exit_group(0 [pid 5012] <... rmdir resumed>) = 0 [pid 5184] <... exit_group resumed>) = ? [pid 5012] mkdir("./13", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3 [pid 5184] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5184, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] <... close resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5192 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./13/binderfs") = 0 [pid 5013] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5192 attached [pid 5192] set_robust_list(0x555556b87660, 24) = 0 [pid 5192] chdir("./13") = 0 [pid 5192] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5192] setpgid(0, 0) = 0 [ 73.734108][ T5191] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 73.745041][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 73.758898][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 73.767251][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5192] write(3, "1000", 4) = 4 [pid 5192] close(3) = 0 [pid 5192] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5192] memfd_create("syzkaller", 0) = 3 [pid 5192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 73.781817][ T5190] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 73.792005][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 73.803134][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 73.818231][ T5191] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 73.836867][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 73.864513][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [pid 5192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... umount2 resumed>) = 0 [pid 5016] <... umount2 resumed>) = 0 [pid 5017] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5190] <... mount resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5190] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5017] newfstatat(AT_FDCWD, "./13/file1", [pid 5016] newfstatat(AT_FDCWD, "./14/file1", [pid 5190] chdir("./file1") = 0 [pid 5190] ioctl(4, LOOP_CLR_FD [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5190] <... ioctl resumed>) = 0 [pid 5190] close(4) = 0 [pid 5190] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 73.889873][ T5193] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.916527][ T5190] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 73.929431][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5191] <... mount resumed>) = 0 [pid 5191] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5191] chdir("./file1") = 0 [pid 5191] ioctl(4, LOOP_CLR_FD) = 0 [pid 5191] close(4) = 0 [pid 5191] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... openat resumed>) = 4 [pid 5016] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] newfstatat(4, "", [pid 5016] <... openat resumed>) = 4 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, [pid 5016] getdents64(4, [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] getdents64(4, [pid 5017] close(4 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] <... close resumed>) = 0 [pid 5016] close(4) = 0 [pid 5017] rmdir("./13/file1" [pid 5016] rmdir("./14/file1" [pid 5017] <... rmdir resumed>) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5017] getdents64(3, [pid 5016] getdents64(3, [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] <... close resumed>) = 0 [pid 5016] close(3 [pid 5017] rmdir("./13" [pid 5016] <... close resumed>) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5016] rmdir("./14" [pid 5017] mkdir("./14", 0777 [pid 5016] <... rmdir resumed>) = 0 [pid 5017] <... mkdir resumed>) = 0 [ 73.932023][ T5194] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.952570][ T5191] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5016] mkdir("./15", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5192] <... write resumed>) = 2097152 [pid 5017] close(3 [pid 5016] <... openat resumed>) = 3 [pid 5192] munmap(0x7f770c286000, 2097152) = 0 [pid 5192] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5192] ioctl(4, LOOP_SET_FD, 3 [pid 5017] <... close resumed>) = 0 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] close(3 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5195 [pid 5016] <... close resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5196 attached ./strace-static-x86_64: Process 5195 attached , child_tidptr=0x555556b87650) = 5196 [pid 5195] set_robust_list(0x555556b87660, 24) = 0 [pid 5195] chdir("./14") = 0 [pid 5195] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5195] setpgid(0, 0) = 0 [pid 5196] set_robust_list(0x555556b87660, 24) = 0 [pid 5195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5195] write(3, "1000", 4) = 4 [pid 5195] close(3) = 0 [pid 5195] symlink("/dev/binderfs", "./binderfs") = 0 [ 73.986606][ T5190] Remounting filesystem read-only [ 73.994344][ T5190] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 74.000035][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 74.005194][ T5192] loop0: detected capacity change from 0 to 4096 [ 74.017973][ T5191] Remounting filesystem read-only [ 74.024972][ T5191] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5195] memfd_create("syzkaller", 0 [pid 5196] chdir("./15" [pid 5195] <... memfd_create resumed>) = 3 [pid 5195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5196] <... chdir resumed>) = 0 [pid 5195] <... mmap resumed>) = 0x7f770c286000 [pid 5196] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5196] setpgid(0, 0) = 0 [pid 5192] <... ioctl resumed>) = 0 [pid 5192] close(3) = 0 [pid 5192] mkdir("./file1", 0777 [pid 5196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5192] <... mkdir resumed>) = 0 [pid 5196] write(3, "1000", 4 [pid 5192] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5196] <... write resumed>) = 4 [pid 5196] close(3) = 0 [ 74.044027][ T5190] NILFS (loop2): repaired inode bitmap for reserved inodes [ 74.065855][ T5191] NILFS (loop3): repaired inode bitmap for reserved inodes [ 74.073227][ T5191] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5196] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5196] memfd_create("syzkaller", 0) = 3 [pid 5196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5190] <... openat resumed>) = -1 EIO (Input/output error) [pid 5190] exit_group(0) = ? [ 74.096942][ T5190] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5190] +++ exited with 0 +++ [pid 5191] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5190, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5191] exit_group(0) = ? [pid 5014] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./14/binderfs") = 0 [pid 5014] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5191] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5191, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] <... write resumed>) = 2097152 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 74.139230][ T5192] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 74.164714][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 74.164788][ T5192] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5195] munmap(0x7f770c286000, 2097152 [pid 5013] <... umount2 resumed>) = 0 [pid 5195] <... munmap resumed>) = 0 [pid 5015] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5195] ioctl(4, LOOP_SET_FD, 3 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] <... ioctl resumed>) = 0 [pid 5195] close(3) = 0 [pid 5195] mkdir("./file1", 0777 [pid 5015] newfstatat(AT_FDCWD, "./14/binderfs", [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] newfstatat(AT_FDCWD, "./13/file1", [pid 5195] <... mkdir resumed>) = 0 [pid 5015] unlink("./14/binderfs" [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 74.187479][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 74.196478][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 74.209657][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 74.221040][ T5195] loop5: detected capacity change from 0 to 4096 [pid 5013] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] <... unlink resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, [pid 5196] <... write resumed>) = 2097152 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5196] munmap(0x7f770c286000, 2097152 [pid 5013] getdents64(4, [pid 5196] <... munmap resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [ 74.234004][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 74.234250][ T5195] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 74.250111][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 74.251533][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 74.258698][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 74.265980][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 74.273874][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [pid 5196] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] close(4 [pid 5196] <... openat resumed>) = 4 [pid 5013] <... close resumed>) = 0 [pid 5196] ioctl(4, LOOP_SET_FD, 3 [pid 5013] rmdir("./13/file1") = 0 [pid 5192] <... mount resumed>) = 0 [pid 5192] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5013] getdents64(3, [pid 5192] <... openat resumed>) = 3 [pid 5192] chdir("./file1" [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3 [pid 5192] <... chdir resumed>) = 0 [pid 5192] ioctl(4, LOOP_CLR_FD) = 0 [pid 5192] close(4) = 0 [pid 5013] <... close resumed>) = 0 [ 74.287450][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 74.287712][ T5197] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.295365][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 74.314414][ T5195] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 74.322679][ T5196] loop4: detected capacity change from 0 to 4096 [pid 5192] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] rmdir("./13") = 0 [pid 5013] mkdir("./14", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5196] <... ioctl resumed>) = 0 [pid 5014] <... umount2 resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [pid 5196] close(3 [pid 5014] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./14/file1", [pid 5196] <... close resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5196] mkdir("./file1", 0777 [pid 5013] close(3 [pid 5014] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, [pid 5196] <... mkdir resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5196] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5013] <... close resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./14/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./14") = 0 [pid 5014] mkdir("./15", 0777 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5199 [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5200 [ 74.334154][ T5192] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 74.376888][ T5196] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5195] <... mount resumed>) = 0 [pid 5195] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5195] chdir("./file1") = 0 [pid 5195] ioctl(4, LOOP_CLR_FD) = 0 [pid 5195] close(4) = 0 [pid 5195] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 5199 attached [pid 5199] set_robust_list(0x555556b87660, 24./strace-static-x86_64: Process 5200 attached ) = 0 [pid 5200] set_robust_list(0x555556b87660, 24) = 0 [pid 5199] chdir("./14" [pid 5200] chdir("./15" [pid 5199] <... chdir resumed>) = 0 [pid 5200] <... chdir resumed>) = 0 [pid 5200] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5199] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5200] <... prctl resumed>) = 0 [pid 5200] setpgid(0, 0 [pid 5199] <... prctl resumed>) = 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5200] <... setpgid resumed>) = 0 [pid 5200] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5199] setpgid(0, 0 [pid 5200] <... openat resumed>) = 3 [pid 5200] write(3, "1000", 4) = 4 [pid 5200] close(3) = 0 [pid 5200] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5200] memfd_create("syzkaller", 0) = 3 [pid 5200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5199] <... setpgid resumed>) = 0 [pid 5199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 74.380514][ T5192] Remounting filesystem read-only [ 74.397639][ T5195] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 74.413384][ T5198] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.430656][ T5196] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5015] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5199] <... openat resumed>) = 3 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5199] write(3, "1000", 4 [pid 5015] newfstatat(AT_FDCWD, "./14/file1", [pid 5199] <... write resumed>) = 4 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5199] close(3) = 0 [pid 5015] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5199] symlink("/dev/binderfs", "./binderfs" [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5199] <... symlink resumed>) = 0 [pid 5015] <... openat resumed>) = 4 [pid 5015] newfstatat(4, "", [pid 5199] memfd_create("syzkaller", 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5199] <... memfd_create resumed>) = 3 [pid 5015] getdents64(4, [pid 5199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, [pid 5199] <... mmap resumed>) = 0x7f770c286000 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./14/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [ 74.442033][ T5192] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 74.481834][ T5192] NILFS (loop0): repaired inode bitmap for reserved inodes [pid 5015] rmdir("./14") = 0 [pid 5015] mkdir("./15", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5202 [pid 5200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5202 attached [ 74.493553][ T5195] Remounting filesystem read-only [pid 5202] set_robust_list(0x555556b87660, 24) = 0 [pid 5202] chdir("./15") = 0 [pid 5202] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5202] setpgid(0, 0) = 0 [pid 5202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5202] write(3, "1000", 4) = 4 [pid 5202] close(3) = 0 [pid 5202] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5202] memfd_create("syzkaller", 0) = 3 [pid 5199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5196] <... mount resumed>) = 0 [pid 5202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5196] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5196] chdir("./file1") = 0 [pid 5199] <... write resumed>) = 2097152 [pid 5199] munmap(0x7f770c286000, 2097152 [pid 5196] ioctl(4, LOOP_CLR_FD) = 0 [ 74.516719][ T5201] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.528316][ T5195] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 74.546229][ T5192] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5196] close(4) = 0 [pid 5199] <... munmap resumed>) = 0 [pid 5196] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5199] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5199] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5192] <... openat resumed>) = -1 EIO (Input/output error) [ 74.575613][ T5195] NILFS (loop5): repaired inode bitmap for reserved inodes [ 74.584822][ T5196] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 74.603131][ T5199] loop1: detected capacity change from 0 to 4096 [ 74.605624][ T5195] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5199] close(3) = 0 [pid 5202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5199] mkdir("./file1", 0777 [pid 5192] exit_group(0 [pid 5199] <... mkdir resumed>) = 0 [pid 5192] <... exit_group resumed>) = ? [pid 5199] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5200] <... write resumed>) = 2097152 [pid 5192] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5192, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5200] munmap(0x7f770c286000, 2097152) = 0 [pid 5200] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5012] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5200] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5202] <... write resumed>) = 2097152 [pid 5012] <... openat resumed>) = 3 [ 74.626392][ T5196] Remounting filesystem read-only [ 74.638252][ T5199] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 74.648196][ T5196] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 74.660349][ T5200] loop2: detected capacity change from 0 to 4096 [ 74.661437][ T5199] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5195] <... openat resumed>) = -1 EIO (Input/output error) [pid 5195] exit_group(0) = ? [pid 5195] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5195, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5017] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5202] munmap(0x7f770c286000, 2097152 [pid 5200] <... ioctl resumed>) = 0 [pid 5012] newfstatat(3, "", [pid 5017] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./14/binderfs") = 0 [pid 5017] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5200] close(3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5200] <... close resumed>) = 0 [pid 5202] <... munmap resumed>) = 0 [pid 5200] mkdir("./file1", 0777 [pid 5196] <... openat resumed>) = -1 EIO (Input/output error) [pid 5012] getdents64(3, [pid 5202] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5200] <... mkdir resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5202] <... openat resumed>) = 4 [pid 5200] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5202] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./13/binderfs" [pid 5202] <... ioctl resumed>) = 0 [pid 5012] <... unlink resumed>) = 0 [pid 5202] close(3 [pid 5012] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5202] <... close resumed>) = 0 [pid 5202] mkdir("./file1", 0777) = 0 [pid 5202] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5196] exit_group(0) = ? [ 74.672109][ T5196] NILFS (loop4): repaired inode bitmap for reserved inodes [ 74.684149][ T5196] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 74.700432][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 74.705159][ T5202] loop3: detected capacity change from 0 to 4096 [ 74.708319][ T5200] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5196] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5196, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5016] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./15/binderfs") = 0 [ 74.723903][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 74.726163][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 74.737145][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 74.745293][ T5202] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 74.746179][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 74.755694][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [pid 5016] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5199] <... mount resumed>) = 0 [ 74.762310][ T5200] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 74.780270][ T5203] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.791728][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 74.791788][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 74.806321][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 74.813647][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 74.815299][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [pid 5199] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5199] chdir("./file1") = 0 [ 74.822142][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 74.831124][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 74.843021][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 74.851094][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 74.851216][ T5202] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 74.861881][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5199] ioctl(4, LOOP_CLR_FD) = 0 [pid 5199] close(4) = 0 [pid 5199] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5200] <... mount resumed>) = 0 [pid 5200] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5200] chdir("./file1") = 0 [pid 5200] ioctl(4, LOOP_CLR_FD) = 0 [pid 5200] close(4) = 0 [ 74.871487][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 74.886505][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 74.895408][ T5199] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 74.896560][ T5204] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5200] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... umount2 resumed>) = 0 [pid 5202] <... mount resumed>) = 0 [pid 5202] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5202] chdir("./file1") = 0 [pid 5202] ioctl(4, LOOP_CLR_FD) = 0 [pid 5202] close(4) = 0 [pid 5202] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] <... umount2 resumed>) = 0 [pid 5017] newfstatat(AT_FDCWD, "./14/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 74.924738][ T5200] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 74.939614][ T5205] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.954327][ T5202] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 74.963541][ T5199] Remounting filesystem read-only [pid 5017] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] newfstatat(4, "", [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./15/file1" [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5017] getdents64(4, [pid 5016] rmdir("./15" [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4 [pid 5016] <... rmdir resumed>) = 0 [pid 5016] mkdir("./16", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5206 ./strace-static-x86_64: Process 5206 attached [pid 5206] set_robust_list(0x555556b87660, 24) = 0 [pid 5017] <... close resumed>) = 0 [pid 5017] rmdir("./14/file1") = 0 [pid 5012] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5206] chdir("./16") = 0 [pid 5206] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5206] setpgid(0, 0) = 0 [pid 5206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5206] write(3, "1000", 4) = 4 [pid 5206] close(3) = 0 [pid 5206] symlink("/dev/binderfs", "./binderfs" [pid 5017] getdents64(3, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 74.996195][ T5200] Remounting filesystem read-only [ 75.007636][ T5202] Remounting filesystem read-only [ 75.008226][ T5199] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 75.021907][ T5200] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] newfstatat(AT_FDCWD, "./13/file1", [pid 5206] <... symlink resumed>) = 0 [pid 5206] memfd_create("syzkaller", 0) = 3 [pid 5206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5017] close(3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... close resumed>) = 0 [pid 5012] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] rmdir("./14" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... rmdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] mkdir("./15", 0777 [pid 5012] <... openat resumed>) = 4 [pid 5017] <... mkdir resumed>) = 0 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, [pid 5017] <... openat resumed>) = 3 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5012] close(4 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] <... close resumed>) = 0 [pid 5017] close(3 [pid 5012] rmdir("./13/file1" [pid 5017] <... close resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... rmdir resumed>) = 0 [pid 5012] getdents64(3, [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5207 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [ 75.045275][ T5202] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 75.046099][ T5199] NILFS (loop1): repaired inode bitmap for reserved inodes [ 75.059766][ T5200] NILFS (loop2): repaired inode bitmap for reserved inodes [ 75.085931][ T5202] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5012] close(3) = 0 ./strace-static-x86_64: Process 5207 attached [pid 5012] rmdir("./13") = 0 [pid 5207] set_robust_list(0x555556b87660, 24) = 0 [pid 5012] mkdir("./14", 0777) = 0 [pid 5207] chdir("./15") = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 75.108065][ T5200] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 75.131495][ T5202] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5207] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5207] setpgid(0, 0 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5207] <... setpgid resumed>) = 0 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] close(3) = 0 [pid 5207] <... openat resumed>) = 3 [pid 5202] <... openat resumed>) = -1 EIO (Input/output error) [pid 5200] <... openat resumed>) = -1 EIO (Input/output error) [pid 5199] <... openat resumed>) = -1 EIO (Input/output error) [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5207] write(3, "1000", 4 [pid 5200] exit_group(0 [pid 5199] exit_group(0 [pid 5207] <... write resumed>) = 4 [pid 5199] <... exit_group resumed>) = ? [pid 5207] close(3 [pid 5200] <... exit_group resumed>) = ? [pid 5207] <... close resumed>) = 0 [pid 5199] +++ exited with 0 +++ [pid 5207] symlink("/dev/binderfs", "./binderfs" [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5199, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5200] +++ exited with 0 +++ [pid 5013] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5208 [pid 5013] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5207] <... symlink resumed>) = 0 [pid 5207] memfd_create("syzkaller", 0 [pid 5013] <... openat resumed>) = 3 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5200, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, [pid 5014] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5207] <... memfd_create resumed>) = 3 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 75.138338][ T5199] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5013] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5014] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] newfstatat(AT_FDCWD, "./14/binderfs", [pid 5207] <... mmap resumed>) = 0x7f770c286000 [pid 5014] <... openat resumed>) = 3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./14/binderfs") = 0 [pid 5013] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] newfstatat(3, "", [pid 5202] exit_group(0) = ? [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5208 attached [pid 5014] newfstatat(AT_FDCWD, "./15/binderfs", [pid 5208] set_robust_list(0x555556b87660, 24 [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5208] <... set_robust_list resumed>) = 0 [pid 5014] unlink("./15/binderfs" [pid 5208] chdir("./14" [pid 5014] <... unlink resumed>) = 0 [pid 5208] <... chdir resumed>) = 0 [pid 5206] <... write resumed>) = 2097152 [pid 5202] +++ exited with 0 +++ [pid 5208] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5202, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5208] setpgid(0, 0 [pid 5015] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] <... setpgid resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5015] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] <... openat resumed>) = 3 [pid 5015] <... openat resumed>) = 3 [pid 5208] write(3, "1000", 4 [pid 5015] newfstatat(3, "", [pid 5208] <... write resumed>) = 4 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5208] close(3 [pid 5015] getdents64(3, [pid 5208] <... close resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5208] symlink("/dev/binderfs", "./binderfs" [pid 5015] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] <... symlink resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5208] memfd_create("syzkaller", 0 [pid 5015] newfstatat(AT_FDCWD, "./15/binderfs", [pid 5208] <... memfd_create resumed>) = 3 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] unlink("./15/binderfs" [pid 5208] <... mmap resumed>) = 0x7f770c286000 [pid 5015] <... unlink resumed>) = 0 [ 75.193456][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 75.213727][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 75.215934][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 75.228493][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 75.237086][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [pid 5015] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5206] munmap(0x7f770c286000, 2097152) = 0 [pid 5206] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5206] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5206] close(3) = 0 [pid 5206] mkdir("./file1", 0777) = 0 [ 75.237433][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 75.243970][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 75.250965][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 75.261425][ T5206] loop4: detected capacity change from 0 to 4096 [ 75.283971][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [pid 5206] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5207] <... write resumed>) = 2097152 [pid 5208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5207] munmap(0x7f770c286000, 2097152) = 0 [pid 5207] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 75.291409][ T5206] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 75.292721][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 75.306546][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 75.308791][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 75.322577][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 75.330022][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [pid 5207] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5207] close(3) = 0 [pid 5207] mkdir("./file1", 0777) = 0 [pid 5207] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5208] <... write resumed>) = 2097152 [ 75.339224][ T5207] loop5: detected capacity change from 0 to 4096 [ 75.341973][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 75.353418][ T5206] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 75.365205][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 75.369050][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 75.374259][ T5207] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5208] munmap(0x7f770c286000, 2097152) = 0 [pid 5208] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5208] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5208] close(3) = 0 [pid 5208] mkdir("./file1", 0777) = 0 [ 75.382500][ T5208] loop0: detected capacity change from 0 to 4096 [ 75.389838][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 75.428936][ T5209] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5208] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5206] <... mount resumed>) = 0 [pid 5206] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5206] chdir("./file1") = 0 [pid 5206] ioctl(4, LOOP_CLR_FD) = 0 [pid 5206] close(4) = 0 [pid 5014] <... umount2 resumed>) = 0 [ 75.447333][ T5208] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 75.447763][ T5207] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 75.476855][ T5206] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5206] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5207] <... mount resumed>) = 0 [pid 5014] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... umount2 resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] newfstatat(AT_FDCWD, "./15/file1", [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5207] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] newfstatat(AT_FDCWD, "./14/file1", [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5207] <... openat resumed>) = 3 [pid 5207] chdir("./file1") = 0 [pid 5207] ioctl(4, LOOP_CLR_FD [pid 5015] <... openat resumed>) = 4 [pid 5207] <... ioctl resumed>) = 0 [pid 5207] close(4 [pid 5015] newfstatat(4, "", [pid 5014] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5207] <... close resumed>) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5207] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] getdents64(4, [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./15/file1") = 0 [ 75.495184][ T5210] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.508959][ T5208] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 75.530338][ T5206] Remounting filesystem read-only [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] close(3) = 0 [pid 5015] rmdir("./15" [pid 5014] <... openat resumed>) = 4 [pid 5013] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... rmdir resumed>) = 0 [pid 5015] mkdir("./16", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5212 [ 75.530327][ T5207] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 75.536481][ T5207] Remounting filesystem read-only [ 75.557192][ T5206] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 75.567115][ T5206] NILFS (loop4): repaired inode bitmap for reserved inodes [ 75.574863][ T5206] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 75.588807][ T5207] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [pid 5014] newfstatat(4, "", [pid 5013] <... openat resumed>) = 4 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] newfstatat(4, "", [pid 5014] getdents64(4, ./strace-static-x86_64: Process 5212 attached [pid 5206] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5212] set_robust_list(0x555556b87660, 24 [pid 5206] exit_group(0 [pid 5212] <... set_robust_list resumed>) = 0 [pid 5014] getdents64(4, [pid 5013] getdents64(4, [pid 5212] chdir("./16" [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5208] <... mount resumed>) = 0 [pid 5014] close(4 [pid 5013] getdents64(4, [pid 5206] <... exit_group resumed>) = ? [pid 5014] <... close resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5212] <... chdir resumed>) = 0 [pid 5208] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5206] +++ exited with 0 +++ [pid 5014] rmdir("./15/file1" [pid 5013] close(4 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5206, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=10 /* 0.10 s */} --- [pid 5014] <... rmdir resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5212] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5208] <... openat resumed>) = 3 [pid 5013] rmdir("./14/file1" [pid 5212] <... prctl resumed>) = 0 [pid 5208] chdir("./file1" [pid 5014] getdents64(3, [pid 5013] <... rmdir resumed>) = 0 [pid 5212] setpgid(0, 0 [pid 5208] <... chdir resumed>) = 0 [pid 5016] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] getdents64(3, [pid 5212] <... setpgid resumed>) = 0 [pid 5208] ioctl(4, LOOP_CLR_FD [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] close(3 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5208] <... ioctl resumed>) = 0 [pid 5016] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... close resumed>) = 0 [pid 5013] close(3 [pid 5212] <... openat resumed>) = 3 [pid 5208] close(4 [pid 5016] <... openat resumed>) = 3 [pid 5014] rmdir("./15" [pid 5013] <... close resumed>) = 0 [pid 5212] write(3, "1000", 4 [pid 5208] <... close resumed>) = 0 [pid 5016] newfstatat(3, "", [pid 5014] <... rmdir resumed>) = 0 [pid 5013] rmdir("./14" [pid 5212] <... write resumed>) = 4 [pid 5208] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] mkdir("./16", 0777 [pid 5212] close(3 [pid 5207] <... openat resumed>) = -1 EIO (Input/output error) [pid 5016] getdents64(3, [pid 5014] <... mkdir resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5212] <... close resumed>) = 0 [pid 5207] exit_group(0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5212] symlink("/dev/binderfs", "./binderfs" [pid 5207] <... exit_group resumed>) = ? [ 75.598645][ T5211] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.600418][ T5207] NILFS (loop5): repaired inode bitmap for reserved inodes [ 75.621429][ T5207] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5014] <... openat resumed>) = 3 [pid 5212] <... symlink resumed>) = 0 [pid 5207] +++ exited with 0 +++ [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5212] memfd_create("syzkaller", 0 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5212] <... memfd_create resumed>) = 3 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5207, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] restart_syscall(<... resuming interrupted clone ...> [pid 5014] close(3 [pid 5212] <... mmap resumed>) = 0x7f770c286000 [pid 5017] <... restart_syscall resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] mkdir("./15", 0777 [pid 5016] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... close resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... mkdir resumed>) = 0 [pid 5017] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] newfstatat(AT_FDCWD, "./16/binderfs", [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5017] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] unlink("./16/binderfs" [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5213 [pid 5013] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5213 attached [pid 5212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... openat resumed>) = 3 [pid 5016] <... unlink resumed>) = 0 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5213] set_robust_list(0x555556b87660, 24 [pid 5017] newfstatat(3, "", [pid 5016] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] close(3 [pid 5017] getdents64(3, [pid 5013] <... close resumed>) = 0 [pid 5213] <... set_robust_list resumed>) = 0 [pid 5213] chdir("./16" [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5213] <... chdir resumed>) = 0 [pid 5017] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5214 attached [pid 5214] set_robust_list(0x555556b87660, 24) = 0 [pid 5214] chdir("./15") = 0 [pid 5214] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5214] setpgid(0, 0) = 0 [pid 5214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5214] write(3, "1000", 4) = 4 [pid 5214] close(3) = 0 [pid 5214] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5213] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5017] newfstatat(AT_FDCWD, "./15/binderfs", [pid 5214] memfd_create("syzkaller", 0 [pid 5213] <... prctl resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5213] setpgid(0, 0 [pid 5017] unlink("./15/binderfs" [pid 5213] <... setpgid resumed>) = 0 [pid 5214] <... memfd_create resumed>) = 3 [pid 5214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5214 [pid 5017] <... unlink resumed>) = 0 [pid 5213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5017] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5213] <... openat resumed>) = 3 [pid 5213] write(3, "1000", 4) = 4 [pid 5213] close(3) = 0 [pid 5213] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5213] memfd_create("syzkaller", 0) = 3 [pid 5213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 75.638503][ T5208] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 75.665650][ T5208] Remounting filesystem read-only [ 75.679925][ T5208] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 75.692016][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [pid 5212] <... write resumed>) = 2097152 [pid 5213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 75.721505][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 75.733881][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 75.737800][ T5208] NILFS (loop0): repaired inode bitmap for reserved inodes [ 75.750265][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 75.754633][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [pid 5214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5212] munmap(0x7f770c286000, 2097152 [pid 5213] <... write resumed>) = 2097152 [pid 5212] <... munmap resumed>) = 0 [pid 5212] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5213] munmap(0x7f770c286000, 2097152 [pid 5212] <... openat resumed>) = 4 [pid 5213] <... munmap resumed>) = 0 [ 75.765290][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 75.771872][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 75.780507][ T5208] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 75.789605][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 75.804379][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 75.806219][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [pid 5212] ioctl(4, LOOP_SET_FD, 3 [pid 5213] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5212] <... ioctl resumed>) = 0 [pid 5214] <... write resumed>) = 2097152 [pid 5214] munmap(0x7f770c286000, 2097152 [pid 5208] <... openat resumed>) = -1 EIO (Input/output error) [pid 5208] exit_group(0) = ? [pid 5213] ioctl(4, LOOP_SET_FD, 3 [pid 5212] close(3 [pid 5214] <... munmap resumed>) = 0 [pid 5208] +++ exited with 0 +++ [pid 5214] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5214] ioctl(4, LOOP_SET_FD, 3 [pid 5212] <... close resumed>) = 0 [pid 5212] mkdir("./file1", 0777 [pid 5213] <... ioctl resumed>) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5208, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=11 /* 0.11 s */} --- [pid 5213] close(3 [pid 5212] <... mkdir resumed>) = 0 [pid 5212] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5213] <... close resumed>) = 0 [pid 5213] mkdir("./file1", 0777 [pid 5012] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5214] <... ioctl resumed>) = 0 [pid 5213] <... mkdir resumed>) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 75.819071][ T5212] loop3: detected capacity change from 0 to 4096 [ 75.820816][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 75.826386][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 75.841495][ T5213] loop2: detected capacity change from 0 to 4096 [ 75.843917][ T5214] loop1: detected capacity change from 0 to 4096 [ 75.858417][ T5212] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5214] close(3 [pid 5213] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5214] <... close resumed>) = 0 [pid 5214] mkdir("./file1", 0777 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... umount2 resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5214] <... mkdir resumed>) = 0 [pid 5017] newfstatat(AT_FDCWD, "./15/file1", [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] getdents64(3, [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5214] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... openat resumed>) = 4 [pid 5012] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] newfstatat(4, "", [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 75.872863][ T5212] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 75.887213][ T5213] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 75.910497][ T5215] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5012] newfstatat(AT_FDCWD, "./14/binderfs", [pid 5017] getdents64(4, [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5212] <... mount resumed>) = 0 [pid 5212] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5212] chdir("./file1") = 0 [pid 5212] ioctl(4, LOOP_CLR_FD) = 0 [pid 5212] close(4) = 0 [pid 5212] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] newfstatat(AT_FDCWD, "./16/file1", [pid 5012] unlink("./14/binderfs" [pid 5017] getdents64(4, [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... unlink resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] close(4 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... close resumed>) = 0 [pid 5016] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] rmdir("./15/file1" [pid 5016] <... openat resumed>) = 4 [pid 5017] <... rmdir resumed>) = 0 [pid 5016] newfstatat(4, "", [pid 5017] getdents64(3, [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] getdents64(4, [pid 5017] close(3 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] <... close resumed>) = 0 [pid 5016] getdents64(4, [pid 5017] rmdir("./15" [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] <... rmdir resumed>) = 0 [ 75.922429][ T5214] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 75.925358][ T5212] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 75.948024][ T5213] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 75.958892][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [pid 5016] close(4 [pid 5017] mkdir("./16", 0777 [pid 5016] <... close resumed>) = 0 [pid 5213] <... mount resumed>) = 0 [pid 5017] <... mkdir resumed>) = 0 [pid 5016] rmdir("./16/file1" [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5016] <... rmdir resumed>) = 0 [pid 5017] <... openat resumed>) = 3 [pid 5016] getdents64(3, [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] close(3 [pid 5017] close(3 [pid 5016] <... close resumed>) = 0 [pid 5017] <... close resumed>) = 0 [pid 5016] rmdir("./16" [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] <... rmdir resumed>) = 0 [pid 5213] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] mkdir("./17", 0777 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5217 [pid 5016] <... mkdir resumed>) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5213] <... openat resumed>) = 3 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5218 ./strace-static-x86_64: Process 5218 attached [pid 5213] chdir("./file1") = 0 [pid 5218] set_robust_list(0x555556b87660, 24 [pid 5213] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 5217 attached ) = 0 [pid 5217] set_robust_list(0x555556b87660, 24 [pid 5213] close(4 [pid 5217] <... set_robust_list resumed>) = 0 [pid 5217] chdir("./16") = 0 [pid 5217] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5217] setpgid(0, 0) = 0 [pid 5217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5213] <... close resumed>) = 0 [pid 5217] write(3, "1000", 4 [pid 5213] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5217] <... write resumed>) = 4 [pid 5217] close(3) = 0 [ 75.966111][ T5214] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 75.967352][ T5216] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.988355][ T5212] Remounting filesystem read-only [ 75.996339][ T5212] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 75.998540][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 76.005013][ T5212] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5217] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5217] memfd_create("syzkaller", 0) = 3 [pid 5217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5218] <... set_robust_list resumed>) = 0 [pid 5218] chdir("./17") = 0 [pid 5218] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5218] setpgid(0, 0) = 0 [ 76.028059][ T5213] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 76.055806][ T5213] Remounting filesystem read-only [ 76.058732][ T5219] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5218] write(3, "1000", 4 [pid 5214] <... mount resumed>) = 0 [pid 5214] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5214] chdir("./file1") = 0 [pid 5214] ioctl(4, LOOP_CLR_FD) = 0 [pid 5214] close(4 [pid 5218] <... write resumed>) = 4 [pid 5214] <... close resumed>) = 0 [pid 5214] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5218] close(3) = 0 [pid 5218] symlink("/dev/binderfs", "./binderfs" [ 76.062426][ T5213] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 76.080537][ T5212] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 76.082638][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 76.103143][ T5213] NILFS (loop2): repaired inode bitmap for reserved inodes [ 76.111808][ T5214] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5217] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5218] <... symlink resumed>) = 0 [pid 5212] <... openat resumed>) = -1 EIO (Input/output error) [pid 5218] memfd_create("syzkaller", 0 [pid 5212] exit_group(0 [pid 5218] <... memfd_create resumed>) = 3 [pid 5212] <... exit_group resumed>) = ? [pid 5218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5212] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5212, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5015] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./16/binderfs") = 0 [ 76.128191][ T5213] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 76.148888][ T5214] Remounting filesystem read-only [ 76.161148][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 76.166166][ T5214] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5015] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5217] <... write resumed>) = 2097152 [pid 5213] <... openat resumed>) = -1 EIO (Input/output error) [pid 5213] exit_group(0 [pid 5217] munmap(0x7f770c286000, 2097152 [pid 5213] <... exit_group resumed>) = ? [pid 5213] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5213, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [ 76.175833][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 76.194315][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 76.198118][ T5214] NILFS (loop1): repaired inode bitmap for reserved inodes [ 76.213971][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5218] <... write resumed>) = 2097152 [pid 5014] <... restart_syscall resumed>) = 0 [pid 5014] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./16/binderfs") = 0 [pid 5014] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5217] <... munmap resumed>) = 0 [pid 5217] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5217] ioctl(4, LOOP_SET_FD, 3 [pid 5218] munmap(0x7f770c286000, 2097152 [pid 5214] <... openat resumed>) = -1 EIO (Input/output error) [ 76.225786][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 76.230735][ T5214] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 76.240146][ T5217] loop5: detected capacity change from 0 to 4096 [ 76.248774][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 76.254432][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 76.268713][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5218] <... munmap resumed>) = 0 [pid 5217] <... ioctl resumed>) = 0 [pid 5214] exit_group(0 [pid 5012] <... umount2 resumed>) = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5217] close(3 [pid 5214] <... exit_group resumed>) = ? [pid 5012] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5214] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5214, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5217] <... close resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5217] mkdir("./file1", 0777 [pid 5218] <... openat resumed>) = 4 [pid 5217] <... mkdir resumed>) = 0 [pid 5012] newfstatat(AT_FDCWD, "./14/file1", [pid 5218] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... openat resumed>) = 4 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(4, "", [pid 5013] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... openat resumed>) = 3 [pid 5012] getdents64(4, [pid 5013] newfstatat(3, "", [pid 5217] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, [pid 5012] getdents64(4, [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [ 76.275413][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 76.278483][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 76.294308][ T5218] loop4: detected capacity change from 0 to 4096 [ 76.304841][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 76.306208][ T5217] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 76.315068][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5013] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5218] <... ioctl resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] rmdir("./14/file1" [pid 5218] close(3 [pid 5013] newfstatat(AT_FDCWD, "./15/binderfs", [pid 5012] <... rmdir resumed>) = 0 [pid 5218] <... close resumed>) = 0 [pid 5218] mkdir("./file1", 0777 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5218] <... mkdir resumed>) = 0 [pid 5013] unlink("./15/binderfs" [pid 5012] close(3 [pid 5013] <... unlink resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5013] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5218] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] rmdir("./14") = 0 [pid 5012] mkdir("./15", 0777) = 0 [ 76.329954][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 76.339108][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 76.341518][ T5217] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 76.355901][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5220 [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./16/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [ 76.371920][ T5218] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 76.384670][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 76.400021][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [pid 5014] rmdir("./16") = 0 [pid 5014] mkdir("./17", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5220 attached [pid 5220] set_robust_list(0x555556b87660, 24 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5221 [pid 5220] <... set_robust_list resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", [pid 5220] chdir("./15" [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5221 attached [pid 5220] <... chdir resumed>) = 0 [pid 5221] set_robust_list(0x555556b87660, 24 [pid 5015] getdents64(4, [pid 5221] <... set_robust_list resumed>) = 0 [pid 5221] chdir("./17" [pid 5220] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5221] <... chdir resumed>) = 0 [pid 5220] <... prctl resumed>) = 0 [pid 5015] getdents64(4, [pid 5221] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5220] setpgid(0, 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5221] <... prctl resumed>) = 0 [pid 5220] <... setpgid resumed>) = 0 [pid 5015] close(4 [pid 5221] setpgid(0, 0 [pid 5015] <... close resumed>) = 0 [pid 5220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5221] <... setpgid resumed>) = 0 [pid 5015] rmdir("./16/file1" [pid 5221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5220] <... openat resumed>) = 3 [pid 5015] <... rmdir resumed>) = 0 [pid 5221] <... openat resumed>) = 3 [pid 5220] write(3, "1000", 4 [pid 5015] getdents64(3, [pid 5221] write(3, "1000", 4 [pid 5220] <... write resumed>) = 4 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5221] <... write resumed>) = 4 [pid 5220] close(3 [pid 5015] close(3 [pid 5221] close(3 [pid 5220] <... close resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5221] <... close resumed>) = 0 [pid 5220] symlink("/dev/binderfs", "./binderfs" [pid 5015] rmdir("./16" [pid 5221] symlink("/dev/binderfs", "./binderfs" [pid 5220] <... symlink resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5221] <... symlink resumed>) = 0 [ 76.433092][ T5218] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 76.448826][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5015] mkdir("./17", 0777 [pid 5221] memfd_create("syzkaller", 0 [pid 5220] memfd_create("syzkaller", 0 [pid 5015] <... mkdir resumed>) = 0 [pid 5221] <... memfd_create resumed>) = 3 [pid 5220] <... memfd_create resumed>) = 3 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5218] <... mount resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5221] <... mmap resumed>) = 0x7f770c286000 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5220] <... mmap resumed>) = 0x7f770c286000 [pid 5218] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] close(3 [pid 5218] <... openat resumed>) = 3 [pid 5015] <... close resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5224 ./strace-static-x86_64: Process 5224 attached [pid 5224] set_robust_list(0x555556b87660, 24) = 0 [pid 5218] chdir("./file1") = 0 [pid 5218] ioctl(4, LOOP_CLR_FD) = 0 [pid 5217] <... mount resumed>) = 0 [pid 5217] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5217] chdir("./file1") = 0 [pid 5224] chdir("./17" [pid 5217] ioctl(4, LOOP_CLR_FD [pid 5224] <... chdir resumed>) = 0 [pid 5217] <... ioctl resumed>) = 0 [pid 5224] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5217] close(4 [pid 5224] <... prctl resumed>) = 0 [pid 5218] close(4 [pid 5217] <... close resumed>) = 0 [pid 5224] setpgid(0, 0 [pid 5218] <... close resumed>) = 0 [ 76.476612][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 76.481103][ T5223] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.506231][ T5222] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5217] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5224] <... setpgid resumed>) = 0 [pid 5220] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5218] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5224] write(3, "1000", 4) = 4 [pid 5224] close(3) = 0 [pid 5224] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5224] memfd_create("syzkaller", 0) = 3 [pid 5224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 76.524559][ T5217] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 76.530904][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 76.556388][ T5218] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5220] <... write resumed>) = 2097152 [pid 5220] munmap(0x7f770c286000, 2097152 [pid 5224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5220] <... munmap resumed>) = 0 [pid 5220] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 76.577803][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 76.591074][ T5218] Remounting filesystem read-only [ 76.597571][ T5217] Remounting filesystem read-only [ 76.606786][ T5217] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 76.615050][ T5217] NILFS (loop5): repaired inode bitmap for reserved inodes [pid 5220] ioctl(4, LOOP_SET_FD, 3) = 0 [ 76.626103][ T5220] loop0: detected capacity change from 0 to 4096 [ 76.635330][ T5218] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 76.647374][ T918] cfg80211: failed to load regulatory.db [pid 5013] <... umount2 resumed>) = 0 [pid 5220] close(3) = 0 [pid 5220] mkdir("./file1", 0777) = 0 [pid 5220] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5224] <... write resumed>) = 2097152 [pid 5013] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5224] munmap(0x7f770c286000, 2097152 [pid 5013] getdents64(4, [pid 5221] <... write resumed>) = 2097152 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5221] munmap(0x7f770c286000, 2097152 [pid 5013] getdents64(4, [pid 5224] <... munmap resumed>) = 0 [pid 5221] <... munmap resumed>) = 0 [pid 5221] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5224] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5013] close(4 [pid 5224] <... openat resumed>) = 4 [pid 5013] <... close resumed>) = 0 [pid 5224] ioctl(4, LOOP_SET_FD, 3 [pid 5221] <... openat resumed>) = 4 [ 76.666201][ T5217] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 76.696054][ T5220] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 76.705079][ T5218] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5013] rmdir("./15/file1" [pid 5221] ioctl(4, LOOP_SET_FD, 3 [pid 5013] <... rmdir resumed>) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./15") = 0 [pid 5013] mkdir("./16", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3 [pid 5221] <... ioctl resumed>) = 0 [pid 5217] <... openat resumed>) = -1 EIO (Input/output error) [pid 5013] <... close resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5221] close(3 [pid 5217] exit_group(0 [pid 5221] <... close resumed>) = 0 [pid 5217] <... exit_group resumed>) = ? [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5226 ./strace-static-x86_64: Process 5226 attached [pid 5221] mkdir("./file1", 0777 [pid 5226] set_robust_list(0x555556b87660, 24) = 0 [pid 5217] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5217, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5017] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5221] <... mkdir resumed>) = 0 [pid 5226] chdir("./16" [pid 5017] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5226] <... chdir resumed>) = 0 [pid 5221] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5226] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5224] <... ioctl resumed>) = 0 [pid 5017] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5226] <... prctl resumed>) = 0 [pid 5224] close(3 [pid 5017] <... openat resumed>) = 3 [ 76.733968][ T5224] loop3: detected capacity change from 0 to 4096 [ 76.744019][ T5221] loop2: detected capacity change from 0 to 4096 [ 76.757695][ T5220] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 76.758323][ T5218] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5226] setpgid(0, 0 [pid 5224] <... close resumed>) = 0 [pid 5017] newfstatat(3, "", [pid 5226] <... setpgid resumed>) = 0 [pid 5224] mkdir("./file1", 0777 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5224] <... mkdir resumed>) = 0 [pid 5017] getdents64(3, [pid 5226] <... openat resumed>) = 3 [pid 5224] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5226] write(3, "1000", 4 [pid 5017] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5226] <... write resumed>) = 4 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5226] close(3 [pid 5017] newfstatat(AT_FDCWD, "./16/binderfs", [pid 5226] <... close resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5226] symlink("/dev/binderfs", "./binderfs" [pid 5017] unlink("./16/binderfs" [pid 5226] <... symlink resumed>) = 0 [pid 5017] <... unlink resumed>) = 0 [pid 5226] memfd_create("syzkaller", 0 [pid 5017] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5226] <... memfd_create resumed>) = 3 [pid 5226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5220] <... mount resumed>) = 0 [ 76.798045][ T5221] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 76.808457][ T5224] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 76.816676][ T5227] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.828901][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 76.830186][ T5221] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5220] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5220] chdir("./file1") = 0 [pid 5220] ioctl(4, LOOP_CLR_FD) = 0 [pid 5220] close(4) = 0 [pid 5220] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5226] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5218] <... openat resumed>) = -1 EIO (Input/output error) [pid 5218] exit_group(0) = ? [ 76.841544][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 76.855013][ T5224] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 76.878103][ T5220] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5218] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5218, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=9 /* 0.09 s */} --- [pid 5016] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./17/binderfs") = 0 [ 76.895879][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [pid 5016] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5221] <... mount resumed>) = 0 [pid 5226] <... write resumed>) = 2097152 [pid 5226] munmap(0x7f770c286000, 2097152) = 0 [pid 5226] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5221] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5226] <... openat resumed>) = 4 [ 76.919376][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 76.932973][ T5228] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.945192][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 76.953938][ T5226] loop1: detected capacity change from 0 to 4096 [ 76.954949][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5226] ioctl(4, LOOP_SET_FD, 3 [pid 5221] <... openat resumed>) = 3 [pid 5221] chdir("./file1" [pid 5226] <... ioctl resumed>) = 0 [pid 5226] close(3) = 0 [pid 5226] mkdir("./file1", 0777) = 0 [pid 5226] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5221] <... chdir resumed>) = 0 [ 76.961542][ T5220] Remounting filesystem read-only [ 76.967898][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 76.980000][ T5229] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.980278][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 76.999860][ T5220] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 77.005639][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5221] ioctl(4, LOOP_CLR_FD [pid 5224] <... mount resumed>) = 0 [pid 5221] <... ioctl resumed>) = 0 [pid 5221] close(4 [pid 5224] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5221] <... close resumed>) = 0 [pid 5224] <... openat resumed>) = 3 [pid 5221] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5224] chdir("./file1") = 0 [pid 5224] ioctl(4, LOOP_CLR_FD) = 0 [pid 5224] close(4) = 0 [ 77.015469][ T5226] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 77.038901][ T5221] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 77.041767][ T5220] NILFS (loop0): repaired inode bitmap for reserved inodes [pid 5224] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... umount2 resumed>) = 0 [ 77.062053][ T5224] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 77.083927][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 77.095089][ T5226] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 77.105800][ T5221] Remounting filesystem read-only [ 77.108342][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [pid 5017] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5220] <... openat resumed>) = -1 EIO (Input/output error) [ 77.116206][ T5221] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 77.121838][ T5220] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 77.141219][ T5224] Remounting filesystem read-only [ 77.147494][ T5221] NILFS (loop2): repaired inode bitmap for reserved inodes [ 77.149460][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5220] exit_group(0) = ? [pid 5220] +++ exited with 0 +++ [pid 5017] <... openat resumed>) = 4 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5220, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5017] newfstatat(4, "", [pid 5226] <... mount resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, [pid 5226] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, [pid 5012] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] close(4 [pid 5012] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] <... close resumed>) = 0 [pid 5226] <... openat resumed>) = 3 [pid 5017] rmdir("./16/file1" [pid 5012] <... openat resumed>) = 3 [pid 5226] chdir("./file1") = 0 [pid 5221] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] <... rmdir resumed>) = 0 [pid 5012] newfstatat(3, "", [pid 5017] getdents64(3, [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] getdents64(3, [pid 5017] close(3 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] <... close resumed>) = 0 [pid 5226] ioctl(4, LOOP_CLR_FD [pid 5221] exit_group(0 [pid 5017] rmdir("./16" [pid 5012] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5226] <... ioctl resumed>) = 0 [pid 5226] close(4 [pid 5017] <... rmdir resumed>) = 0 [pid 5226] <... close resumed>) = 0 [pid 5017] mkdir("./17", 0777 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 77.163200][ T5221] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 77.182321][ T5230] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 77.193653][ T5224] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5226] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... mkdir resumed>) = 0 [pid 5012] newfstatat(AT_FDCWD, "./15/binderfs", [pid 5221] <... exit_group resumed>) = ? [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... openat resumed>) = 3 [pid 5012] unlink("./15/binderfs" [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5012] <... unlink resumed>) = 0 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5231 ./strace-static-x86_64: Process 5231 attached [pid 5221] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5221, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5231] set_robust_list(0x555556b87660, 24) = 0 [pid 5014] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5231] chdir("./17" [pid 5016] <... umount2 resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5231] <... chdir resumed>) = 0 [pid 5016] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5231] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... openat resumed>) = 3 [pid 5231] <... prctl resumed>) = 0 [pid 5016] newfstatat(AT_FDCWD, "./17/file1", [pid 5014] newfstatat(3, "", [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] getdents64(3, [pid 5231] setpgid(0, 0) = 0 [pid 5016] <... openat resumed>) = 4 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] newfstatat(4, "", [pid 5014] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] getdents64(4, [pid 5014] newfstatat(AT_FDCWD, "./17/binderfs", [ 77.217496][ T5226] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 77.243290][ T5224] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5231] <... openat resumed>) = 3 [pid 5014] unlink("./17/binderfs" [pid 5231] write(3, "1000", 4 [pid 5016] getdents64(4, [pid 5231] <... write resumed>) = 4 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] <... unlink resumed>) = 0 [pid 5016] close(4 [pid 5014] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5231] close(3 [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./17/file1" [pid 5231] <... close resumed>) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./17" [pid 5231] symlink("/dev/binderfs", "./binderfs" [pid 5016] <... rmdir resumed>) = 0 [pid 5016] mkdir("./18", 0777 [pid 5231] <... symlink resumed>) = 0 [pid 5016] <... mkdir resumed>) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5231] memfd_create("syzkaller", 0 [pid 5016] <... openat resumed>) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3 [pid 5231] <... memfd_create resumed>) = 3 [pid 5016] <... close resumed>) = 0 [pid 5231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5231] <... mmap resumed>) = 0x7f770c286000 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5232 ./strace-static-x86_64: Process 5232 attached [pid 5232] set_robust_list(0x555556b87660, 24) = 0 [pid 5232] chdir("./18") = 0 [pid 5232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5232] setpgid(0, 0) = 0 [pid 5232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5232] write(3, "1000", 4) = 4 [pid 5232] close(3) = 0 [pid 5232] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5232] memfd_create("syzkaller", 0) = 3 [pid 5232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 77.258546][ T5224] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 77.286726][ T5226] Remounting filesystem read-only [ 77.295090][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 77.304572][ T5226] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5224] <... openat resumed>) = -1 EIO (Input/output error) [pid 5224] exit_group(0) = ? [pid 5224] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5224, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./17/binderfs" [pid 5232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] <... unlink resumed>) = 0 [ 77.317964][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 77.325808][ T5226] NILFS (loop1): repaired inode bitmap for reserved inodes [ 77.335329][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 77.337659][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [pid 5015] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5231] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5232] <... write resumed>) = 2097152 [ 77.369327][ T5226] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 77.369929][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 77.394970][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 77.403043][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 77.414339][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [pid 5232] munmap(0x7f770c286000, 2097152 [pid 5226] <... openat resumed>) = -1 EIO (Input/output error) [pid 5226] exit_group(0 [pid 5232] <... munmap resumed>) = 0 [pid 5232] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5226] <... exit_group resumed>) = ? [pid 5232] ioctl(4, LOOP_SET_FD, 3 [pid 5226] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5226, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./16/binderfs") = 0 [pid 5013] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5231] <... write resumed>) = 2097152 [ 77.423466][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 77.439286][ T5232] loop4: detected capacity change from 0 to 4096 [ 77.452538][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 77.460319][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [pid 5231] munmap(0x7f770c286000, 2097152) = 0 [pid 5231] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5231] ioctl(4, LOOP_SET_FD, 3 [pid 5232] <... ioctl resumed>) = 0 [pid 5232] close(3) = 0 [pid 5232] mkdir("./file1", 0777) = 0 [ 77.460979][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 77.475342][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 77.483452][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 77.491543][ T5231] loop5: detected capacity change from 0 to 4096 [ 77.494301][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 77.505638][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 77.506798][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [pid 5232] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5231] <... ioctl resumed>) = 0 [pid 5231] close(3) = 0 [pid 5231] mkdir("./file1", 0777) = 0 [ 77.519892][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 77.527703][ T5232] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 77.537517][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 77.544830][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 77.556654][ T5231] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5231] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... umount2 resumed>) = 0 [pid 5014] <... openat resumed>) = 4 [pid 5014] newfstatat(4, "", [pid 5012] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] rmdir("./15/file1" [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] <... rmdir resumed>) = 0 [pid 5014] getdents64(4, [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./15" [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4 [pid 5012] <... rmdir resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5012] mkdir("./16", 0777 [pid 5014] rmdir("./17/file1" [pid 5012] <... mkdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5014] <... rmdir resumed>) = 0 [ 77.583685][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 77.601892][ T5232] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 77.605881][ T5231] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 77.615411][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [pid 5012] <... openat resumed>) = 3 [pid 5014] getdents64(3, [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] close(3 [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5233 [pid 5014] <... close resumed>) = 0 [pid 5014] rmdir("./17") = 0 [pid 5014] mkdir("./18", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 ./strace-static-x86_64: Process 5233 attached [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5233] set_robust_list(0x555556b87660, 24) = 0 [pid 5233] chdir("./16" [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5233] <... chdir resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5233] setpgid(0, 0) = 0 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5234 [pid 5233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5233] write(3, "1000", 4) = 4 [pid 5233] close(3) = 0 [pid 5233] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5233] memfd_create("syzkaller", 0) = 3 [pid 5233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5234 attached ) = 0x7f770c286000 [pid 5234] set_robust_list(0x555556b87660, 24) = 0 [pid 5234] chdir("./18") = 0 [ 77.635734][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 77.642727][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5234] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5232] <... mount resumed>) = 0 [pid 5234] setpgid(0, 0 [pid 5232] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5232] chdir("./file1") = 0 [pid 5232] ioctl(4, LOOP_CLR_FD) = 0 [pid 5232] close(4) = 0 [pid 5232] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5234] <... setpgid resumed>) = 0 [pid 5234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5234] write(3, "1000", 4) = 4 [pid 5234] close(3) = 0 [pid 5234] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5234] memfd_create("syzkaller", 0) = 3 [pid 5231] <... mount resumed>) = 0 [ 77.687919][ T5235] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 77.708700][ T5232] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5231] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5234] <... mmap resumed>) = 0x7f770c286000 [pid 5231] <... openat resumed>) = 3 [pid 5231] chdir("./file1") = 0 [pid 5231] ioctl(4, LOOP_CLR_FD [pid 5013] <... umount2 resumed>) = 0 [pid 5231] <... ioctl resumed>) = 0 [pid 5013] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5231] close(4 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5231] <... close resumed>) = 0 [ 77.732360][ T5236] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5013] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5231] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... openat resumed>) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./16/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./16") = 0 [pid 5013] mkdir("./17", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... umount2 resumed>) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5237 [pid 5015] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5233] <... write resumed>) = 2097152 [pid 5015] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 5237 attached [pid 5015] newfstatat(4, "", [pid 5237] set_robust_list(0x555556b87660, 24 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5237] <... set_robust_list resumed>) = 0 [pid 5015] getdents64(4, [pid 5237] chdir("./17" [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5237] <... chdir resumed>) = 0 [pid 5015] getdents64(4, [pid 5237] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5237] <... prctl resumed>) = 0 [pid 5015] close(4 [pid 5237] setpgid(0, 0 [pid 5015] <... close resumed>) = 0 [pid 5237] <... setpgid resumed>) = 0 [pid 5015] rmdir("./17/file1" [pid 5237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5015] <... rmdir resumed>) = 0 [pid 5237] <... openat resumed>) = 3 [pid 5015] getdents64(3, [ 77.759037][ T5231] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 77.775586][ T5232] Remounting filesystem read-only [pid 5237] write(3, "1000", 4 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5237] <... write resumed>) = 4 [pid 5015] close(3 [pid 5237] close(3 [pid 5015] <... close resumed>) = 0 [pid 5237] <... close resumed>) = 0 [pid 5015] rmdir("./17" [pid 5237] symlink("/dev/binderfs", "./binderfs" [pid 5015] <... rmdir resumed>) = 0 [pid 5237] <... symlink resumed>) = 0 [pid 5015] mkdir("./18", 0777 [pid 5237] memfd_create("syzkaller", 0 [pid 5015] <... mkdir resumed>) = 0 [pid 5237] <... memfd_create resumed>) = 3 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... openat resumed>) = 3 [pid 5237] <... mmap resumed>) = 0x7f770c286000 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5238 ./strace-static-x86_64: Process 5238 attached [pid 5238] set_robust_list(0x555556b87660, 24) = 0 [pid 5238] chdir("./18") = 0 [pid 5238] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5238] setpgid(0, 0) = 0 [pid 5238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 77.802984][ T5232] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [pid 5237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5238] write(3, "1000", 4 [pid 5233] munmap(0x7f770c286000, 2097152 [pid 5238] <... write resumed>) = 4 [pid 5238] close(3 [pid 5233] <... munmap resumed>) = 0 [pid 5238] <... close resumed>) = 0 [pid 5238] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5233] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5238] memfd_create("syzkaller", 0 [pid 5233] <... openat resumed>) = 4 [pid 5238] <... memfd_create resumed>) = 3 [pid 5233] ioctl(4, LOOP_SET_FD, 3 [pid 5238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 77.845607][ T5232] NILFS (loop4): repaired inode bitmap for reserved inodes [ 77.859577][ T5233] loop0: detected capacity change from 0 to 4096 [ 77.866229][ T5231] Remounting filesystem read-only [ 77.876533][ T5231] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [pid 5234] <... write resumed>) = 2097152 [pid 5234] munmap(0x7f770c286000, 2097152 [pid 5233] <... ioctl resumed>) = 0 [pid 5233] close(3) = 0 [pid 5233] mkdir("./file1", 0777) = 0 [ 77.876758][ T5232] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5233] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5234] <... munmap resumed>) = 0 [ 77.925796][ T5231] NILFS (loop5): repaired inode bitmap for reserved inodes [ 77.933791][ T5233] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 77.948352][ T5231] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 77.966039][ T5234] loop2: detected capacity change from 0 to 4096 [pid 5234] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5234] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5234] close(3) = 0 [pid 5234] mkdir("./file1", 0777) = 0 [pid 5234] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5237] <... write resumed>) = 2097152 [pid 5237] munmap(0x7f770c286000, 2097152) = 0 [pid 5237] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5237] ioctl(4, LOOP_SET_FD, 3 [pid 5232] <... openat resumed>) = -1 EIO (Input/output error) [pid 5232] exit_group(0) = ? [pid 5238] <... write resumed>) = 2097152 [pid 5238] munmap(0x7f770c286000, 2097152 [pid 5231] <... openat resumed>) = -1 EIO (Input/output error) [pid 5231] exit_group(0) = ? [pid 5232] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5232, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...> [pid 5238] <... munmap resumed>) = 0 [pid 5231] +++ exited with 0 +++ [pid 5016] <... restart_syscall resumed>) = 0 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5231, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5016] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5238] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5238] <... openat resumed>) = 4 [ 77.967357][ T5233] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 78.002260][ T5234] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 78.007160][ T5237] loop1: detected capacity change from 0 to 4096 [pid 5016] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5238] ioctl(4, LOOP_SET_FD, 3 [pid 5016] <... openat resumed>) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] getdents64(3, [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... openat resumed>) = 3 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(3, "", [pid 5016] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] getdents64(3, [pid 5016] unlink("./18/binderfs" [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] <... unlink resumed>) = 0 [pid 5017] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./17/binderfs" [pid 5237] <... ioctl resumed>) = 0 [pid 5237] close(3 [pid 5017] <... unlink resumed>) = 0 [pid 5237] <... close resumed>) = 0 [pid 5017] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5237] mkdir("./file1", 0777) = 0 [pid 5234] <... mount resumed>) = 0 [pid 5237] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5238] <... ioctl resumed>) = 0 [pid 5238] close(3) = 0 [ 78.039412][ T5234] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 78.041007][ T5238] loop3: detected capacity change from 0 to 4096 [ 78.066302][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 78.073104][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5238] mkdir("./file1", 0777) = 0 [pid 5238] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5234] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5234] chdir("./file1") = 0 [pid 5234] ioctl(4, LOOP_CLR_FD) = 0 [pid 5234] close(4) = 0 [ 78.086933][ T5239] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.092410][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 78.099199][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 78.106388][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 78.119539][ T5237] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 78.130309][ T5238] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 78.142330][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 78.150617][ T5234] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 78.166085][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 78.173560][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 78.181246][ T5238] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5234] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5233] <... mount resumed>) = 0 [pid 5233] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5233] chdir("./file1") = 0 [pid 5233] ioctl(4, LOOP_CLR_FD) = 0 [pid 5233] close(4) = 0 [ 78.182199][ T5240] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.191144][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 78.217665][ T5233] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 78.233577][ T5234] Remounting filesystem read-only [pid 5233] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... umount2 resumed>) = 0 [pid 5238] <... mount resumed>) = 0 [pid 5238] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5238] chdir("./file1") = 0 [pid 5238] ioctl(4, LOOP_CLR_FD) = 0 [pid 5238] close(4) = 0 [ 78.243814][ T5237] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 78.261019][ T5241] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.263505][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 78.275643][ T5234] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [pid 5238] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./18/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./18") = 0 [pid 5016] mkdir("./19", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5242 ./strace-static-x86_64: Process 5242 attached [ 78.283457][ T5238] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 78.314865][ T5233] Remounting filesystem read-only [ 78.320515][ T5234] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5242] set_robust_list(0x555556b87660, 24) = 0 [pid 5242] chdir("./19") = 0 [ 78.351888][ T5233] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 78.359990][ T5234] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 78.361044][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 78.376153][ T5238] Remounting filesystem read-only [ 78.383005][ T5233] NILFS (loop0): repaired inode bitmap for reserved inodes [pid 5242] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5237] <... mount resumed>) = 0 [pid 5242] <... prctl resumed>) = 0 [pid 5237] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5242] setpgid(0, 0) = 0 [pid 5242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5237] <... openat resumed>) = 3 [pid 5234] <... openat resumed>) = -1 EIO (Input/output error) [pid 5242] <... openat resumed>) = 3 [pid 5237] chdir("./file1" [pid 5242] write(3, "1000", 4) = 4 [pid 5237] <... chdir resumed>) = 0 [pid 5234] exit_group(0 [pid 5242] close(3 [pid 5234] <... exit_group resumed>) = ? [pid 5242] <... close resumed>) = 0 [pid 5237] ioctl(4, LOOP_CLR_FD [pid 5242] symlink("/dev/binderfs", "./binderfs" [pid 5237] <... ioctl resumed>) = 0 [pid 5242] <... symlink resumed>) = 0 [pid 5237] close(4 [pid 5242] memfd_create("syzkaller", 0 [pid 5237] <... close resumed>) = 0 [ 78.387511][ T5243] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.395114][ T5233] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 78.416058][ T5238] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 78.422439][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5237] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5242] <... memfd_create resumed>) = 3 [pid 5242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5233] <... openat resumed>) = -1 EIO (Input/output error) [pid 5233] exit_group(0) = ? [pid 5234] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5234, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./18/binderfs") = 0 [pid 5014] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5233] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5233, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5012] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [ 78.442518][ T5237] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5012] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./16/binderfs") = 0 [pid 5012] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./17/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./17") = 0 [pid 5017] mkdir("./18", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5244 ./strace-static-x86_64: Process 5244 attached [ 78.485946][ T5238] NILFS (loop3): repaired inode bitmap for reserved inodes [ 78.491805][ T5237] Remounting filesystem read-only [ 78.512343][ T5238] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 78.529172][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5244] set_robust_list(0x555556b87660, 24) = 0 [pid 5242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5244] chdir("./18") = 0 [pid 5244] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5244] setpgid(0, 0) = 0 [pid 5244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5244] write(3, "1000", 4) = 4 [pid 5244] close(3) = 0 [pid 5244] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5244] memfd_create("syzkaller", 0) = 3 [pid 5244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 78.536743][ T5237] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 78.543313][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 78.558486][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 78.567595][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 78.574721][ T5237] NILFS (loop1): repaired inode bitmap for reserved inodes [pid 5238] <... openat resumed>) = -1 EIO (Input/output error) [pid 5238] exit_group(0) = ? [ 78.583806][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 78.595983][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 78.603279][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 78.610541][ T5237] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 78.615554][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [pid 5238] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5238, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5015] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./18/binderfs" [pid 5242] <... write resumed>) = 2097152 [pid 5015] <... unlink resumed>) = 0 [pid 5244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5242] munmap(0x7f770c286000, 2097152) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 78.639268][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 78.660226][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 78.665678][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 78.674285][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 78.676325][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [pid 5242] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5242] close(3) = 0 [pid 5242] mkdir("./file1", 0777) = 0 [pid 5237] <... openat resumed>) = -1 EIO (Input/output error) [pid 5242] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5237] exit_group(0) = ? [pid 5244] <... write resumed>) = 2097152 [pid 5237] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5237, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5244] munmap(0x7f770c286000, 2097152 [pid 5013] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] <... munmap resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5244] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5244] ioctl(4, LOOP_SET_FD, 3 [pid 5013] <... openat resumed>) = 3 [ 78.690717][ T5242] loop4: detected capacity change from 0 to 4096 [ 78.690762][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 78.709607][ T5242] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 78.722527][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 78.733927][ T5244] loop5: detected capacity change from 0 to 4096 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./17/binderfs") = 0 [pid 5013] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5244] <... ioctl resumed>) = 0 [pid 5244] close(3) = 0 [pid 5244] mkdir("./file1", 0777 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./16/file1", [pid 5244] <... mkdir resumed>) = 0 [pid 5244] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 78.742200][ T5242] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 78.759508][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 78.771852][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 78.780319][ T5244] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5012] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./18/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./18") = 0 [pid 5014] mkdir("./19", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3 [pid 5012] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... openat resumed>) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./16/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5246 [pid 5012] close(3) = 0 [pid 5012] rmdir("./16") = 0 [pid 5012] mkdir("./17", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ./strace-static-x86_64: Process 5246 attached [pid 5246] set_robust_list(0x555556b87660, 24 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3 [pid 5246] <... set_robust_list resumed>) = 0 [ 78.782677][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 78.797776][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 78.797800][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 78.830616][ T5244] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5242] <... mount resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5246] chdir("./19") = 0 [pid 5246] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5246] setpgid(0, 0) = 0 [pid 5246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5246] write(3, "1000", 4) = 4 [pid 5246] close(3) = 0 [pid 5246] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5246] memfd_create("syzkaller", 0) = 3 [pid 5246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5242] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5242] <... openat resumed>) = 3 [pid 5242] chdir("./file1"./strace-static-x86_64: Process 5247 attached ) = 0 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5247 [pid 5242] ioctl(4, LOOP_CLR_FD [pid 5247] set_robust_list(0x555556b87660, 24 [pid 5242] <... ioctl resumed>) = 0 [pid 5247] <... set_robust_list resumed>) = 0 [pid 5242] close(4 [pid 5247] chdir("./17" [pid 5242] <... close resumed>) = 0 [pid 5247] <... chdir resumed>) = 0 [pid 5242] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5247] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5247] setpgid(0, 0) = 0 [pid 5247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 78.832363][ T5245] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.857678][ T5242] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 78.885147][ T5242] Remounting filesystem read-only [pid 5247] write(3, "1000", 4) = 4 [pid 5246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5247] close(3) = 0 [pid 5247] symlink("/dev/binderfs", "./binderfs" [pid 5015] <... umount2 resumed>) = 0 [pid 5247] <... symlink resumed>) = 0 [pid 5247] memfd_create("syzkaller", 0) = 3 [pid 5015] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./18/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./18" [pid 5247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5015] mkdir("./19", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5247] <... mmap resumed>) = 0x7f770c286000 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5249 [ 78.891739][ T5242] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 78.902180][ T5242] NILFS (loop4): repaired inode bitmap for reserved inodes [ 78.913006][ T5242] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5244] <... mount resumed>) = 0 [pid 5247] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5244] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5242] <... openat resumed>) = -1 EIO (Input/output error) ./strace-static-x86_64: Process 5249 attached [pid 5249] set_robust_list(0x555556b87660, 24) = 0 [pid 5249] chdir("./19") = 0 [pid 5249] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5249] setpgid(0, 0) = 0 [pid 5249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5249] write(3, "1000", 4) = 4 [pid 5249] close(3) = 0 [pid 5249] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5249] memfd_create("syzkaller", 0) = 3 [pid 5249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5244] <... openat resumed>) = 3 [pid 5242] exit_group(0 [pid 5244] chdir("./file1" [pid 5242] <... exit_group resumed>) = ? [pid 5244] <... chdir resumed>) = 0 [pid 5244] ioctl(4, LOOP_CLR_FD [pid 5242] +++ exited with 0 +++ [ 78.948606][ T5248] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.964789][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5247] <... write resumed>) = 2097152 [pid 5246] <... write resumed>) = 2097152 [pid 5244] <... ioctl resumed>) = 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5242, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5244] close(4 [pid 5247] munmap(0x7f770c286000, 2097152 [pid 5244] <... close resumed>) = 0 [pid 5246] munmap(0x7f770c286000, 2097152) = 0 [pid 5249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5247] <... munmap resumed>) = 0 [ 78.993369][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 79.007800][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 79.023461][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [pid 5244] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5247] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5246] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5016] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5246] <... openat resumed>) = 4 [pid 5246] ioctl(4, LOOP_SET_FD, 3 [pid 5247] <... openat resumed>) = 4 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5247] ioctl(4, LOOP_SET_FD, 3 [pid 5016] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", [pid 5246] <... ioctl resumed>) = 0 [pid 5246] close(3) = 0 [pid 5246] mkdir("./file1", 0777 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./19/binderfs") = 0 [pid 5016] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5246] <... mkdir resumed>) = 0 [ 79.032581][ T5244] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 79.047062][ T5246] loop2: detected capacity change from 0 to 4096 [ 79.054989][ T5247] loop0: detected capacity change from 0 to 4096 [ 79.069024][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 79.077241][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 79.077336][ T5246] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5246] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5247] <... ioctl resumed>) = 0 [pid 5249] <... write resumed>) = 2097152 [pid 5249] munmap(0x7f770c286000, 2097152) = 0 [pid 5249] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5249] ioctl(4, LOOP_SET_FD, 3 [pid 5247] close(3 [pid 5013] <... umount2 resumed>) = 0 [pid 5013] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", [pid 5247] <... close resumed>) = 0 [pid 5247] mkdir("./file1", 0777 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5247] <... mkdir resumed>) = 0 [pid 5247] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./17/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [ 79.084576][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 79.084596][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 79.114093][ T5249] loop3: detected capacity change from 0 to 4096 [ 79.116926][ T5244] Remounting filesystem read-only [ 79.131522][ T5247] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5013] close(3) = 0 [pid 5013] rmdir("./17") = 0 [pid 5013] mkdir("./18", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5249] <... ioctl resumed>) = 0 [pid 5249] close(3) = 0 [pid 5249] mkdir("./file1", 0777 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5250 [pid 5249] <... mkdir resumed>) = 0 [pid 5249] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, ""./strace-static-x86_64: Process 5250 attached [pid 5250] set_robust_list(0x555556b87660, 24) = 0 [pid 5250] chdir("./18") = 0 [pid 5250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5250] setpgid(0, 0) = 0 [pid 5250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5250] write(3, "1000", 4) = 4 [pid 5250] close(3) = 0 [pid 5250] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5250] memfd_create("syzkaller", 0) = 3 [pid 5250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 79.143662][ T5249] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 79.159304][ T5246] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 79.170085][ T5247] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 79.181862][ T5244] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 79.193856][ T5249] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 79.198915][ T5244] NILFS (loop5): repaired inode bitmap for reserved inodes [ 79.226203][ T5251] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.235812][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [pid 5250] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5247] <... mount resumed>) = 0 [pid 5246] <... mount resumed>) = 0 [pid 5246] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5246] chdir("./file1") = 0 [pid 5246] ioctl(4, LOOP_CLR_FD) = 0 [pid 5246] close(4) = 0 [pid 5246] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5247] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5244] <... openat resumed>) = -1 EIO (Input/output error) [pid 5247] <... openat resumed>) = 3 [pid 5244] exit_group(0 [pid 5247] chdir("./file1" [pid 5244] <... exit_group resumed>) = ? [pid 5244] +++ exited with 0 +++ [pid 5247] <... chdir resumed>) = 0 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5244, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5247] ioctl(4, LOOP_CLR_FD) = 0 [pid 5247] close(4) = 0 [pid 5017] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [ 79.239214][ T5244] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 79.251601][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 79.258732][ T5252] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.276686][ T5246] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5247] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5250] <... write resumed>) = 2097152 [pid 5250] munmap(0x7f770c286000, 2097152 [pid 5017] <... openat resumed>) = 3 [pid 5017] newfstatat(3, "", [pid 5249] <... mount resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5249] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5250] <... munmap resumed>) = 0 [pid 5250] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5017] getdents64(3, [pid 5249] <... openat resumed>) = 3 [pid 5249] chdir("./file1" [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5249] <... chdir resumed>) = 0 [pid 5017] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5250] <... openat resumed>) = 4 [pid 5249] ioctl(4, LOOP_CLR_FD [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5250] ioctl(4, LOOP_SET_FD, 3 [pid 5017] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5249] <... ioctl resumed>) = 0 [pid 5249] close(4 [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5249] <... close resumed>) = 0 [ 79.310826][ T5247] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 79.325990][ T5253] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.353606][ T5246] Remounting filesystem read-only [pid 5017] unlink("./18/binderfs") = 0 [pid 5249] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5250] <... ioctl resumed>) = 0 [pid 5250] close(3 [pid 5016] newfstatat(AT_FDCWD, "./19/file1", [pid 5250] <... close resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5250] mkdir("./file1", 0777) = 0 [pid 5016] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 79.353899][ T5249] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 79.360416][ T5246] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 79.382432][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 79.382515][ T5250] loop1: detected capacity change from 0 to 4096 [ 79.403099][ T5247] Remounting filesystem read-only [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5250] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] close(4) = 0 [pid 5016] rmdir("./19/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./19") = 0 [pid 5016] mkdir("./20", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5254 [ 79.404644][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 79.424164][ T5250] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 79.434004][ T5246] NILFS (loop2): repaired inode bitmap for reserved inodes [ 79.442803][ T5249] Remounting filesystem read-only [ 79.453814][ T5247] NILFS (loop0): inode bitmap is inconsistent for reserved inodes ./strace-static-x86_64: Process 5254 attached [pid 5254] set_robust_list(0x555556b87660, 24) = 0 [pid 5254] chdir("./20") = 0 [pid 5254] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5254] setpgid(0, 0) = 0 [pid 5254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5254] write(3, "1000", 4) = 4 [pid 5254] close(3) = 0 [pid 5254] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5254] memfd_create("syzkaller", 0) = 3 [pid 5254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 79.455608][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 79.469498][ T5250] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 79.476145][ T5246] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 79.491375][ T5247] NILFS (loop0): repaired inode bitmap for reserved inodes [ 79.502223][ T5249] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 79.520474][ T5249] NILFS (loop3): repaired inode bitmap for reserved inodes [ 79.528250][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 79.536776][ T5249] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 79.546222][ T5247] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5246] <... openat resumed>) = -1 EIO (Input/output error) [pid 5249] <... openat resumed>) = -1 EIO (Input/output error) [pid 5249] exit_group(0 [pid 5246] exit_group(0 [pid 5254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5246] <... exit_group resumed>) = ? [pid 5246] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5246, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5249] <... exit_group resumed>) = ? [pid 5014] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, [pid 5249] +++ exited with 0 +++ [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5249, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5015] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./19/binderfs" [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... unlink resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5250] <... mount resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./19/binderfs") = 0 [ 79.556838][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 79.578239][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 79.596835][ T5255] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.609377][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5015] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5250] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5254] <... write resumed>) = 2097152 [pid 5250] <... openat resumed>) = 3 [pid 5254] munmap(0x7f770c286000, 2097152 [pid 5250] chdir("./file1" [pid 5247] <... openat resumed>) = -1 EIO (Input/output error) [pid 5250] <... chdir resumed>) = 0 [pid 5250] ioctl(4, LOOP_CLR_FD [pid 5254] <... munmap resumed>) = 0 [pid 5250] <... ioctl resumed>) = 0 [pid 5247] exit_group(0 [pid 5254] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5247] <... exit_group resumed>) = ? [pid 5250] close(4) = 0 [ 79.616605][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 79.623447][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 79.625599][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 79.636602][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 79.638816][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 79.652567][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 79.661949][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [pid 5250] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5254] <... openat resumed>) = 4 [pid 5247] +++ exited with 0 +++ [pid 5254] ioctl(4, LOOP_SET_FD, 3 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5247, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5254] <... ioctl resumed>) = 0 [pid 5254] close(3) = 0 [pid 5254] mkdir("./file1", 0777) = 0 [pid 5012] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5254] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] <... umount2 resumed>) = 0 [ 79.670934][ T5250] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 79.670975][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 79.693802][ T5254] loop4: detected capacity change from 0 to 4096 [ 79.703699][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 79.714062][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5017] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./17/binderfs") = 0 [pid 5012] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./18/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./18") = 0 [pid 5017] mkdir("./19", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./19/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./19/file1" [pid 5017] <... openat resumed>) = 3 [pid 5014] <... rmdir resumed>) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5014] <... close resumed>) = 0 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] rmdir("./19" [pid 5017] close(3) = 0 [pid 5014] <... rmdir resumed>) = 0 [ 79.724226][ T5254] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 79.743584][ T5254] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 79.748905][ T5250] Remounting filesystem read-only [ 79.754393][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5256 [pid 5014] mkdir("./20", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5257 ./strace-static-x86_64: Process 5257 attached [pid 5257] set_robust_list(0x555556b87660, 24) = 0 [pid 5257] chdir("./20") = 0 [pid 5257] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5257] setpgid(0, 0) = 0 [pid 5257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5256 attached ) = 3 [pid 5257] write(3, "1000", 4) = 4 [pid 5257] close(3) = 0 [pid 5257] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5257] memfd_create("syzkaller", 0 [ 79.780573][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 79.791730][ T5250] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 79.805540][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 79.823850][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5256] set_robust_list(0x555556b87660, 24 [pid 5257] <... memfd_create resumed>) = 3 [pid 5257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5256] <... set_robust_list resumed>) = 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5256] chdir("./19" [pid 5015] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5256] <... chdir resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5256] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] newfstatat(AT_FDCWD, "./19/file1", [pid 5256] <... prctl resumed>) = 0 [pid 5254] <... mount resumed>) = 0 [pid 5256] setpgid(0, 0 [pid 5254] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5256] <... setpgid resumed>) = 0 [pid 5254] <... openat resumed>) = 3 [pid 5015] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5254] chdir("./file1" [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5256] <... openat resumed>) = 3 [pid 5015] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5256] write(3, "1000", 4 [pid 5254] <... chdir resumed>) = 0 [pid 5256] <... write resumed>) = 4 [pid 5015] <... openat resumed>) = 4 [pid 5256] close(3 [pid 5254] ioctl(4, LOOP_CLR_FD [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5256] <... close resumed>) = 0 [pid 5015] getdents64(4, [pid 5254] <... ioctl resumed>) = 0 [pid 5256] symlink("/dev/binderfs", "./binderfs" [pid 5254] close(4 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5256] <... symlink resumed>) = 0 [pid 5254] <... close resumed>) = 0 [pid 5015] getdents64(4, [pid 5256] memfd_create("syzkaller", 0 [pid 5254] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5256] <... memfd_create resumed>) = 3 [ 79.831941][ T5258] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.841790][ T5250] NILFS (loop1): repaired inode bitmap for reserved inodes [ 79.855689][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 79.863162][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 79.872976][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5015] close(4 [pid 5256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... close resumed>) = 0 [pid 5256] <... mmap resumed>) = 0x7f770c286000 [pid 5015] rmdir("./19/file1" [pid 5257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] <... rmdir resumed>) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [ 79.885413][ T5254] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 79.897769][ T5250] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./19") = 0 [pid 5015] mkdir("./20", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5259 ./strace-static-x86_64: Process 5259 attached [pid 5259] set_robust_list(0x555556b87660, 24) = 0 [pid 5257] <... write resumed>) = 2097152 [pid 5259] chdir("./20") = 0 [pid 5259] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5256] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5259] setpgid(0, 0) = 0 [pid 5259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5259] write(3, "1000", 4) = 4 [pid 5250] <... openat resumed>) = -1 EIO (Input/output error) [pid 5259] close(3 [pid 5250] exit_group(0 [pid 5259] <... close resumed>) = 0 [pid 5250] <... exit_group resumed>) = ? [ 79.936025][ T5254] Remounting filesystem read-only [ 79.953007][ T5254] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [pid 5259] symlink("/dev/binderfs", "./binderfs" [pid 5257] munmap(0x7f770c286000, 2097152 [pid 5250] +++ exited with 0 +++ [pid 5012] <... umount2 resumed>) = 0 [pid 5257] <... munmap resumed>) = 0 [pid 5257] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5250, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5259] <... symlink resumed>) = 0 [pid 5259] memfd_create("syzkaller", 0 [pid 5257] ioctl(4, LOOP_SET_FD, 3 [pid 5259] <... memfd_create resumed>) = 3 [pid 5257] <... ioctl resumed>) = 0 [pid 5256] <... write resumed>) = 2097152 [pid 5012] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5257] close(3 [pid 5256] munmap(0x7f770c286000, 2097152 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5259] <... mmap resumed>) = 0x7f770c286000 [pid 5257] <... close resumed>) = 0 [pid 5256] <... munmap resumed>) = 0 [pid 5012] newfstatat(AT_FDCWD, "./17/file1", [pid 5257] mkdir("./file1", 0777 [pid 5256] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5254] <... openat resumed>) = -1 EIO (Input/output error) [pid 5013] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5257] <... mkdir resumed>) = 0 [pid 5256] <... openat resumed>) = 4 [pid 5254] exit_group(0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5257] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5256] ioctl(4, LOOP_SET_FD, 3 [pid 5254] <... exit_group resumed>) = ? [pid 5013] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5254] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5254, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5013] <... openat resumed>) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 79.997227][ T5254] NILFS (loop4): repaired inode bitmap for reserved inodes [ 80.010066][ T5257] loop2: detected capacity change from 0 to 4096 [ 80.017351][ T5254] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5256] <... ioctl resumed>) = 0 [pid 5013] getdents64(3, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5256] close(3 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5016] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] <... openat resumed>) = 3 [pid 5013] unlink("./18/binderfs" [pid 5016] newfstatat(3, "", [pid 5013] <... unlink resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5256] <... close resumed>) = 0 [pid 5016] getdents64(3, [pid 5259] <... write resumed>) = 2097152 [pid 5012] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5256] mkdir("./file1", 0777 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./20/binderfs") = 0 [ 80.042095][ T5256] loop5: detected capacity change from 0 to 4096 [ 80.049026][ T5257] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 80.060250][ T5257] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 80.071769][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 80.082203][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 80.090733][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [pid 5016] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5259] munmap(0x7f770c286000, 2097152 [pid 5256] <... mkdir resumed>) = 0 [pid 5012] <... openat resumed>) = 4 [pid 5259] <... munmap resumed>) = 0 [pid 5256] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] newfstatat(4, "", [pid 5257] <... mount resumed>) = 0 [pid 5257] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5257] chdir("./file1") = 0 [pid 5257] ioctl(4, LOOP_CLR_FD) = 0 [pid 5257] close(4) = 0 [pid 5259] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 80.090762][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 80.100252][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 80.106831][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 80.119800][ T5260] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.131576][ T5256] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5257] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5259] <... openat resumed>) = 4 [pid 5012] getdents64(4, [pid 5259] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5259] <... ioctl resumed>) = 0 [pid 5012] getdents64(4, [pid 5259] close(3 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5259] <... close resumed>) = 0 [pid 5012] close(4 [pid 5259] mkdir("./file1", 0777 [pid 5012] <... close resumed>) = 0 [pid 5259] <... mkdir resumed>) = 0 [pid 5012] rmdir("./17/file1" [pid 5259] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... rmdir resumed>) = 0 [ 80.132043][ T5257] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 80.156315][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 80.163289][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 80.171678][ T5259] loop3: detected capacity change from 0 to 4096 [ 80.181249][ T5256] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 80.181942][ T5257] Remounting filesystem read-only [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3 [pid 5013] <... umount2 resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5013] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] rmdir("./17") = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./18/file1", [ 80.195927][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 80.198493][ T5257] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 80.204257][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 80.212591][ T5259] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 80.229945][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 80.241086][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5012] mkdir("./18", 0777 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5013] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... openat resumed>) = 3 [pid 5013] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5013] <... openat resumed>) = 4 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] newfstatat(4, "", [pid 5012] close(3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... close resumed>) = 0 [pid 5013] getdents64(4, [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5262 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./18/file1" [pid 5256] <... mount resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5256] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5256] chdir("./file1") = 0 [pid 5256] ioctl(4, LOOP_CLR_FD) = 0 [pid 5256] close(4) = 0 [ 80.243399][ T5257] NILFS (loop2): repaired inode bitmap for reserved inodes [ 80.279725][ T5261] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5256] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 5262 attached [pid 5257] <... openat resumed>) = -1 EIO (Input/output error) [pid 5016] <... umount2 resumed>) = 0 [pid 5013] getdents64(3, [pid 5262] set_robust_list(0x555556b87660, 24 [pid 5257] exit_group(0 [pid 5016] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5262] <... set_robust_list resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5262] chdir("./18" [pid 5257] <... exit_group resumed>) = ? [pid 5016] newfstatat(AT_FDCWD, "./20/file1", [pid 5013] close(3 [pid 5257] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5257, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5013] <... close resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] rmdir("./18" [pid 5262] <... chdir resumed>) = 0 [pid 5016] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... rmdir resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5262] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5262] <... prctl resumed>) = 0 [pid 5016] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] newfstatat(3, "", [pid 5013] mkdir("./19", 0777 [pid 5262] setpgid(0, 0) = 0 [pid 5016] <... openat resumed>) = 4 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... mkdir resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./20/binderfs", [pid 5262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5016] newfstatat(4, "", [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./20/binderfs" [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... unlink resumed>) = 0 [ 80.283356][ T5256] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 80.299392][ T5257] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 80.321052][ T5259] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5014] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5262] <... openat resumed>) = 3 [pid 5016] getdents64(4, [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5262] write(3, "1000", 4 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] <... openat resumed>) = 3 [pid 5262] <... write resumed>) = 4 [pid 5016] getdents64(4, [ 80.346165][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 80.352917][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 80.362286][ T5256] Remounting filesystem read-only [ 80.367924][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 80.374248][ T5256] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 80.377581][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 80.384690][ T5256] NILFS (loop5): repaired inode bitmap for reserved inodes [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5262] close(3 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5262] <... close resumed>) = 0 [pid 5016] close(4 [pid 5013] close(3 [pid 5259] <... mount resumed>) = 0 [pid 5259] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5259] chdir("./file1") = 0 [pid 5259] ioctl(4, LOOP_CLR_FD) = 0 [pid 5259] close(4) = 0 [pid 5259] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5262] symlink("/dev/binderfs", "./binderfs" [pid 5016] <... close resumed>) = 0 [pid 5013] <... close resumed>) = 0 [ 80.391066][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 80.398574][ T5256] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 80.405904][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 80.424673][ T5259] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5262] <... symlink resumed>) = 0 [pid 5016] rmdir("./20/file1" [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5256] <... openat resumed>) = -1 EIO (Input/output error) [pid 5262] memfd_create("syzkaller", 0 [pid 5256] exit_group(0) = ? [pid 5016] <... rmdir resumed>) = 0 [pid 5262] <... memfd_create resumed>) = 3 [pid 5016] getdents64(3, [pid 5262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5264 [pid 5262] <... mmap resumed>) = 0x7f770c286000 [pid 5016] close(3 [pid 5256] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5256, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./20"./strace-static-x86_64: Process 5264 attached [pid 5264] set_robust_list(0x555556b87660, 24 [pid 5017] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... rmdir resumed>) = 0 [pid 5264] <... set_robust_list resumed>) = 0 [pid 5262] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] mkdir("./21", 0777 [pid 5264] chdir("./19" [pid 5017] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] <... mkdir resumed>) = 0 [pid 5017] newfstatat(3, "", [pid 5264] <... chdir resumed>) = 0 [pid 5264] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5264] <... prctl resumed>) = 0 [pid 5017] getdents64(3, [pid 5016] <... openat resumed>) = 3 [pid 5264] setpgid(0, 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5264] <... setpgid resumed>) = 0 [pid 5017] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 80.442219][ T5263] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.457839][ T5259] Remounting filesystem read-only [ 80.464432][ T5259] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 80.473977][ T5259] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] close(3 [pid 5264] <... openat resumed>) = 3 [pid 5262] <... write resumed>) = 2097152 [pid 5259] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5016] <... close resumed>) = 0 [pid 5014] <... umount2 resumed>) = 0 [pid 5264] write(3, "1000", 4 [pid 5262] munmap(0x7f770c286000, 2097152 [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5264] <... write resumed>) = 4 [pid 5262] <... munmap resumed>) = 0 [pid 5017] unlink("./19/binderfs" [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5264] close(3 [pid 5262] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5017] <... unlink resumed>) = 0 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5265 [pid 5014] newfstatat(AT_FDCWD, "./20/file1", [pid 5264] <... close resumed>) = 0 [pid 5262] <... openat resumed>) = 4 [pid 5017] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5264] symlink("/dev/binderfs", "./binderfs" [pid 5262] ioctl(4, LOOP_SET_FD, 3 [pid 5014] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5265 attached [pid 5264] <... symlink resumed>) = 0 [pid 5259] exit_group(0 [pid 5265] set_robust_list(0x555556b87660, 24) = 0 [pid 5265] chdir("./21") = 0 [pid 5265] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5265] setpgid(0, 0) = 0 [pid 5265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] <... openat resumed>) = 4 [pid 5265] <... openat resumed>) = 3 [pid 5259] <... exit_group resumed>) = ? [pid 5259] +++ exited with 0 +++ [pid 5265] write(3, "1000", 4) = 4 [pid 5265] close(3) = 0 [pid 5265] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5265] memfd_create("syzkaller", 0) = 3 [pid 5265] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5259, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5014] newfstatat(4, "", [pid 5264] memfd_create("syzkaller", 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5264] <... memfd_create resumed>) = 3 [pid 5014] getdents64(4, [pid 5264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5264] <... mmap resumed>) = 0x7f770c286000 [pid 5014] getdents64(4, [pid 5015] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] close(4 [pid 5015] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] <... close resumed>) = 0 [pid 5015] newfstatat(3, "", [pid 5014] rmdir("./20/file1" [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5015] getdents64(3, [pid 5014] getdents64(3, [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 80.500580][ T5259] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 80.536773][ T5262] loop0: detected capacity change from 0 to 4096 [ 80.544278][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [pid 5015] newfstatat(AT_FDCWD, "./20/binderfs", [pid 5014] close(3 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./20/binderfs" [pid 5014] <... close resumed>) = 0 [pid 5015] <... unlink resumed>) = 0 [pid 5015] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] rmdir("./20") = 0 [pid 5014] mkdir("./21", 0777 [pid 5265] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5262] <... ioctl resumed>) = 0 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5266 [pid 5262] close(3./strace-static-x86_64: Process 5266 attached [pid 5266] set_robust_list(0x555556b87660, 24) = 0 [pid 5262] <... close resumed>) = 0 [pid 5262] mkdir("./file1", 0777 [pid 5266] chdir("./21") = 0 [pid 5266] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5266] setpgid(0, 0) = 0 [pid 5266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5266] write(3, "1000", 4) = 4 [pid 5266] close(3) = 0 [pid 5266] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5266] memfd_create("syzkaller", 0) = 3 [pid 5266] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5265] <... write resumed>) = 2097152 [pid 5265] munmap(0x7f770c286000, 2097152 [pid 5262] <... mkdir resumed>) = 0 [ 80.563430][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 80.585700][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 80.595252][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 80.605431][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [pid 5262] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5265] <... munmap resumed>) = 0 [pid 5265] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5265] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5265] close(3) = 0 [pid 5265] mkdir("./file1", 0777) = 0 [ 80.617940][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 80.627385][ T5262] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 80.636592][ T5265] loop4: detected capacity change from 0 to 4096 [ 80.637642][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 80.647282][ T5265] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 80.660003][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [pid 5265] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./19/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5266] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] rmdir("./19/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./19") = 0 [pid 5017] mkdir("./20", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5267 [pid 5264] <... write resumed>) = 2097152 [pid 5264] munmap(0x7f770c286000, 2097152./strace-static-x86_64: Process 5267 attached [pid 5267] set_robust_list(0x555556b87660, 24 [pid 5264] <... munmap resumed>) = 0 [pid 5264] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5267] <... set_robust_list resumed>) = 0 [pid 5264] <... openat resumed>) = 4 [ 80.660026][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 80.671653][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 80.682777][ T5262] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 80.693447][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5264] ioctl(4, LOOP_SET_FD, 3 [pid 5267] chdir("./20" [pid 5264] <... ioctl resumed>) = 0 [pid 5264] close(3) = 0 [pid 5264] mkdir("./file1", 0777) = 0 [pid 5264] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5267] <... chdir resumed>) = 0 [pid 5267] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5267] setpgid(0, 0 [pid 5262] <... mount resumed>) = 0 [pid 5267] <... setpgid resumed>) = 0 [pid 5262] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5267] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5262] <... openat resumed>) = 3 [pid 5262] chdir("./file1" [pid 5267] <... openat resumed>) = 3 [pid 5262] <... chdir resumed>) = 0 [pid 5267] write(3, "1000", 4 [pid 5266] <... write resumed>) = 2097152 [pid 5262] ioctl(4, LOOP_CLR_FD) = 0 [pid 5267] <... write resumed>) = 4 [ 80.736138][ T5264] loop1: detected capacity change from 0 to 4096 [ 80.737507][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 80.753019][ T5264] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 80.753483][ T5268] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.776932][ T5265] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5262] close(4 [pid 5267] close(3 [pid 5266] munmap(0x7f770c286000, 2097152 [pid 5262] <... close resumed>) = 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5267] <... close resumed>) = 0 [pid 5266] <... munmap resumed>) = 0 [pid 5262] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5267] symlink("/dev/binderfs", "./binderfs" [pid 5266] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5267] <... symlink resumed>) = 0 [pid 5266] <... openat resumed>) = 4 [pid 5267] memfd_create("syzkaller", 0 [pid 5266] ioctl(4, LOOP_SET_FD, 3 [pid 5267] <... memfd_create resumed>) = 3 [pid 5266] <... ioctl resumed>) = 0 [pid 5015] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5267] <... mmap resumed>) = 0x7f770c286000 [pid 5015] newfstatat(AT_FDCWD, "./20/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5266] close(3 [pid 5015] newfstatat(4, "", [pid 5266] <... close resumed>) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5266] mkdir("./file1", 0777 [pid 5015] getdents64(4, [pid 5266] <... mkdir resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [ 80.798500][ T5264] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 80.807957][ T5266] loop2: detected capacity change from 0 to 4096 [ 80.809055][ T5262] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5266] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5265] <... mount resumed>) = 0 [pid 5015] rmdir("./20/file1" [pid 5265] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] <... rmdir resumed>) = 0 [pid 5265] <... openat resumed>) = 3 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./20") = 0 [pid 5015] mkdir("./21", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3 [pid 5265] chdir("./file1" [pid 5264] <... mount resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5267] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5271 ./strace-static-x86_64: Process 5271 attached [pid 5265] <... chdir resumed>) = 0 [pid 5264] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5265] ioctl(4, LOOP_CLR_FD [pid 5271] set_robust_list(0x555556b87660, 24 [pid 5264] <... openat resumed>) = 3 [ 80.841169][ T5266] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 80.852870][ T5269] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.867006][ T5270] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.880226][ T5262] Remounting filesystem read-only [pid 5271] <... set_robust_list resumed>) = 0 [pid 5265] <... ioctl resumed>) = 0 [pid 5264] chdir("./file1" [pid 5271] chdir("./21") = 0 [pid 5271] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5271] setpgid(0, 0) = 0 [pid 5265] close(4 [pid 5264] <... chdir resumed>) = 0 [pid 5271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5271] write(3, "1000", 4) = 4 [pid 5271] close(3) = 0 [pid 5271] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5267] <... write resumed>) = 2097152 [pid 5265] <... close resumed>) = 0 [pid 5264] ioctl(4, LOOP_CLR_FD [pid 5262] <... openat resumed>) = -1 EIO (Input/output error) [pid 5271] memfd_create("syzkaller", 0) = 3 [pid 5271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5267] munmap(0x7f770c286000, 2097152 [pid 5265] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5264] <... ioctl resumed>) = 0 [pid 5267] <... munmap resumed>) = 0 [pid 5264] close(4 [ 80.893568][ T5262] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 80.902794][ T5262] NILFS (loop0): repaired inode bitmap for reserved inodes [ 80.911283][ T5262] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 80.931696][ T5266] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5262] exit_group(0) = ? [pid 5267] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5264] <... close resumed>) = 0 [pid 5267] <... openat resumed>) = 4 [pid 5264] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5262] +++ exited with 0 +++ [pid 5271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5267] ioctl(4, LOOP_SET_FD, 3 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5262, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5012] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 80.949451][ T5265] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 80.972584][ T5265] Remounting filesystem read-only [ 80.979574][ T5265] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./18/binderfs") = 0 [pid 5012] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5266] <... mount resumed>) = 0 [pid 5266] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5267] <... ioctl resumed>) = 0 [pid 5266] <... openat resumed>) = 3 [pid 5267] close(3 [pid 5266] chdir("./file1" [pid 5267] <... close resumed>) = 0 [pid 5266] <... chdir resumed>) = 0 [ 80.988789][ T5264] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.003965][ T5267] loop5: detected capacity change from 0 to 4096 [ 81.012521][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 81.019679][ T5272] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.036536][ T5265] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5267] mkdir("./file1", 0777 [pid 5266] ioctl(4, LOOP_CLR_FD [pid 5267] <... mkdir resumed>) = 0 [pid 5266] <... ioctl resumed>) = 0 [pid 5267] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5266] close(4) = 0 [ 81.039069][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 81.051771][ T5264] Remounting filesystem read-only [ 81.058597][ T5265] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.075439][ T5267] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5266] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5271] <... write resumed>) = 2097152 [pid 5271] munmap(0x7f770c286000, 2097152) = 0 [pid 5271] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5265] <... openat resumed>) = -1 EIO (Input/output error) [pid 5271] ioctl(4, LOOP_SET_FD, 3 [ 81.089160][ T5266] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.098678][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 81.111192][ T5267] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 81.121471][ T5264] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 81.127177][ T5266] Remounting filesystem read-only [ 81.131816][ T5271] loop3: detected capacity change from 0 to 4096 [ 81.141877][ T5266] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [pid 5265] exit_group(0 [pid 5267] <... mount resumed>) = 0 [pid 5265] <... exit_group resumed>) = ? [pid 5271] <... ioctl resumed>) = 0 [pid 5271] close(3) = 0 [pid 5271] mkdir("./file1", 0777) = 0 [pid 5267] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5265] +++ exited with 0 +++ [pid 5267] <... openat resumed>) = 3 [pid 5271] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5265, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5016] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5267] chdir("./file1" [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./21/binderfs") = 0 [ 81.142200][ T5264] NILFS (loop1): repaired inode bitmap for reserved inodes [ 81.152253][ T5273] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.163473][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 81.176340][ T5266] NILFS (loop2): repaired inode bitmap for reserved inodes [ 81.184508][ T5266] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5016] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5267] <... chdir resumed>) = 0 [pid 5266] <... openat resumed>) = -1 EIO (Input/output error) [pid 5264] <... openat resumed>) = -1 EIO (Input/output error) [pid 5267] ioctl(4, LOOP_CLR_FD) = 0 [pid 5266] exit_group(0 [ 81.196453][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 81.200760][ T5264] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.206604][ T5271] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 81.221233][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 81.238304][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [pid 5264] exit_group(0 [pid 5267] close(4 [pid 5266] <... exit_group resumed>) = ? [pid 5264] <... exit_group resumed>) = ? [pid 5267] <... close resumed>) = 0 [pid 5266] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5266, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5264] +++ exited with 0 +++ [pid 5267] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./21/binderfs") = 0 [pid 5014] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5264, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./18/file1", [pid 5013] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] newfstatat(3, "", [pid 5012] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] getdents64(3, [pid 5012] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... openat resumed>) = 4 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(4, "", [ 81.247088][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 81.258744][ T5267] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.277103][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 81.280981][ T5267] Remounting filesystem read-only [ 81.285063][ T5271] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5013] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./19/binderfs" [pid 5012] getdents64(4, [pid 5013] <... unlink resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./18/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [ 81.305477][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 81.314278][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 81.325365][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 81.333948][ T5267] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 81.334454][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 81.343157][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [pid 5012] rmdir("./18") = 0 [pid 5012] mkdir("./19", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5274 attached [pid 5274] set_robust_list(0x555556b87660, 24 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5274 [pid 5274] <... set_robust_list resumed>) = 0 [pid 5274] chdir("./19") = 0 [pid 5274] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5274] setpgid(0, 0) = 0 [pid 5274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5274] write(3, "1000", 4) = 4 [pid 5274] close(3) = 0 [pid 5274] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5274] memfd_create("syzkaller", 0) = 3 [pid 5274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 81.352232][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 81.371781][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 81.381387][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 81.385879][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 81.397070][ T5267] NILFS (loop5): repaired inode bitmap for reserved inodes [pid 5271] <... mount resumed>) = 0 [pid 5267] <... openat resumed>) = -1 EIO (Input/output error) [pid 5271] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5271] chdir("./file1") = 0 [pid 5271] ioctl(4, LOOP_CLR_FD) = 0 [pid 5271] close(4) = 0 [ 81.404828][ T5267] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.406519][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 81.428000][ T5275] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.428537][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 81.442692][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5271] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5267] exit_group(0) = ? [pid 5267] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5267, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5017] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5017] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./20/binderfs") = 0 [pid 5017] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./21/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 81.447410][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 81.465878][ T5271] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.488693][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [pid 5274] <... write resumed>) = 2097152 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [ 81.516590][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 81.524215][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 81.543190][ T5271] Remounting filesystem read-only [ 81.548272][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 81.548296][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [pid 5274] munmap(0x7f770c286000, 2097152 [pid 5016] getdents64(4, [pid 5014] <... umount2 resumed>) = 0 [pid 5274] <... munmap resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... umount2 resumed>) = 0 [pid 5274] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5016] close(4 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5274] <... openat resumed>) = 4 [pid 5016] <... close resumed>) = 0 [pid 5014] newfstatat(AT_FDCWD, "./21/file1", [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5274] ioctl(4, LOOP_SET_FD, 3 [pid 5016] rmdir("./21/file1" [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] newfstatat(AT_FDCWD, "./19/file1", [pid 5274] <... ioctl resumed>) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5014] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] getdents64(3, [pid 5013] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] close(3 [pid 5014] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] <... close resumed>) = 0 [pid 5014] <... openat resumed>) = 4 [pid 5013] <... openat resumed>) = 4 [pid 5014] newfstatat(4, "", [pid 5016] rmdir("./21" [pid 5013] newfstatat(4, "", [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, [pid 5016] <... rmdir resumed>) = 0 [pid 5013] getdents64(4, [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] mkdir("./22", 0777 [pid 5014] getdents64(4, [pid 5013] getdents64(4, [pid 5016] <... mkdir resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5014] close(4 [pid 5013] close(4 [pid 5016] <... openat resumed>) = 3 [pid 5013] <... close resumed>) = 0 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5014] <... close resumed>) = 0 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] rmdir("./21/file1" [pid 5013] rmdir("./19/file1" [pid 5014] <... rmdir resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5014] getdents64(3, [pid 5013] getdents64(3, [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3 [pid 5016] close(3 [pid 5013] close(3 [pid 5274] close(3 [pid 5016] <... close resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5274] <... close resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] rmdir("./21" [pid 5013] <... close resumed>) = 0 [pid 5274] mkdir("./file1", 0777 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5276 [pid 5014] <... rmdir resumed>) = 0 [pid 5013] rmdir("./19" [pid 5014] mkdir("./22", 0777 [pid 5013] <... rmdir resumed>) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5013] mkdir("./20", 0777 [pid 5014] <... openat resumed>) = 3 [pid 5013] <... mkdir resumed>) = 0 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5014] close(3 [pid 5013] <... openat resumed>) = 3 [pid 5014] <... close resumed>) = 0 [pid 5274] <... mkdir resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5276 attached [pid 5276] set_robust_list(0x555556b87660, 24 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5277 [pid 5013] close(3) = 0 [ 81.548316][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 81.548330][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 81.566009][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 81.577011][ T5271] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 81.606079][ T5274] loop0: detected capacity change from 0 to 4096 [pid 5276] <... set_robust_list resumed>) = 0 [pid 5274] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... umount2 resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5276] chdir("./22") = 0 [pid 5276] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5276] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5278 attached ./strace-static-x86_64: Process 5277 attached [pid 5276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5017] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5278 [pid 5276] <... openat resumed>) = 3 [pid 5276] write(3, "1000", 4) = 4 [pid 5276] close(3) = 0 [pid 5278] set_robust_list(0x555556b87660, 24 [pid 5277] set_robust_list(0x555556b87660, 24 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5277] <... set_robust_list resumed>) = 0 [pid 5276] symlink("/dev/binderfs", "./binderfs" [pid 5017] newfstatat(AT_FDCWD, "./20/file1", [pid 5278] <... set_robust_list resumed>) = 0 [pid 5277] chdir("./22" [pid 5276] <... symlink resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5278] chdir("./20" [pid 5277] <... chdir resumed>) = 0 [pid 5276] memfd_create("syzkaller", 0 [pid 5017] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5276] <... memfd_create resumed>) = 3 [pid 5276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5278] <... chdir resumed>) = 0 [pid 5277] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5271] <... openat resumed>) = -1 EIO (Input/output error) [pid 5278] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5277] <... prctl resumed>) = 0 [pid 5017] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5278] <... prctl resumed>) = 0 [pid 5277] setpgid(0, 0 [pid 5017] <... openat resumed>) = 4 [pid 5278] setpgid(0, 0) = 0 [pid 5277] <... setpgid resumed>) = 0 [pid 5017] newfstatat(4, "", [pid 5277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5278] <... openat resumed>) = 3 [pid 5277] <... openat resumed>) = 3 [pid 5276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5271] exit_group(0 [pid 5017] getdents64(4, [pid 5278] write(3, "1000", 4 [pid 5277] write(3, "1000", 4 [pid 5271] <... exit_group resumed>) = ? [pid 5278] <... write resumed>) = 4 [pid 5277] <... write resumed>) = 4 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5271] +++ exited with 0 +++ [pid 5277] close(3 [pid 5278] close(3 [pid 5277] <... close resumed>) = 0 [pid 5278] <... close resumed>) = 0 [pid 5017] getdents64(4, [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5271, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5277] symlink("/dev/binderfs", "./binderfs" [pid 5278] symlink("/dev/binderfs", "./binderfs" [pid 5277] <... symlink resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5278] <... symlink resumed>) = 0 [pid 5017] close(4 [pid 5015] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... close resumed>) = 0 [pid 5277] memfd_create("syzkaller", 0 [pid 5017] rmdir("./20/file1" [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5278] memfd_create("syzkaller", 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5017] getdents64(3, [pid 5015] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5277] <... memfd_create resumed>) = 3 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5278] <... memfd_create resumed>) = 3 [pid 5277] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] close(3 [pid 5015] <... openat resumed>) = 3 [pid 5278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5277] <... mmap resumed>) = 0x7f770c286000 [pid 5017] <... close resumed>) = 0 [pid 5015] newfstatat(3, "", [pid 5278] <... mmap resumed>) = 0x7f770c286000 [pid 5017] rmdir("./20" [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5015] getdents64(3, [pid 5017] mkdir("./21", 0777 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] <... mkdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5015] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... openat resumed>) = 3 [ 81.652182][ T5274] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 81.652465][ T5271] NILFS (loop3): repaired inode bitmap for reserved inodes [ 81.672990][ T5271] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.692787][ T5274] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5017] close(3 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... close resumed>) = 0 [pid 5015] unlink("./21/binderfs" [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... unlink resumed>) = 0 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5280 [pid 5015] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5274] <... mount resumed>) = 0 [pid 5274] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5274] chdir("./file1") = 0 [pid 5274] ioctl(4, LOOP_CLR_FD) = 0 [pid 5274] close(4) = 0 [pid 5274] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5278] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5277] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5276] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 5280 attached [pid 5276] munmap(0x7f770c286000, 2097152 [pid 5280] set_robust_list(0x555556b87660, 24) = 0 [pid 5280] chdir("./21") = 0 [pid 5276] <... munmap resumed>) = 0 [pid 5280] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5276] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5280] <... prctl resumed>) = 0 [pid 5276] <... openat resumed>) = 4 [pid 5280] setpgid(0, 0 [pid 5276] ioctl(4, LOOP_SET_FD, 3 [pid 5280] <... setpgid resumed>) = 0 [ 81.740521][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 81.750033][ T5279] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.762587][ T5274] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.771062][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [pid 5280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5280] write(3, "1000", 4) = 4 [pid 5280] close(3) = 0 [pid 5280] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5280] memfd_create("syzkaller", 0) = 3 [pid 5280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5276] <... ioctl resumed>) = 0 [pid 5276] close(3) = 0 [pid 5276] mkdir("./file1", 0777) = 0 [ 81.793039][ T5276] loop4: detected capacity change from 0 to 4096 [ 81.799665][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 81.825808][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 81.835152][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5276] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5277] <... write resumed>) = 2097152 [pid 5278] <... write resumed>) = 2097152 [ 81.840344][ T5274] Remounting filesystem read-only [ 81.847440][ T5276] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 81.871735][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 81.881835][ T5276] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5277] munmap(0x7f770c286000, 2097152 [pid 5278] munmap(0x7f770c286000, 2097152 [pid 5277] <... munmap resumed>) = 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5278] <... munmap resumed>) = 0 [pid 5277] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5276] <... mount resumed>) = 0 [pid 5015] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5276] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5276] chdir("./file1") = 0 [pid 5276] ioctl(4, LOOP_CLR_FD) = 0 [pid 5280] <... write resumed>) = 2097152 [pid 5278] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5277] <... openat resumed>) = 4 [pid 5276] close(4 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 81.883631][ T5274] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 81.916196][ T5281] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.932145][ T5274] NILFS (loop0): repaired inode bitmap for reserved inodes [pid 5280] munmap(0x7f770c286000, 2097152 [pid 5278] <... openat resumed>) = 4 [pid 5277] ioctl(4, LOOP_SET_FD, 3 [pid 5276] <... close resumed>) = 0 [pid 5276] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5280] <... munmap resumed>) = 0 [pid 5278] ioctl(4, LOOP_SET_FD, 3 [pid 5015] newfstatat(AT_FDCWD, "./21/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5280] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5278] <... ioctl resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5280] <... openat resumed>) = 4 [pid 5278] close(3 [pid 5015] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5274] <... openat resumed>) = -1 EIO (Input/output error) [ 81.940120][ T5274] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.948080][ T5276] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.956870][ T5277] loop2: detected capacity change from 0 to 4096 [ 81.976869][ T5278] loop1: detected capacity change from 0 to 4096 [ 81.986498][ T5280] loop5: detected capacity change from 0 to 4096 [pid 5280] ioctl(4, LOOP_SET_FD, 3 [pid 5278] <... close resumed>) = 0 [pid 5277] <... ioctl resumed>) = 0 [pid 5274] exit_group(0 [pid 5015] <... openat resumed>) = 4 [pid 5280] <... ioctl resumed>) = 0 [pid 5278] mkdir("./file1", 0777 [pid 5277] close(3 [pid 5274] <... exit_group resumed>) = ? [pid 5015] newfstatat(4, "", [pid 5278] <... mkdir resumed>) = 0 [pid 5277] <... close resumed>) = 0 [pid 5274] +++ exited with 0 +++ [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5278] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5277] mkdir("./file1", 0777 [pid 5015] getdents64(4, [pid 5277] <... mkdir resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5277] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5274, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5015] close(4) = 0 [pid 5015] rmdir("./21/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./21") = 0 [pid 5015] mkdir("./22", 0777 [pid 5280] close(3 [pid 5015] <... mkdir resumed>) = 0 [pid 5280] <... close resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5280] mkdir("./file1", 0777 [pid 5015] <... openat resumed>) = 3 [pid 5280] <... mkdir resumed>) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5280] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 81.986853][ T5276] Remounting filesystem read-only [ 82.000302][ T5278] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 82.009896][ T5276] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 82.010151][ T5277] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 82.018315][ T5276] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5282 ./strace-static-x86_64: Process 5282 attached [pid 5012] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./19/binderfs") = 0 [pid 5012] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] set_robust_list(0x555556b87660, 24) = 0 [pid 5282] chdir("./22") = 0 [pid 5282] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5282] setpgid(0, 0) = 0 [pid 5282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5282] write(3, "1000", 4) = 4 [pid 5282] close(3) = 0 [ 82.043385][ T5276] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 82.058803][ T5280] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 82.069134][ T5278] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 82.069324][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [pid 5282] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5282] memfd_create("syzkaller", 0) = 3 [pid 5282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5276] <... openat resumed>) = -1 EIO (Input/output error) [pid 5276] exit_group(0) = ? [pid 5276] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5276, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5016] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./22/binderfs", [ 82.078873][ T5277] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 82.096415][ T5280] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 82.126928][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 82.134946][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./22/binderfs" [pid 5282] <... write resumed>) = 2097152 [pid 5282] munmap(0x7f770c286000, 2097152) = 0 [pid 5282] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5016] <... unlink resumed>) = 0 [pid 5016] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5278] <... mount resumed>) = 0 [pid 5278] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5282] <... openat resumed>) = 4 [ 82.142439][ T5283] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.144818][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 82.161252][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 82.169995][ T5284] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.171081][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 82.183358][ T5282] loop3: detected capacity change from 0 to 4096 [pid 5282] ioctl(4, LOOP_SET_FD, 3 [pid 5278] <... openat resumed>) = 3 [pid 5282] <... ioctl resumed>) = 0 [pid 5282] close(3) = 0 [pid 5282] mkdir("./file1", 0777 [pid 5278] chdir("./file1" [pid 5277] <... mount resumed>) = 0 [pid 5282] <... mkdir resumed>) = 0 [pid 5280] <... mount resumed>) = 0 [pid 5278] <... chdir resumed>) = 0 [pid 5277] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5282] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5280] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5278] ioctl(4, LOOP_CLR_FD [pid 5277] <... openat resumed>) = 3 [pid 5280] <... openat resumed>) = 3 [pid 5278] <... ioctl resumed>) = 0 [pid 5277] chdir("./file1" [pid 5280] chdir("./file1" [pid 5278] close(4 [pid 5277] <... chdir resumed>) = 0 [ 82.187864][ T5285] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.197373][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 82.205385][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 82.220563][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 82.223498][ T5282] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 82.227937][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [pid 5280] <... chdir resumed>) = 0 [pid 5278] <... close resumed>) = 0 [pid 5277] ioctl(4, LOOP_CLR_FD [pid 5280] ioctl(4, LOOP_CLR_FD [pid 5278] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5277] <... ioctl resumed>) = 0 [pid 5280] <... ioctl resumed>) = 0 [pid 5277] close(4 [pid 5280] close(4 [pid 5277] <... close resumed>) = 0 [pid 5280] <... close resumed>) = 0 [pid 5277] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5280] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./19/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 82.245213][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 82.246715][ T5282] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 82.252582][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 82.270064][ T5278] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5012] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./19/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./19") = 0 [pid 5012] mkdir("./20", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5286 ./strace-static-x86_64: Process 5286 attached [pid 5286] set_robust_list(0x555556b87660, 24) = 0 [pid 5286] chdir("./20") = 0 [pid 5286] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5286] setpgid(0, 0) = 0 [ 82.286948][ T5277] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 82.302431][ T5280] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5286] write(3, "1000", 4) = 4 [pid 5286] close(3) = 0 [pid 5286] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5286] memfd_create("syzkaller", 0) = 3 [pid 5286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 82.336261][ T5278] Remounting filesystem read-only [ 82.342117][ T5277] Remounting filesystem read-only [ 82.347998][ T5280] Remounting filesystem read-only [ 82.357179][ T5278] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 82.366528][ T5280] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 82.370881][ T5278] NILFS (loop1): repaired inode bitmap for reserved inodes [pid 5286] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... umount2 resumed>) = 0 [ 82.374370][ T5280] NILFS (loop5): repaired inode bitmap for reserved inodes [ 82.374413][ T5280] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 82.404911][ T5277] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 82.412241][ T5278] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 82.415401][ T5277] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5016] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] <... mount resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5282] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5280] <... openat resumed>) = -1 EIO (Input/output error) [pid 5278] <... openat resumed>) = -1 EIO (Input/output error) [pid 5277] <... openat resumed>) = -1 EIO (Input/output error) [pid 5282] <... openat resumed>) = 3 [pid 5282] chdir("./file1" [pid 5016] newfstatat(AT_FDCWD, "./22/file1", [pid 5282] <... chdir resumed>) = 0 [pid 5280] exit_group(0 [pid 5277] exit_group(0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5286] <... write resumed>) = 2097152 [pid 5282] ioctl(4, LOOP_CLR_FD [pid 5280] <... exit_group resumed>) = ? [pid 5278] exit_group(0 [pid 5277] <... exit_group resumed>) = ? [pid 5016] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] <... ioctl resumed>) = 0 [pid 5282] close(4) = 0 [pid 5282] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 82.436061][ T5287] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.447620][ T5277] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5286] munmap(0x7f770c286000, 2097152 [pid 5280] +++ exited with 0 +++ [pid 5278] <... exit_group resumed>) = ? [pid 5277] +++ exited with 0 +++ [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5278] +++ exited with 0 +++ [pid 5016] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./22/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./22") = 0 [pid 5016] mkdir("./23", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5288 ./strace-static-x86_64: Process 5288 attached [pid 5288] set_robust_list(0x555556b87660, 24) = 0 [pid 5288] chdir("./23") = 0 [pid 5288] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5288] setpgid(0, 0) = 0 [pid 5288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5288] write(3, "1000", 4) = 4 [pid 5288] close(3) = 0 [pid 5288] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5288] memfd_create("syzkaller", 0) = 3 [pid 5288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5278, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5280, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5277, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5013] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] <... openat resumed>) = 3 [pid 5013] <... openat resumed>) = 3 [pid 5014] <... openat resumed>) = 3 [pid 5013] newfstatat(3, "", [pid 5017] newfstatat(3, "", [pid 5014] newfstatat(3, "", [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] getdents64(3, [pid 5017] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] getdents64(3, [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5013] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] unlink("./21/binderfs" [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./20/binderfs", [pid 5017] <... unlink resumed>) = 0 [pid 5014] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5017] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5288] <... mmap resumed>) = 0x7f770c286000 [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./20/binderfs" [pid 5014] unlink("./22/binderfs" [pid 5013] <... unlink resumed>) = 0 [pid 5014] <... unlink resumed>) = 0 [pid 5013] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 82.485914][ T5282] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 82.517929][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 82.524910][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [pid 5288] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5286] <... munmap resumed>) = 0 [pid 5286] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5286] ioctl(4, LOOP_SET_FD, 3 [pid 5288] <... write resumed>) = 2097152 [ 82.532048][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 82.539062][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 82.551094][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 82.553008][ T5282] Remounting filesystem read-only [ 82.558808][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 82.572684][ T5286] loop0: detected capacity change from 0 to 4096 [pid 5288] munmap(0x7f770c286000, 2097152 [pid 5286] <... ioctl resumed>) = 0 [pid 5286] close(3) = 0 [pid 5286] mkdir("./file1", 0777 [pid 5288] <... munmap resumed>) = 0 [pid 5286] <... mkdir resumed>) = 0 [pid 5288] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5288] ioctl(4, LOOP_SET_FD, 3 [ 82.584208][ T5282] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 82.590571][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 82.602518][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 82.615694][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 82.619674][ T5288] loop4: detected capacity change from 0 to 4096 [ 82.623000][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [pid 5286] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5288] <... ioctl resumed>) = 0 [pid 5288] close(3) = 0 [pid 5288] mkdir("./file1", 0777) = 0 [ 82.638096][ T5286] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 82.648152][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 82.654736][ T5282] NILFS (loop3): repaired inode bitmap for reserved inodes [ 82.655950][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 82.663451][ T5282] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5288] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5282] <... openat resumed>) = -1 EIO (Input/output error) [pid 5282] exit_group(0) = ? [pid 5282] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5282, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [ 82.670910][ T5286] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 82.694911][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 82.698197][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 82.702258][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 82.709480][ T5288] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 82.716624][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [pid 5015] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./22/binderfs") = 0 [ 82.727555][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 82.733240][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 82.754134][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 82.761223][ T5288] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 82.772871][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [pid 5015] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... umount2 resumed>) = 0 [pid 5013] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./20/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./20/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3 [pid 5014] <... umount2 resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5014] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] rmdir("./20" [pid 5286] <... mount resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5286] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5013] <... rmdir resumed>) = 0 [pid 5014] newfstatat(AT_FDCWD, "./22/file1", [pid 5286] <... openat resumed>) = 3 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] mkdir("./21", 0777 [pid 5286] chdir("./file1" [pid 5013] <... mkdir resumed>) = 0 [pid 5286] <... chdir resumed>) = 0 [pid 5014] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 82.785683][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 82.792686][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 82.820497][ T5289] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5286] ioctl(4, LOOP_CLR_FD) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... openat resumed>) = 3 [pid 5286] close(4 [pid 5014] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5286] <... close resumed>) = 0 [pid 5286] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] <... openat resumed>) = 4 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./21/file1", [pid 5014] newfstatat(4, "", [pid 5013] close(3 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... close resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4 [pid 5014] getdents64(4, [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] <... close resumed>) = 0 [pid 5017] rmdir("./21/file1" [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5291 [pid 5014] close(4) = 0 [pid 5014] rmdir("./22/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./22" [pid 5017] <... rmdir resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [ 82.836200][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 82.854045][ T5286] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 82.858065][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5014] mkdir("./23", 0777 [pid 5017] getdents64(3, ./strace-static-x86_64: Process 5291 attached [pid 5288] <... mount resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./21") = 0 [pid 5017] mkdir("./22", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5288] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5291] set_robust_list(0x555556b87660, 24 [pid 5288] <... openat resumed>) = 3 [pid 5014] <... openat resumed>) = 3 [pid 5291] <... set_robust_list resumed>) = 0 [pid 5288] chdir("./file1" [pid 5015] <... umount2 resumed>) = 0 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5292 ./strace-static-x86_64: Process 5292 attached [pid 5292] set_robust_list(0x555556b87660, 24) = 0 [pid 5292] chdir("./22") = 0 [pid 5291] chdir("./21" [pid 5288] <... chdir resumed>) = 0 [pid 5015] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5292] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5292] setpgid(0, 0) = 0 [pid 5292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5292] write(3, "1000", 4) = 4 [pid 5292] close(3) = 0 [pid 5292] symlink("/dev/binderfs", "./binderfs" [pid 5291] <... chdir resumed>) = 0 [pid 5288] ioctl(4, LOOP_CLR_FD [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5292] <... symlink resumed>) = 0 [pid 5292] memfd_create("syzkaller", 0) = 3 [ 82.901527][ T5290] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.927262][ T5286] Remounting filesystem read-only [ 82.932846][ T5286] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 82.941342][ T5286] NILFS (loop0): repaired inode bitmap for reserved inodes [pid 5292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5291] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5288] <... ioctl resumed>) = 0 [pid 5286] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] newfstatat(AT_FDCWD, "./22/file1", [pid 5014] close(3 [pid 5291] <... prctl resumed>) = 0 [pid 5288] close(4 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... close resumed>) = 0 [pid 5291] setpgid(0, 0 [pid 5288] <... close resumed>) = 0 [pid 5015] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5291] <... setpgid resumed>) = 0 [pid 5288] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5286] exit_group(0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5292] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5293 attached [pid 5015] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5291] <... openat resumed>) = 3 [pid 5286] <... exit_group resumed>) = ? [pid 5015] <... openat resumed>) = 4 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5293 [pid 5291] write(3, "1000", 4 [pid 5015] newfstatat(4, "", [pid 5293] set_robust_list(0x555556b87660, 24 [pid 5291] <... write resumed>) = 4 [pid 5286] +++ exited with 0 +++ [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5293] <... set_robust_list resumed>) = 0 [pid 5291] close(3 [pid 5015] getdents64(4, [pid 5293] chdir("./23" [pid 5291] <... close resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5286, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5293] <... chdir resumed>) = 0 [pid 5293] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5291] symlink("/dev/binderfs", "./binderfs" [pid 5015] getdents64(4, [pid 5012] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5293] <... prctl resumed>) = 0 [pid 5291] <... symlink resumed>) = 0 [pid 5293] setpgid(0, 0 [pid 5291] memfd_create("syzkaller", 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5293] <... setpgid resumed>) = 0 [pid 5291] <... memfd_create resumed>) = 3 [pid 5015] close(4 [pid 5012] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... close resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5293] <... openat resumed>) = 3 [pid 5291] <... mmap resumed>) = 0x7f770c286000 [pid 5015] rmdir("./22/file1" [pid 5012] newfstatat(3, "", [pid 5293] write(3, "1000", 4) = 4 [pid 5293] close(3) = 0 [pid 5293] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5293] memfd_create("syzkaller", 0) = 3 [ 82.949143][ T5286] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 82.973766][ T5288] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5015] <... rmdir resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, [pid 5012] getdents64(3, [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] <... close resumed>) = 0 [pid 5015] rmdir("./22" [pid 5012] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... rmdir resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] mkdir("./23", 0777 [pid 5012] newfstatat(AT_FDCWD, "./20/binderfs", [pid 5015] <... mkdir resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5012] unlink("./20/binderfs" [pid 5015] <... openat resumed>) = 3 [pid 5012] <... unlink resumed>) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5012] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5294 [ 83.016854][ T5288] Remounting filesystem read-only [ 83.037013][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 83.043758][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 83.051643][ T5288] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [pid 5293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5291] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5294 attached [pid 5292] <... write resumed>) = 2097152 [pid 5294] set_robust_list(0x555556b87660, 24) = 0 [pid 5294] chdir("./23") = 0 [pid 5294] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5294] setpgid(0, 0) = 0 [pid 5294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5294] write(3, "1000", 4) = 4 [pid 5294] close(3) = 0 [pid 5294] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5294] memfd_create("syzkaller", 0) = 3 [ 83.074414][ T5288] NILFS (loop4): repaired inode bitmap for reserved inodes [ 83.081934][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5292] munmap(0x7f770c286000, 2097152) = 0 [pid 5291] <... write resumed>) = 2097152 [pid 5291] munmap(0x7f770c286000, 2097152 [pid 5292] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5292] ioctl(4, LOOP_SET_FD, 3 [pid 5291] <... munmap resumed>) = 0 [pid 5288] <... openat resumed>) = -1 EIO (Input/output error) [pid 5291] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5288] exit_group(0 [pid 5291] <... openat resumed>) = 4 [pid 5291] ioctl(4, LOOP_SET_FD, 3 [pid 5288] <... exit_group resumed>) = ? [ 83.114729][ T5288] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 83.130030][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 83.139197][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 83.146393][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 83.150278][ T5292] loop5: detected capacity change from 0 to 4096 [pid 5288] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5288, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5016] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", [pid 5291] <... ioctl resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, [pid 5291] close(3) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5291] mkdir("./file1", 0777 [pid 5016] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./23/binderfs") = 0 [pid 5291] <... mkdir resumed>) = 0 [pid 5016] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5291] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5293] <... write resumed>) = 2097152 [pid 5293] munmap(0x7f770c286000, 2097152) = 0 [pid 5293] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5293] ioctl(4, LOOP_SET_FD, 3 [pid 5292] <... ioctl resumed>) = 0 [pid 5292] close(3) = 0 [ 83.166532][ T5291] loop1: detected capacity change from 0 to 4096 [ 83.191371][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 83.192314][ T5291] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 83.207865][ T5293] loop2: detected capacity change from 0 to 4096 [pid 5292] mkdir("./file1", 0777) = 0 [pid 5012] <... umount2 resumed>) = 0 [pid 5292] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5293] <... ioctl resumed>) = 0 [pid 5293] close(3 [pid 5012] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5293] <... close resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./20/file1", [pid 5293] mkdir("./file1", 0777) = 0 [pid 5293] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 83.217690][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 83.225739][ T5291] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 83.236726][ T5292] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 83.243198][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 83.256122][ T5292] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5012] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5294] <... write resumed>) = 2097152 [pid 5012] <... openat resumed>) = 4 [pid 5012] newfstatat(4, "", [pid 5294] munmap(0x7f770c286000, 2097152) = 0 [pid 5291] <... mount resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5294] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5291] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] getdents64(4, [pid 5294] <... openat resumed>) = 4 [ 83.256959][ T5293] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 83.274642][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 83.285447][ T5295] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.289482][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 83.298563][ T5293] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5294] ioctl(4, LOOP_SET_FD, 3 [pid 5291] <... openat resumed>) = 3 [pid 5291] chdir("./file1" [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5291] <... chdir resumed>) = 0 [pid 5012] getdents64(4, [pid 5291] ioctl(4, LOOP_CLR_FD [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5291] <... ioctl resumed>) = 0 [pid 5012] close(4 [pid 5291] close(4) = 0 [pid 5012] <... close resumed>) = 0 [pid 5292] <... mount resumed>) = 0 [pid 5291] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5012] rmdir("./20/file1" [pid 5292] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] <... rmdir resumed>) = 0 [pid 5292] <... openat resumed>) = 3 [pid 5294] <... ioctl resumed>) = 0 [pid 5294] close(3) = 0 [pid 5294] mkdir("./file1", 0777) = 0 [pid 5294] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5292] chdir("./file1" [pid 5012] getdents64(3, [pid 5292] <... chdir resumed>) = 0 [ 83.303268][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 83.324693][ T5294] loop3: detected capacity change from 0 to 4096 [ 83.332648][ T5296] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.344836][ T5291] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5292] ioctl(4, LOOP_CLR_FD [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5292] <... ioctl resumed>) = 0 [pid 5012] close(3) = 0 [pid 5292] close(4 [pid 5012] rmdir("./20" [pid 5292] <... close resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [ 83.361111][ T5294] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 83.368539][ T5291] Remounting filesystem read-only [ 83.393594][ T5292] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 83.393963][ T5294] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5292] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5293] <... mount resumed>) = 0 [pid 5012] mkdir("./21", 0777 [pid 5016] <... umount2 resumed>) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5293] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5293] <... openat resumed>) = 3 [pid 5012] <... openat resumed>) = 3 [pid 5293] chdir("./file1" [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5293] <... chdir resumed>) = 0 [pid 5293] ioctl(4, LOOP_CLR_FD [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./23/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5293] <... ioctl resumed>) = 0 [pid 5012] close(3 [pid 5293] close(4 [pid 5016] <... openat resumed>) = 4 [pid 5012] <... close resumed>) = 0 [pid 5293] <... close resumed>) = 0 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, [pid 5293] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] close(4) = 0 [pid 5016] rmdir("./23/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./23") = 0 [pid 5016] mkdir("./24", 0777) = 0 [ 83.412957][ T5297] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.432098][ T5291] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 83.441447][ T5292] Remounting filesystem read-only [ 83.456222][ T5291] NILFS (loop1): repaired inode bitmap for reserved inodes [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5298 attached ) = -1 ENXIO (No such device or address) [pid 5298] set_robust_list(0x555556b87660, 24 [pid 5016] close(3 [pid 5298] <... set_robust_list resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5298] chdir("./21" [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5298] <... chdir resumed>) = 0 [pid 5298] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5299 [pid 5298] <... prctl resumed>) = 0 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5298 [pid 5298] setpgid(0, 0) = 0 [pid 5298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5298] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5299 attached [pid 5298] close(3 [pid 5299] set_robust_list(0x555556b87660, 24 [pid 5298] <... close resumed>) = 0 [pid 5299] <... set_robust_list resumed>) = 0 [pid 5298] symlink("/dev/binderfs", "./binderfs" [pid 5299] chdir("./24" [pid 5298] <... symlink resumed>) = 0 [pid 5299] <... chdir resumed>) = 0 [pid 5298] memfd_create("syzkaller", 0 [pid 5299] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5298] <... memfd_create resumed>) = 3 [pid 5299] <... prctl resumed>) = 0 [pid 5298] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5299] setpgid(0, 0 [pid 5298] <... mmap resumed>) = 0x7f770c286000 [pid 5299] <... setpgid resumed>) = 0 [pid 5299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5299] write(3, "1000", 4) = 4 [pid 5299] close(3) = 0 [pid 5299] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5299] memfd_create("syzkaller", 0) = 3 [pid 5299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 83.465149][ T5293] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 83.492618][ T5292] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 83.503257][ T5291] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 83.524437][ T5293] Remounting filesystem read-only [ 83.529838][ T5292] NILFS (loop5): repaired inode bitmap for reserved inodes [ 83.544407][ T5293] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [pid 5298] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5291] <... openat resumed>) = -1 EIO (Input/output error) [pid 5299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5291] exit_group(0 [pid 5298] <... write resumed>) = 2097152 [pid 5294] <... mount resumed>) = 0 [pid 5293] <... openat resumed>) = -1 EIO (Input/output error) [pid 5292] <... openat resumed>) = -1 EIO (Input/output error) [pid 5291] <... exit_group resumed>) = ? [pid 5298] munmap(0x7f770c286000, 2097152 [pid 5294] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5293] exit_group(0 [pid 5292] exit_group(0 [pid 5298] <... munmap resumed>) = 0 [pid 5294] <... openat resumed>) = 3 [pid 5293] <... exit_group resumed>) = ? [pid 5292] <... exit_group resumed>) = ? [pid 5291] +++ exited with 0 +++ [pid 5298] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5294] chdir("./file1" [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5291, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5298] <... openat resumed>) = 4 [pid 5294] <... chdir resumed>) = 0 [pid 5293] +++ exited with 0 +++ [pid 5292] +++ exited with 0 +++ [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5298] ioctl(4, LOOP_SET_FD, 3 [pid 5294] ioctl(4, LOOP_CLR_FD [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5292, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [ 83.562019][ T5292] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 83.578284][ T5293] NILFS (loop2): repaired inode bitmap for reserved inodes [ 83.586142][ T5293] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 83.596672][ T5300] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5013] <... restart_syscall resumed>) = 0 [pid 5294] <... ioctl resumed>) = 0 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5293, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5294] close(4 [pid 5014] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5299] <... write resumed>) = 2097152 [pid 5298] <... ioctl resumed>) = 0 [pid 5294] <... close resumed>) = 0 [pid 5017] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5299] munmap(0x7f770c286000, 2097152 [pid 5298] close(3 [pid 5294] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5299] <... munmap resumed>) = 0 [pid 5298] <... close resumed>) = 0 [pid 5299] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5298] mkdir("./file1", 0777 [pid 5299] <... openat resumed>) = 4 [pid 5298] <... mkdir resumed>) = 0 [pid 5299] ioctl(4, LOOP_SET_FD, 3 [ 83.640532][ T5298] loop0: detected capacity change from 0 to 4096 [ 83.657553][ T5294] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 83.662418][ T5299] loop4: detected capacity change from 0 to 4096 [pid 5298] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... openat resumed>) = 3 [pid 5014] <... openat resumed>) = 3 [pid 5013] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", [pid 5017] newfstatat(3, "", [pid 5013] newfstatat(3, "", [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, [pid 5017] getdents64(3, [pid 5013] getdents64(3, [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5299] <... ioctl resumed>) = 0 [pid 5299] close(3) = 0 [pid 5299] mkdir("./file1", 0777) = 0 [pid 5299] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5017] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./23/binderfs" [pid 5013] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5014] <... unlink resumed>) = 0 [pid 5014] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] unlink("./22/binderfs" [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 83.681887][ T5298] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 83.688429][ T5294] Remounting filesystem read-only [ 83.700726][ T5294] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 83.709949][ T5298] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 83.710539][ T5294] NILFS (loop3): repaired inode bitmap for reserved inodes [ 83.728701][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5298] <... mount resumed>) = 0 [pid 5294] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] <... unlink resumed>) = 0 [pid 5013] unlink("./21/binderfs" [pid 5298] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5294] exit_group(0 [pid 5017] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... unlink resumed>) = 0 [pid 5298] <... openat resumed>) = 3 [pid 5294] <... exit_group resumed>) = ? [pid 5013] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5298] chdir("./file1" [pid 5294] +++ exited with 0 +++ [pid 5298] <... chdir resumed>) = 0 [pid 5298] ioctl(4, LOOP_CLR_FD) = 0 [ 83.734763][ T5301] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.735408][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 83.746066][ T5294] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 83.768714][ T5299] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 83.779591][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5298] close(4) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5294, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [ 83.787061][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 83.788157][ T5298] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 83.794931][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 83.817340][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 83.817428][ T5299] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 83.817629][ T5298] Remounting filesystem read-only [pid 5298] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [ 83.836242][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 83.847108][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 83.853854][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 83.862319][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 83.870896][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 83.881017][ T5298] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [pid 5299] <... mount resumed>) = 0 [pid 5015] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5299] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = 0 [pid 5299] <... openat resumed>) = 3 [pid 5015] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5014] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5299] chdir("./file1") = 0 [pid 5299] ioctl(4, LOOP_CLR_FD) = 0 [pid 5299] close(4) = 0 [ 83.881395][ T5302] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.889760][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 83.907443][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 83.913306][ T5298] NILFS (loop0): repaired inode bitmap for reserved inodes [ 83.920253][ T5299] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5299] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] unlink("./23/binderfs" [pid 5014] newfstatat(AT_FDCWD, "./23/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... unlink resumed>) = 0 [pid 5014] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 83.934631][ T5298] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 83.937782][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 83.959872][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 83.969196][ T5299] Remounting filesystem read-only [ 83.970808][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 83.975181][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [pid 5014] newfstatat(4, "", [pid 5298] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, [pid 5298] exit_group(0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5298] <... exit_group resumed>) = ? [pid 5014] getdents64(4, [pid 5298] +++ exited with 0 +++ [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5298, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [ 83.983770][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 83.989090][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 84.005390][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 84.007124][ T5299] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 84.013624][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 84.020661][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 84.028386][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5014] <... close resumed>) = 0 [pid 5014] rmdir("./23/file1") = 0 [pid 5012] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] getdents64(3, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3 [pid 5012] <... openat resumed>) = 3 [pid 5014] <... close resumed>) = 0 [pid 5012] newfstatat(3, "", [pid 5014] rmdir("./23" [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5012] getdents64(3, [pid 5014] mkdir("./24", 0777 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... mkdir resumed>) = 0 [pid 5012] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5014] <... openat resumed>) = 3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] unlink("./21/binderfs") = 0 [pid 5014] close(3 [pid 5012] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... close resumed>) = 0 [ 84.042697][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 84.044337][ T5299] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5303 ./strace-static-x86_64: Process 5303 attached [pid 5303] set_robust_list(0x555556b87660, 24) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5303] chdir("./24" [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5303] <... chdir resumed>) = 0 [pid 5015] newfstatat(AT_FDCWD, "./23/file1", [pid 5303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5303] <... prctl resumed>) = 0 [pid 5015] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5303] setpgid(0, 0 [pid 5017] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] getdents64(4, [pid 5013] <... umount2 resumed>) = 0 [pid 5303] <... setpgid resumed>) = 0 [pid 5303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5303] <... openat resumed>) = 3 [pid 5303] write(3, "1000", 4) = 4 [pid 5303] close(3) = 0 [pid 5303] symlink("/dev/binderfs", "./binderfs" [pid 5017] newfstatat(AT_FDCWD, "./22/file1", [pid 5015] close(4 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... close resumed>) = 0 [pid 5017] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] rmdir("./23/file1" [pid 5303] <... symlink resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... rmdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] getdents64(3, [pid 5017] <... openat resumed>) = 4 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] newfstatat(4, "", [pid 5015] close(3 [pid 5303] memfd_create("syzkaller", 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... close resumed>) = 0 [pid 5017] getdents64(4, [pid 5015] rmdir("./23" [pid 5013] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5303] <... memfd_create resumed>) = 3 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] <... rmdir resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] getdents64(4, [pid 5015] mkdir("./24", 0777 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] newfstatat(AT_FDCWD, "./21/file1", [pid 5303] <... mmap resumed>) = 0x7f770c286000 [ 84.089270][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 84.094112][ T5299] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 84.112433][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 84.132581][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5017] close(4 [pid 5015] <... mkdir resumed>) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./21/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./21") = 0 [pid 5013] mkdir("./22", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3 [pid 5017] <... close resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5013] <... close resumed>) = 0 [pid 5017] rmdir("./22/file1" [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5304 ./strace-static-x86_64: Process 5304 attached [pid 5304] set_robust_list(0x555556b87660, 24) = 0 [pid 5304] chdir("./22") = 0 [pid 5015] <... openat resumed>) = 3 [pid 5304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5304] setpgid(0, 0 [pid 5017] getdents64(3, [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5304] <... setpgid resumed>) = 0 [pid 5304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5017] close(3 [pid 5015] close(3 [pid 5304] <... openat resumed>) = 3 [pid 5017] <... close resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5304] write(3, "1000", 4 [pid 5017] rmdir("./22" [pid 5304] <... write resumed>) = 4 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5304] close(3 [pid 5017] <... rmdir resumed>) = 0 [pid 5304] <... close resumed>) = 0 [pid 5017] mkdir("./23", 0777 [pid 5304] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5017] <... mkdir resumed>) = 0 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5305 [pid 5304] memfd_create("syzkaller", 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5304] <... memfd_create resumed>) = 3 [pid 5017] <... openat resumed>) = 3 [pid 5304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5304] <... mmap resumed>) = 0x7f770c286000 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5305 attached [pid 5299] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] close(3 [pid 5299] exit_group(0 [pid 5017] <... close resumed>) = 0 [pid 5305] set_robust_list(0x555556b87660, 24 [pid 5299] <... exit_group resumed>) = ? [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5305] <... set_robust_list resumed>) = 0 [pid 5299] +++ exited with 0 +++ [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5306 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5299, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [ 84.154744][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 84.163959][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 84.171893][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5305] chdir("./24") = 0 [pid 5016] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5016] <... openat resumed>) = 3 [pid 5012] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] newfstatat(3, "", ./strace-static-x86_64: Process 5306 attached [pid 5305] <... prctl resumed>) = 0 [pid 5303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5306] set_robust_list(0x555556b87660, 24 [pid 5305] setpgid(0, 0 [pid 5016] getdents64(3, [pid 5306] <... set_robust_list resumed>) = 0 [pid 5305] <... setpgid resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] newfstatat(AT_FDCWD, "./21/file1", [pid 5306] chdir("./23" [pid 5305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5016] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] <... chdir resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5305] <... openat resumed>) = 3 [pid 5016] newfstatat(AT_FDCWD, "./24/binderfs", [pid 5306] <... prctl resumed>) = 0 [pid 5305] write(3, "1000", 4 [pid 5304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] setpgid(0, 0 [pid 5305] <... write resumed>) = 4 [pid 5016] unlink("./24/binderfs" [pid 5306] <... setpgid resumed>) = 0 [pid 5305] close(3 [pid 5016] <... unlink resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5016] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] <... openat resumed>) = 3 [pid 5305] <... close resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5306] write(3, "1000", 4 [pid 5305] symlink("/dev/binderfs", "./binderfs" [pid 5306] <... write resumed>) = 4 [pid 5306] close(3 [pid 5305] <... symlink resumed>) = 0 [pid 5306] <... close resumed>) = 0 [pid 5306] symlink("/dev/binderfs", "./binderfs" [pid 5012] <... openat resumed>) = 4 [pid 5306] <... symlink resumed>) = 0 [pid 5305] memfd_create("syzkaller", 0 [pid 5012] newfstatat(4, "", [pid 5306] memfd_create("syzkaller", 0 [pid 5305] <... memfd_create resumed>) = 3 [pid 5306] <... memfd_create resumed>) = 3 [pid 5305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5305] <... mmap resumed>) = 0x7f770c286000 [pid 5012] getdents64(4, [pid 5306] <... mmap resumed>) = 0x7f770c286000 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./21/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./21") = 0 [pid 5012] mkdir("./22", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5307 ./strace-static-x86_64: Process 5307 attached [pid 5307] set_robust_list(0x555556b87660, 24) = 0 [pid 5307] chdir("./22") = 0 [pid 5307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5307] setpgid(0, 0) = 0 [pid 5307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5307] write(3, "1000", 4) = 4 [pid 5307] close(3) = 0 [pid 5307] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5303] <... write resumed>) = 2097152 [pid 5307] memfd_create("syzkaller", 0 [pid 5303] munmap(0x7f770c286000, 2097152 [pid 5307] <... memfd_create resumed>) = 3 [pid 5306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5303] <... munmap resumed>) = 0 [pid 5307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5303] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5303] <... openat resumed>) = 4 [ 84.270072][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 84.285883][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5303] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5304] <... write resumed>) = 2097152 [pid 5303] close(3) = 0 [pid 5303] mkdir("./file1", 0777) = 0 [pid 5303] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5304] munmap(0x7f770c286000, 2097152) = 0 [pid 5305] <... write resumed>) = 2097152 [pid 5304] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5305] munmap(0x7f770c286000, 2097152 [ 84.317595][ T5303] loop2: detected capacity change from 0 to 4096 [ 84.325715][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 84.332897][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 84.349796][ T5303] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5304] ioctl(4, LOOP_SET_FD, 3 [pid 5305] <... munmap resumed>) = 0 [pid 5304] <... ioctl resumed>) = 0 [pid 5305] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5304] close(3 [pid 5305] <... openat resumed>) = 4 [pid 5304] <... close resumed>) = 0 [pid 5305] ioctl(4, LOOP_SET_FD, 3 [pid 5304] mkdir("./file1", 0777) = 0 [pid 5304] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5306] <... write resumed>) = 2097152 [ 84.365937][ T5304] loop1: detected capacity change from 0 to 4096 [ 84.378443][ T5305] loop3: detected capacity change from 0 to 4096 [ 84.389343][ T5304] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.395467][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 84.406276][ T5303] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5306] munmap(0x7f770c286000, 2097152 [pid 5307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5305] <... ioctl resumed>) = 0 [pid 5306] <... munmap resumed>) = 0 [pid 5306] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5306] ioctl(4, LOOP_SET_FD, 3 [pid 5305] close(3) = 0 [pid 5305] mkdir("./file1", 0777) = 0 [pid 5305] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5306] <... ioctl resumed>) = 0 [pid 5306] close(3) = 0 [pid 5306] mkdir("./file1", 0777) = 0 [ 84.406535][ T5304] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 84.418179][ T5306] loop5: detected capacity change from 0 to 4096 [ 84.438847][ T5305] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.447452][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 84.456630][ T5305] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5306] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5307] <... write resumed>) = 2097152 [pid 5307] munmap(0x7f770c286000, 2097152 [pid 5303] <... mount resumed>) = 0 [pid 5303] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5307] <... munmap resumed>) = 0 [pid 5303] <... openat resumed>) = 3 [pid 5303] chdir("./file1" [pid 5307] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5303] <... chdir resumed>) = 0 [pid 5303] ioctl(4, LOOP_CLR_FD) = 0 [pid 5307] <... openat resumed>) = 4 [pid 5303] close(4 [pid 5307] ioctl(4, LOOP_SET_FD, 3 [pid 5303] <... close resumed>) = 0 [ 84.466711][ T5306] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.481156][ T5308] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.500605][ T5303] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 84.504576][ T5306] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 84.515756][ T5307] loop0: detected capacity change from 0 to 4096 [ 84.554130][ T5309] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5303] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5304] <... mount resumed>) = 0 [pid 5016] <... umount2 resumed>) = 0 [pid 5304] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5016] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./24/file1", [pid 5304] chdir("./file1") = 0 [pid 5304] ioctl(4, LOOP_CLR_FD [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5304] <... ioctl resumed>) = 0 [pid 5016] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5304] close(4) = 0 [pid 5307] <... ioctl resumed>) = 0 [pid 5304] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./24/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./24") = 0 [pid 5016] mkdir("./25", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5311 [pid 5307] close(3) = 0 [pid 5307] mkdir("./file1", 0777./strace-static-x86_64: Process 5311 attached [pid 5311] set_robust_list(0x555556b87660, 24) = 0 [pid 5311] chdir("./25") = 0 [pid 5311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5311] setpgid(0, 0) = 0 [ 84.564189][ T5303] Remounting filesystem read-only [ 84.579378][ T5304] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 84.603615][ T5303] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [pid 5311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5307] <... mkdir resumed>) = 0 [pid 5305] <... mount resumed>) = 0 [pid 5307] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5305] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5311] <... openat resumed>) = 3 [pid 5305] chdir("./file1" [pid 5311] write(3, "1000", 4 [pid 5305] <... chdir resumed>) = 0 [pid 5311] <... write resumed>) = 4 [pid 5305] ioctl(4, LOOP_CLR_FD) = 0 [pid 5311] close(3) = 0 [pid 5311] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5311] memfd_create("syzkaller", 0) = 3 [pid 5311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5305] close(4 [pid 5306] <... mount resumed>) = 0 [pid 5305] <... close resumed>) = 0 [ 84.615418][ T5310] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.621290][ T5303] NILFS (loop2): repaired inode bitmap for reserved inodes [ 84.629132][ T5304] Remounting filesystem read-only [ 84.641683][ T5307] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.652250][ T5312] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5306] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5305] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5306] chdir("./file1") = 0 [pid 5306] ioctl(4, LOOP_CLR_FD) = 0 [pid 5306] close(4) = 0 [ 84.673488][ T5303] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 84.676087][ T5306] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 84.703819][ T5305] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5306] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5303] <... openat resumed>) = -1 EIO (Input/output error) [pid 5303] exit_group(0 [pid 5311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5303] <... exit_group resumed>) = ? [pid 5303] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5303, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5014] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./24/binderfs") = 0 [ 84.708063][ T5304] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 84.728022][ T5307] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 84.738670][ T5305] Remounting filesystem read-only [ 84.761064][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5014] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5307] <... mount resumed>) = 0 [pid 5307] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5307] chdir("./file1") = 0 [pid 5307] ioctl(4, LOOP_CLR_FD) = 0 [pid 5307] close(4) = 0 [ 84.779089][ T5305] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 84.786275][ T5304] NILFS (loop1): repaired inode bitmap for reserved inodes [ 84.792431][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 84.798744][ T5306] Remounting filesystem read-only [ 84.802560][ T5313] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.818044][ T5305] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5307] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5311] <... write resumed>) = 2097152 [pid 5311] munmap(0x7f770c286000, 2097152) = 0 [pid 5311] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 84.818806][ T5307] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 84.826411][ T5305] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 84.851873][ T5311] loop4: detected capacity change from 0 to 4096 [ 84.859262][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5311] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5311] close(3) = 0 [pid 5311] mkdir("./file1", 0777) = 0 [pid 5311] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5305] <... openat resumed>) = -1 EIO (Input/output error) [ 84.863434][ T5304] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 84.878467][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 84.885245][ T5306] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 84.900872][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 84.904129][ T5311] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.909316][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [pid 5305] exit_group(0) = ? [pid 5305] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5305, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5015] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./24/binderfs") = 0 [pid 5015] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5304] <... openat resumed>) = -1 EIO (Input/output error) [pid 5304] exit_group(0) = ? [pid 5304] +++ exited with 0 +++ [ 84.919401][ T5307] Remounting filesystem read-only [ 84.932177][ T5306] NILFS (loop5): repaired inode bitmap for reserved inodes [ 84.949505][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 84.956910][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [pid 5014] <... umount2 resumed>) = 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5304, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=16 /* 0.16 s */} --- [pid 5014] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... restart_syscall resumed>) = 0 [pid 5306] <... openat resumed>) = -1 EIO (Input/output error) [ 84.969857][ T5306] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 84.982688][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 84.986380][ T5311] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 84.992667][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 85.003460][ T5307] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 85.010234][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5014] newfstatat(AT_FDCWD, "./24/file1", [pid 5306] exit_group(0) = ? [pid 5306] +++ exited with 0 +++ [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5306, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5014] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... openat resumed>) = 4 [pid 5013] <... openat resumed>) = 3 [pid 5017] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] newfstatat(4, "", [pid 5013] newfstatat(3, "", [pid 5017] <... openat resumed>) = 3 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] newfstatat(3, "", [pid 5013] getdents64(3, [pid 5014] getdents64(4, [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(3, [pid 5014] getdents64(4, [pid 5013] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] close(4 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] <... close resumed>) = 0 [pid 5013] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5017] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5014] rmdir("./24/file1" [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5017] unlink("./23/binderfs" [pid 5013] unlink("./22/binderfs" [pid 5014] getdents64(3, [pid 5017] <... unlink resumed>) = 0 [pid 5013] <... unlink resumed>) = 0 [pid 5017] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] close(3) = 0 [ 85.025378][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 85.028018][ T5307] NILFS (loop0): repaired inode bitmap for reserved inodes [ 85.051055][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 85.058440][ T5307] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 85.073954][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [pid 5014] rmdir("./24") = 0 [pid 5014] mkdir("./25", 0777 [pid 5311] <... mount resumed>) = 0 [pid 5311] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5311] chdir("./file1") = 0 [pid 5311] ioctl(4, LOOP_CLR_FD) = 0 [pid 5311] close(4) = 0 [pid 5311] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5307] <... openat resumed>) = -1 EIO (Input/output error) [pid 5307] exit_group(0) = ? [pid 5307] +++ exited with 0 +++ [ 85.078447][ T5311] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 85.093747][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 85.096447][ T5314] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.116091][ T5311] Remounting filesystem read-only [ 85.117076][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [pid 5015] <... umount2 resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5307, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5315 [pid 5012] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(AT_FDCWD, "./24/file1", ./strace-static-x86_64: Process 5315 attached [pid 5315] set_robust_list(0x555556b87660, 24) = 0 [pid 5012] newfstatat(3, "", [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5315] chdir("./25") = 0 [pid 5315] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5315] <... prctl resumed>) = 0 [pid 5012] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5315] setpgid(0, 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./22/binderfs" [pid 5315] <... setpgid resumed>) = 0 [pid 5012] <... unlink resumed>) = 0 [ 85.125096][ T5311] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 85.137833][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 85.145664][ T5311] NILFS (loop4): repaired inode bitmap for reserved inodes [ 85.161195][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 85.161369][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [pid 5012] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5315] <... openat resumed>) = 3 [pid 5315] write(3, "1000", 4) = 4 [pid 5315] close(3) = 0 [pid 5315] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5315] memfd_create("syzkaller", 0) = 3 [pid 5315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5015] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [ 85.168836][ T5311] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 85.183268][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 85.199965][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 85.201909][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 85.207857][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 85.222485][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5015] getdents64(4, [pid 5315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./24/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./24") = 0 [pid 5015] mkdir("./25", 0777 [pid 5311] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] <... mkdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5311] exit_group(0) = ? [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5311] +++ exited with 0 +++ [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5316 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5311, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5016] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./25/binderfs") = 0 ./strace-static-x86_64: Process 5316 attached [pid 5016] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 85.222791][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 85.238045][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 85.245808][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 85.271155][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [pid 5316] set_robust_list(0x555556b87660, 24) = 0 [pid 5316] chdir("./25") = 0 [pid 5316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5316] setpgid(0, 0) = 0 [pid 5316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5316] write(3, "1000", 4) = 4 [pid 5316] close(3) = 0 [pid 5316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5316] memfd_create("syzkaller", 0) = 3 [pid 5315] <... write resumed>) = 2097152 [pid 5316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5315] munmap(0x7f770c286000, 2097152 [pid 5316] <... mmap resumed>) = 0x7f770c286000 [pid 5315] <... munmap resumed>) = 0 [ 85.277903][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 85.277938][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 85.277954][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5315] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5315] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5315] close(3) = 0 [pid 5315] mkdir("./file1", 0777) = 0 [pid 5315] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./23/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./23/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./23") = 0 [pid 5017] mkdir("./24", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5317 [ 85.327918][ T5315] loop2: detected capacity change from 0 to 4096 [ 85.346585][ T5315] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5013] <... umount2 resumed>) = 0 [pid 5013] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5317 attached [pid 5317] set_robust_list(0x555556b87660, 24 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5317] <... set_robust_list resumed>) = 0 [pid 5013] newfstatat(AT_FDCWD, "./22/file1", [pid 5317] chdir("./24" [pid 5316] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5317] <... chdir resumed>) = 0 [pid 5317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5013] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5317] setpgid(0, 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5317] <... setpgid resumed>) = 0 [pid 5013] <... openat resumed>) = 4 [pid 5317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] newfstatat(4, "", [pid 5317] <... openat resumed>) = 3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5317] write(3, "1000", 4 [pid 5013] getdents64(4, [pid 5317] <... write resumed>) = 4 [pid 5317] close(3 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, [pid 5317] <... close resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5317] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5013] close(4 [pid 5012] <... umount2 resumed>) = 0 [pid 5317] memfd_create("syzkaller", 0 [pid 5013] <... close resumed>) = 0 [ 85.369957][ T5315] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5317] <... memfd_create resumed>) = 3 [pid 5013] rmdir("./22/file1" [pid 5317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5013] <... rmdir resumed>) = 0 [pid 5012] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] getdents64(3, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] newfstatat(AT_FDCWD, "./22/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] close(3) = 0 [pid 5012] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] rmdir("./22" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5315] <... mount resumed>) = 0 [pid 5315] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5315] chdir("./file1") = 0 [pid 5315] ioctl(4, LOOP_CLR_FD) = 0 [pid 5315] close(4) = 0 [pid 5315] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... rmdir resumed>) = 0 [ 85.411215][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 85.419429][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 85.429593][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 85.436971][ T5315] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 85.450975][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [pid 5012] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] mkdir("./23", 0777 [pid 5012] <... openat resumed>) = 4 [pid 5013] <... mkdir resumed>) = 0 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] <... openat resumed>) = 3 [pid 5012] close(4 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5012] <... close resumed>) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] rmdir("./22/file1" [pid 5013] close(3 [pid 5012] <... rmdir resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5012] getdents64(3, [pid 5317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] close(3 [pid 5316] <... write resumed>) = 2097152 [pid 5012] <... close resumed>) = 0 [pid 5316] munmap(0x7f770c286000, 2097152 [pid 5012] rmdir("./22" [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5319 [pid 5012] <... rmdir resumed>) = 0 [pid 5012] mkdir("./23", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5316] <... munmap resumed>) = 0 [ 85.453679][ T5318] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.460618][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5316] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5316] <... openat resumed>) = 4 [pid 5316] ioctl(4, LOOP_SET_FD, 3 [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5320 ./strace-static-x86_64: Process 5319 attached [pid 5319] set_robust_list(0x555556b87660, 24) = 0 [pid 5319] chdir("./23") = 0 [pid 5319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 5320 attached [pid 5319] setpgid(0, 0) = 0 [pid 5320] set_robust_list(0x555556b87660, 24) = 0 [pid 5320] chdir("./23" [pid 5319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5320] <... chdir resumed>) = 0 [pid 5320] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5320] setpgid(0, 0 [pid 5319] <... openat resumed>) = 3 [pid 5320] <... setpgid resumed>) = 0 [pid 5319] write(3, "1000", 4 [pid 5320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5319] <... write resumed>) = 4 [pid 5320] <... openat resumed>) = 3 [pid 5319] close(3 [pid 5316] <... ioctl resumed>) = 0 [pid 5320] write(3, "1000", 4 [pid 5316] close(3 [pid 5320] <... write resumed>) = 4 [pid 5319] <... close resumed>) = 0 [pid 5316] <... close resumed>) = 0 [pid 5319] symlink("/dev/binderfs", "./binderfs" [pid 5320] close(3 [pid 5316] mkdir("./file1", 0777 [pid 5320] <... close resumed>) = 0 [pid 5320] symlink("/dev/binderfs", "./binderfs" [pid 5319] <... symlink resumed>) = 0 [pid 5316] <... mkdir resumed>) = 0 [pid 5320] <... symlink resumed>) = 0 [ 85.509276][ T5316] loop3: detected capacity change from 0 to 4096 [ 85.538429][ T5315] Remounting filesystem read-only [pid 5316] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5320] memfd_create("syzkaller", 0 [pid 5319] memfd_create("syzkaller", 0 [pid 5016] <... umount2 resumed>) = 0 [pid 5320] <... memfd_create resumed>) = 3 [pid 5320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5319] <... memfd_create resumed>) = 3 [pid 5319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5016] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./25/file1", [pid 5317] <... write resumed>) = 2097152 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5317] munmap(0x7f770c286000, 2097152 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5317] <... munmap resumed>) = 0 [pid 5016] getdents64(4, [pid 5317] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5317] <... openat resumed>) = 4 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [ 85.552569][ T5316] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 85.574362][ T5315] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [pid 5317] ioctl(4, LOOP_SET_FD, 3 [pid 5016] close(4) = 0 [pid 5016] rmdir("./25/file1" [pid 5319] <... write resumed>) = 2097152 [pid 5016] <... rmdir resumed>) = 0 [pid 5317] <... ioctl resumed>) = 0 [pid 5317] close(3) = 0 [pid 5317] mkdir("./file1", 0777) = 0 [pid 5317] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5319] munmap(0x7f770c286000, 2097152 [ 85.604440][ T5317] loop5: detected capacity change from 0 to 4096 [ 85.613634][ T5316] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 85.621921][ T5315] NILFS (loop2): repaired inode bitmap for reserved inodes [ 85.629887][ T5317] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 85.631623][ T5315] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5016] getdents64(3, [pid 5319] <... munmap resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3 [pid 5319] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5016] <... close resumed>) = 0 [pid 5319] <... openat resumed>) = 4 [pid 5016] rmdir("./25" [pid 5319] ioctl(4, LOOP_SET_FD, 3 [pid 5016] <... rmdir resumed>) = 0 [pid 5016] mkdir("./26", 0777 [pid 5320] <... write resumed>) = 2097152 [pid 5319] <... ioctl resumed>) = 0 [pid 5315] <... openat resumed>) = -1 EIO (Input/output error) [pid 5016] <... mkdir resumed>) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3 [pid 5320] munmap(0x7f770c286000, 2097152 [pid 5319] close(3 [pid 5315] exit_group(0 [pid 5016] <... close resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5315] <... exit_group resumed>) = ? [pid 5315] +++ exited with 0 +++ [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5323 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5315, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5319] <... close resumed>) = 0 [pid 5319] mkdir("./file1", 0777 [pid 5316] <... mount resumed>) = 0 [pid 5319] <... mkdir resumed>) = 0 [pid 5316] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5319] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5316] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5323 attached [pid 5316] chdir("./file1" [pid 5323] set_robust_list(0x555556b87660, 24 [pid 5316] <... chdir resumed>) = 0 [ 85.660489][ T5319] loop1: detected capacity change from 0 to 4096 [ 85.668105][ T5317] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 85.692141][ T5321] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5323] <... set_robust_list resumed>) = 0 [pid 5320] <... munmap resumed>) = 0 [pid 5316] ioctl(4, LOOP_CLR_FD) = 0 [pid 5316] close(4) = 0 [pid 5323] chdir("./26" [pid 5320] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5316] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5323] <... chdir resumed>) = 0 [pid 5320] <... openat resumed>) = 4 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5323] prctl(PR_SET_PDEATHSIG, SIGKILL [ 85.705628][ T5319] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 85.715374][ T5322] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.727775][ T5319] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 85.727792][ T5316] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 85.744688][ T5320] loop0: detected capacity change from 0 to 4096 [pid 5320] ioctl(4, LOOP_SET_FD, 3 [pid 5014] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5323] <... prctl resumed>) = 0 [pid 5320] <... ioctl resumed>) = 0 [pid 5317] <... mount resumed>) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5323] setpgid(0, 0 [pid 5317] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5014] newfstatat(3, "", [pid 5323] <... setpgid resumed>) = 0 [pid 5317] <... openat resumed>) = 3 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5317] chdir("./file1" [pid 5014] getdents64(3, [pid 5323] <... openat resumed>) = 3 [pid 5320] close(3 [pid 5319] <... mount resumed>) = 0 [pid 5317] <... chdir resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./25/binderfs") = 0 [pid 5014] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5323] write(3, "1000", 4 [pid 5320] <... close resumed>) = 0 [pid 5319] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [ 85.754268][ T5316] Remounting filesystem read-only [ 85.774344][ T5316] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 85.777666][ T5324] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.793138][ T5316] NILFS (loop3): repaired inode bitmap for reserved inodes [ 85.793515][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5317] ioctl(4, LOOP_CLR_FD [pid 5323] <... write resumed>) = 4 [pid 5319] <... openat resumed>) = 3 [pid 5317] <... ioctl resumed>) = 0 [pid 5316] <... openat resumed>) = -1 EIO (Input/output error) [pid 5323] close(3 [pid 5319] chdir("./file1" [pid 5317] close(4 [pid 5323] <... close resumed>) = 0 [pid 5320] mkdir("./file1", 0777 [pid 5319] <... chdir resumed>) = 0 [pid 5317] <... close resumed>) = 0 [pid 5323] symlink("/dev/binderfs", "./binderfs" [pid 5319] ioctl(4, LOOP_CLR_FD [pid 5317] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5323] <... symlink resumed>) = 0 [pid 5319] <... ioctl resumed>) = 0 [pid 5323] memfd_create("syzkaller", 0 [pid 5319] close(4 [pid 5323] <... memfd_create resumed>) = 3 [pid 5319] <... close resumed>) = 0 [pid 5323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5319] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5323] <... mmap resumed>) = 0x7f770c286000 [ 85.800540][ T5316] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 85.811650][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 85.830295][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 85.837912][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [pid 5320] <... mkdir resumed>) = 0 [pid 5316] exit_group(0 [pid 5320] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5316] <... exit_group resumed>) = ? [pid 5316] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5316, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5015] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./25/binderfs") = 0 [pid 5323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 85.855619][ T5317] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 85.855976][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 85.870770][ T5319] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 85.897848][ T5320] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 85.915961][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 85.922802][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 85.931794][ T5319] Remounting filesystem read-only [ 85.937747][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 85.939146][ T5320] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 85.945014][ T5317] Remounting filesystem read-only [pid 5015] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5323] <... write resumed>) = 2097152 [pid 5323] munmap(0x7f770c286000, 2097152) = 0 [pid 5323] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 85.960229][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 85.968237][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 85.968965][ T5319] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 85.975913][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 85.993379][ T5317] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 85.998726][ T5323] loop4: detected capacity change from 0 to 4096 [pid 5323] ioctl(4, LOOP_SET_FD, 3 [pid 5014] <... umount2 resumed>) = 0 [pid 5323] <... ioctl resumed>) = 0 [pid 5323] close(3) = 0 [ 86.009971][ T5319] NILFS (loop1): repaired inode bitmap for reserved inodes [ 86.033581][ T5317] NILFS (loop5): repaired inode bitmap for reserved inodes [ 86.035780][ T5319] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 86.054885][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5323] mkdir("./file1", 0777 [pid 5014] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5320] <... mount resumed>) = 0 [pid 5320] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5320] chdir("./file1") = 0 [pid 5320] ioctl(4, LOOP_CLR_FD) = 0 [pid 5320] close(4) = 0 [pid 5320] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./25/file1", [pid 5323] <... mkdir resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5323] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 86.059229][ T5325] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.064001][ T5317] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 86.079276][ T5320] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, [pid 5319] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5319] exit_group(0 [pid 5014] rmdir("./25/file1" [pid 5319] <... exit_group resumed>) = ? [pid 5014] <... rmdir resumed>) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./25") = 0 [pid 5014] mkdir("./26", 0777 [pid 5319] +++ exited with 0 +++ [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5319, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5013] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] close(3 [pid 5013] <... openat resumed>) = 3 [pid 5013] newfstatat(3, "", [pid 5014] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5326 [pid 5013] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./23/binderfs") = 0 [ 86.109686][ T5323] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 86.122296][ T5323] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 86.142267][ T5320] Remounting filesystem read-only [ 86.150454][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [pid 5013] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5326 attached [pid 5323] <... mount resumed>) = 0 [pid 5323] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5323] chdir("./file1") = 0 [pid 5323] ioctl(4, LOOP_CLR_FD) = 0 [pid 5323] close(4) = 0 [pid 5323] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5326] set_robust_list(0x555556b87660, 24 [pid 5015] <... umount2 resumed>) = 0 [pid 5326] <... set_robust_list resumed>) = 0 [pid 5015] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5326] chdir("./26") = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5326] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5317] <... openat resumed>) = -1 EIO (Input/output error) [ 86.160993][ T5320] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 86.169108][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 86.177926][ T5323] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 86.194874][ T5327] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.206223][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5015] newfstatat(AT_FDCWD, "./25/file1", [pid 5326] <... prctl resumed>) = 0 [pid 5317] exit_group(0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5326] setpgid(0, 0 [pid 5317] <... exit_group resumed>) = ? [pid 5015] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5326] <... setpgid resumed>) = 0 [pid 5326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5317] +++ exited with 0 +++ [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5326] <... openat resumed>) = 3 [pid 5015] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5317, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=13 /* 0.13 s */} --- [pid 5326] write(3, "1000", 4 [pid 5320] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] restart_syscall(<... resuming interrupted clone ...> [pid 5015] <... openat resumed>) = 4 [pid 5326] <... write resumed>) = 4 [pid 5017] <... restart_syscall resumed>) = 0 [pid 5015] newfstatat(4, "", [pid 5326] close(3 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5326] <... close resumed>) = 0 [pid 5015] getdents64(4, [pid 5326] symlink("/dev/binderfs", "./binderfs" [pid 5017] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5326] <... symlink resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] getdents64(4, [pid 5326] memfd_create("syzkaller", 0 [pid 5017] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5326] <... memfd_create resumed>) = 3 [pid 5017] <... openat resumed>) = 3 [pid 5015] close(4 [pid 5326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] newfstatat(3, "", [pid 5015] <... close resumed>) = 0 [ 86.214017][ T5320] NILFS (loop0): repaired inode bitmap for reserved inodes [ 86.222184][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 86.230529][ T5320] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 86.246491][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 86.254502][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 86.262154][ T5323] Remounting filesystem read-only [pid 5326] <... mmap resumed>) = 0x7f770c286000 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] rmdir("./25/file1" [pid 5017] getdents64(3, [pid 5015] <... rmdir resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] getdents64(3, [pid 5017] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] close(3 [pid 5017] newfstatat(AT_FDCWD, "./24/binderfs", [pid 5015] <... close resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] rmdir("./25" [pid 5017] unlink("./24/binderfs" [pid 5015] <... rmdir resumed>) = 0 [pid 5017] <... unlink resumed>) = 0 [pid 5015] mkdir("./26", 0777 [pid 5017] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... mkdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3 [pid 5323] <... openat resumed>) = -1 EIO (Input/output error) [ 86.268394][ T5323] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 86.285595][ T5323] NILFS (loop4): repaired inode bitmap for reserved inodes [ 86.293117][ T5323] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5320] exit_group(0 [pid 5015] <... close resumed>) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5323] exit_group(0 [pid 5320] <... exit_group resumed>) = ? [pid 5013] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5323] <... exit_group resumed>) = ? [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5320] +++ exited with 0 +++ [pid 5323] +++ exited with 0 +++ [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5323, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5328 ./strace-static-x86_64: Process 5328 attached [pid 5016] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] newfstatat(AT_FDCWD, "./23/file1", [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5320, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5328] set_robust_list(0x555556b87660, 24 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./26/binderfs" [pid 5328] <... set_robust_list resumed>) = 0 [pid 5016] <... unlink resumed>) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 86.319867][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 86.329104][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 86.337245][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 86.344740][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 86.352342][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 86.360312][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [pid 5016] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5328] chdir("./26" [pid 5013] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5328] <... chdir resumed>) = 0 [pid 5328] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5328] <... prctl resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5328] setpgid(0, 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5328] <... setpgid resumed>) = 0 [pid 5013] <... openat resumed>) = 4 [pid 5012] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] newfstatat(4, "", [pid 5328] <... openat resumed>) = 3 [pid 5012] <... openat resumed>) = 3 [pid 5328] write(3, "1000", 4 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] newfstatat(3, "", [pid 5328] <... write resumed>) = 4 [pid 5013] getdents64(4, [pid 5328] close(3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5328] <... close resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5328] symlink("/dev/binderfs", "./binderfs" [pid 5012] getdents64(3, [pid 5013] getdents64(4, [pid 5328] <... symlink resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5328] memfd_create("syzkaller", 0 [pid 5013] close(4 [pid 5012] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5328] <... memfd_create resumed>) = 3 [pid 5013] <... close resumed>) = 0 [pid 5328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] rmdir("./23/file1" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5328] <... mmap resumed>) = 0x7f770c286000 [pid 5326] <... write resumed>) = 2097152 [pid 5013] <... rmdir resumed>) = 0 [pid 5012] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5326] munmap(0x7f770c286000, 2097152 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./23/binderfs" [pid 5013] getdents64(3, [pid 5012] <... unlink resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] close(3) = 0 [pid 5013] rmdir("./23") = 0 [ 86.360315][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 86.360337][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5013] mkdir("./24", 0777) = 0 [pid 5326] <... munmap resumed>) = 0 [pid 5326] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5326] ioctl(4, LOOP_SET_FD, 3 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5326] <... ioctl resumed>) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5326] close(3) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5329 [pid 5326] mkdir("./file1", 0777 [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./24/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... openat resumed>) = 4 [pid 5326] <... mkdir resumed>) = 0 [ 86.413812][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 86.420609][ T5326] loop2: detected capacity change from 0 to 4096 [ 86.429107][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [pid 5326] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5329 attached [pid 5329] set_robust_list(0x555556b87660, 24) = 0 [pid 5329] chdir("./24" [pid 5017] getdents64(4, [pid 5329] <... chdir resumed>) = 0 [pid 5329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5329] setpgid(0, 0) = 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 86.456658][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 86.466430][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 86.474371][ T5326] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 86.484175][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 86.484212][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 86.498652][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [pid 5017] getdents64(4, [pid 5329] <... openat resumed>) = 3 [pid 5329] write(3, "1000", 4) = 4 [pid 5329] close(3) = 0 [pid 5329] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5329] memfd_create("syzkaller", 0) = 3 [pid 5329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5329] <... mmap resumed>) = 0x7f770c286000 [pid 5017] close(4 [pid 5328] <... write resumed>) = 2097152 [pid 5328] munmap(0x7f770c286000, 2097152 [pid 5017] <... close resumed>) = 0 [pid 5017] rmdir("./24/file1") = 0 [pid 5328] <... munmap resumed>) = 0 [pid 5017] getdents64(3, [pid 5328] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5328] <... openat resumed>) = 4 [pid 5017] close(3 [pid 5328] ioctl(4, LOOP_SET_FD, 3 [pid 5017] <... close resumed>) = 0 [pid 5328] <... ioctl resumed>) = 0 [pid 5017] rmdir("./24") = 0 [pid 5328] close(3 [pid 5017] mkdir("./25", 0777 [pid 5328] <... close resumed>) = 0 [pid 5328] mkdir("./file1", 0777 [pid 5017] <... mkdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5328] <... mkdir resumed>) = 0 [pid 5017] <... openat resumed>) = 3 [pid 5328] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5330 [ 86.507377][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 86.516153][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 86.530088][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 86.546310][ T5328] loop3: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 5330 attached [pid 5330] set_robust_list(0x555556b87660, 24) = 0 [pid 5329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5012] <... umount2 resumed>) = 0 [pid 5330] chdir("./25" [pid 5012] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5330] <... chdir resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5330] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5012] newfstatat(AT_FDCWD, "./23/file1", [pid 5330] <... prctl resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5330] setpgid(0, 0 [pid 5012] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5330] <... setpgid resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5330] <... openat resumed>) = 3 [pid 5012] <... openat resumed>) = 4 [pid 5330] write(3, "1000", 4 [pid 5012] newfstatat(4, "", [pid 5330] <... write resumed>) = 4 [pid 5330] close(3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5330] <... close resumed>) = 0 [pid 5330] symlink("/dev/binderfs", "./binderfs" [pid 5012] getdents64(4, [pid 5330] <... symlink resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5330] memfd_create("syzkaller", 0 [pid 5012] getdents64(4, [pid 5330] <... memfd_create resumed>) = 3 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] close(4 [pid 5330] <... mmap resumed>) = 0x7f770c286000 [pid 5012] <... close resumed>) = 0 [pid 5012] rmdir("./23/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./23" [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... rmdir resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] mkdir("./24", 0777 [pid 5016] newfstatat(AT_FDCWD, "./26/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5016] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... openat resumed>) = 3 [ 86.562667][ T5328] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 86.588138][ T5326] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5016] <... openat resumed>) = 4 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] newfstatat(4, "", [pid 5012] close(3 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... close resumed>) = 0 [pid 5016] getdents64(4, [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5331 [pid 5016] close(4) = 0 ./strace-static-x86_64: Process 5331 attached [pid 5016] rmdir("./26/file1" [pid 5331] set_robust_list(0x555556b87660, 24) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5331] chdir("./24" [pid 5330] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] getdents64(3, [pid 5331] <... chdir resumed>) = 0 [pid 5331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5331] setpgid(0, 0) = 0 [pid 5331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5331] write(3, "1000", 4) = 4 [pid 5331] close(3) = 0 [pid 5331] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [ 86.647239][ T5328] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5331] memfd_create("syzkaller", 0 [pid 5016] close(3 [pid 5331] <... memfd_create resumed>) = 3 [pid 5326] <... mount resumed>) = 0 [pid 5331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5326] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5331] <... mmap resumed>) = 0x7f770c286000 [pid 5326] <... openat resumed>) = 3 [pid 5326] chdir("./file1") = 0 [pid 5326] ioctl(4, LOOP_CLR_FD) = 0 [pid 5326] close(4 [pid 5330] <... write resumed>) = 2097152 [pid 5329] <... write resumed>) = 2097152 [pid 5326] <... close resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5326] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5330] munmap(0x7f770c286000, 2097152 [pid 5329] munmap(0x7f770c286000, 2097152 [pid 5328] <... mount resumed>) = 0 [pid 5016] rmdir("./26" [pid 5330] <... munmap resumed>) = 0 [pid 5329] <... munmap resumed>) = 0 [pid 5328] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] <... rmdir resumed>) = 0 [pid 5330] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5329] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5328] <... openat resumed>) = 3 [pid 5016] mkdir("./27", 0777 [pid 5329] <... openat resumed>) = 4 [pid 5328] chdir("./file1") = 0 [pid 5016] <... mkdir resumed>) = 0 [pid 5330] <... openat resumed>) = 4 [pid 5328] ioctl(4, LOOP_CLR_FD [pid 5330] ioctl(4, LOOP_SET_FD, 3 [pid 5329] ioctl(4, LOOP_SET_FD, 3 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5328] <... ioctl resumed>) = 0 [ 86.697758][ T5332] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.716518][ T5333] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.718669][ T5326] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5328] close(4 [pid 5016] <... openat resumed>) = 3 [pid 5328] <... close resumed>) = 0 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5328] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] close(3 [pid 5330] <... ioctl resumed>) = 0 [pid 5330] close(3) = 0 [pid 5330] mkdir("./file1", 0777) = 0 [ 86.752081][ T5330] loop5: detected capacity change from 0 to 4096 [ 86.753075][ T5326] Remounting filesystem read-only [ 86.759067][ T5329] loop1: detected capacity change from 0 to 4096 [ 86.766045][ T5326] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 86.779772][ T5328] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5330] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5331] <... write resumed>) = 2097152 [pid 5016] <... close resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5334 ./strace-static-x86_64: Process 5334 attached [pid 5334] set_robust_list(0x555556b87660, 24 [pid 5329] <... ioctl resumed>) = 0 [pid 5334] <... set_robust_list resumed>) = 0 [pid 5334] chdir("./27") = 0 [pid 5329] close(3 [pid 5334] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5329] <... close resumed>) = 0 [pid 5334] <... prctl resumed>) = 0 [pid 5329] mkdir("./file1", 0777 [pid 5334] setpgid(0, 0) = 0 [pid 5329] <... mkdir resumed>) = 0 [pid 5334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5331] munmap(0x7f770c286000, 2097152 [ 86.787787][ T5330] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5329] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5334] <... openat resumed>) = 3 [pid 5331] <... munmap resumed>) = 0 [pid 5334] write(3, "1000", 4 [ 86.825353][ T5329] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 86.836444][ T5328] Remounting filesystem read-only [ 86.842252][ T5326] NILFS (loop2): repaired inode bitmap for reserved inodes [ 86.850699][ T5329] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 86.850734][ T5328] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5331] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5334] <... write resumed>) = 4 [pid 5331] <... openat resumed>) = 4 [pid 5334] close(3 [pid 5331] ioctl(4, LOOP_SET_FD, 3 [pid 5334] <... close resumed>) = 0 [pid 5334] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5334] memfd_create("syzkaller", 0) = 3 [pid 5334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5331] <... ioctl resumed>) = 0 [pid 5331] close(3) = 0 [pid 5331] mkdir("./file1", 0777) = 0 [ 86.860659][ T5330] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 86.880968][ T5331] loop0: detected capacity change from 0 to 4096 [ 86.893649][ T5326] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 86.913021][ T5328] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5331] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5326] <... openat resumed>) = -1 EIO (Input/output error) [pid 5329] <... mount resumed>) = 0 [pid 5326] exit_group(0 [pid 5329] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5326] <... exit_group resumed>) = ? [pid 5329] chdir("./file1") = 0 [pid 5329] ioctl(4, LOOP_CLR_FD) = 0 [pid 5326] +++ exited with 0 +++ [pid 5329] close(4 [pid 5334] <... write resumed>) = 2097152 [pid 5329] <... close resumed>) = 0 [pid 5328] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5326, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5329] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 86.916997][ T5335] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.922445][ T5328] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 86.946574][ T5331] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 86.963456][ T5331] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5014] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5334] munmap(0x7f770c286000, 2097152 [pid 5328] exit_group(0 [pid 5334] <... munmap resumed>) = 0 [pid 5328] <... exit_group resumed>) = ? [pid 5334] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5328] +++ exited with 0 +++ [pid 5334] <... openat resumed>) = 4 [pid 5334] ioctl(4, LOOP_SET_FD, 3 [pid 5330] <... mount resumed>) = 0 [pid 5014] newfstatat(3, "", [pid 5330] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5330] chdir("./file1") = 0 [pid 5330] ioctl(4, LOOP_CLR_FD) = 0 [pid 5330] close(4) = 0 [ 86.974241][ T5329] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 86.989847][ T5334] loop4: detected capacity change from 0 to 4096 [ 86.990254][ T5336] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.004007][ T5330] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5330] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5334] <... ioctl resumed>) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5328, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=11 /* 0.11 s */} --- [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5334] close(3 [pid 5015] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] getdents64(3, [pid 5334] <... close resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5334] mkdir("./file1", 0777 [pid 5015] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5334] <... mkdir resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5334] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] newfstatat(3, "", [pid 5014] newfstatat(AT_FDCWD, "./26/binderfs", [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] getdents64(3, [pid 5014] unlink("./26/binderfs" [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... unlink resumed>) = 0 [pid 5015] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./26/binderfs") = 0 [pid 5015] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5331] <... mount resumed>) = 0 [ 87